<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1129">
<package pkgid="521cbb3a062eb32b6e68c89576fbdd1221fad7a205c285904d7f43febf73595d93d0731d84ce7fd4dbb342877378d51792fbf4f850314b7a4a371f430419c118" name="Leap-Micro-release" arch="x86_64">
  <version epoch="0" ver="6.2" rel="160000.4.12"/>
  <changelog author="openSUSE &lt;packaging@lists.opensuse.org&gt;" date="1733832000">- automatically generated by openSUSE-release-tools/pkglistgen</changelog>
</package>
<package pkgid="67632012606f861cad698f105b9d09ed4dcce64223c6bd887f0fee6b0dbbab3dab190ad78d19f0d5236f59db0baea64254d58501226c38fe1b2986364de2a4ef" name="Mesa" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="a3a271b143daa6230728780a1088b7f0f587951c6af8f8b73ca9d6574a8a46864d6f211b76ae4c7248e155a8f65f5c94276cbf7df934bf31697fff45d1d8ead5" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="f71996e577dedc7f3d9ab5e18e763eb784d26ef38c0ef2d5972acc2fbd6fb10544efd038a882c8c9d82d5f60b8aca31caae072e99f1c76a7cc5fcea1184cf2d2" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="04ccfe6b771fdec85182279ac6fd4d6d2e695603abed83e4ac2db50cb8cbde740e99be7613dea25593eccd28c1082457c6fc4a23ea4849778ac28a69075ff938" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="bed44efc1c2277ce58aeb94cea83714f4ac9a27fb9cc22d06e013d08a7d68371326a4f86e638157519c6b55ef5c6a531886a3433beb8f55b018add2068a5a958" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="f8a769816a561a4790868efeabc17b7ace86125d571cdbe7218a73ba2d92b3843236965ea953a1243fd5fa83c5958b379a56e9f68e786340fd191db73c8e9499" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="bf31665f5fb58dd0e463f143b29b6554501eb95244329ba0d62b0cebacef8c4a941be05f8948dac192c14621f553eb7596f9196f63304db460ff6dde69bfe87f" name="ModemManager" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1628942400">- Switch bash completion subpackage to noarch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Update to version 1.18.6:
  + The ModemManager.service file for systemd integration provided
    in the sources is updated as follows:
    ++ 'CAP_NET_ADMIN' is now required in the
    'CapabilityBoundingSet' field.
    ++ 'AF_NETLINK' and 'AF_QIPCRTR' are now required in the
    'RestrictAddressFamilies' field.
  + The LEGACY and PARANOID filter types that were allowed
    options in the '--filter-policy' option in the ModemManager
    daemon were deprecated in version 1.16.0 and have now been
    completely removed, along with the vid:pid blacklist of
    devices and the vid:pid greylist of RS232&lt;-&gt;USB adapters.
  + The ModemManager daemon can run now in a 'quick suspend/resume'
    mode, in which no explicit data disconnection is triggered on
    suspend, and no explicit device re-probing from scratch is
    launched on resume. Instead, the daemon will try to refresh
    the state of all interfaces upon suspend, e.g. to see if the
    module keeps registered to the same operator, to see if it is
    still connected, and so on.
  + core: added support for the new 'WWAN' subsystem in Linux kernel
    5.13, enabling PCIe-only modules.
  + core: The charset conversion methods rework, including the
    avoiding of the iconv()
  + qmi: the logic managing allowed/preferred modes was fixed for
    multimode devices like the MC7304, making sure the acquisition
    order preference always had the same items.
  + serial: when modem is connected with AT+PPP, ignore forced
    disconnections, so that we don't take ownership of the PPP
    port before pppd has released it.
  + foxconn: added support for the T99W175 (SDX55) module,
    including built-in FCC unlock procedure.
  + foxconn: added new MBIM QDU firmware update method.
- Move the dbus-1 system.d file to /usr (bsc#1196170)
- Use source verification
- Update Supplements to new format
- Add BRs needed for new tests:
  * python3-gobject-Gdk
  * python3-dbus-python</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Enable QRTR support
  * Add BR pkgconfig(qrtr-glib)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1659787200">- Update to version 1.18.10:
  + Build: Require libqmi 1.30.8.
  + FCC unlock: Updated SDX55 unlock script to handle the new
    method introduced in the latest firmware releases.
  + Modem interface:
  - Set signal quality to 0% on shutdown.
  - Set signal quality as recent on init.
  + MBIM:
  - Fix task completion when peeking device fails.
  - Fix several GError double-frees.
  + mmcli: Don't print signal quality until modem is enabled.
  + Plugins: foxconn: remove carrier mapping table for T99W175.
  + Several other minor improvements and fixes.
- Changes from version 1.18.8:
  + A new connection status dispatcher setup is provided, where
    users can provide custom scripts that will be called on bearer
    connect/disconnect events. This dispatcher will make the netifd
    integration in openwrt work much better, as we'll be able to
    report network-initiated disconnections cleanly to netifd.
    There are no default connection status dispatcher scripts
    installed, but it's suggested distributions make sure the
    following directories exist:
  - ${sysconfdir}/ModemManager/connection.d/
  - ${libdir}/ModemManager/connection.d/
  + API: Add missing Simple interface definitions in
    ModemManager-names.h.
  + Build:
  - meson:
    . fix daemon enums dependencies.
    . fix port enums includes.
    . fix 'export_packages' in GIR setup.
    . fix simtech plugin module name.
  - systemd: don't run ModemManager in containers.
  + Core:
  - serial: ensure the port object is valid after BUFFER_FULL
    handling.
  - netlink:
    . use unaligned netlink attribute length.
    . only change IFF_UP flag.
  - bearer: match unknown auth to chap in loose comparisons.
  - charsets: return error if UTF-8 validation fails.
  - fcc-unlock: make scripts POSIX shell compatible.
  - modem-helpers:
    . consider minimum ID when choosing best profile.
    . fix reading &lt;Act&gt; given in COPS=? responses.
  - sms: prevent crash if date is out of range.
  - profile-manager: fix copy-paste error on tags for quarks.
  + QMI:
  - Ignore slot status indications until initial status is known.
  - Return error when loading capabilities if none is found.
  + MBIM:
  - Default initial EPS bearer's auth to chap when unknown.
  - Update default error when network error is out of range.
  + mmcli: Fix key length when printing list of items.
  + Plugins:
  - linktop: new port type hints.
  - cinterion: add support for PLSx3w modems.
  - huawei: disable +CPOL based features in Huawei E226.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661601600">- Disable make_check call, tests currently fails due to our switch
  to glib 2.73.2.
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/870
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/601
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/621</changelog>
  <changelog author="luc14n0@opensuse.org" date="1665230400">- Update to version 1.18.12:
  + This release fixes a few very critical issues that happpen when
    using a glib2 newer or equal than 2.73.2, plus numerous fixes
    for the Core, MBIM, QMI, 3GPP profile manager interface, SMS,
    libmm-glib, and mmcli.
  + Plugins:
  - sierra: disable +CPOL in the GL7600.
  - telit: add LE910Cx MBIM composition port hints.
  - telit: add port type hints for LN920 0x1060, 0x1061
    compositions.
  - icera: fix double free on %%IPSYS=? response processing
  - mtk: fix task completion when loading supported modes.
- Add new pkgconfig modules build requirements: gio-2.0, glib-2.0,
  gmodule-2.0, and gobject-2.0.
- Update ModemManager.keyring to the new upstream key:
  A814D09B9C5BC01945A64308AECE0239C6606AD5. Found at
  www.freedesktop.org/software/ModemManager/0xAECE0239C6606AD5.asc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.20.6:
  + build: New build option to allow disabling the installation of
    examples.
  + core:
  - Fix crash when uninhibiting partially removed device.
  - Fix crash when attempting to load an invalid shared utils
    library.
  + mmcli:
  - Allow JSON and key/value output when creating SMS messages.
  - Improved JSON output in network scan results.
  + libmm-glib:
  - Avoid using g_time_zone_new_offset() unless glib &gt;= 2.58.
  - Fix flags to string conversion utils to allow multiple flags.
  + MBIM:
  - Reset cached SIM info when SIM is unlocked.
  - Fix synchronizing the state of the SIM hot swap configured
    flag.
  - Fix bug cleaning up the LTE attach info unsolicited message
    handler.
  - Fallback from QMI UIM service only if unsupported.
  - Add missing support for 'emergency' APN type.
  + QMI:
  - Fix processing and exposing PCOs.
  - Fix power up on modems that don't support power state change
    indications.
  + plugins:
  - telit:
    . add additional support for 5G modems.
    . added port type hints for FN990 0x1070, 0x1071
    compositions.
    . increase allowed initial delay in AT ports.
    . fallback to AT commands if loading revision via MBIM fails.
  - quectel: add support for EC21-EUX usb modules.
  - xmm: fix crash parsing XACT? response.
- Changes from version 1.20.4:
  + build:
  - Don't hardcode building shared libraries, so that meson's
    default_library option can be used properly,
  - po: Added missing Georgian translation in LINGUAS.
  + QMI:
  - Fixed loading NR5G signal info.
  - Fixed memory leaks when processing signal info.
  - Correctly scaled the SNR value reported in NR5G.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  + MBIM:
  - Fixed processing MbimSmsStatusFlag as flags, not as an enum.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  - Chained up device notifications through the MMPortMbim
    object.
  + Messaging: Allowed Delete operation during enabling/disabling.
  + Core: Don't assume port tables always exist so that
    long-standing operations holding an object reference can finish
    cleanly even after the initial object disposal has already been
    run.
  + plugins:
  - quectel: added new firehose/sahara support udev tags in new
    models.
  - broadmobi: added MM_PLUGIN_REQUIRED_QCDM flag.
  - cinterion:
    . added a delay to the ^SWWAN? command.
    . added retry mechanism to the ^SWWAN? command.
- Changes from version 1.20.2:
  + build:
  - Fixed building without MBIM support.
  - Fixed building without tests support.
  - Disabled test interface in base manager if building without
    tests.
  - Updated intel plugin dependencies to require XMM shared
    utils.
  - Fixed templates to make build reproducible.
  + FCC unlock: Updated shell scripts to avoid requiring bash.
  + MBIM:
  - Ignored SIM related indications during a SIM slot switch
    operation.
  - Updated capabilities loading to use Microsoft Extensions if
    available.
  - Updated supported modes loading to use the CustomDataClass
    field contents.
  + SIM: Fixed length when reading GID1/GID2 using AT commands.
  + Several other minor improvements and fixes.
- Changes from version 1.20.0:
  + API:
  - New 'Modem.Sar' interface to allow the host to manage the SAR
    power level.
  - New 'Modem.GetCellInfo()' method, that allows querying
    information about the current serving and neighboring cells.
    Currently including 'cell-type' and 'serving' fields for all
    cell types, plus additional type-specific fields:
    . CDMA: 'nid', 'sid', 'base-station-id', 'ref-pn' and
    'pilot-strength'.
    . GSM: 'operator-id', 'lac', 'ci', 'timing-advance', 'arfcn',
    'base-station-id' and 'rx-level'.
    . UMTS: 'operator-id', 'lac', 'ci', 'frequency-fdd-ul',
    'frequency-fdd-dl', 'frequency-tdd', 'uarfcn', 'psc',
    'rscp', 'ecio' and 'path-loss'.
    . TDSCDMA: 'operator-id', 'lac', 'ci', 'uarfcn',
    'cell-parameter-id', 'timing-advance', 'rscp' and
    'path-loss'.
    . LTE: 'operator-id', 'tac', 'ci', 'physical-ci', 'earfcn',
    'rsrp', 'rsrq' and 'timing-advance'.
    . 5GNR: 'operator-id', 'tac', 'ci', 'physical-ci', 'nrarfcn',
    'rsrp', 'rsrq', 'sinr' and 'timing-advance'.
  - New 'access-type-preference', 'roaming-allowance',
    'profile-name', 'profile-enabled' and 'profile-source'
    fields in the 'Bearer.Properties' property, that can also be
    used in both 'Modem.Simple.Connect()' and
    'Modem.CreateBearer()'.
  - New 'Modem.Modem3gpp.SetPacketServiceState()' method and
    'Modem.Modem3gpp.PacketServiceState' property, which allow
    management the explicit attach or detach to packet service on
    the current registered network.
  - New 'Modem.Modem3gpp.SetNr5gRegistrationSettings()' method
    and 'Modem.Modem3gpp.Nr5gRegistrationSettings' property, to
    allow management of 5G specific settings like 'mico-mode' or
    'drx-cycle'.
  - New 'start-date', 'uplink-speed' and 'downlnk-speed' fields
    in the 'Bearer.Stats' property.
  - New 'Bearer.ReloadStatsSupported' property to indicate
    whether reloading ongoing stats is supported or not.
  - New 'Modem.Modem3gppProfileManager.IndexField' property, to
    indicate which field is to be used as unique index in the
    profile management operations.
  - New 'Sim.SimType', 'Sim.EsimStatus' and 'Sim.Removability'
    properties to improve the management of eSIM related
    operations.
  - New 'Sim.Gid1' and 'Sim.Gid2' properties, which allow
    identifying SIM cards that should have different settings
    applied.
  - New 'Modem.Signal.SetupThresholds() method,
    'Modem.Signal.RssiThreshold' and
    'Modem.Signal.ErrorRateThreshold' to allow configuring
    thresholds so that the modem emits indications whenever the
    signal quality values change based on those thresholds. For
    RSSI a delta amount of dBm can be given, and for error rate
    just a boolean to enable or disable the corresponding event.
  - New 'error-rate' fields in the 'Modem.Signal.Cdma',
    'Modem.Signal.Evdo', 'Modem.Signal.Gsm', 'Modem.Signal.Umts',
    'Modem.Signal.Lte' and 'Modem.Signal.Nr5g' properties.
  + Core:
  - Detecting an eSIM without an active profile in the current
    SIM slot will lead to the modem being in Failed state, in the
    same way as if the slot was for a physical SIM and no SIM was
    inserted.
  - Default amount of AT probing attempts is updated to 6, to
    cope with modems that are slower to boot.
  - New '--test-mbimex-profile-management' option in the daemon,
    to enable support for profile management operations using the
    Microsoft extensions. This is an optional feature because it
    requires using the 'apn-type' field as unique index, which
    not all users of the profile management API may expect.
  - Implemented some initial support to automatically hide
    personal details (e.g. phone numbers, SMS contents...) from
    logs, right now only applicable to QMI and MBIM logs. Updated
    support for this feature will keep on being integrated in
    future 1.20.x updates. The new '--log-personal-info' option
    in the daemon allows to disable this feature completely.
  - Added new filter match option for subsystem vendor id,
    required in several PCI based Qualcomm modules.
  - QCDM port probing will no longer automatically run for all
    plugins, only in those that explicitly require it.
  - Implemented support for suspend/resume detection based on
    ChromeOS' powerd daemon.
  - Added Cat-M and NB-IoT LPWA access technologies.
  + Modem interface: On 3GPP+3GPP2 multimode devices, a missing SIM
    card will now force the modem into Failed state, as if it was a
    3GPP-only device.
  + Simple interface: Explicitly wait for PS domain to be attached
    during a connection attempt.
  + 3GPP interface: Updated to report domain registration changes
    altogether whenever possible (e.g. when using the QMI or MBIM
    protocols).
  + MBIM:
  - Implemented support to use the Microsoft-defined MBIM
    extensions v2 and v3 whenever supported by the device. The
    ModemManager daemon will negotiate which version to use with
    the modem, so that the highest version supported is enabled.
    This negotiation applies to the whole device, so any other
    user of the MBIM device will automatically start using the
    newly agreed version.
  - Implemented current modes switching using MBIMEx v2.0
    extensions.
  - Trigger explicit disconnection if a connection attempt fails.
  - Modem will be flagged as unusable if 10 consecutive MBIM
    requests timeout.
  - Enabled multiplex support for devices in the WWAN subsystem.
  + QMI:
  - Updated logic to by default prefer 'Signal Info' over the
    deprecated 'Signal Strength' operations.
  - Updated logic to by default prefer 'System Info' over the
    deprecated 'Serving System' operations.
  - Updated power state transition logic to ensure the new state
    is reached before returning success to the user.
  - Implemented support for the 'Modem3gppProfileManager.Updated'
    signal using PDC refresh notifications.
  - Modem will be flagged as unusable if 10 consecutive QMI
    requests timeout.
  - Implemented DTMF support.
  - Implemented support for automatic SIM IMSI switch detection
    under certain roaming scenarios.
  - Updated the logic to move the PS domain state to 'registered'
    based on the DSD System Status indications.
  - Updated endpoint type detection logic to be based on the net
    driver.
  - Updated endpoint number selection to be based on the data
    port.
  - Updated connection logic to allocate separate WDS clients per
    endpoint.
  - Added support for PCO reporting.
  + plugins:
  - quectel: Added FCC unlock support for the EM05-G.
  - telit:
    . Band management updated to prefer using QMI whenever
    available, as well as to detect the #BND command format
    automatically.
    . Added support for LPWA modems.
  - fibocom:
    . Implemented optional support to power down and up the modem
    during the update of the initial EPS bearer settings.
    . Implemented initial EPS bearer settings management in the
    MA510.
  - intel: New generic plugin for Intel PCI devices with vid
    0x8086.
  - xmm: Prefer GNSS control ports explicitly tagged via udev
    tags.
  - foxconn: Use the new FOX QMI service to load firmware
    version.
  - cinterion: Added support for PCIe based devices.
- Use ldconfig_scriptlets macro.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add xsltproc and pkgconfig(bash-completion) BuildRequires: New
  dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696593600">- Add explicit /usr/bin/dbus-daemon BuildRequires: Needed for
  tests.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727092800">- Update to version 1.22.0:
  + A new "MSG" (message) log verbosity level is introduced, which
    is also the new default one if none explicitly defined. This
    level takes the place of the old "INFO" level, as a level
    including the most important messages that should be logged
    without needing to be warnings or errors. The new "INFO" level
    is more verbose than "MSG" but less verbose than "DBG", and may
    be useful as default in systems where active debugging of WWAN
    related issues is required. E.g. all user operations triggered
    via DBus method calls are logged in "INFO" level.
  + Introduced the concept of "personal information" which should
    by default not be included in log messages. Enabling personal
    information in logs requires to run the daemon with the
    '--log-personal-info' option. This feature is mostly
    implemented for QMI and MBIM specific logs, but hasn't yet been
    included in generic daemon logs or when using the AT protocol.
    Changes and fixes related to this feature will be cherry-picked
    and included in the future stable branch updates.
- Update URL and Source adresses.</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="dc8f330e9c255e7435d12e8a7004648fb2369cdacf8d2c7989a7944e9aba638d87ad491b34e383c210b755b4d77ce6cba991e441ab4c3351af6101fa2187b169" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="488ccf2583ea42df51c4cdbcd415e18e76eb428dde78923635976258a3d0c2b19cfa8ef639c68471eef2f83ada6afe573a9ecc0e6cb6605fb6eef98b06b596df" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="6bf4e3e035dfe3aa5631287e70f81ef4509d7252bda8c0f3ed48a247b3d2315634f2af39af186e435498481f61e94839904bf6198e03ba8a47be5078c0cb04d9" name="NetworkManager-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="42.1" rel="160000.1.118"/>
  <changelog author="sckang@suse.com" date="1504094400">- SLE15 SP0 package, based on openSUSE version (bsc#1055200).</changelog>
  <changelog author="fezhang@suse.com" date="1504699200">- Add a SLE flavor.
- Clean up specfile.</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Apply %{branding_name} also to summary and description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec file by running spec-cleaner</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574769600">- Switch package to _multibuild.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593086400">- Fix summary variable expansion: use %rpm style instead of $shell
  style (boo#1172773).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593345600">- Also fix variable expansion in %description (boo#1172773).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1659009600">- Move conncheck config file out of /etc. No longer
  import main config file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1660305600">- Expliciltly BuildRequire NetworkManager-branding-upstream:
  branding-upstream is produced by NetworkManager and is guaranteed
  to be the same version. Breaks a self-cycle.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1701432000">- Fix most rpmlint warnings:
  + suse-zypp-packageand: use current Supplements: (A and B) syntax
    over packagand(A:B)
  + summary-ended-with-dot: Remove dot at the end of Summary:
  + no-%build-section: Add empty %build section
  + branding-supplements-missing: Fixes as part of
    suse-zypp-packageand.</changelog>
</package>
<package pkgid="8af50f776d0048540ef9cfdd3cc0ed2370be95d0c2530862719efb92b984c52c30fb07f3d3a542d9c335d0c774918734c8223b96d89f298d8f629bfae46af88c" name="NetworkManager-cloud-setup" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="892ff6a6315b915c7fe9b0ed6f6c0c0686ef40715f6480868c55af2fb5ff41824fc99ee35ecf04ac0190f0e162a277df19ef5bb8c8b60d40b2698c2566d20d28" name="NetworkManager-pppoe" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="242fe0809bd9b29789d3d5009cd13c0c136d7f1a0faa1055fb578d4413f4d2376469dff1aed2385188c432d40ae2a1fdbb3619adc43e382f3288bd32f54e8767" name="NetworkManager-tui" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="3c9eeb1b0756049ddfe4ec4afb6b7805f27e1d517d167eab030a7f2d8b5d50c6e0bcfc6791e0bed1c18b682b74d558ff1e3d45cc21eee946ca0750b552ce4ec1" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="6c524db4f7570ec5961591814cc4e26afea8a015fe69f5b716f6caea717ce28edd95b7283a5dd62b779c8eb79082b98db12dd27d329f6272282cbd0a8385e942" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20260210.ecce285" rel="160000.1.1"/>
  <changelog author="kukuk@suse.com" date="1754049600">- Update to version 84.87+git20250801.f305627:
  * Remove sysconfig.language [bsc#1247286]</changelog>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
</package>
<package pkgid="a249493726865c18522b2c69357756b49d4ca4f912f7ccb63cf6180a26de55183fef3f5d4499048425f721520850617e7d614311c5b742600475c0460faba617" name="aardvark-dns" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="160000.2.2"/>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * v1.11.0 release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20240529
  * Internal networks cannot make external DNS requests
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate nix to 0.29.0
  * [skip-ci] RPM: use default __cargo macro across all envs
  * chore(deps): update dependency containers/automation_images to v20240513
  * fix(deps): update rust crate anyhow to 1.0.83
  * [skip-ci] Packit: separate `packages` key for rhel jobs
  * fix(deps): update rust crate libc to 0.2.154
  * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
  * [skip-ci] Packit: Remove EL8 jobs
  * fix(deps): update rust crate syslog to ^6.1.1
  * fix reverse ipv6 lookup test flake
  * fix(deps): update hickory-dns monorepo to 0.24.1
  * chore(deps): update rust crate chrono to 0.4.38
  * Don't tear down all server threads on SIGHUP (bsc#1224167)
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate tokio to 1.37.0
  * Update to nix-0.28.0
  * update chrono package
  * chore(deps): update dependency containers/automation_images to v20240320
  * fix(deps): update rust crate anyhow to 1.0.81
  * tests: check queried domain name in reverse lookup tests
  * fix: set name for answers in reverse lookups
  * chore: fix typo in runner script
  * chore: fix log message when doing reverse lookup
  * fix(deps): update rust crate log to 0.4.21
  * fix(deps): update rust crate anyhow to 1.0.80
  * chore(deps): update rust crate chrono to 0.4.34
  * fix(deps): update rust crate async-broadcast to 0.7.0
  * fix(deps): update rust crate tokio to 1.36.0
  * [CI:DOCS] Packit: disable bodhi tasks
  * chore(deps): update rust crate chrono to 0.4.33
  * Bump to 1.11.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1721995200">- rust &gt;= 1.70 is required to build more recent versions of this
  package. Also, BuildRequire cargo+rust to prevent conflicts with
  `cargo-packaging`.</changelog>
  <changelog author="danish.prakash@suse.com" date="1723032000">- Update to version 1.12.1:
  * Release v1.12.1
  * Updated release notes for 1.12.1
  * Change av cargo categories
  * Bump to 1.13.0-dev
  * Release 1.12.0
  * Release notes for 1.12
  * config: ignore enoent errors while reading configs
  * run cargo update
  * update upsteam resolvers on each refresh
  * fix(deps): update rust crate syslog to v7
  * fix(deps): update rust crate tokio to 1.39.2
  * add tcp support for forwarding (bsc#1234660)
  * add tcp listening support
  * test: add new test to check for startup error
  * return bind error to caller on first start
  * add our own error type and use it over anyhow
  * server: use anyhow to wrap parse_configs error
  * server: split out main loop into new function
  * main: remove aardvark-dns error prefix
  * coredns: remove unnecessary try_join! call
  * coredns: drop pointless name var
  * serve: read nameservers once
  * replace signal-hook with tokio::signal
  * serve: fix broken error logging
  * server: improve parent &lt;-&gt; child error handling
  * add some basic perf check script
  * fix(deps): update rust crate tokio to 1.39.0
  * coredns: create reply_ip() function
  * coredns: match dns type explicitly
  * server: use only one tokio runtime
  * coredns: improve indentation for process_message()
  * coredns: move upstream resolvers detection later
  * coredns: do not clone sender
  * read AARDVARK_NO_PROXY once
  * coredns: move main code out of select!
  * coredns: fix "name" naming
  * coredns: remove unused forward_addr/port
  * coredns: fix handling of dns search domain
  * coredns: rework PTR lookup flow
  * fix(deps): update rust crate tokio to 1.38.1
  * [skip-ci] TMT: Reorg upstream tests for downstream reusability
  * [skip-ci] Packit: use `packages: [aardvark-dns-fedora]` for podman-next builds
  * Be sure to have at least Epoch 2 to preserve upgrade path in c10s.
  * fix(deps): update rust crate log to 0.4.22
  * [CI:BUILD] rpm: Update Rust macro usage
  * fix(deps): update rust crate tokio to 1.38.0
  * Bump to 1.12.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1725451200">- Update to version 1.12.2:
  * Release v1.12.2
  * Update release notes for 1.12.2
  * coredns: work on tcp requests concurrently
  * tcp: add timeout to connection (fixes bsc#1230153 / CVE-2024-8418)
  * cirrus: update branch names</changelog>
  <changelog author="danish.prakash@suse.com" date="1730289600">- Update to version 1.13.0:
  * Release v1.13.0
  * Update release notes for 1.13.0
  * test: use dnsmasq over slirp4netns
  * coredns: forward names with no ndots as well
  * run cargo update
  * fix(deps): update rust crate tokio to 1.41.0
  * fix(deps): update rust crate flume to 0.11.1
  * fix(deps): update rust crate libc to 0.2.161
  * fix(deps): update rust crate libc to 0.2.160
  * fix(deps): update rust crate clap to ~4.5.20
  * cirrus: check for msrv build
  * define a MSRV policy
  * chore(deps): update dependency containers/automation_images to v20241010
  * [skip-ci] Packit: constrain koji job to the fedora package
  * dns: limit to 3 resolvers and use better timeout for them
  * OWNERS file audit and update
  * fix new lint error with rust 1.81
  * test: make them pass on RHEL/Centos Stream 9
  * Packit: disable F39 and separate out ELN
  * serve: parse resolv.conf ourselves
  * fix(deps): update rust crate libc to 0.2.159
  * coredns: allow host lookup of names
  * backend: return simple Vector in lookup()
  * coredns: use a TTL of 0 for our names
  * coredns: do not clonse the Record
  * netavark_cache_groom.sh: fix wrong branch
  * Packit: add sidetag to release with netavark
  * coredns: work on tcp requests concurrently
  * tcp: add timeout to connection
  * fix(deps): update rust crate tokio to 1.40.0
  * fix(deps): update rust crate libc to 0.2.158
  * chore(deps): update dependency containers/automation_images to v20240821
  * fix(deps): update rust crate tokio to 1.39.3
  * fix(deps): update rust crate libc to 0.2.156
  * Bump main version back to v1.13.0-dev</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1731412800">- Update to version 1.13.1:
  * Release v1.13.1
  * release notes for 1.13.1
  * test: make jq query work on centos stream 9
  * [skip-ci] Packit/TMT: idiomatic repo addition
  * [skip-ci] Packit: Remove epel jobs
  * tmt: install dnsmasq dependency
  * [skip-ci] Packit: disable osh-diff-scan
  * [skip-ci] Packit: enable c9s downstream updates
  * [skip-ci] TMT: install builddeps downstream
  * [skip-ci] RPM: cleanup changelog conditionals
  * support ipv6 link local addresses in resolv.conf
  * cirrus: update DEST_BRANCH</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1739275200">- Update to version 1.14.0:
  * Release v1.14.0
  * release notes for v1.14.0
  * update release notes from v1.13.1
  * run cargo update
  * fix lint issues with rust 1.84
  * chore(deps): update dependency containers/automation_images to v20250131
  * fix(deps): update rust crate clap to ~4.5.28
  * fix(deps): update rust crate log to 0.4.25
  * fix(deps): update rust crate tokio to 1.43.0
  * chore(deps): update dependency containers/automation_images to v20250107
  * fix(deps): update rust crate clap to ~4.5.23
  * fix(deps): update rust crate libc to 0.2.169
  * fix(deps): update hickory-dns monorepo to 0.24.2
  * Cargo.lock: bump some versions
  * run cargo update
  * cargo: set rust-version
  * fix(deps): update rust crate clap to ~4.5.21
  * fix(deps): update rust crate libc to 0.2.167
  * OWNERS: remove edsantiago
  * fix(deps): update rust crate libc to 0.2.165
  * fix(deps): update rust crate libc to 0.2.164
  * chore(deps): update dependency containers/automation_images to v20241107
  * fix(deps): update rust crate tokio to 1.41.1
  * fix(deps): update rust crate libc to 0.2.162
  * test: make jq query work on centos stream 9
  * [skip-ci] Packit: disable osh-diff-scan
  * support ipv6 link local addresses in resolv.conf
  * [skip-ci] Packit: enable c9s downstream updates
  * [skip-ci] TMT: install builddeps downstream
  * [skip-ci] RPM: cleanup changelog conditionals
  * [skip-ci] Packit/TMT: idiomatic repo addition
  * [skip-ci] Packit: Remove epel jobs
  * tmt: install dnsmasq dependency
  * Bump to 1.14.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1747310400">- spec: require cargo instead of rust+cargo; drop redundant comment</changelog>
</package>
<package pkgid="f9dff5094185f0d0014a35e1b535a54649373fa988cb7f4952d18eeb77efc6d4153ba7b9e6d86eb8821f314ee4b7f077926091d7210aa88947e5f5a6caec204e" name="accel-config" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="160000.2.2"/>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to version 3.4.7:
  * No relevant changes
- Update to version 3.4.6.5:
  * Add Zcompress32, Zdecompress32, Compress and Decompress test
  * Add Zcompress16 and Zdecompress16 to IAA test
  * Add operation CRC64 into IAA test
  * Bug fixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1665403200">- Update to 3.4.8
  * Changes in accel-config test</changelog>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to version 3.5.0:
  * Fix static code analysis warnings
  * Fix lintian errors
  * Move test program and related configs to /usr/lib
  * Move contrib/configs/* to /etc
  * Some code cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1672142400">- Update to version 3.5.2:
  * Bug fix in help system
  * Remove mdev implementation</changelog>
  <changelog author="danilo.spinella@suse.com" date="1682683200">- Update to version 4.0:
  * use buildflags.mk, remove hardcoded CFLAGS
  * debian/accel-config-test.install fix path on copy
  * convert all magic number for 1&lt;&lt;12 to PAGE_SIZE
  * fix madvise() call to unmap pages
  * add updated idxd.h definition from kernel source
  * Remove redundant -f 0x0 in iaa_user_test_runner.sh
  * Fix dedicated mode wq size 1 failure
  * Modify incorrect print information
  * Modify block_on_fault in 2g2q_user_2.conf
  * Move get_random_value() to accel_test.c
  * Add algorithm to do Zcompress8
  * Add test code of operation Zcompress8
  * Modify script for executing Zcompress8 test
  * Add algorithm to do Zdecompress8
  * Add test code of operation Zdecompress8
  * Modify script for executing Zdecompress8 test
  * Add algorithm to do both Encrypt and Decrypt
  * Add test code of operation Encrypt
  * Modify script for executing Encrypt test
  * Add test code of operation Decrypt
  * Modify script for executing Decrypt test
  * Modify struct in idxd.h for IAA Translation Fetch
  * Add test code of IAA Translation Fetch
  * Modify script for executing IAA Translation Fetch test
  * Add helping information for new parameters
  * Add openssl package installation details
  * Fix bug of Zcompress8 about input size less 128
  * Remove ats_disable config for iax tests
  * Add identification for IAA1.0/2.0 platform
  * add per-wq prs disable tests
  * Update format bitmask attrs to match driver
  * Add new API to set and get wq op_config
  * Add option to config-wq to set op_config
  * Change json listing format of bitmasks
  * Add load, save and list config support for op_config
  * Update config-wq doc with op_config details
  * Add unit test for op_config configuration
  * Fix segmentation fault during list cmd in SPR
  * Add API to retrieve iaa_cap when available
  * Add group-&gt;desc_progress_limit support
  * Add group-&gt;batch_progress_limit support
  * Add wq-&gt;prs_disable support
  * Add device-&gt;event_log_size support
  * Do not set traffic class in tests
  * Skip op_config test if feature not present
  * Include IAA support in README
  * Fix bug in return value of pasid enabled check
  * add DIX Generate operation support
  * add translation fetch operation support
  * Remove traffic config for iax tests
  * Fix dsa_test segmentation fault when do 2G tests
- Update to version 3.5.3:
  * Fix bug of setting max destination size
  * Remove some leftover references to mdev
  * Remove text about installing kernel headers
  * Remove uninitialized local variable warning
  * Remove read_buffers 0 settings from configs</changelog>
  <changelog author="danilo.spinella@suse.com" date="1693396800">- Update to version 4.1:
  * add missing libssl-dev dependency
  * Skip configuring ats_disable if the attribute is not present
  * Add config-user-default command
  * Add option "-c &lt;config_file&gt;" to load default configurations from
    the file
  * Disable default configured WQs and devices
  * Add "-n &lt;wq_name&gt;" to specify WQ name for disabling WQs
  * Add user_default_profile.conf
  * Add doumentation for new command "config-user-default"</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705579200">- Update to versione 4.1.4:
  * Fix a bug while reading json objects
  * Do not save traffic class attributes
  * Handle cmd_status initialization failure without exiting
  * Remove SET_ERR macro which is error prone
  * Skip check for ats_disable if attribute absent
  * Add parameter for specifying dev and wq
  * Fix bug about checking result of decompression
- Update to version 4.1.3:
  * be less greedy in _cleanup greps
- Update to version 4.1.2:
  * Fix a memory leak bug
- Update to version 4.1.1:
  * update Standards-Version to 4.6.2 in control file
  * Use asm volatile for compilers that don't support
    __builtin_ia32_mfence
  * Fixes for pedantic compiler warnings
  * Update copyright years in man pages
  * Fix some syntax errors and cleanup in man pages
  * Fix --help and other options
  * Fix a bug with empty wq driver name
  * Fix bug about finding a mismatched wq
  * Add op mask to check if an op is available
  * Decide whether to do the operation or not
  * Fix batch event log core check output issues
  * Provide --skip-config to run dsa tests without device reset</changelog>
  <changelog author="dimstar@opensuse.org" date="1707998400">- Update to version 4.1.5:
  + Free driver_name in case of error adding wq.
  + change op config default value because of kernel change.
  + set read buffer allowed from 0 to 8.
  + disable enabled devices before unloading iaa_crypto.</changelog>
  <changelog author="dmueller@suse.com" date="1710763200">- update to 4.1.6:
  * Free driver_name when freeing wq
  * Disable all WQs and rmmod iaa_crypto
  * Remove the script about vfio passthrough device
  * Use madvise(MADV_DONTNEED) to ummap address</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723118400">- Update to 4.1.8:
  * Check for error return from iaa_do_crypto
  * Clean up resource leak in accfg_wq_get_occupancy
  * Update dsa_config_test_runner.sh
- 4.1.7 changelog:
  * Typo fixes
  * Make verbose logging optional
  * Clean up typo
  * Don't attempt to disable non-existent devices
  * Don't list attributes not present
  * add required SECURITY.md file for OSSF Scorecard compliance</changelog>
</package>
<package pkgid="a386ef4f9880ac894e680a34cab092d1f9f9d934f44560e0e336457b1e79a56fe277afa758e35779dece6d2c4a7da82e4e40b8d508ee0de253371cccd8b2fa13" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="23.13.9" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1687608000">- Add accountsservice-assume-gdm.patch: assume gdm when not being
  able to detect the used display manager. This is basically the
  same as was in place before we gained support for multiple DMs
  (boo#1212675).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1688558400">- Rebase accountsservice-sysconfig.patch: (boo#1212675 boo#1212973).
- Remove accountsservice-assume-gdm.patch: Fixed by new rebasing
  of accountsservice-sysconfig.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1691582400">- Rebase as-fate318433-prevent-same-account-multi-logins.patch:
  (bsc#1213884).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707912000">- First part to fix build with GCC 14:
  + Inject patched mocklibc-1.0.tar.gz: only some header
    modifications to address implicit declaration of print_indent.
  + Add accountsservice-mocklib-gcc14.patch: patch meson'
    subproject definition to validate the injected tarball.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1709035200">- Rebase accountsservice-sysconfig.patch: to fix build with GCC 14
  (bsc#1219909).</changelog>
  <changelog author="dimstar@opensuse.org" date="1715083200">- Keep en and en_GB 'translations' in the main package: do not
  force -lang packages onto all users.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1718798400">- Update accountsservice-sysconfig.patch: work with SELinux policy
  (bsc#1222978).</changelog>
  <changelog author="mgorse@suse.com" date="1723464000">- Drop as-fate318433-prevent-same-account-multi-logins.patch.
  Gnome-shell now has similar functionality upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752494400">- Update accountsservice-sysconfig.patch: Check whether sysconfig
  is used and fallback to display manager settings if sysconfig is
  not used (bsc#1246127).</changelog>
</package>
<package pkgid="bd2a7f620799276761185262321ba0497acfd49227a66031a4a5e4f22570f2944f9a0fdcd44c19e4481c9c9e03829bf25107c4b8c50ab5f2d95fd392ac05d483" name="acl" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="160000.2.2"/>
  <changelog author="jeffm@suse.com" date="1539259200">- Update to v2.2.53.
- Removed patches:
  * 0001-Install-the-libraries-to-the-appropriate-directory.patch
  * 0001-Use-OS-byteswapping-macros.patch
  * 0002-setfacl.1-fix-typo-inclu-de-include.patch
  * 0003-test-fix-insufficient-quoting-of.patch
  * 0004-Makefile-rename-configure.in-to-configure.ac.patch
  * 0005-Bad-markup-in-acl.5-page.patch
  * 0006-.gitignore-ignore-and-config.h.in.patch
  * 0007-Use-autoreconf-rather-than-autoconf-to-regenerate-th.patch
  * 0008-libacl-Make-sure-that-acl_from_text-always-sets-errn.patch
  * 0009-libacl-fix-SIGSEGV-of-getfacl-e-on-overly-long-group.patch
  * 0010-punt-debian-rpm-packaging-logic.patch
  * 0011-move-gettext-logic-into-misc.h.patch
  * 0012-test-make-running-parallel-out-of-tree-safe.patch
  * 0013-modernize-build-system.patch
  * 0014-po-regenerate-files-after-move.patch
  * 0015-build-drop-aclincludedir-use-pkgincludedir.patch
  * 0016-build-make-use-of-an-aux-dir-to-stow-away-helper-scr.patch
  * 0017-build-ship-a-pkgconfig-file-for-libacl.patch
  * 0018-read_acl_-comments-seq-rename-line-to-lineno.patch
  * 0019-read_acl_-comments-seq-switch-to-next_line.patch
  * 0020-telldir-return-value-and-seekdir-second-parameters-a.patch
  * 0021-mark-libmisc-funcs-as-hidden-so-they-are-not-exporte.patch
  * 0022-add-__acl_-prefixes-to-internal-symbols.patch
  * 0023-cp.test-Check-permissions-of-the-right-file.patch
  * 0024-libacl-acl_set_file-Remove-unnecesary-racy-check.patch
  * 0025-fix-compilation-with-latest-xattr-git.patch
  * 0026-getfacl-Fix-memory-leak.patch
  * 0027-Fix-the-display-block-nesting-in-acl.5.patch
  * 0028-setfacl-man-page-Minor-wording-improvements.patch
  * 0029-getfacl-Fix-minor-resource-leak.patch
  * 0030-Do-not-export-symbols-that-are-not-supposed-to-be-ex.patch
  * 0031-walk_tree-mark-internal-variables-as-static.patch
  * 0032-ignore-configure.lineno.patch
  * acl-2.2.52-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1541678400">- libacl-devel used to require libattr-devel, but that is no longer
  the case, packages that relied on this indirect dependency to
  be present were fixed years ago.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Update boilerplate descriptions for libacl-devel.
- Remove out-of-date comments for libattr.
- Remove old BuildRoot and %defattr tags.
- Move library into the standard library directory.</changelog>
  <changelog author="dmueller@suse.com" date="1598961600">- update url</changelog>
  <changelog author="dimstar@opensuse.org" date="1611662400">- Replace system-user-{bin,daemon} with user({bin,daemon}): be
  resilient to package name changes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1620820800">- Update to version 2.3.1
  * Update German translation
  * getfacl: fix indent in --help output
  * getfacl: Add --one-file-system option, with this option getfacl
    will not cross mount points
  * Fix segfault on allocation failure
  * Avoid SIGSEGV with link-time optimisation enabled
- Use SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- modernize spec-file (move license to licensedir)</changelog>
  <changelog author="mliska@suse.cz" date="1649419200">- Disable -D_FORTIFY_SOURCE=3 for now
  as explained here: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104964</changelog>
  <changelog author="dimstar@opensuse.org" date="1707998400">- Update to version 2.3.2:
  + libobj: declare s_str directly in string_obj_tag.
  + Use thread-safe getpwnam_r and getgrnam_r.
  + setfacl: preserve the failed status when processing multiple
    files.
  + man: Document pitfall with negative permissions and user
    namespaces.
  + tools: mark long_options static &amp; const.</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- BuildRequire gettext-devel instead of gettext-tools-mini: let
  OBS sort out if the -mini package is the right one to be used or
  not.</changelog>
</package>
<package pkgid="400b4ea1b996a643e3de7a93a7c866ef02470e24a17d9896d2cf0ff8d0bbb605c04a453153ee0c57f6ee7c62fbe675ffa616b6a007836b4f8a36e9375381d0ac" name="acpica" arch="x86_64">
  <version epoch="0" ver="20240927" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1650456000">- update to 20220331:
  For the ASL Sleep() operator, issue a warning if the sleep value is
  greater than 10 Milliseconds. Quick boottime is important, so warn about
  sleeps greater than 10 ms. Distribution Linux kernels reach initrd in 350
  ms, so excessive delays should be called out. 10 ms is chosen randomly,
  but three of such delays would already make up ten percent of the
  boottime.
  Namespace: Avoid attempting to walk the Namespace if the Namespace does
  not exist.
  AML interpreter/iASL compiler: Add new Acpi 6.4 semantics for the
  LoadTable and Load operators. DDB_HANDLE is gone, now loadtable returns a
  pass/fail integer. Now load returns a pass/fail integer, as well as
  storing the return value in an optional 2nd argument.
  Headers: Use uintptr_t and offsetof() in Linux kernel builds. To avoid
  "performing pointer subtraction with a null pointer has undefined
  behavior" compiler warnings, use uintptr_t and offsetof() that are always
  available during Linux kernel builds to define ACPI_UINTPTR_T and the
  ACPI_TO_INTEGER() and ACPI_OFFSET() macros when building the ACPICA code
  in the Linux kernel.
  Added support for the Windows 11 _OSI string ("Windows 2021"). Submitted
  by superm1.
  executer/exsystem: Inform users about ACPI spec violation for the Stall()
  operator. Values greater than 100 microseconds violate the ACPI
  specification, so warn users about it. From the ACPI Specification
  version 6.2 Errata A, 19.6.128 *Stall (Stall for a Short Time)*:
  The implementation of Stall is OS-specific, but must not relinquish
  control of the processor. Because of this, delays longer than 100
  microseconds must use Sleep instead of Stall.
  Data Table Compiler/Disassembler: Add support for the APMT table - ARM
  Performance Monitoring Unit table. Submitted by @bwicaksononv.
  Data Table Compiler/Disassembler: For MADT, add support for the OEM-
  defined subtables (Types 0x80-0x7F).
  Data Table Compiler: Fixed a problem with support for the SDEV table,
  where a subtable Length was not computed correctly.
  Data Table Compiler/Disassembler: Add/fix the CFMWS subtable to the CEDT
  Acpi table support.
  Data Table Compiler/Disassembler: Fix a compile issue with the CEDT and
  add template. Submitted by MasterDrogo.
  Data Table Compiler/Disassembler: NHLT Changes provided by Piotr Maziarz:
  iASL/NHLT: Rename linux specific structures to DeviceInfo to improve
  readability of the code.
  iASL/NHLT: Fix parsing undocumented bytes at the end of Endpoint.
  Undocumented bytes at the end of Endpoint Descriptor can be present
  independently of Linux-specific structures. Their size can also vary.
  iASL/NHLT: Treat TableTerminator as SpecificConfig. SpecificConfig has 4
  bytes of size and then an amount of bytes specified by size. All of the
  terminators that I've seen had a size equal to 4, but theoretically it
  can vary.
  iASL/AcpiExec: Use _exit instead of exit in signal handers (ctrl-C).
  iASL: Remove a remark due to excessive output. Removed a remark for
  duplicate Offset() operators, due to a user complaint.</changelog>
  <changelog author="rpm@fthiessen.de" date="1650542400">- Update bundled wmidump to latest upstream 2021-10-11:
  * Add support for '//' comments
  * Print object_id or notify_id based on ACPI_WMI_EVENT flag
    object_id and notify_id member are in one union. It depends on
    ACPI_WMI_EVENT flag which member is stored in this union.
    So print only one member based on ACPI_WMI_EVENT flag.
- Add comment about origin of the wmidump sources</changelog>
  <changelog author="trenn@suse.de" date="1665748800">- This version includes CEDT table support as requested in feature
  (SLE 15 SP5):
  jsc#PED-201</changelog>
  <changelog author="rpm@fthiessen.de" date="1672142400">- Update to version 20221020:
  * Added support for FFH (Fixed Function Hardware) Operation Region
    special context data.
  * Reverted commit "executer/exsystem: Warn about sleeps greater than 10 ms."
    Due to user complaints about valid sleeps greater than 10ms seen
    in some existing machines -- generating lots of warnings.
  * Do not touch VGA memory when EBDA &lt; 1KiB.
  * Check that EBDA pointer is in valid memory.
  * Completed the existing partial support for the CDAT "table".
  * Updated support for the IORT table - update to version E.e
  * Added CXL 3.0 structures (CXIMS &amp; RDPAS) to the CEDT table
  * iASL: Added CCEL table to both compiler/disassembler.
  * iASL: NHLT table: Fixed compilation of optional undocumented fields
  * iASL: Fix iASL compile error due to ACPI_TDEL_OFFSET.</changelog>
  <changelog author="rpm@fthiessen.de" date="1687348800">- Update to version 20230331
  * Add C Flexible Array support.
  * Add support for 64 bit LoongArch compilation.
  * Add first batch of RISC-V related definitions.
  * hwvalid: Drop port I/O validation.
  * iASL: Added full macro support in the preprocessor.
  * Add support for AMD Secure Processor Table (ASPT) version 1.
  * Add support for Arm's MPAM ACPI table version 2.
  * ACPI 6.5: MADT: add support for trace buffer extension in GICC.
  * Headers: Delete bogus NodeArray array of pointers from AEST table.</changelog>
  <changelog author="trenn@suse.de" date="1707739200">- Update to version 20230628
  * IASL/RHCT: Enable dumping and compiling newly added nodes
  * RHCT: Add flags, CMO and MMU nodes
  * MADT: Add dump and compile support for RISC-V APICs
  * MADT: Add RISC-V external interrupt controllers
  * Add AML_NO_OPERAND_RESOLVE flag to Timer
  * Add a define for size of acpi_srat_generic_affinity DeviceHandle
  * Slightly simplify an error message in acpi_ds_result_push()
  * Add port definitions for CDAT SSLBIS
  * Fix misspelled CDAT DSMAS define
  * Add interrupt command to acpiexec
  * Detect GED device and keep track of _EVT
  * ACPICA: Modify ACPI_STATE_COMMON
  * Manually revert after resolving conflicts PR #757 commit 32d875705c8ee8f99fd8b78dbed48633486a7640
  * fix for conflict macro definition on zephyr interface
  * Fix ACPI_FUNCTION_ENTRY()
  * Revert "Fixes for ACPI_FLEX_ARRAY, to eliminate warnings on MSVC"
  * Revert "Events: Use spaces instead of tabs to fix indentation"
  * Add support for _DSC as per ACPI 6.5
  * exserial.c: replace ternary operator with ACPI_MIN()
  * ACPICA: Modify ACPI_STATE_COMMON
  * Fix GCC 12 dangling-pointer warning
  * build: added module name for zephyr build system
  * Revert "Move ACPI_FUNCTION_ENTRY to function entry"
  * Move ACPI_FUNCTION_ENTRY to function entry
  * iASL/MADT: Add dump and compile support for LoongArch APICs
  * iasl: check Offset before Subtable dereference</changelog>
  <changelog author="trenn@suse.de" date="1711108800">- Use local source, there currently is no fixed tarball URL
- Use AslGbl_Deterministic by default FALSE to not compile in Date/Time
  into ACPI table compilings
- Update to version 20240321
  * Get rid of MSVC warnings that arise actually due to GCC's new dangling pointer warning and also tGCC's blindspot to work with nested named structs/unions resulting in breaking of ACPI event-handling
  * events/evgpeinit: don't forget to increment registered GPE count
  * events/evxfgpe: correctly clear GPE_AUTO_ENABLED in AcpiSetupGpeForWake
  * Fix Capabilities[1024] mess
  * Update actbl2.h to get rid of the MSVC error C2233
  * Fix CXL 3.0 structure (RDPAS) in the CEDT table
  * ACPICA: debugger: check status of AcpiEvaluateObject in AcpiDbWalkForFields
  * SRAT: Add dump and compiler support for RINTC affinity structure
  * SRAT: Add RISC-V RINTC affinity structure
  * Modify ACPI_OBJECT_COMMON_HEADER
  * Fix spelling and typos: Clean up the fix for Issue #900
  * Clean up the fix for Issue #900
  * tests/common: use CopyObject instead of Store for NRMT
  * acgcc: Fix C++ issue with ACPI_FLEX_ARRAY
  * MADT: Add new MADT GICC/GICR/ITS non-coherent flags handling
  * MADT: Add GICC online capable bit handling
  * Fix various spelling mistakes in text files and code comments
  * acpisrc: Add identifiers for the NHLT table
  * NHLT: Reintroduce types the table consists of
  * AdDisassemblerHeader: omit timestamp for deterministic output
  * Fix build indeterminism for asm compiler header.
  * os_specific: zephyr: update AcpiOsGetTimer with arch specific timer
  * osal: zephyr: Fix write access for mapped memory
  * osal: zephyr: Fix AcpiOsPrintf implementation
  * Fix issue #896
  * Attempt 1 to fix issue #900
  * ACPI 6.5: RAS2: Add support for RAS2 table
  * Add port definitions for CDAT SSLBIS
  * dmtbdump2: remove redundant failure check on Status
  * dmtbdump: remove duplicated code for both paths of an if statement
  * NHLT: Drop preliminary support
  * Revert "NHLT: Declare device configuration types"
  * os_specific: zephyr: add generic platform support
  * Fix segfault when error-checking mixed table types
  * actbl1.h: Add EINJ CXL error types
  * Get rid of // style comments
  * NHLT: Declare device configuration types
  * dmtbinfo2.c: RISC-V: Remove redundant Flags print</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1725364800">- Update to version 20240827
  * Fix the PHAT table working: ensure that the PHAT firmware health
    record offset works correctly, fix various sub-table offsets,
    prevent segmentation faults when encountering invalid device paths.
  * Fix the optional table 4-byte signature.
  * Correct the dumping of SLIC and DBG2 tables.
  * Add support for QWordPCC and DWordPCC
  * Fix the integer to hex string conversions
  * Detecting FACS in reduced HW mode and allowing setting waking
    vector thereby waking up from S3 state
  * Fixing issues with crossing page boundaries when mapping operation regions
  * Update the support for IORT, HMAT, MPAM, AEST, CEDT, SPCR etc. tables
  * Fix multiple issues with table parsing, compilation and disassembly
  * Allow for more flexibility in _DSM usage.</changelog>
  <changelog author="bwiedemann@suse.com" date="1726833600">- Fix acpica-no-compiletime.patch to omit build date from xen .h files
  (boo#1230856, boo#1047218)</changelog>
  <changelog author="trenn@suse.de" date="1728907200">- Update to 20240927
  * Fix the acpixf.h file which caused issues for the last release
    (before this) 20240827
  * Fix the pointer offset for the SLIC table</changelog>
</package>
<package pkgid="3a66789f797ce1df7ee24a46cb4b3ad1be4086ffd6f40716ff996915b73c695b4cf2220e672f8029f1d7782d55d36d2968f38e7a95f6f554fee06d70875ebbfd" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="160000.2.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build.</changelog>
  <changelog author="idonmez@suse.com" date="1538395200">- Run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1538481600">- Make doc noarch and stop requiring packages that are not
  technically needed.</changelog>
  <changelog author="scabrero@suse.de" date="1574251200">- Update to version 0.9.0+git.0.1b15280:
  * Release version 0.9.0
  * doc: add missing samba_data_tool_path.xml(.in) to EXTRA_DIST
  * doc: explain how to force password reset
  * Do not use arcfour-hmac-md5 when discovering the salt
  * Fix for issue found by Coverity
  * adenroll: use only enctypes permitted by Kerberos config
  * adenroll: add adcli_enroll_get_permitted_keytab_enctypes with tests
  * adconn: add adcli_conn_set_krb5_context
  * adenroll: make sure only allowed enctypes are used in FIPS mode
  * tools: computer - remove errx from parse_option</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616414400">- update to 0.9.1:
  * tools: add show-computer command
  * add description option to join and update
  * Use GSS-SPNEGO if available
  * add option use-ldaps
  * tools: disable SSSD's locator plugin
  * doc: explain required AD permissions
  * computer: add create-msa sub-command
  * Add account-disable option
  * fix coredump in discovery (boo#1183870)
- use upstream bootstrapped tarball
- add upstream signing key and validate source signature
- use strict build
- run tests</changelog>
  <changelog author="scabrero@suse.de" date="1628856000">- Fix build with glibc 2.34; (bsc#1189080); Add patch
  0001-configure-check-for-ns_get16-and-ns_get32-as-well.patch</changelog>
  <changelog author="elimat@opensuse.org" date="1672315200">- Update to 0.9.2:
  * adenroll: set password via LDAP instead Kerberos
  * disco: fall back to LDAPS if CLDAP ping was not successful
  * tools: replace getpass()
  * adenroll: write SID before secret to Samba's db
  * doc: add clarification to add-member command on doc/adcli.xml
  * tools: Set umask before calling mkdtemp()
  * Avoid undefined behaviour in short option parsing
  * library: include endian.h for le32toh
  * man: Fix typos and use consistent upper case for some keywords
  * doc: avoid gnu-make specific usage of $&lt;
  * configure: check for ns_get16 and ns_get32 as well
  * Add setattr and delattr options
  * entry: add passwd-user sub-command
  * Add dont-expire-password option
  * build: add --with-vendor-error-message configure option
- Remove patch fixed upstream: 0001-configure-check-for-ns_get16-and-ns_get32-as-well.patch
- Update signing key for source validation</changelog>
</package>
<package pkgid="c57d19292d193eed492f3b0b30f9f1c241b0ea587550da048a767871e5d24830f4c6d9f10d2733a9aae75096126dd1e5c3bcf6b86a3ea848d5ba695e566dac40" name="afterburn" arch="x86_64">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="160000.1.1"/>
  <changelog author="rrahl0@opensuse.org" date="1722859200">- enable upstream tests</changelog>
  <changelog author="rrahl0@opensuse.org" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791 AKA bsc#1244199
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416 AKA bsc#1242665
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
    this includes an update of the dependency idna, which
    fixes CVE-2024-12224 AKA bsc#1243850
  * packit: add initial support</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1759147200">- Add bugzilla references to past changelog</changelog>
</package>
<package pkgid="e04e8dd4aa1c3b96117f1e801dc6b5a5e80a4d2d96ec396fe52e9f00261519506316c507b879f21c9b593148ef7d1d601791d00ce82344f3d39047afe047d7c3" name="afterburn-dracut" arch="noarch">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="160000.1.1"/>
  <changelog author="rrahl0@opensuse.org" date="1722859200">- enable upstream tests</changelog>
  <changelog author="rrahl0@opensuse.org" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791 AKA bsc#1244199
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416 AKA bsc#1242665
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
    this includes an update of the dependency idna, which
    fixes CVE-2024-12224 AKA bsc#1243850
  * packit: add initial support</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1759147200">- Add bugzilla references to past changelog</changelog>
</package>
<package pkgid="736f7a01d85d090de64e95187c254d90cd31b6d0643bed565c131346616ccfeb343f7ea1cc3eb5e7f31e556411eb1374527b4d2a9ac0d4c8aef5711cfe5e9c61" name="aide" arch="x86_64">
  <version epoch="0" ver="0.18.8" rel="160000.2.2"/>
  <changelog author="info@paolostivanin.com" date="1648555200">- Update to 0.17.4:
  * fix CVE-2021-45417: precalculate buffer size in base64 functions (bsc#1194735)</changelog>
  <changelog author="paolo.perego@suse.com" date="1677153600">- Update to 0.18
- Rename aide-0.17.3-as-needed.patch to and rebase aide-0.18-as-needed.patch
- Added autoconf and autoconf-archive as building dependencies due to an error
  when reconfiguring the source
- Rebase aide-xattr-in-libc.patch</changelog>
  <changelog author="dmueller@suse.com" date="1679054400">- update to 0.18.1:
  * Fix handling of empty growing files
  * Fix segfault when using --dry-init
  * Update README
- switch to pcre2</changelog>
  <changelog author="andrea.manzini@suse.com" date="1685966400">- Update to 0.18.3:
  * Handle readlink() errors
- Update to 0.18.2:
  * Add warning if rules contain not compiled-in attributes
  * Add missing lock for tree operations during file system scan</changelog>
  <changelog author="andrea.manzini@suse.com" date="1685966401">- switched service macros from %systemd_* to %service_*
  according to documentation at https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Registering_unit_files_in_install_scripts</changelog>
  <changelog author="info@paolostivanin.com" date="1688126400">- Update to 0.18.4:
  * Fix handling of extended attributes on symlinks
  * Add missing ')' to log message
  * Fix static linking of the aide binary
  * Don't require database_out for --dry-init
  * Remove strerror() calls from thread log messages</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 0.18.5:
  * Fix child directory processing on equal match</changelog>
  <changelog author="info@paolostivanin.com" date="1691064000">- Update to 0.18.6:
  * Fix double free() during report generation
  * Improve handling of ACL errors</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="aj@ajaissle.de" date="1723377600">-  Update to 0.18.8:
  * Fix concurrent reading of extended attributes (xattrs)
  * Raise warning if both input databases are the same
-  Update to 0.18.7:
  * Add missing library CFLAGS
  * Fix typo in aide.conf manual page
  * Fix 64-bit time_t on 32-bit architectures
  * Fix debug logging for returned attributes
  * Fix condition for error message of failing to open gzipped files
- rebased aide-0.18-as-needed.patch</changelog>
</package>
<package pkgid="a2f8a7afafb2aa254a12012004593a64b30e89aace542111529bb77a957c590692dfcbdcd0857576ac359afef7195da445654b69c63ada6356aa80fb1e461244" name="alts" arch="x86_64">
  <version epoch="0" ver="1.2+30.a5431e9" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1623240000">- Version v1.0.0:
  * Prefix symbols with libalts_ to avoid symbol clashes
  * Add symbol visibility and versioning
  * Decamelize public symbols and rename</changelog>
  <changelog author="adam.majer@suse.de" date="1624276800">- Update to version v1.1:
  * docs: Add broken manpage
  * tests: unit tests configs
  * tests: fix memory leak during tests
  * list_binaries: initialize pointer that is later used in free
  * libalts_exec_default() sets errno on not found</changelog>
  <changelog author="adam.majer@suse.de" date="1631534400">- Update to version v1.2:
  * Add config option=KeepArgv0 to keep original argument during
    exec() call</changelog>
  <changelog author="jengelh@inai.de" date="1631620800">- Use noun phrase for the summary; fix grammar in description.</changelog>
  <changelog author="adam.majer@suse.de" date="1631620801">- Update to version v1.2+3.b848aad:
  * tests: fix array overrun in unit tests</changelog>
  <changelog author="dmueller@suse.com" date="1668427200">- switch to a manual service rather than a buildtime tar service
  which introduces a bootstrap cycle between python and tar_scm</changelog>
  <changelog author="bogdan.lezhepekov@suse.com" date="1682424000">- Update to version v1.2+30.a5431e9: (bsc#1191692)
  * Change license to less restrictive Apache 2.0
  * doc: fixing a few typos
  * Adds option to display target executable only
  * Makefiles and cmake: rework for reproducible build
  * Improve Makefile
  * libalts_exec_default: fix memory leak on error condition
  * libalts_write_binary_configured_priority_to_file: fix memory leak
  * saveConfigData(): fix file descriptor leak in while loop error case
  * loadConfigData(): use goto exit label to prevent file descriptor leaks
  * libalts_load_available_binaries: use goto err: label to fix leaks
  * loadAlternativeForBinary: goto-assisted error handling to avoid leaks
  * checkGroupConsistencies(): explicitly ignore unused `flags`
  * lib: refactor error handling of findAltConfig()
  * utils: fix possible memory leaks on error conditions
  * docs: fix some typos and grammar
  * Update README.md
  * lib: generally open[at] with O_CLOEXEC
  * Fix logic in options parser
  * Add basic Makefile for buidling without cmake
  * Added description for options=KeepArgv0
  * cmake: Express the dependency on CUnit correctly for building tests
  * cmake: Build and install CMake and PkgConfig files
  * cmake: Fix setup of shared linker flags
  * config.h: Fix the version to match the current latest tag</changelog>
</package>
<package pkgid="43beacef12ba0ff769c1d91a93e9ac3bcb0c6b5eefdecd2fa6ad4d051d0e6ffab5edc36fe515e814856b0f1337015785af45574c15050fb9cafd1a660d9d14aa" name="attr" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- remove man5/attr.5, it is now part of man-pages
  http://lwn.net/Articles/643559/</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Remove obsolete Obsolete lines
- Drop static subpackage, nothing in TW depends on it Deb/RH do not
  provide it either
- Rely on simple upstream make install target
- Run tests
- Update to 2.4.48:
  * Provide default xattr.conf
  * Update buildsystem to reflect current autotools state
  * Small test updates
  * Remove various deprecated sections like attr/attr.h
- Update keyring, Mike Frysinger released this version
- Add patch to have tests working with newer perls:
  * 0001-attr-2.4.48-test-suite-perl.patch</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Replace unspecific boilerplate summary from years ago.</changelog>
  <changelog author="schwab@suse.de" date="1536148800">- Add libattr-devel-static subpackage</changelog>
  <changelog author="dmueller@suse.com" date="1536667200">- update description for libattr-devel-static to make it less
  boilerplate</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.5.1:
  * Fix libtool library versioning regression
  * Update po files and German translation
  * getfattr: Add --one-file-system option
  * Move struct stat into struct walk_tree_args
  * Move list of open directories into struct walk_tree_args
  * Move walk_tree_rec arguments into a separate struct
  * xattr.conf: Indicate afs metadata xattrs should be skipped when copying
  * Fix typos in manual pages
  * getfattr.1: by default only user namespace attributes are dumped
  * Enable large-file support on systems that do not enable it by default
  * test: escape left brace in a regex in test/run
- drop 0001-attr-2.4.48-test-suite-perl.patch (upstream)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1707825600">- update to 2.5.2:
  * attr: eliminate a dead store in attr_copy_action()
  * libattr: Set symbol versions for legacy syscalls via attribute
    or asm
  * exports: use LGPL for library code
  * documentation updates
  * translation updates (Polish, Dutch, Gregorian, French)
  * build system updates</changelog>
</package>
<package pkgid="ae810fdde7b9a45d6cdfaea47b96881791bcead84dc36dc6d6365fe4656abd04ab80102ceeb04640bd02d7bc7ec093a62f5fbf76e66e35cbe124a5421333fbd1" name="audit" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Move rules-related files into new subpackage `audit-rules':
  * Files moved:
  - /sbin/auditctl, /sbin/augenrules,
  /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules}
  - manpages for auditctl, augenrules, and audit.rules
  - /etc/audit is now owned by `audit-rules' as well
  * Add new file /usr/lib/systemd/system/audit-rules.service
  * Remove in-house create-augenrules-service.patch that generated
    augenrules.service systemd unit service
  * Remove ownership of /usr/share/audit
  * Create /usr/share/audit-rules directory on %install
  * Remove audit-userspace-517-compat.patch (fixed upstream)
  * Remove libev-werror.patch (fixed upstream)
  * Remove audit-allow-manual-stop.patch (fixed upstream)
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Remove autrace and auvirt references (upstream)
  * Replace README with README.md
- Drop `--enable-systemd' from %configure as SysV-style scripts
  aren't supported in upstream since
  113ae191758c ("Drop support for SysVinit")</changelog>
  <changelog author="ematsumiya@suse.com" date="1727352000">- Update audit-secondary.spec:
  * Add "Requires: audit-rules" for audit package
  * Remove preun/postun handling of audit-rules.service</changelog>
  <changelog author="ematsumiya@suse.com" date="1727784000">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1727870400">- Readd audit-allow-manual-stop.patch (removed by mistake)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec (bsc#1231236):
  * add requirement for 'awk' package
  * move some %post logic from audit to audit-rules</changelog>
</package>
<package pkgid="3e1dbb42ca28201dea0544914496a0776fc14904c9099ed507978f499bd5c16add5624df3ab03d3050b512e78c670de8e3c520840d3eede1e0c4550303b33bba" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Move rules-related files into new subpackage `audit-rules':
  * Files moved:
  - /sbin/auditctl, /sbin/augenrules,
  /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules}
  - manpages for auditctl, augenrules, and audit.rules
  - /etc/audit is now owned by `audit-rules' as well
  * Add new file /usr/lib/systemd/system/audit-rules.service
  * Remove in-house create-augenrules-service.patch that generated
    augenrules.service systemd unit service
  * Remove ownership of /usr/share/audit
  * Create /usr/share/audit-rules directory on %install
  * Remove audit-userspace-517-compat.patch (fixed upstream)
  * Remove libev-werror.patch (fixed upstream)
  * Remove audit-allow-manual-stop.patch (fixed upstream)
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Remove autrace and auvirt references (upstream)
  * Replace README with README.md
- Drop `--enable-systemd' from %configure as SysV-style scripts
  aren't supported in upstream since
  113ae191758c ("Drop support for SysVinit")</changelog>
  <changelog author="ematsumiya@suse.com" date="1727352000">- Update audit-secondary.spec:
  * Add "Requires: audit-rules" for audit package
  * Remove preun/postun handling of audit-rules.service</changelog>
  <changelog author="ematsumiya@suse.com" date="1727784000">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1727870400">- Readd audit-allow-manual-stop.patch (removed by mistake)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec (bsc#1231236):
  * add requirement for 'awk' package
  * move some %post logic from audit to audit-rules</changelog>
</package>
<package pkgid="eb84f85e97fbcc29186edfa2fe2e9c8e8b0e239a0efac5f9ef418b5f7419a6bc8a45c2028c4449f67da3d4a273a4c6aea9b7d2b0ed077314d4dd1de5d91fd9c8" name="audit-rules" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Move rules-related files into new subpackage `audit-rules':
  * Files moved:
  - /sbin/auditctl, /sbin/augenrules,
  /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules}
  - manpages for auditctl, augenrules, and audit.rules
  - /etc/audit is now owned by `audit-rules' as well
  * Add new file /usr/lib/systemd/system/audit-rules.service
  * Remove in-house create-augenrules-service.patch that generated
    augenrules.service systemd unit service
  * Remove ownership of /usr/share/audit
  * Create /usr/share/audit-rules directory on %install
  * Remove audit-userspace-517-compat.patch (fixed upstream)
  * Remove libev-werror.patch (fixed upstream)
  * Remove audit-allow-manual-stop.patch (fixed upstream)
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Remove autrace and auvirt references (upstream)
  * Replace README with README.md
- Drop `--enable-systemd' from %configure as SysV-style scripts
  aren't supported in upstream since
  113ae191758c ("Drop support for SysVinit")</changelog>
  <changelog author="ematsumiya@suse.com" date="1727352000">- Update audit-secondary.spec:
  * Add "Requires: audit-rules" for audit package
  * Remove preun/postun handling of audit-rules.service</changelog>
  <changelog author="ematsumiya@suse.com" date="1727784000">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1727870400">- Readd audit-allow-manual-stop.patch (removed by mistake)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec (bsc#1231236):
  * add requirement for 'awk' package
  * move some %post logic from audit to audit-rules</changelog>
</package>
<package pkgid="cefbaf32188d0977efd55ca890fb4b9eaeb2f451faaa89f2f99a7c61679a56ec0bc6995342100be0b319886b61221225a1505b971185f41e7e96f53bda019a23" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="b4905f44b4a7555c9efc78adb59802ec26701e837d8d407eb11709bad31097bec083e404bbea60cb5c758b16ca24c20a6daa4eaebfd2a41cda59f66d84c7d5ba" name="augeas-lenses" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="b9687c9f11a2133a2afda1bbc5d97f25d56f4bdc1f0c09eab33c16cd6783d4ab41915e401baafc1e8982f155dba60661ab1b7cd34e9d3b7af770719a8f502297" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="7c2076b02351cf6eabc62b185e86468be392fad08db9e8b45f7a1645a7a39b9dc04251483276713330f08f796be7922702102fed306cc53c2ab04a91447e9b58" name="babeltrace" arch="x86_64">
  <version epoch="0" ver="1.5.8" rel="160000.2.2"/>
  <changelog author="sor.alexei@meowr.ru" date="1509710400">- Disable static library build.
- Enable Python 3 bindings build.
- Remove explicit glib2-devel requirement for the devel package: is
  autodetected already.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 1.5.4:
  * Use signed accessors for clock offsets.
  * Fix a signedness error in python complements.
  * Handle packet_seek errors.
  * Prevent calling adding the same trace recursively.
  * Make sure we have all the metadata streams before adding new
    traces.
  * Add missing debugging information in the live plugin.
  * Set stream id in HUP case.
  * Use list rather than ptr array for trace streams.
  * Fix a leak of streams.
  * Handle 0 session case in ask new streams.
  * Break loop on getting metadata error.
  * Return error on ask_new_stream when should quit.
  * Don't access missing ctf trace when getting metadata.
  * Fix lttng-live discarded event count after inactivity.
  * Fix timegm compat on Solaris.
  * Fix Python bindings when building with PIE hardening.
  * lttng-live: Print discarded event and packet lost warnings on
    stderr.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 1.5.5:
  * Propagate error from packet_seek in case of truncated packet.
  * Fix: report truncated files while reading.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 1.5.6:
  * Fix: remove left-over debug logging statement.
  * Use trace-&gt;trace_id in check to remove trace from bt_ctx.
  * Fix: missing initializer braces warning.
  * Fix: zero out URL parsing array before use and ensure proper
    error reporting.</changelog>
  <changelog author="azouhr@opensuse.org" date="1563192000">- add s390x in ExclusiveArch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 1.5.8 (changes since 1.5.6):
  * Cleanup: bitfields: streamline use of underscores.
  * Fix: bitfield: shift undefined/implementation defined
    behaviours.
  * Fix: array and sequence field's 'elems' members can be left NULL.
  * Fix: invalid alignment of enumeration fields.
  * Fix: lttng-live format: do not error out on empty streams
    hang up.
  * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
  * Fix: lib/iterator.c: unbalanced ctx put (leak).
  * Fix: lttng-live: lttng_live_open_trace_read memory leak.
  * Fix: trace-collection: trace clock use after free.
  * Fix: lttng-live: use-after-free in get_next_index().
  * Do not use diagnostic pragma when GCC version is lower than
    4.6.0.
  * Missing define when not building with gcc.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="schwab@suse.de" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
  <changelog author="dmueller@suse.com" date="1639396800">- reenable babeltrace on armv6/v7 (switch to excludearch)</changelog>
  <changelog author="dimstar@opensuse.org" date="1738152000">- Add explicit python3-setuptools BuildRequires: needed when
  building with Python 3.13.</changelog>
</package>
<package pkgid="4cb63c5c2431b6eb2805cfdd4e083b44e648c10fb55d558a5dbc560ddf6200e3c4ec3f11fd8fe7f4a020c61b3482b1b20af3d6264e7f5cb6abe253c1327d99f3" name="bash" arch="x86_64">
  <version epoch="0" ver="5.2.37" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1705406400">- Add upstream patches
  * bash52-022
    It's possible for readline to try to zero out a line that's not
    null-terminated, leading to a memory fault.
  * bash52-023
    Running `local -' multiple times in a shell function would
    overwrite the original saved set of options.
  * bash52-024
    Fix bug where associative array compound assignment would not
    expand tildes in values.
  * bash52-025
    Make sure a subshell checks for and handles any terminating
    signals before exiting (which might have arrived after the
    command completed) so the parent and any EXIT trap will see
    the correct value for $?.</changelog>
  <changelog author="werner@suse.de" date="1709121600">- Harden bash to be compiled with gcc 14 (boo#1220564)
  * Modify patch bash-4.2-nscdunmap.dif to include &lt;sys/mman.h&gt;
  * Port bash-5.2.dif to the former change
  * Add patch bash-5.2-gcc14.patch</changelog>
  <changelog author="werner@suse.de" date="1711368000">- Help dependcy resolver to identify package split done with bash-sh</changelog>
  <changelog author="werner@suse.de" date="1724068800">- Add upstream patches
  * bash52-027
    The configure test for the presence of strtoimax(3) is inverted.
  * bash52-028
    A DEBUG trap in an asynchronous process can steal the controlling terminal
    away from the calling shell, causing it to exit.
  * bash52-030
    `wait -n' can fail to return some jobs if they exit due to signals the shell
    does not report to the user.
  * bash52-031
    There is a memory leak in the code that implements the optimized $(&lt;file)
    expansion for some code paths.
  * bash52-032
    When printing functions containing coprocesses, the displayed coproc command
    has the word COPROC inserted unconditionally, resulting in function bodies
    that cannot be re-read as input.</changelog>
  <changelog author="werner@suse.de" date="1727265600">- Add upstream patches
  * bash52-037
    Fix the case where text to be completed from the line buffer (quoted) is
    compared to the common prefix of the possible matches (unquoted) and the
    quoting makes the former appear to be longer than the latter. Readline
    assumes the match doesn't add any characters to the word and doesn't display
    multiple matches.
  * bash52-036
    When readline is accumulating bytes until it reads a complete multibyte
    character, reading a byte that makes the multibyte character invalid can
    result in discarding the bytes in the partial character.
  * bash52-035
    There are systems that supply one of select or pselect, but not both.
  * bash52-034
    If we parse a compound assignment during an alias expansion, it's possible
    to have the current input string popped out from underneath the parse. In
    this case, we should not restore the input we were using when we began to
    parse the compound assignment.
  * bash52-033
    A typo in the autoconf test for strtold causes false negatives for strtold
    being available and working when compiled with gcc-14.
- Port patch bash-3.2-printf.patch to fit change in bash52-033</changelog>
  <changelog author="werner@suse.de" date="1734350400">- Remove bash-4.3-winch.dif as this is the (current) default</changelog>
  <changelog author="heitor@opensuse.org" date="1735387200">- Move (/etc/skel/.bashrc) and (/etc/skel/.profile) to (/usr/etc/skel/).</changelog>
  <changelog author="werner@suse.de" date="1737720000">- As in bash-sh there is only a symbolic link avoid to require a version</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Explicitly specify that the build recipe needs bash</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="38d09b42b98851f7e05725eb393ad8a93f81566266bcb900a0dabbc5ea5bda5d58d61c5b89afc90176c83619d7391ab59de744ce85dec8235d4aeaf94e3a1eee" name="bash-completion" arch="noarch">
  <version epoch="0" ver="2.12.0" rel="160000.3.1"/>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
  <changelog author="otto.hollmann@suse.com" date="1658836800">- Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791)
  * List all options for `curl --&lt;TAB&gt;`</changelog>
  <changelog author="gmbr3@opensuse.org" date="1680436800">- Move cmake config files to devel</changelog>
  <changelog author="werner@suse.de" date="1692273600">- Modify patches
  * ls-completion-boo889319.patch
  * rm-completion-smart-boo958462.patch
  to avoid skipping spaces after last word on command line (boo#1210974)
- Add patch fix_quote_readline_by_ref.patch
  * Do not escape leading ~ nor backslash and avoid empty quoting</changelog>
  <changelog author="werner@suse.de" date="1708689600">- Update to version 2.12.0:
  Features
  * _comp_backup_glob: add ucf generated backup files (351be1c)
  * _comp_backup_glob: require dash in dpkg backup files (59a57f9)
  * comp_compgen{filedir,set}: define exit status (7920c9d)
  * _comp_compgen_commands: align return value with other compgens (9d3362e)
  * _comp_compgen_commands: auto set -o filenames when appropriate (4d4839e)
  * _comp_compgen_commands: include dirs (b9c7b5d)
  * _comp_compgen_known_hosts: return 2 on usage error (43bb8f0)
  * _comp_compgen: support -i cmd and -x cmd (39cc200)
  * _comp_compgen: support -U var to unlocal var (b603535)
  * _comp_compgen: support option -C (6b3dfa5)
  * _comp_expand_glob: fail when no paths are generated (6b0a466)
  * _comp_get_fist_arg: support "-o GLOB" to skip optargs (0f14cc0)
  * _ip_addresses: auto ltrim colon completions when appropriate (ccdf953)
  * add _comp_compgen_split (542bf73)
  * add _comp_locate_first_arg (0384bd5)
  * airflow: add fallback 3rd party completion loader (bf5550b)
  * ansible:* add fallback 3rd party completion loader (5f8384e)
  * apt-get: prefer apt-cache in same dir as command (a731bfd)
  * b2sum: new completion (cd985df)
  * bash_completion: add function _comp_compgen_ltrim_colon (ce5889b)
  * black,blackd: add fallback 3rd party completion loader (47a1f05)
  * carton: support exec command completions (0eb3a21)
  * chezmoi: add 3rd-party completion loader (cobra) (31baa69)
  * conda: add 3rd-party completion loader (argcomplete) (c0f5ba2)
  * crc: add 3rd-party completion loader (cobra) (f10866e)
  * cz: add fallback 3rd party completion loader (b7ba70e)
  * dot: support filename extension .gv (be0010e)
  * dprint: add fallback 3rd party completion loader (e201e0e)
  * eog: add missing extension .heif (9e4a48f)
  * eog: associate with *.avif and *.webp (#1005) (f1c04b8)
  * eog: associate with *.heic and *.jxl (20c9cea)
  * eog: associate with *.pbm (#1006) (5472cc1)
  * feh: associate with y4m and heic/heif/avif (e252c73)
  * feh: deassociate with avci/avcs (af46f34)
  * flask: add fallback 3rd party completion loader (3e0d00d)
  * hash: new completion (#1013) (4d0bffb)
  * httpx: add fallback 3rd party completion loader (3f4861c)
  * ip: Add completion for monitor subcommand (fa696e6)
  * jungle: add fallback 3rd-party completion loader (c69845a)
  * keyring: add fallback 3rd party completion loader (8082602)
  * kontena: add fallback 3rd-party completion loader (5eef0ce)
  * lefthook: add fallback 3rd party completion loader (dc9650e)
  * mailman: prefer list_lists in same dir as command (a46ccf1)
  * mysql: prefer mysqlshow from same dir (643886c)
  * no empty command completion if no_empty_cmd_completion is on (faab292)
  * npm: add fallback 3rd-party completion loader (f1c085c)
  * nvm: add fallback 3rd-party completion loader (dea7e1d)
  * oc: add 3rd-party completion loader (cobra) (26b5f09)
  * pip{,3}: add fallback 3rd-party completion loader (e3cbfba)
  * pipenv: add fallback 3rd party completion loader (#1020) (6ecf5bd)
  * pytest: complete new --import-mode value (#1021) (2d636a3)
  * rtx: add fallback 3rd party completion loader (0628e22)
  * scp,sftp: prefer ssh from same dir to resolve options etc (d55f5e6)
  * ssh-copy-id,ssh-keygen: prefer ssh from same dir (5c1d270)
  * ssh-inscribe: add fallback 3rd party completion loader (7f2c197)
  * ssh: complete RequiredRSASize (#1064) (de15205)
  * tkn-pac: add 3rd-party completion loader (cobra) (d0f2604)
  * tkn: add 3rd-party completion loader (cobra) (161fc5d)
  * xrandr: comma separated --setmonitor third argument (8a76f3d)
  Bug Fixes
  * __load_completion: quoted compspec for variants (#1008) (0a2443e)
  * _cd_devices: /dev/cdc-* CDC device false positives (5250728)
  * _comp__init_set_up_service_completions: work around failglob (2529d40)
  * comp{first_arg,count_args}: count - as argument (e23a79e)
  * comp{first_arg,count_args}: count any arguments after -- (9bfd760)
  * _comp_command_offset: Support complete -C (80450ca)
  * _comp_compgen_fstypes: avoid unexpected expansions (a856d81)
  * _comp_compgen_help: allow dots to connect names in longopt (79dadfc)
  * _comp_compgen_known_hosts: work around bash-4.2 nounset (d2860cb)
  * _comp_compgen_split: work around nounset (f488f96)
  * _comp_compgen_term: replace completions by default (d3696a3)
  * _comp_compgen_usergroup: avoid directly overwriting COMPREPLY (d380498)
  * _comp_compgen: do not inherit -a for explicitly specified var (3c20766)
  * _comp_compgen: explicitly exclude cur from the target variable (5fe98f3)
  * _comp_count_args: check optarg correctly (874c503)
  * _comp_count_args: exclude &lt;&gt;&amp; from wordbreaks as _comp_initialize (521d2bb)
  * _comp_count_args: ignore empty $3 (76eea74)
  * _comp_count_args: perform optarg check also on $3 (21d3122)
  * _comp_count_args: skip reassembling cword and words (3127703)
  * _comp_delimited: treat delimiter as a fixed string (571a0f7)
  * _comp_deprecate_func: argument order in usage error message (597f62f)
  * _comp_get_words: empty prev if unavailable (localvar_inherit) (d8b8eef)
  * _comp_initialize: fix completions of redirections without space (da16bf6)
  * _comp_initialize: protect against "localvar_inherit" (0cc8d83)
  * _comp_split,_comp_compgen: strip periods from error message (b3b6a7c)
  * _comp_split: update error message for the correct options (3c4a89c)
  * _comp_sysvdirs: work around nounset (da26178)
  * _filedir_xspec: clean up unused variable tmp (67f1189)
  * _get_cword_at_cursor,cvs: quote array length (201239c)
  * _get_first_arg: remove invalid doccomment (eb40f56)
  * _known_hosts: use array for options (work around SC2178,SC2179) (743d0a9)
  * _mock,rpm: avoid icase flag s/reg/rep/i of GNU sed (33c18ce)
  * _service: quote word (c2d7fb7)
  * _slackpkg: do not scan after cword (ecd1384)
  * 7z: remove redundant printf '%s\n' "..." (20c2e32)
  * ant: work around custom IFS (584e567)
  * apt-cache: check all the words (84cfeda)
  * aptitude: do not use non-POSIX BRE \w (cd8c870)
  * aspell: use _comp_expand_glob against unexpected splitting (58d5176)
  * bash_completion: remove some unnecessary -a to _comp_compgen (636bb7c)
  * bts: update functions to generators and fix variable conflicts (7d2867c)
  * carton: remove a branch never happening (cd063f9)
  * chgrp: fix typo _comp_compgen{d  =&amp;gt; _}filedir (#1063) (4c98ce5)
  * compat: find compat dir for prefix-install (b6d06bc)
  * completions/*: quote array assignments properly (848aa41)
  * completions/*: scan until cword instead of ${#words[@]}-1 (17e0cc3)
  * completions/*: work around localvar_inherit (e3a871d)
  * curl,koji: use _comp_compgen_help (f37f221)
  * curl,qemu: avoid using POSIX character classes for mawk (d60c530)
  * curl: colon handling for IPv6 address completions (8508d1d)
  * cvs,mutt,pkg_delete: quote prefix to remove for literal matching (533903e)
  * cvs: avoid variable conflicts (0d145c9)
  * dict: nounset error when host/port not set (57191e2)
  * dict: protect splitting from custom IFS (b31fe1e)
  * dict: work around bash-4.2 array nounset (d76dd9e)
  * dict: work around bash-4.3 ${v+"$@"} with custom IFS
  Unable to render expression.
  * ${v+"$@"} with custom IFS (cc21298)
  * dmypy: protect against "localvar_inherit" (768ce65)
  * dpkg-source: filter completions by cur (dbcef6e)
  * filedir: work around bash-4.2 compgen -f -- "''" (c8bb123)
  * fix problems with set -o nounset (9c3e196)
  * gdb: fix regression that fails to generate command names (ca8e240)
  * gdb: remove duplicate candidates (532fc05)
  * gdb: use POSIX-compatible find expression (73938cd)
  * gdb: work around bash 4.4 ${v+"$@"}
  * get_words: work around bash-4.3 connected ${v+"$@"}
  * getent: check noargopts (6143f25)
  * getent: work around localvar_inherit (a12f438)
  * gzip,isort: fix typo _comp_com{gp =&amp;gt; pg}en (462feb3)
  * iperf,puppet: use {m,n} instead of ? and + for POSIX sed (3f0322b)
  * iperf: work around failglob with backslash in bash-5.0 (979f04f)
  * ip: Remove non-existent route completion (3b9ce4d)
  * isql: work around nounset (cb7007a)
  * java,kldload: use _comp_compgen for filename-based mod names (81adc6c)
  * java: localize cur (ec0068d)
  * kcov,povray: quote array expansions to avoid extra processing (215edab)
  * kldload,mplayer,mutt: work around nounset (5330fbe)
  * kldunload: remove unused -X option (35017d2)
  * known_hosts_real: match *.pub instead of *pub (470a644)
  * known_hosts_real: use _comp_expand_glob to avoid failglob (672215e)
  * known_hosts_real: work around nounset (07c619a)
  * lilo,rpcdebug,slapt-{get,src}: work around nounset (cfc3eda)
  * lvm: replace array slices with existing utility (ea49840)
  * lvm: update call to sub-command (30494f7)
  * make: handle multiple short options in skipping arguments (24c80c9)
  * make: typo fix in a code comment (e72cc82)
  * mdadm,update-alternatives: fix leak variable (14cd53b)
  * medusa: filter completions by the current word cur (f3ae706)
  * mr: avoid ${var/pat/$'...'} for compat42 in bash &gt;= 4.3 (b5ae5fa)
  * mr: exactly match command names (800b103)
  * mutt: avoid unexpected word splitting (3183e67)
  * mutt: fix use of regex in the glob context (63924e6)
  * mutt: rewrite ${cur/#!/X} to X${cur:1} against patsub_replacement (6b8f82b)
  * mutt: use _comp_dequote for safe eval (f98379d)
  * openssl: avoid variable conflicts (a31906c)
  * openssl: fix variable i leak (83844b7)
  * perl: fix ineffective condition in an awk script (302dc52)
  * perl: helper call regression from 01611dd (b85263a)
  * pgrep: do not rely on uncontrolled IFS (99e38b2)
  * portinstall: use awk and _comp_compgen to filter completions (791f56c)
  * povray,sbopkg: check filetype (434eb08)
  * povray: process each element against patsub_replacement (0afc2e4)
  * povray: quote an argument properly (0a240bd)
  * ps,ss: avoid extra expansions by -W "$(...)" in _comp_delimited (cb347cb)
  * pydoc: specify -a to _comp_compgen_filedir (34a91e9)
  * pytest: do not filter underscores from parsed option arg choices (ea13241)
  * python: avoid variable conflicts (bef94c3)
  * python: complete filenames for script arguments (#1018) (397a49d)
  * python: complete micropython and pyston script args consistently (5b60ccc)
  * qdbus: remove cur and all the rest arguments (531b751)
  * replace \s with [[:space:]] for POSIX sed/awk (1989ba9)
  * ri: avoid interference on existing COMPREPLY (0a9d931)
  * ri: fix wrongly quoted options to compgen (5248bbf)
  * ri: properly split methods (910a5a0)
  * ri: split classes using _comp_split (c95baa1)
  * ri: work around localvar_inherit (9d6ff68)
  * sbopkg: add ; mandatory before } in POSIX sed (b286d53)
  * sbopkg: work around nounset (9709bdf)
  * scp: nounset mode error on unknown suboption, bash 4.2 (82ca8d9)
  * ssh-copy-id: call ssh, not -copy-id for suboption completion check (473278f)
  * ssh-keygen: call ssh, not -keygen to resolve supported protocols (d569ea2)
  * ssh-keygen: first arg to ssh query for protocol versions (8a0a71e)
  * ssh: avoid variable conflicts (f2df91d)
  * ssh: fix wrong quoting inside compgen -W (febb3b3)
  * ssh: remove -a of generators (55c5c45)
  * ssh: remove unnecessary -a to _comp_compgen (992f28e)
  * ssh: resolve relative ssh_config Include correctly (4ac86e8)
  * ssh: use _comp_compgen for _comp_xfunc_ssh_identityfile (05e70ed)
  * ssh: work around bash-4.2 nounset (4447f83)
  * ssh: work around bash-4.2 nounset (d0695d0)
  * sudo: use $1 (sudo) as $root_command (329ca0e)
  * svcadm: fix ineffective IFS for splitting (1fd456e)
  * svcadm: use the first matching name as command (1870d5e)
  * sysbench: fix extraction of test-name option (cc246a1)
  * timeout: always treat word after duration as command (0d0531b)
  * tipc: remove filtered-out elements (75b36b2)
  * update-alternatives: quote dirname (1205ed1)
  * update-alternatives: suppress error for non-existent directory (adbdab8)
  * update-alternatives: work around localvar_inherit (1d9e19c)
  * upgradepkg: use _comp_compgen for _comp_cmd_upgradepkg (a0973d7)
  * use _comp_compgen_split to avoid extra expansions by -W "$(...)" (49997d0)
  * use _comp_compgen_split to split and filter words (158b8ba)
  * use _comp_compgen_split while keeping filtering by $cur (a00ee19)
  * use _comp_compgen for word list (83f033f)
  * use _comp_split while keeping filtering by $cur (509e642)
  * use compgen -P prefix -W '"${arr[@]}"' against patsub_replacement (45d036a)
  * use XPG4 awk in Solaris (cdd6da9)
  * wol: filter IP addresses by cur (c3505c5)
  * wtf: quote array assignment (44c1d12)
  * xfreerdp: support the new form of the option /list:kbd (d8cadfe)
  * xfunc ssh identityfile: localize change to cur (76b5726)
  Performance Improvements
  * _comp_count_args: skip reinitializing cword and words (29398ef)
  * mutt: return earlier on empty cur (a244587)
  * portinstall: return earlier for -lLo and non-existent file (395e463)
  * vncviewer: set nocasematch inside subshell (5ed0020)
- Delete patches as fixed upstream
  * fix-curl-help-completion-bsc1200791.patch
  * fix_quote_readline_by_ref.patch
- Port patches
  * FOO-dir-completion-boo905348.patch
  * LVM-completion-bsc946875.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion-2.7-unRAR-remove.patch
  * bash-completion.changes
  * bash-completion.spec
  * boo1190929-9af4afd0.patch
  * bsc1199724-modules.patch
  * ls-completion-boo889319.patch
  * qdbus-qt5.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * tar-completion.patch
- Do not apply patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as not known how to port and if this is required</changelog>
  <changelog author="werner@suse.de" date="1708689601">- Remove also patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as the problem is fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1711108800">- Add patch boo1221414-scp.patch
  * Do not replace the asignment of the array COMPREPLY with
    the shell function _comp_compgen_split (boo#1221414)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737374400">- No longer ship completion for secret-tool, which belongs to
  libsecret and newly brings the completions by itself.
  https://github.com/scop/bash-completion/issues/1317</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Drop completions for kmod; kmod&gt;=34 provides its own now.</changelog>
  <changelog author="werner@suse.de" date="1758196800">- Add patch bug1246923.patch
  * Skip colon from device names for ethtool (bsc#1246923)</changelog>
</package>
<package pkgid="4205eeab1c92e903781fe4354764402aae097fee3abc61ef1116bd60bb48da2bb5f038dff5fefd51b2717394a4881b1a2c45a1833c648219c7aec210751149dd" name="bash-sh" arch="noarch">
  <version epoch="0" ver="5.2.37" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1705406400">- Add upstream patches
  * bash52-022
    It's possible for readline to try to zero out a line that's not
    null-terminated, leading to a memory fault.
  * bash52-023
    Running `local -' multiple times in a shell function would
    overwrite the original saved set of options.
  * bash52-024
    Fix bug where associative array compound assignment would not
    expand tildes in values.
  * bash52-025
    Make sure a subshell checks for and handles any terminating
    signals before exiting (which might have arrived after the
    command completed) so the parent and any EXIT trap will see
    the correct value for $?.</changelog>
  <changelog author="werner@suse.de" date="1709121600">- Harden bash to be compiled with gcc 14 (boo#1220564)
  * Modify patch bash-4.2-nscdunmap.dif to include &lt;sys/mman.h&gt;
  * Port bash-5.2.dif to the former change
  * Add patch bash-5.2-gcc14.patch</changelog>
  <changelog author="werner@suse.de" date="1711368000">- Help dependcy resolver to identify package split done with bash-sh</changelog>
  <changelog author="werner@suse.de" date="1724068800">- Add upstream patches
  * bash52-027
    The configure test for the presence of strtoimax(3) is inverted.
  * bash52-028
    A DEBUG trap in an asynchronous process can steal the controlling terminal
    away from the calling shell, causing it to exit.
  * bash52-030
    `wait -n' can fail to return some jobs if they exit due to signals the shell
    does not report to the user.
  * bash52-031
    There is a memory leak in the code that implements the optimized $(&lt;file)
    expansion for some code paths.
  * bash52-032
    When printing functions containing coprocesses, the displayed coproc command
    has the word COPROC inserted unconditionally, resulting in function bodies
    that cannot be re-read as input.</changelog>
  <changelog author="werner@suse.de" date="1727265600">- Add upstream patches
  * bash52-037
    Fix the case where text to be completed from the line buffer (quoted) is
    compared to the common prefix of the possible matches (unquoted) and the
    quoting makes the former appear to be longer than the latter. Readline
    assumes the match doesn't add any characters to the word and doesn't display
    multiple matches.
  * bash52-036
    When readline is accumulating bytes until it reads a complete multibyte
    character, reading a byte that makes the multibyte character invalid can
    result in discarding the bytes in the partial character.
  * bash52-035
    There are systems that supply one of select or pselect, but not both.
  * bash52-034
    If we parse a compound assignment during an alias expansion, it's possible
    to have the current input string popped out from underneath the parse. In
    this case, we should not restore the input we were using when we began to
    parse the compound assignment.
  * bash52-033
    A typo in the autoconf test for strtold causes false negatives for strtold
    being available and working when compiled with gcc-14.
- Port patch bash-3.2-printf.patch to fit change in bash52-033</changelog>
  <changelog author="werner@suse.de" date="1734350400">- Remove bash-4.3-winch.dif as this is the (current) default</changelog>
  <changelog author="heitor@opensuse.org" date="1735387200">- Move (/etc/skel/.bashrc) and (/etc/skel/.profile) to (/usr/etc/skel/).</changelog>
  <changelog author="werner@suse.de" date="1737720000">- As in bash-sh there is only a symbolic link avoid to require a version</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Explicitly specify that the build recipe needs bash</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="f5e01f8e81f78b4b7c1e03dcc61d20c93ec1be6ee144842abf734492751a7c97fdd7c916e7da36cc58f980bee88a6d8413b700f7f175dffeda26de04ca72ae8b" name="bc" arch="x86_64">
  <version epoch="0" ver="1.07.1" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338465600">- update to upstream alpha 1.06.95 (2006-09-05), in use in other
  major distros for quite a long time (Debian, Fedora, Ubuntu, ...)
- add patches from Fedora
- automake dependency removed</changelog>
  <changelog author="idonmez@suse.com" date="1347883200">- Add BuildRequires on makeinfo to fix Factory build</changelog>
  <changelog author="tchvatal@suse.com" date="1417176000">- Clean up with spec-cleaner
- Add ncurses-devel as it is inherited from readline
- Explicitely pass without-libedit if we decide to switch for
  it at some point</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Update url
- Correct info files scriplets and dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Update to version 1.07.1:
  * Fixed ibase extension causing problems for read()
  * Fixed parallel make problem.
  * Fixed dc "Q" comanmd bug.
- Changes for version 1.07:
  * Added void functions.
  * fixes bug in load_code introduced by mathlib string storage in 1.06.
  * fix to get long options working.
  * signal code clean-up.
  * fixed a bug in the AVL tree routines.
  * fixed math library to work properly when called with ibase not 10.
  * fixed a symbol table bug when using more than 32 names.
  * removed a double free.
  * Added base 17 to 36 for ibase.
  * Fixed some memory leaks.
  * Various small tweaks and doc bug fixes.
- Drop no longer needed patches:
  * bc-1.06.95-memleak.patch
  * bc-1.06.95-matlib.patch
  * bc-1.06.95-sigintmasking.patch
- Refresh bc-1.06-dc_ibase.patch
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- added patches
  Correct return value after 'q' [bsc#1129038]
  + bc-dc-correct-return-value.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566993600">- Use %license instead of %doc [bsc#1082318]
- Cleanup %doc section</changelog>
  <changelog author="pgajdos@suse.com" date="1602763200">- fix [bsc#1177579] -- wrong clamping of hexadecimal digits in dc
- deleted patches
  - bc-1.06-dc_ibase.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="0e3d60d8f00649296bbe2b24afbc79bf35392ddce2aa82025dde4493c9cea8a570f0349774647f81495e5b3fe973d9eeacf3fcf4211d21a6ce13d5f6f3ac2b81" name="bcache-tools" arch="x86_64">
  <version epoch="0" ver="1.1+git37.a5e3753" rel="160000.2.2"/>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="jengelh@inai.de" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="jengelh@inai.de" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="colyli@suse.com" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="colyli@suse.com" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="colyli@suse.com" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
  <changelog author="colyli@suse.com" date="1677758400">- bcache-tools: improve is_zoned_device() (bsc#1208425)
  0029-bcache-tools-improve-is_zoned_device.patch</changelog>
  <changelog author="jengelh@inai.de" date="1699531200">- Update to snapshot 1.1+git37.a5e3753
  * support ``bcache show -d`` for nvdimm-meta device
- Abolish /usr/bin/env [boo#1216370]
- Delete (merged):
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch
  0002-bcache-tools-add-is_zoned_device.patch
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
  0012-bcache-tools-Fix-potential-coredump-issues.patch
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
  0016-bcache-tools-add-bcache-status.patch
  0017-bcache-tools-add-man-page-bcache-status.8.patch
  0018-Makefile-install-bcache-status.patch
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
  0022-bcache-tools-check-incompatible-feature-set.patch
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch
  0029-bcache-tools-improve-is_zoned_device.patch</changelog>
</package>
<package pkgid="2b26e02e9d5e4afbf5df6cb0dae38088ba93429ae9196f94e5f2ed401bd5284cd425d2dbef131f9546d08ea75eb8c20e540542e157b8c549290f2eba637c0b1c" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3.7.g495ab76" rel="160000.2.2"/>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="msuchanek@suse.com" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1597320001">- Add support for SMBIOS 3.
  * biosdevname-Add-SMBIOS-3.x-support.patch
- Fix URL in specfile. It should be readable to developers.</changelog>
  <changelog author="sebastian.parschauer@instana.com" date="1600430400">- Amend the package description</changelog>
  <changelog author="lnussel@suse.de" date="1623153600">- install to /usr (boo#1029961)</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Enhance _service file
- Update to version 0.7.3:
  * Add SMBIOS 3.x support
  * Read DMI entries from /sys/firmware/dmi/tables/DMI
  * Add buffer read helper using read explicitly
  * man: fix all_ethN indentation
  * Netronome biosdevname support (#8)
  * Prevent infinite recursion in dmidecode.c::smbios_setslot by (#7)
  * Add support for ExaNIC network cards (#5)
  This are now all mainline and got reverted:
  D    biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  D    biosdevname-Add-SMBIOS-3.x-support.patch
  D    biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch
  D    dmidecode-prevent-infinite-recursion.patch</changelog>
  <changelog author="trenn@suse.de" date="1709035200">- Binary is in /usr/sbin not /sbin
  (cmp with install to /usr below) (bsc#1220125)
  M udev-rule-path.patch</changelog>
</package>
<package pkgid="92f05a05c47c50a415fdbd0cf04a1ef11587674d30ca0294aff0604d81aab762a392e1c52d70960b0d01bbfc31dcd9a7ed4d2fbfa34433c1e9e506f0af76074f" name="blog" arch="x86_64">
  <version epoch="0" ver="2.35" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743163200">- Update to version 2.29
  * Make sure that password prompt is seen Latest
    Use a temporary buffer to be silent during asking passwords.
    And stop system console output during password questions
    only if temporary buffer becomes short. As well as do coloring
    on /dev/ttysclp0 for S390.
- Drop patch.patch as now upstream</changelog>
  <changelog author="werner@suse.de" date="1743422400">- Update to version 2.30
  * The asking variable is not shared
  * Allow password asking prompt to be repeated if empty.
  * Make spinner support UTF-8 multibyte conform.
  * Spinner lines of system still not handled.</changelog>
  <changelog author="werner@suse.de" date="1743595200">- Update to version 2.31
  * Handel BS on password prompt as well
  * Drop spining code as systemd uses clear to end of line
    escape sequence (hard coded!) for its cylon lines.
- blog: again suggest blog-plymouth</changelog>
  <changelog author="werner@suse.de" date="1743681600">- Update to version 2.32
  * Better 3270 console support, use uevent below /sys file system</changelog>
  <changelog author="werner@suse.de" date="1744286400">- The suse-module-tools are required at build otherwise blog
  is not in the initrd</changelog>
  <changelog author="werner@suse.de" date="1744372800">- Use rpm-config-SUSE instead of suse-module-tools for suse version
  above 1550 and add code for the missing macros for older
  distributions like leap 15.6</changelog>
  <changelog author="werner@suse.de" date="1744804800">- Update to version 2.34
  * Make it work on s390x (still no 3215 console)
    This is a bug fix release.  But still no support in conmode
    3215 as there is a race triggered by using conmode 3215.
    The order of the systemd units seems to change with this
    console mode.</changelog>
  <changelog author="werner@suse.de" date="1744891200">- Add patch blog-install.patch
  * Fixes install problems
  * Use module-setup.sh to install in BUILDROOT</changelog>
  <changelog author="werner@suse.de" date="1744891201">- Add patch blog-3215.patch
  * Try to avoid blocking mode of 3215 console on s390x as holding
    the output at `MORE' stops blogd, that is that it can not see
    any messages over its socket like switch of the root file system.</changelog>
  <changelog author="werner@suse.de" date="1745841600">- Update to version 2.35
  * Make s390 3215 console work that is use EPOLLOUT|EPOLLONESHOT
    to control if we can write to ttyS0 in nonblocking mode and if
    not reenable EPOLLOUT|EPOLLONESHOT.
  * At boot set for ttyS0 via vmcp API nonblocking MORE mode with
    `0 0'.  It beeps but boots.
- Remove patches now upstream
  * blog-3215.patch
  * blog-install.patch</changelog>
</package>
<package pkgid="4da3b66169dbfd23cf03944c8cf58a14562eafdb29272921a93df02ea8ae6a92f24800acba3ad37ed9045d4a4818eb34088153f7efe5565abe4d34547427513f" name="bluez-firmware" arch="x86_64">
  <version epoch="0" ver="1.2" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="agruen@suse.de" date="1141819200">- Add modalias tags (155357).</changelog>
  <changelog author="seife@suse.de" date="1152187200">- update to v1.2:
  * ver 1.2:
    Add ST Microelectronics firmware files.
  * ver 1.1:
    Add old Broadcom firmware files.</changelog>
  <changelog author="ro@suse.de" date="1174219200">- remove /lib/firmware directory from filelist (in filesystem)</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="coolo@suse.com" date="1362225600">- update license to new format</changelog>
  <changelog author="mpluskal@suse.com" date="1428148800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- modernize specfile</changelog>
</package>
<package pkgid="6e323e6c3f98ebd2eed8595fd7129294e6122b38f258d29944cbf02f407cbeec1b1f0718b91d517ced04fc5483881f25b9b6feb3b011b621d1843c4f22a5dc70" name="bolt" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="bp160.1.12"/>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622635200">- Update to 0.9.1
  * Support Ice Lake Thunderbolt 3 i/o subsystem
  * Don't store domains where uuids change across reboots
  * Fixes for the journal and the domain's acl-log
  * Version the store and use that to clean up stale domains once
  * Host identification for embedded thunderbolt controllers [!233]
  * Various other small bug fixes and memory leak fixes.</changelog>
  <changelog author="Oliver Neukum &lt;oneukum@suse.com&gt;" date="1632830400">- Need in SLE
  * Support for working with adapters without ROMs is needed
    (jsc#SLE-19359)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1643371200">- Update to 0.9.2
  * This release is compatible with umockdev &gt;= 0.16.3; there was a change in
    umockdev that made our test fail with it, since both our test and umockev
    were trying to create the same directorires. bolt now allows for the dir
    to already exist.
  * The license for `90-bolt.rules` has changed from `GPL-2.1+`, which does
    not exist and was probably was confused with `LGPL-2.1+`, to `GPL 2.0+`.
  * Documentation has been updated and spelling mistakes fixed.
  * Various improvements for continuous integration.
  * The minimum required version of meson has been bumped to 0.46.0.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1661342400">- Update to 0.9.3:
  * Work around a glib fix that changed behavior of the log API where now
    calling `g_log_set_writer_func` results in an hard error, which broke
    the test suite since aforementioned function was indeed called more
    than once. Nothing a level of indirection couldn't fix.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 0.9.4:
  * spec file added and a few metadata fixes, no code change</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1672833600">- update to 0.9.5:
  * Fixed several test and build setting issues.
  * Introduced packit. Packit was used to package rpm to downstream Fedora
    automatically. Moreover, Koji and bodhi could be triggered by packit
    automatically.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696334400">- update to 0.9.6:
  * Compiler warnings and log messages for the domain not found were fixed.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1708344000">- update to 0.9.7:
  * Add a 'nopcie' security level since some devices report nopcie when Thunderbolt
    is disabled through BIOS setting.
  * Markdown lint styling is used for documents.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1715860800">- update to 0.9.8:
  * A new NHI for REMBRANDT.
  * CI fixes.
  * Don't install an empty DB directory.
  * Fixed: Determine the string length before writing file.
  * Fixed: Free on error to prevent resource leak.</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1719662400">- Edit license: LGPL-2.1-or-later
- Add BuildRequires: asciidoc to produce manpages:
  * boltd.8 boltctl.1
- Switch dependencies to provided pkgconfig
- Update meson required version 0.60
- Use autosetup</changelog>
</package>
<package pkgid="61ca6929edfd1faa5b4338ff2d11f78f3e665207a8e6f0727bffd0a98f9031e6fd5636a992c43fdf75cf2935a3e1828a70066032c30472003ee9bcda0da508e0" name="bolt-tools" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="bp160.1.12"/>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622635200">- Update to 0.9.1
  * Support Ice Lake Thunderbolt 3 i/o subsystem
  * Don't store domains where uuids change across reboots
  * Fixes for the journal and the domain's acl-log
  * Version the store and use that to clean up stale domains once
  * Host identification for embedded thunderbolt controllers [!233]
  * Various other small bug fixes and memory leak fixes.</changelog>
  <changelog author="Oliver Neukum &lt;oneukum@suse.com&gt;" date="1632830400">- Need in SLE
  * Support for working with adapters without ROMs is needed
    (jsc#SLE-19359)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1643371200">- Update to 0.9.2
  * This release is compatible with umockdev &gt;= 0.16.3; there was a change in
    umockdev that made our test fail with it, since both our test and umockev
    were trying to create the same directorires. bolt now allows for the dir
    to already exist.
  * The license for `90-bolt.rules` has changed from `GPL-2.1+`, which does
    not exist and was probably was confused with `LGPL-2.1+`, to `GPL 2.0+`.
  * Documentation has been updated and spelling mistakes fixed.
  * Various improvements for continuous integration.
  * The minimum required version of meson has been bumped to 0.46.0.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1661342400">- Update to 0.9.3:
  * Work around a glib fix that changed behavior of the log API where now
    calling `g_log_set_writer_func` results in an hard error, which broke
    the test suite since aforementioned function was indeed called more
    than once. Nothing a level of indirection couldn't fix.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 0.9.4:
  * spec file added and a few metadata fixes, no code change</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1672833600">- update to 0.9.5:
  * Fixed several test and build setting issues.
  * Introduced packit. Packit was used to package rpm to downstream Fedora
    automatically. Moreover, Koji and bodhi could be triggered by packit
    automatically.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696334400">- update to 0.9.6:
  * Compiler warnings and log messages for the domain not found were fixed.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1708344000">- update to 0.9.7:
  * Add a 'nopcie' security level since some devices report nopcie when Thunderbolt
    is disabled through BIOS setting.
  * Markdown lint styling is used for documents.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1715860800">- update to 0.9.8:
  * A new NHI for REMBRANDT.
  * CI fixes.
  * Don't install an empty DB directory.
  * Fixed: Determine the string length before writing file.
  * Fixed: Free on error to prevent resource leak.</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1719662400">- Edit license: LGPL-2.1-or-later
- Add BuildRequires: asciidoc to produce manpages:
  * boltd.8 boltctl.1
- Switch dependencies to provided pkgconfig
- Update meson required version 0.60
- Use autosetup</changelog>
</package>
<package pkgid="1a314a30122c6a1c06855d22ba621c3f4862a01122bcbb73121df7b6bd998a0c0ab04d00bb7158868bd38bd65aa020731cb06e933f88ada6fd48855f07699272" name="boost-license1_86_0" arch="noarch">
  <version epoch="0" ver="1.86.0" rel="160000.2.2"/>
  <changelog author="aschnell@suse.com" date="1693915200">- update to 1.83.0
  * new libraries:
    + Compat - Header-only Library.
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_83_0.html
- dynamic_linking.patch: updated
- boost-mpi-noreturn.patch: added</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698148800">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698321600">- Fix build for gnu-mpich-hpc broken by previous update</changelog>
  <changelog author="aschnell@suse.com" date="1702555200">- update to 1.84.0
  * new libraries:
    + Cobalt (single-threaded asynchronicity framework)
    + Redis (implements protocol RESP3)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_84_0.html
- drop boost-phoenix-revert-std-tuple-support.patch (upstream)
- drop boost-mpi-noreturn.patch (upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1708516800">- avoid obsolete rpm syntax</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Avoid BuildRequire of 'gcc-c++ &gt; 5' which is only a redundant
  check.  This interferes with Substitute.</changelog>
  <changelog author="aschnell@suse.com" date="1713873600">- update to 1.85.0
  * new libraries:
    + charconv (implementation of &lt;charconv&gt;)
    + scope (collection of scope guard utilities)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_85_0.html
- dynamic_linking.patch: updated
- boost-charconv-quadmath.patch: added</changelog>
  <changelog author="hsk17@mail.de" date="1719662400">- add patch boost-1.85.0-python-numpy-2.patch from upstream</changelog>
  <changelog author="aschnell@suse.com" date="1725019200">- update to 1.86.0
  * process turned into compile library
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_86_0.html
- boost-aarch64-flags.patch: updated
- boost-1.57.0-python-abi_letters.patch: updated
- boost-process.patch: removed (included upstream)
- boost-charconv-quadmath.patch: removed (improved upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1725278400">- fix compilation of compute module (gh#boostorg/uuid#166)
- boost-compute-uuid.patch: added</changelog>
</package>
<package pkgid="324ad34abf023522409bad95c91d77d17e166f8301ea5b209a96cdd9ad9067fbd619b0026f58c3de0142aeb2e4dfc6488ecd987e27b913a1d25ba6955d5a3673" name="branding-openSUSE" arch="noarch">
  <version epoch="0" ver="16.0.20240405" rel="160000.1.141"/>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563192000">- Bump to 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1580731200">- Sync with Tumbleweed</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1610452800">- Sync with Tumbleweed
- Bump to 15.3</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1647950400">- Bump to 15.4</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1650542400">- Skip *.tr files in /etc/bootsplash/themes/openSUSE/bootloader</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1662984000">- Bump to 15.5
- Supply new Wallpaper Issue#132</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1663156800">- use path-&gt;union for fonts in logo boo#1203394</changelog>
  <changelog author="Yuchen Lin &lt;mlin+factory@suse.de&gt;" date="1668427200">- Remove systemd-icon-branding since it has been replaced by
  distribution-logos-openSUSE-icon, bsc#1204657</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1712318400">- Bump to 16.0 and se png for wallpapers
  * SLES seems to be using png
  * Using a compat symlink wallpapers/openSUSEdefault-&gt; wallpapers/SLEdefault
  allows running certain apps without rebuild. Such as cockpit.
  * Use optipng -o5 to compress files (has to be reflected in spec)
  * Bump date</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1712318401">* Drop hicolor symlinks from Makefile which are no longer present in TW
  exactly these are raising unpackaged errors on Leap 16.0 build.
  * Plasma 6 drops support for metadata.desktop</changelog>
</package>
<package pkgid="9e108456273d82babf0dd0b100fc1bff8b86b00cb81e55722a31629ad16f30a2b6d54538139300cc0315cec79086881b7ca2ab124a6bfd9a5ee3faf054422c44" name="btrfsmaintenance" arch="noarch">
  <version epoch="0" ver="0.5" rel="160000.2.2"/>
  <changelog author="kukuk@suse.de" date="1520856000">- Add missing btrfsmaintenance-refresh.path [bsc#1084871]
- Use %license [bsc#1082318]</changelog>
  <changelog author="dsterba@suse.cz" date="1521028800">- update to version 0.4.1
  - defrag plugin: python2 and 3 compatibility
  - defrag plugin: target extent size lowered to 32MiB (#43)
  - shell compatibility fixes
  - systemd unit type fixes
- Removed patch: python3-support-bsc1070322.diff (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1523620800">- In openSUSE the defrag plugin must explicitly refer to Python 3.
  (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="dsterba@suse.cz" date="1537790400">- update to version 0.4.2
  - CVE-2018-14722: expand auto mountpoints in a safe way
  - btrfs-defrag: fix missing function to detect btrfs filesystems (#52)
  - btrfs-trim: more verbose fstrim output (#60)
  - dist-install: print information about timer unit installation (#58)</changelog>
  <changelog author="jeffm@suse.com" date="1552392000">- Document and adjust balance thresholds and periods (FATE#325529 jsc#SLE-3188).
  * README: document impact of balance + quota groups
  * sysconfig: reduce default balance usage thresholds
  * sysconfig: document using systemd.time(7) for frequency of operations
  * btrfsmaintenance-refresh-cron.sh: validate periods for cron-based systems
- Remove python dependency (FATE#326736 jsc#SLE-4130).
  * btrfs-defrag-plugin: remove dependency on zypp-plugin-python
- Added patches:
  * 0001-README-document-impact-of-balance-quota-groups.patch
  * 0002-sysconfig-reduce-default-balance-usage-thresholds-fa.patch
  * 0003-sysconfig-document-using-systemd.time-7-for-frequenc.patch
  * 0004-btrfsmaintenance-refresh-cron.sh-validate-periods-fo.patch
  * 0005-btrfs-defrag-plugin-remove-dependency-on-zypp-plugin.patch
- Added source:
  * btrfs-defrag-plugin.sh
- Removed patch:
  * python3-support-bsc1070322.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="dsterba@suse.cz" date="1560254401">- spec: fix typo in macro name</changelog>
  <changelog author="dsterba@suse.cz" date="1596024000">- update to version 0.5
  - sysconfig:
  - change defaults of MUSAGE and DUSAGE for balance task to do less work,
    with a script to switch from existing unmodified defaults to new ones
  - document systemd.timer syntax
  - make balance, scrub, and trim mutually exclusive tasks
  - service file updates:
  - delete Install section
  - defrag-plugin:
  - switch to python3
  - add alternative shell implementation of the plugin
  - installation docs update
- Removed patches (upstream):
  - 0001-README-document-impact-of-balance-quota-groups.patch
  - 0002-sysconfig-reduce-default-balance-usage-thresholds-fa.patch
  - 0003-sysconfig-document-using-systemd.time-7-for-frequenc.patch
  - 0004-btrfsmaintenance-refresh-cron.sh-validate-periods-fo.patch
  - 0005-btrfs-defrag-plugin-remove-dependency-on-zypp-plugin.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="kukuk@suse.com" date="1612958400">- Require libzypp plugin only if zypper is used (Required for e.g.
  image based systems).</changelog>
</package>
<package pkgid="76715b5dcce102e25c4cd2b3616e857c7e6586aa3d042c425b3a1491d61ae1520c15fb7e66b017384a1dae30fcacd97265f1f4f9cdf61f1cc46ffb5f024c13ee" name="btrfsprogs" arch="x86_64">
  <version epoch="0" ver="6.14" rel="160000.2.2"/>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1718798400">- update to 6.9
  * mkfs:
  * if --force used, don't continue if the mount status cannot be
    determined (e.g. due to permissions)
  * fix minimum size calculation on zoned devices, make it work with option -b
  * check:
  * option --clear-ino-cache removed (functionality still provided in
    'rescue' command group)
  * detect and repair wrong file extent item ram_bytes value
  * qgroup clear-stale:
  * sync the filesystem before search to read the up to date state
  * handle cases where qgroup cannot be deleted due to uncleaned subvolume
    or when squota is enabled
  * qgroup show: display status of qgroup regarding the cleaning of the
    subvolume or if it's squota
  * receive: fix stream parsing on strict alignment hosts (e.g. ARM v5 or v6)
  * tune change-csum: fix check of dev-replace status item, continue if no
    dev-replace in progress
  * dump-tree: print contents of dev-replace status item
  * convert: fix extent iteration to handle prealloc/unwritten extents
  * libbtrfsutil:
  * patchlevel version update 1.3.1
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * libbtrfs:
  * patchlevel version update 0.1.3
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * build:
  * fix compatibility with e2fsprogs 1.47.1
  * fix header file dependency tracking
  * other:
  * documentation updates</changelog>
  <changelog author="dheidler@suse.de" date="1718971200">- Let btrfsprogs-bash-completion require btrfsprogs with same version
  as there is a file conflict with the bash completion scripts
  still being bundled with btrfsprogs in older versions shipped with 15.6</changelog>
  <changelog author="dsterba@suse.cz" date="1720094400">- update to 6.9.2
  * subvol list: fix accidental trimming of subvolume name
  * check: revert checking file extent item 'ram_bytes'
  * libbtrfsutil:
  * patchlevel version update 1.3.2
  * fix accidentally closing fd passed to subvolume iterator
- update to 6.9.1
  * fix detection of intermediate super block flags (e.g. csum change and
    other conversions)
  * raid-stripe-tree support (still experimental):
  * moved under experimental build flags (mkfs, convert)
  * format change, removed encoding type; backward incompatible
  * receive dump: escape special chars in xattr names and values, and clone
    source path
  * tune change csum: fix reservation size when starting a transaction
  * other:
  * new and updated tests
  * updated CI images, new reference build targets
  * cleanups and refactoring</changelog>
  <changelog author="dsterba@suse.cz" date="1722427200">- update to 6.10
  * inspect:
  * list-chunks: new command to print information about chunks (i.e.
    the physical chunks as stored on devices), sortable; requires root as
    it's using SEARCH_TREE ioctl
  * tree-stats:
  * new option -t to print only the given tree
  * add long options for size units
  * filesystem df: with increased verbosity print per-type information from sysfs
  * version: print a line with built-in features or options (+FEATURE1 -FEATURE2)
  * image: document option -s and its potential problems
  * fixes:
  * scrub status: user selected base for Rate values
  * receive: escape special characters in paths and xattrs
  * dump-tree: escape special characters in paths and xattrs
  * image: sanitizing filenames did not work properly in all cases
  * convert: fix displayed restored image path on rollback
  * tune change csum: do conversion in smaller batches
  * other:
  * build fixes for uClibc
  * build fix for python 3.13
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1723723200">- update to 6.10.1
  * mkfs: rework --rootdir traversal, skip hardlinks and create new inodes
    instead, also warn about them, this did not work as expected and will be
    fixed in the future
  * receive: search in older trees for UUIDs when detecting clone sources
  * libbtrfsutil: bindings available at https://pypi.org/project/btrfsutil
  * libbtrfs:
  * patchlevel version update 0.1.4
  * cleanup in headers, removed unused definitions, no functional changes
  * don't ship list.h and rbtree.h
  * other: documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1736164800">- update to 6.12
  * subvolume delete: add new option to do recursive subvolume deletion (for
    regular user delete only accessible subvolumes)
  * mkfs:
  * new option --subvol to create subvolumes in given paths, read-write,
    read-only and default
  * add hard link detection support for --rootdir option
  * fixes:
  * receive: message verbosity fixes
  * check: fix false positive report of missing checksum for extent holes
  * check: handle compressed extents when checking tree log
  * when asking Y/N user questions, flush the terminal so the question is
    displayed (e.g. btrfstune -S)
  * other
  * code refactoring, error handling
  * python packaging fixes
  * documentation updates
  * new tests
- update to 6.11
  * check:
  * check items in tree-log
  * detect invalid file extent items for symlinks
  * properly detect inode cache and suggest removal by 'clear-ino-cache'
  * convert: fix symlink length checks
  * fi show: remove stray newline at the end of the output
  * fixes:
  * open devices in write-exclusive mode in most commands, prevent
    concurrent mount by other programs
  * rescue clear-ino-cache: fix subvolume iteration that can fail in some cases
  * map-logical: fix first extent searching condition
  * fi resize: warn if new size is below 256M
  * tree-checker:
  * slightly stricter file type validation
  * verify device extent items
  * other:
  * documentation updates
  * ship btrfs-ioctl manual page (incomplete)</changelog>
  <changelog author="dsterba@suse.cz" date="1743422400">- update to 6.13
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec: package btrfs-find-root unconditionally (bsc#1239992)
- Refresh patches: mkfs-default-features.patch (context)</changelog>
  <changelog author="dsterba@suse.cz" date="1743681600">- update to 6.14
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec file:
  - update subpackage descriptions
  - drop conditional build of documentation, always use source
  - drop pre-systemd udev workarounds (version 190)</changelog>
</package>
<package pkgid="db902a1d0bd8897c48c9550269c0efa199cf2301be1048af3beb9d114c26a5ed6339f7f9d7ddfd25571fe3bc47e7f5aa8536027b0ecca1d081fd4878728e5d20" name="btrfsprogs-udev-rules" arch="noarch">
  <version epoch="0" ver="6.14" rel="160000.2.2"/>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1718798400">- update to 6.9
  * mkfs:
  * if --force used, don't continue if the mount status cannot be
    determined (e.g. due to permissions)
  * fix minimum size calculation on zoned devices, make it work with option -b
  * check:
  * option --clear-ino-cache removed (functionality still provided in
    'rescue' command group)
  * detect and repair wrong file extent item ram_bytes value
  * qgroup clear-stale:
  * sync the filesystem before search to read the up to date state
  * handle cases where qgroup cannot be deleted due to uncleaned subvolume
    or when squota is enabled
  * qgroup show: display status of qgroup regarding the cleaning of the
    subvolume or if it's squota
  * receive: fix stream parsing on strict alignment hosts (e.g. ARM v5 or v6)
  * tune change-csum: fix check of dev-replace status item, continue if no
    dev-replace in progress
  * dump-tree: print contents of dev-replace status item
  * convert: fix extent iteration to handle prealloc/unwritten extents
  * libbtrfsutil:
  * patchlevel version update 1.3.1
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * libbtrfs:
  * patchlevel version update 0.1.3
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * build:
  * fix compatibility with e2fsprogs 1.47.1
  * fix header file dependency tracking
  * other:
  * documentation updates</changelog>
  <changelog author="dheidler@suse.de" date="1718971200">- Let btrfsprogs-bash-completion require btrfsprogs with same version
  as there is a file conflict with the bash completion scripts
  still being bundled with btrfsprogs in older versions shipped with 15.6</changelog>
  <changelog author="dsterba@suse.cz" date="1720094400">- update to 6.9.2
  * subvol list: fix accidental trimming of subvolume name
  * check: revert checking file extent item 'ram_bytes'
  * libbtrfsutil:
  * patchlevel version update 1.3.2
  * fix accidentally closing fd passed to subvolume iterator
- update to 6.9.1
  * fix detection of intermediate super block flags (e.g. csum change and
    other conversions)
  * raid-stripe-tree support (still experimental):
  * moved under experimental build flags (mkfs, convert)
  * format change, removed encoding type; backward incompatible
  * receive dump: escape special chars in xattr names and values, and clone
    source path
  * tune change csum: fix reservation size when starting a transaction
  * other:
  * new and updated tests
  * updated CI images, new reference build targets
  * cleanups and refactoring</changelog>
  <changelog author="dsterba@suse.cz" date="1722427200">- update to 6.10
  * inspect:
  * list-chunks: new command to print information about chunks (i.e.
    the physical chunks as stored on devices), sortable; requires root as
    it's using SEARCH_TREE ioctl
  * tree-stats:
  * new option -t to print only the given tree
  * add long options for size units
  * filesystem df: with increased verbosity print per-type information from sysfs
  * version: print a line with built-in features or options (+FEATURE1 -FEATURE2)
  * image: document option -s and its potential problems
  * fixes:
  * scrub status: user selected base for Rate values
  * receive: escape special characters in paths and xattrs
  * dump-tree: escape special characters in paths and xattrs
  * image: sanitizing filenames did not work properly in all cases
  * convert: fix displayed restored image path on rollback
  * tune change csum: do conversion in smaller batches
  * other:
  * build fixes for uClibc
  * build fix for python 3.13
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1723723200">- update to 6.10.1
  * mkfs: rework --rootdir traversal, skip hardlinks and create new inodes
    instead, also warn about them, this did not work as expected and will be
    fixed in the future
  * receive: search in older trees for UUIDs when detecting clone sources
  * libbtrfsutil: bindings available at https://pypi.org/project/btrfsutil
  * libbtrfs:
  * patchlevel version update 0.1.4
  * cleanup in headers, removed unused definitions, no functional changes
  * don't ship list.h and rbtree.h
  * other: documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1736164800">- update to 6.12
  * subvolume delete: add new option to do recursive subvolume deletion (for
    regular user delete only accessible subvolumes)
  * mkfs:
  * new option --subvol to create subvolumes in given paths, read-write,
    read-only and default
  * add hard link detection support for --rootdir option
  * fixes:
  * receive: message verbosity fixes
  * check: fix false positive report of missing checksum for extent holes
  * check: handle compressed extents when checking tree log
  * when asking Y/N user questions, flush the terminal so the question is
    displayed (e.g. btrfstune -S)
  * other
  * code refactoring, error handling
  * python packaging fixes
  * documentation updates
  * new tests
- update to 6.11
  * check:
  * check items in tree-log
  * detect invalid file extent items for symlinks
  * properly detect inode cache and suggest removal by 'clear-ino-cache'
  * convert: fix symlink length checks
  * fi show: remove stray newline at the end of the output
  * fixes:
  * open devices in write-exclusive mode in most commands, prevent
    concurrent mount by other programs
  * rescue clear-ino-cache: fix subvolume iteration that can fail in some cases
  * map-logical: fix first extent searching condition
  * fi resize: warn if new size is below 256M
  * tree-checker:
  * slightly stricter file type validation
  * verify device extent items
  * other:
  * documentation updates
  * ship btrfs-ioctl manual page (incomplete)</changelog>
  <changelog author="dsterba@suse.cz" date="1743422400">- update to 6.13
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec: package btrfs-find-root unconditionally (bsc#1239992)
- Refresh patches: mkfs-default-features.patch (context)</changelog>
  <changelog author="dsterba@suse.cz" date="1743681600">- update to 6.14
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec file:
  - update subpackage descriptions
  - drop conditional build of documentation, always use source
  - drop pre-systemd udev workarounds (version 190)</changelog>
</package>
<package pkgid="cf1816929082a71f730b038d83a2a85dbde0f70a09e02b6858e315fe9ab0f290763888ed48c7cae24ed9416286e6e27494f57eeb1d5add5c12026bccbd1c6992" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.5.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
</package>
<package pkgid="5ab11500037012017486ba728c7073ab0ff854c6bcee1f08ce2a081eb1bf85b01b2f78549367dca49431ca4f87c69ed7cd1dbd7749d204ba4023bc7fcd9be878" name="busybox-bzip2" arch="noarch">
  <version epoch="0" ver="1.37.0" rel="160000.2.2"/>
  <changelog author="dcermak@suse.com" date="1692014400">- Check in filelists instead of buildrequiring all non-busybox utils</changelog>
  <changelog author="fvogt@suse.com" date="1693396800">- Don't build the Dockerfile in OBS, it's for development only</changelog>
  <changelog author="kukuk@suse.com" date="1694088000">- Add conflict for coreutils-systemd, package got splitted</changelog>
  <changelog author="dmueller@suse.com" date="1700481600">- zgrep: don't set the label option as only the real grep
  supports it (bsc#1215943)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Add new sub-package for udhcpc</changelog>
  <changelog author="dimstar@opensuse.org" date="1708516800">- busybox-udhcpc conflicts with udhcp.</changelog>
  <changelog author="dimstar@opensuse.org" date="1727956800">- BuildRequire busybox: as we want to track the version of busybox,
  we need to ensure busybox is part of the buildroot.</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Partly revert changes from Aug 8th 2023 to automatically detect
  changes in busybox configuration
- Add getfattr applet to attr filelist</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- Blacklist creating links for halt, reboot, shutdown commands to avoid accidental
  use in a fully booted system (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add filtering of ignored applets to busybox.install</changelog>
</package>
<package pkgid="8961af085a0dc378b6fd8ad2b8513c6ef62d006e86cd814ed84886fd2152d6090630f3a4d79ca04b9e78977e6e5c7f9ba7939415d816b6c8af28f669a3b0e34f" name="busybox-coreutils" arch="noarch">
  <version epoch="0" ver="1.37.0" rel="160000.2.2"/>
  <changelog author="dcermak@suse.com" date="1692014400">- Check in filelists instead of buildrequiring all non-busybox utils</changelog>
  <changelog author="fvogt@suse.com" date="1693396800">- Don't build the Dockerfile in OBS, it's for development only</changelog>
  <changelog author="kukuk@suse.com" date="1694088000">- Add conflict for coreutils-systemd, package got splitted</changelog>
  <changelog author="dmueller@suse.com" date="1700481600">- zgrep: don't set the label option as only the real grep
  supports it (bsc#1215943)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Add new sub-package for udhcpc</changelog>
  <changelog author="dimstar@opensuse.org" date="1708516800">- busybox-udhcpc conflicts with udhcp.</changelog>
  <changelog author="dimstar@opensuse.org" date="1727956800">- BuildRequire busybox: as we want to track the version of busybox,
  we need to ensure busybox is part of the buildroot.</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Partly revert changes from Aug 8th 2023 to automatically detect
  changes in busybox configuration
- Add getfattr applet to attr filelist</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- Blacklist creating links for halt, reboot, shutdown commands to avoid accidental
  use in a fully booted system (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add filtering of ignored applets to busybox.install</changelog>
</package>
<package pkgid="9c24369cb01d79214f24359ed7d24a8cde02f5d555a3f4844611a8712624d38a0f5c8b2078605626dcb4d0898b02d3bc68eec24801b5c42a03e6886da63e957a" name="busybox-diffutils" arch="noarch">
  <version epoch="0" ver="1.37.0" rel="160000.2.2"/>
  <changelog author="dcermak@suse.com" date="1692014400">- Check in filelists instead of buildrequiring all non-busybox utils</changelog>
  <changelog author="fvogt@suse.com" date="1693396800">- Don't build the Dockerfile in OBS, it's for development only</changelog>
  <changelog author="kukuk@suse.com" date="1694088000">- Add conflict for coreutils-systemd, package got splitted</changelog>
  <changelog author="dmueller@suse.com" date="1700481600">- zgrep: don't set the label option as only the real grep
  supports it (bsc#1215943)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Add new sub-package for udhcpc</changelog>
  <changelog author="dimstar@opensuse.org" date="1708516800">- busybox-udhcpc conflicts with udhcp.</changelog>
  <changelog author="dimstar@opensuse.org" date="1727956800">- BuildRequire busybox: as we want to track the version of busybox,
  we need to ensure busybox is part of the buildroot.</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Partly revert changes from Aug 8th 2023 to automatically detect
  changes in busybox configuration
- Add getfattr applet to attr filelist</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- Blacklist creating links for halt, reboot, shutdown commands to avoid accidental
  use in a fully booted system (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add filtering of ignored applets to busybox.install</changelog>
</package>
<package pkgid="514503e48d394380de5d522d337836920ff236bfaa9d1006212c8f1c751d5cb8355a133db7a8c80666c22981850cab1f4b7e8ec306f87f7c1d482579512c7a27" name="busybox-hostname" arch="noarch">
  <version epoch="0" ver="1.37.0" rel="160000.2.2"/>
  <changelog author="dcermak@suse.com" date="1692014400">- Check in filelists instead of buildrequiring all non-busybox utils</changelog>
  <changelog author="fvogt@suse.com" date="1693396800">- Don't build the Dockerfile in OBS, it's for development only</changelog>
  <changelog author="kukuk@suse.com" date="1694088000">- Add conflict for coreutils-systemd, package got splitted</changelog>
  <changelog author="dmueller@suse.com" date="1700481600">- zgrep: don't set the label option as only the real grep
  supports it (bsc#1215943)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Add new sub-package for udhcpc</changelog>
  <changelog author="dimstar@opensuse.org" date="1708516800">- busybox-udhcpc conflicts with udhcp.</changelog>
  <changelog author="dimstar@opensuse.org" date="1727956800">- BuildRequire busybox: as we want to track the version of busybox,
  we need to ensure busybox is part of the buildroot.</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Partly revert changes from Aug 8th 2023 to automatically detect
  changes in busybox configuration
- Add getfattr applet to attr filelist</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- Blacklist creating links for halt, reboot, shutdown commands to avoid accidental
  use in a fully booted system (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add filtering of ignored applets to busybox.install</changelog>
</package>
<package pkgid="eba8e81a4ce0fe3d1bef7602e28dd561fbb0d04972bff80225e8a80a168126c73db4d17cbc6688d6b5e76eeffea35f4cb4def5e40e266d2d68eb785a2a28c60e" name="busybox-less" arch="noarch">
  <version epoch="0" ver="1.37.0" rel="160000.2.2"/>
  <changelog author="dcermak@suse.com" date="1692014400">- Check in filelists instead of buildrequiring all non-busybox utils</changelog>
  <changelog author="fvogt@suse.com" date="1693396800">- Don't build the Dockerfile in OBS, it's for development only</changelog>
  <changelog author="kukuk@suse.com" date="1694088000">- Add conflict for coreutils-systemd, package got splitted</changelog>
  <changelog author="dmueller@suse.com" date="1700481600">- zgrep: don't set the label option as only the real grep
  supports it (bsc#1215943)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Add new sub-package for udhcpc</changelog>
  <changelog author="dimstar@opensuse.org" date="1708516800">- busybox-udhcpc conflicts with udhcp.</changelog>
  <changelog author="dimstar@opensuse.org" date="1727956800">- BuildRequire busybox: as we want to track the version of busybox,
  we need to ensure busybox is part of the buildroot.</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Partly revert changes from Aug 8th 2023 to automatically detect
  changes in busybox configuration
- Add getfattr applet to attr filelist</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- Blacklist creating links for halt, reboot, shutdown commands to avoid accidental
  use in a fully booted system (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add filtering of ignored applets to busybox.install</changelog>
</package>
<package pkgid="87da558a2d5ed833233b9cd33a9252f3906c91a8b2f7cb77699a02fc247591e94324a417c395be892b5c9a5b89657fd1a969ea0ba3d502421f0e52ec8e9d650a" name="busybox-misc" arch="noarch">
  <version epoch="0" ver="1.37.0" rel="160000.2.2"/>
  <changelog author="dcermak@suse.com" date="1692014400">- Check in filelists instead of buildrequiring all non-busybox utils</changelog>
  <changelog author="fvogt@suse.com" date="1693396800">- Don't build the Dockerfile in OBS, it's for development only</changelog>
  <changelog author="kukuk@suse.com" date="1694088000">- Add conflict for coreutils-systemd, package got splitted</changelog>
  <changelog author="dmueller@suse.com" date="1700481600">- zgrep: don't set the label option as only the real grep
  supports it (bsc#1215943)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Add new sub-package for udhcpc</changelog>
  <changelog author="dimstar@opensuse.org" date="1708516800">- busybox-udhcpc conflicts with udhcp.</changelog>
  <changelog author="dimstar@opensuse.org" date="1727956800">- BuildRequire busybox: as we want to track the version of busybox,
  we need to ensure busybox is part of the buildroot.</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Partly revert changes from Aug 8th 2023 to automatically detect
  changes in busybox configuration
- Add getfattr applet to attr filelist</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- Blacklist creating links for halt, reboot, shutdown commands to avoid accidental
  use in a fully booted system (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add filtering of ignored applets to busybox.install</changelog>
</package>
<package pkgid="2a9a097180ffe9b0e8728dbca07fecfd079707456e6fd0815bed13e84e7543d4b3c41128809b58cca6fa986c917a27a934966c4bbed728324f8c716a35473051" name="busybox-tar" arch="noarch">
  <version epoch="0" ver="1.37.0" rel="160000.2.2"/>
  <changelog author="dcermak@suse.com" date="1692014400">- Check in filelists instead of buildrequiring all non-busybox utils</changelog>
  <changelog author="fvogt@suse.com" date="1693396800">- Don't build the Dockerfile in OBS, it's for development only</changelog>
  <changelog author="kukuk@suse.com" date="1694088000">- Add conflict for coreutils-systemd, package got splitted</changelog>
  <changelog author="dmueller@suse.com" date="1700481600">- zgrep: don't set the label option as only the real grep
  supports it (bsc#1215943)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Add new sub-package for udhcpc</changelog>
  <changelog author="dimstar@opensuse.org" date="1708516800">- busybox-udhcpc conflicts with udhcp.</changelog>
  <changelog author="dimstar@opensuse.org" date="1727956800">- BuildRequire busybox: as we want to track the version of busybox,
  we need to ensure busybox is part of the buildroot.</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Partly revert changes from Aug 8th 2023 to automatically detect
  changes in busybox configuration
- Add getfattr applet to attr filelist</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- Blacklist creating links for halt, reboot, shutdown commands to avoid accidental
  use in a fully booted system (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add filtering of ignored applets to busybox.install</changelog>
</package>
<package pkgid="4a51621573f481d6a9ab5dfa7bb70fc661aff485310966255d4a119bc8e8ff7ddd16c38f01cdeaba1727006c36f537c7e05a1b3b9e55ec14f6a8c8457394611e" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2+git20240805.fd24d50" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1610366400">- Update to version 2+git20210111.eeae41c:
  * Make certbundle.run container friendly</changelog>
  <changelog author="lnussel@suse.de" date="1615291200">- Update to version 2+git20210309.8214505:
  * Make sure to trigger in transactional mode (boo#1179884)</changelog>
  <changelog author="lnussel@suse.de" date="1616068800">- openssl command line tools are no longer required, p11-kit does
  the job.</changelog>
  <changelog author="lnussel@suse.de" date="1623240000">- Update to version 2+git20210609.a4969d7:
  * Restore /etc/ssl/ca-bundle.pem if it doesn't exist
  * Get rid of ls
  * Fix indent inconsistencies
  * Create /var/lib/ca-certificates if needed
  * Install hooks with correct number
  * Remove legacy files
  * Remove find from update-ca-certificates</changelog>
  <changelog author="lnussel@suse.de" date="1627041600">- Update to version 2+git20210723.27a0476:
  * Don't trigger path unit on /usr/share
  * Use flock to serialize calls (boo#1188500)
  * Add --root &lt;directory&gt; option</changelog>
  <changelog author="lnussel@suse.de" date="1633348800">- Update to version 2+git20211004.3efbea9:
  * Ensure --root option propagates prefix properly to other scripts</changelog>
  <changelog author="lnussel@suse.de" date="1680782400">- Update to version 2+git20230406.2dae8b7:
  * Build in place support
  * Fix up argument parsing
  * merge spec file into git</changelog>
  <changelog author="kukuk@suse.com" date="1714392000">- Update to version 2+git20240415.3fe9324:
  * Add ca-certificates-setup.service
  * typo: differnt/different</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Update to version 2+git20240805.fd24d50:
  * Remove rc symlink [jsc#PED-266]</changelog>
  <changelog author="kukuk@suse.com" date="1724241600">- Fix source archive</changelog>
</package>
<package pkgid="563559b3285a16a066dba472c7cb524562225c76658f5113b07059fa3639b97f04dc51e3cc81934232693e03c96b3f0d8d7570cac3768adf1bf36644805a29e9" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.84" rel="160000.1.1"/>
  <changelog author="meissner@suse.com" date="1720440000">- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)
  - Added: FIRMAPROFESIONAL CA ROOT-A WEB
  - Distrust: GLOBALTRUST 2020</changelog>
  <changelog author="dmueller@suse.com" date="1734264000">- Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798)
  Removed:
  - SecureSign RootCA11
  - Security Communication RootCA3
  Added:
  - TWCA CYBER Root CA
  - TWCA Global Root CA G2
  - SecureSign Root CA12
  - SecureSign Root CA14
  - SecureSign Root CA15</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737633600">- Define two macros to break a build cycle with p11-kit.</changelog>
  <changelog author="dmueller@suse.com" date="1738670400">- remove extensive signature printing in comments of the cert
  bundle</changelog>
  <changelog author="dmueller@suse.com" date="1738670401">- update to 2.74 state of Mozilla SSL root CAs:
  Removed:
  * SwissSign Silver CA - G2
  Added:
  * D-TRUST BR Root CA 2 2023
  * D-TRUST EV Root CA 2 2023</changelog>
  <changelog author="meissner@suse.com" date="1742904000">- pass file argument to awk (bsc#1240009)</changelog>
  <changelog author="eroca@suse.com" date="1742904001">- Fix awk to compare (missing a =) and give the following output:
  [#] NSS_BUILTINS_LIBRARY_VERSION "2.74"</changelog>
  <changelog author="meissner@suse.com" date="1743422400">- explit remove distruted certs, as the distrust does not get exported
  correctly and the SSL certs are still trusted. (bsc#1240343)
  - Entrust.net Premium 2048 Secure Server CA
  - Entrust Root Certification Authority
  - AffirmTrust Commercial
  - AffirmTrust Networking
  - AffirmTrust Premium
  - AffirmTrust Premium ECC
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - GlobalSign Root E46
  - GLOBALTRUST 2020
- remove-distrusted.patch: apply to certdata.txt</changelog>
  <changelog author="meissner@suse.com" date="1744372800">- reenable the distrusted certs again. the distrust is only for certs
  issued after the distrust date, not for all certs of a CA.
  remove: remove-distrusted.patch</changelog>
  <changelog author="meissner@suse.com" date="1770724800">- Updated to 2.84 state (bsc#1258002)
  - Removed:
  - Baltimore CyberTrust Root
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - DigiNotar Root CA
  - Added:
  - e-Szigno TLS Root CA 2023
  - OISTE Client Root ECC G1
  - OISTE Client Root RSA G1
  - OISTE Server Root ECC G1
  - OISTE Server Root RSA G1
  - SwissSign RSA SMIME Root CA 2022 - 1
  - SwissSign RSA TLS Root CA 2022 - 1
  - TrustAsia SMIME ECC Root CA
  - TrustAsia SMIME RSA Root CA
  - TrustAsia TLS ECC Root CA
  - TrustAsia TLS RSA Root CA</changelog>
</package>
<package pkgid="82b0b9503cf86871a9c48a450f5c83b46fef45f92b3971d36dcb3c0e8da8516b331c0dfeae8c0aba3d7c2e69e06404bf4ff0ed76424131e79488eff6d229f0c4" name="canutils" arch="x86_64">
  <version epoch="0" ver="2025.01" rel="160000.2.2"/>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1598270400">- Update to version v2020.04.02
  * jcat: provide errqueue support
  * jcat: add repeat support
  * Add uds output functionality
  * cangw: add new command line option -X to handle CAN FD rules
  * cangw: add CAN FD support
- Drop 0001-fix-include-to-find-SIOCGSTAMP-with-latest-kernel.patch</changelog>
  <changelog author="jengelh@inai.de" date="1598961600">- Update to version 2020.04.02.g119 (ea844bdc5e)
  * Rename jcat et al to j1939cat
  * j1939cat: add broadcast support</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to snapshot 2020.04.02.g192 (4573e852f9)
  * isotpsend: add support for blocking write flag
  * add cansequence tool</changelog>
  <changelog author="jengelh@inai.de" date="1605614400">- Update to release 2020.11.0
  * No further changes to prior snapshot, just version bump.</changelog>
  <changelog author="jengelh@inai.de" date="1606737600">- Add "can-utils" provides, add documentation.</changelog>
  <changelog author="jengelh@inai.de" date="1609243200">- Update to release 2020.12.0
  * candump: Enable zero relative timestamps to be used in
    log files.
  * "-tz" and "-ta" are now valid options for the logfile format.</changelog>
  <changelog author="jengelh@inai.de" date="1629374400">- Update to release 2021.08.0
  * Support for new kernel features:
  * Add len8_dlc support for Classical CAN frames (Linux v5.11+)
  * Add ISOTP SF_BROADCAST support (Linux v5.11+)</changelog>
  <changelog author="jengelh@inai.de" date="1678881600">- Update to release 2023.03
  * cangen: add support for SO_TXTIME
  * canfdtest: Add extended frame format / message length / FD /
    BRS support
  * can-calc-bit-timing: add support for calculation of CAN-FD
    bit timings
  * cangen: new generation mode - partially randomized payload
    (-D)
  * cansniffer: add CAN FD support</changelog>
  <changelog author="pgajdos@suse.com" date="1739188800">- version update to 2025.01
  * Support of new kernel features:
  * Full CAN XL support for candump, canplayer, cangen, log2asc,
    asc2log, lib
  * cangen: support socket priority
  * Improvements and features:
  * ISOBUS (ISO11783-13) File Server Interface (isobusfs-srv,
    isobusfs-cli)
  * Add j1939_datatime_cli
  * cansequence: allow to bind on "any" interface
  * cansequence: add support to send and receive CAN-FD
  * canfdtest: add support for loopback testing
  * isotpdump: option to capture functional addressing traffic
  * isotpdump: add color support for functional addressing traffic
  * isotprecv: add option to enable dynamic flow control
    parameters (Linux 6.9+)
  * cangen: add missing long CAN frame view for len8_dlc and eff
  * canbusload: add auto detection of CAN interfaces
  * canbusload: show RX/TX direction in bargraph
  * canbusload: support busload statistic and busload visualization</changelog>
  <changelog author="jengelh@inai.de" date="1739880000">- Add 0001-build-give-libisobusfs-a-version.patch</changelog>
</package>
<package pkgid="0bcf5c87d6a14c5204fdb221c2344c1287a65b4fedd6311b38e7e292c3a51eb1063f5c783b34f426778f076fefef5586d11c7de58b7022b6313e1b659b76d047" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="d3a9c85c3449a7e0e09c3137bb04a1e833bf166c22f032c5a42a9e839b2194f6faff35f90c1ccf9db7880149e4871547e556c376b3cbe1aa61e65a5b1d31c8cc" name="checkpolicy" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * add flag to enable policy optimization
  * allow to write policy to stdout
  * remove a redundant if-condition</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * checkpolicy treats invalid characters as an error - might break rare use
    cases (intentionally)
  * Drop extern_te_assert_t.patch, is upstream</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * Fix a memleak and an integer overflow</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * When reading a binary policy by checkpolicy, do not automatically change the version
    to the max policy version supported by libsepol or, if specified, the value given
    using the "-c" flag.
  * Updated documentation
  * Prints the reason why opening a source policy file failed</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * warn on bogus IP address or netmask in nodecon statement
  * allow wildcard permissions in constraints
  * mention class name on invalid permission</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * error out if required permission would exceed limit
  * Improve error message for type bounds
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * checkpolicy: Add the command line argument -N, --disable-neverallow
  * dispol: add option to display users, drop duplicate option to display booleans,
  show number of entries before listing them
  * dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies
  * dispol: add options: --actions ACTIONS, --help
  * dismod: add options: --actions ACTIONS, --help
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * checkpolicy: support CIDR notation for nodecon statements
  * checkpolicy: provide more descriptive error messages and improve error handling
  * Bugfixes:
  * checkpolicy: handle unprintable token
  * checkpolicy: avoid assigning garbage values
  * checkpolicy: free temporary bounds type
  * checkpolicy: perform contiguous check in host byte order
  * checkpolicy: include &lt;ctype.h&gt; for isprint(3)
  * oss-fuzz fixes:
  * checkpolicy: add libfuzz based fuzzer
  * checkpolicy: free complete role_allow_rule on error
  * checkpolicy: free identifiers on invalid typebounds
  * checkpolicy: return YYerror on invalid character
  * checkpolicy: clone level only once</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
</package>
<package pkgid="19e93d4e88647baa04d72aaab0242f84bb3c534031ef298728989f9e0aa984c8fabbcc02933e9b9c7714e3d1c7688ee961ef41ccc3b4df448000f85b0d0b6837" name="chrony" arch="x86_64">
  <version epoch="0" ver="4.8" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="max@suse.com" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="max@suse.com" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="max@suse.com" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
</package>
<package pkgid="254d3a20482ce6ee02e0b1b0408e00151dd344a04f43cdd44bcd6b5c04fea0df724285fd7533fee7b0cfc2eed1db53333f2af5281cfc71877d8a90f376ccee8f" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="4.8" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="max@suse.com" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="max@suse.com" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="max@suse.com" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
</package>
<package pkgid="2dba9c0ecd06333aef83030cdb392d0c0e182744d92a081b3284e5e155a084240e8fa3320d87439501e4834cef9bca685a25f3ddd63cf6c01ea78a160d612f16" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="7.4" rel="160000.2.2"/>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="lnussel@suse.com" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mmachova@suse.com" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728648000">- Update to version 7.1:
  * cifs: update documentation for sloppy mount option
  * docs: add closetimeo description
  * docs: add compress description
  * checkopts: update it to work with latest kernel version
  * cifs-utils: add documentation for multichannel and max_channels
  * cifs-utils: smbinfo: add gettconinfo command
  * Implement CLDAP Ping to find the closest site
  * mount.cifs.rst: update section about xattr/acl support
  * mount.cifs.rst: add missing reference for sssd
  * getcifsacl, setcifsacl: add missing &lt;endian.h&gt; include for le32toh
  * getcifsacl, setcifsacl: add missing &lt;linux/limits.h&gt; include for XATTR_SIZE_MAX
  * cifs-utils: Make automake treat /sbin as exec, not data
  * pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
  * cifs.upcall: fix UAF in get_cachename_from_process_env()
  * cifs-utils: add documentation for acregmax and acdirmax
  * setcifsacl: Fix uninitialized value.
  * Use explicit "#!/usr/bin/python3"</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts (bsc#1235788);</changelog>
  <changelog author="scabrero@suse.de" date="1738065600">- Require a cifs.idmap plugin, suggest wb-cifs-idmap-plugin as
  default (idmapwb.so)</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1743595200">- Update cifs-utils to 7.3
  * Fix regression in mount.cifs with guest mount option
  * resolve_host.c: Initialize site_name
  * cldap_ping: Fix socket fd leak
  * getcifsacl: fix return code check for getting full ACL
  * cifs-utils: add documentation for upcall_target
  * cifs-utils: avoid using mktemp when updating mtab
  * cldap_ping.c: add missing &lt;sys/types.h&gt; include
  * configure.ac: libtalloc is now mandatory
  * cifscreds: allow user to set the key's timeout
  * cifscreds: use continue instead of break when matching commands
  * Do not pass passwords with sec=none and sec=krb5
  * docs: add esize description
  * docs: add max_cached_dirs description
  * docs: update actimeo description
  * Fix compiler warnings in mount.cifs
  * CIFS.upcall to accomodate new namespace mount opt
  * cifs-utils: Skip TGT check if valid service ticket is already available
  * use enums to check password or password2 in set_password, get_password_from_file and minor documentation additions
  * cifs-utils: support and document password2 mount option
  * smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1750075200">- Update cifs-utils to 7.4
  * mount.cifs: retry mount on -EINPROGRESS
  * cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
  * cifs.upcall: fix memory leaks in check_service_ticket_exits()
  * cifs-utils: bump version to 7.4
  * getcifsacl, setcifsacl: use &lt;libgen.h&gt; for basename
  * cifscreds: use &lt;libgen.h&gt; for basename</changelog>
</package>
<package pkgid="bed78a01d09b77fac42a7ed4f152532ab0ba8d437989b77dd4433677ed850171c29655178a013191114c60e2813cedb32a1e961b7be4a5352643ab95eaba32ac" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="25.1.3" rel="160000.2.1"/>
  <changelog author="rjschwei@suse.com" date="1714392000">- Add cloud-init-usr-sudoers.patch (bsc#1223469)
  + Handle the existence of /usr/etc/sudoers to search for the expected
    include location</changelog>
  <changelog author="rjschwei@suse.com" date="1717416000">- Add cloud-init-skip-rename.patch (bsc#1219680)
  + Brute force approach to skip renames if the device is already present</changelog>
  <changelog author="mmachova@suse.com" date="1718366400">- remove dependency on /usr/bin/python3 via using the macros (bsc#1212476)</changelog>
  <changelog author="rjschwei@suse.com" date="1736164800">- Add cloud-init-wait-for-net.patch (bsc#1227237)
  + Wait for udev once if we cannot find the expected MAC</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737374400">- Support python 3.13 (bsc#1233649):
  + pep-594-drop-pipes.patch, gh#canonical/cloud-init#4392
  + cloud-init-fix-python313.patch, gh#canonical/cloud-init#4669
  + cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch gh#canonical/cloud-init#5052</changelog>
  <changelog author="rjschwei@suse.com" date="1738670400">- Add cloud-init-direxist.patch (bsc#1236720)
  + Make sure the directory exists, if not create it, before writing in that
    location.</changelog>
  <changelog author="rjschwei@suse.com" date="1747310400">- Update to version 25.1.1 (bsc#1239715,jsc#PED-8680,bsc#1228414)
  + Removed included upstream
  - pep-594-drop-pipes.patch
  - cloud-init-fix-python313.patch
  - cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch
  - cloud-init-direxist.patch
  - cloud-init-wait-for-net.patch
  - cloud-init-usr-sudoers.patch
  - cloud-init-no-nmcfg-needed.patch
  - cloud-init-keep-flake.patch
  - cloud-init-lint-fixes.patch
  - cloud-init-pckg-reboot.patch
  - cloud-init-ds-deterministic.patch
  - cloud-init-write-routes.patch
  - cloud-init-skip-empty-conf.patch
  + Forward port
  - cloud-init-no-tempnet-oci.patch
  - cloud-init-no-openstack-guess.patch
  - cloud-init-lint-set-interpreter.patch
  + Add
  - cloud-init-ssh-usrmerge.patch (bsc#1237764)
  - cloud-init-lint-set-interpreter.patch
  - cloud-init-lint-fix.patch
  - cloud-init-no-single-process.patch
  - cloud-init-needs-action.patch
  + Drop hidesensitivedata in 16 &amp; greater
  + test: pytestify cc_chef tests, add migration test
  + chef: migrate files in old config directories for backups and cache
  + fix: correct the path for Chef's backups (#5994)
  + fix(Azure): don't reraise FileNotFoundError during ephemeral setup (#6113)
  + fix(azure): handle unexpected exceptions during obtain_lease() (#6092)
  [Ksenija Stanojevic]
  + Allow to set mac_address for VLAN subinterface (#6081)
  [jumpojoy] (GH: 5364)
  + fix: Remove erroneous EC2 reference from 503 warning (#6077)
  + fix: NM reload and bring up individual network conns (#6073) [Ani Sinha]
  + fix: stop warning on dual-stack request failure (#6044)
  + fix: install_method: pip cannot find ansible-pull command path (#6021)
  [Hasan Aliyev] (GH: 5720)
  + fix: Fix DataSourceAliYun exception_cb signature (#6068) (GH: 6066)
  + fix: Update OauthUrlHelper to use readurl exception_cb signature
  (GH: 6065)
  + test: add OauthUrlHelper tests
  + test: Remove CiTestCase from test_url_helper.py
  + test: pytestify test_url_helper.py
  + fix: track more removed modules (#6043)
- From 25.1
  + ci: fix post-merge packaging CI (#6038)
  + feat(azure): Fix imds-based ssh_pwauth (#6002) [Ksenija Stanojevic]
  + ci: check for sorted patches (#6036)
  + feat: aliyun datasource support crawl metadata at once (#5942)
  [jinkangkang]
  + docs: document /usr merge breaking change (#6032)
  + test: Add integration test for /var mounts (#6033)
  + test: Ensure pre-24.2 custom modules work (#6034)
  + doc: Update references to older keys (#6022) [Pedro Ribeiro]
  + fix: untyped-defs in tests/unittests/{config, net, sources} (#6023)
  [Romain]
  + fix: don't reference PR in post-merged CI (#6019)
  + chore: explicitly skip broken ansible integration tests (#5996) [a-dubs]
  + tests(oracle): fix test_install_missing_deps apt race condition (#5996)
  [a-dubs]
  + test(oracle): fix test_ubuntu_drivers_installed (#5996) [a-dubs]
  + test(oracle): fix test_frequency_override integration test (#5996)
  [a-dubs]
  + chore: add type hint to IntegrationCloud's cloud_instance field (#5996)
  [a-dubs]
  + test(oracle): fix modules/test_lxd.py::test_storage_lvm on noble (#5996)
  [a-dubs]
  + commit 9e591fff266be9d4c83f74ec02a717b74993304d [a-dubs]
  + net/sysconfig: do not remove all existing settings of
  /etc/sysconfig/network (#5991) [Ani Sinha] (GH: 5990)
  + fix: remove wrong return when checking if network necessary (#6013)
  + fix: typing for rsyslog, ubuntu_pro, power_state_change (#5985)
  [MostafaTarek124eru]
  + fix: Retry on OpenStack HTTP status codes (#5943) [weiyang] (GH: 5687)
  + fix: Ensure fqdn is treated as string in get_hostname_fqdn (#5993)
  [MKhatibzadeh] (GH: 5989)
  + feat(vmware): Convert imc network config to v2 (#5937) [PengpengSun]
  + ci: add upstream post-merge test
  + ci: check if upstream commit causes ubuntu patch conflicts
  + ci: organize cla tests together
  + test: eliminate obsolete cases, add non-error case
  + chore: remove redundant manual schema validation
  + doc: clarify subiquity docs
  + chore: cleanup `len' usage (#5956) [Shreenidhi Shedi]
  + Fix: GCE _get_data crashes if DHCP lease fails (#5998) [Bryan Fraschetti]
  + Fixes GH-5997
  + fix: correct the path for Chef's cache (#5994)
  [MostafaTarek124eru] (GH: 5090)
  + fix: Run ansible with run_user instead of root for distro install_method
  (#5986) [Amirhossein Shaerpour] (GH: 4092)
  + fix: retry AWS hotplug for async IMDS (#5995) (GH: 5373)
  + feat(integration_tests): add optional INSTANCE_TYPE setting (#5988)
  [Alec Warren]
  + feat(integration-tests): set boto3 and botocore to INFO to prevent
  log spamming [a-dubs]
  + ci: add 'tox -e integration-tests-fast' command [a-dubs]
  + chore: Add feature flag for manual network waiting (#5977)
  + Release 24.4.1
  + fix: Use /usr/lib/ rather than /lib in packaging code (#5970)
  + Use log_with_downgradable_level for user password warnings (#5927)
  [Ani Sinha]
  + doc: change to hyphenated keys (#5909) (GH: 5555)
  + fix: Wait for udev on openstack (#5947) [Robert Schweikert] (GH: 4125)
  + test: disambiguate resource cleanup from test failure (#5926)
  + fix: use program name of netcat as installed by upstream, "nc" (#5933)
  (#5933) [Andreas K. Hüttel]
  + ci: bump canonical/setup-lxd to version v0.1.2 (#5948)
  + feat(cc_chef): Allow change of Chef configuration file (#5925)
  [Sean Smith]
  + docs: fix typo in generated file in LXD tutorial (#5941) [Pavel Shpak]
  + feat: Identify Samsung Cloud Platform as OpenStack (#5924) [us0310306]
  + fix: don't deadlock when starting network service with systemctl (#5935)
  + feat: Custom keys for apt archives (#5828) [Bryan Fraschetti] (GH: 5473)
  + test: improve test initialization error path (#5920)
  + chore: improve logging when lxd detection fails (#5919)
  + fix: Add "manual" to allowed subnet types  (#5875)
  [Math Marchand] (GH: 5769)
  + fix: remove bad ssh_svcname setting for Gentoo/OpenRC (#5918)
  [Andreas K. Hüttel]
  + feat(gentoo): Add compatibility for Gentoo with systemd (#5918)
  [Andreas K. Hüttel]
  + fix(ovf): no warning should be log when rpctool found no value (#5915)
  [PengpengSun] (GH: 5914)
  + Move DS VMware to be in front of DS OVF (#5912) [PengpengSun] (GH: 4030)
  + ci: Add proper 'Breaks: ' to integration testing simple deb (#5923)
  + chore: Add akhuettel to CLA signers file (#5917) [Andreas K. Hüttel]
  + chore: eliminate calls at import time (#5889) (GH: 5344)
  + test: Add pyserial to test-requirements.txt (#5907)
  + test: Allow unknown size in growpart test (#5876)
  + doc: Update tutorials [Sally]
  + fix: bump azure key size to 3072 (#5841)
  24.4.1
  + fix: Ensure _should_wait_via_user_data() handles all user data types (#5976)
  + fix: Don't log error in wait_for_url (#5972)
  + feat(url_helper): Retry on 503 error (#5938)
  + fix: Don't break modules that use get_meta_doc() (#5953)
  + refactor: Pass deprecation log args as tuple (#5953)
  + fix: uninstall custom signal handlers before shutdown (#5913)
  24.4
  + test: Ensure unit ordering in ftp tests includes downstream units (#5892)
  + test: re-decrement expected webhook events (#5894)
  + test: allow relative path in apt-get test (#5891)
  + Fix metric setting of nmconnection for rhel (#5878) [Amy Chen]
  + chore: remove unused code(#5887)
  + feat(ephemeral): replace old has_url_connectivity() with new
  _check_connectivity_to_imds() [a-dubs]
  + feat(oracle): add true single stack ipv6 support [a-dubs]
  + feat(ephemeral): refactor ephemeralIP and add ipv6 connectivity check
  [a-dubs]
  + test: Decrement expected webhook events (#5888)
  + chore: remove `--docs` option from `cloud-init schema` (#5857) (GH: 5756)
  + test: pytestify "tests/unittests/config/test_cc_timezone.py" (#5885)
  [Mahesh Ghumare]
  + ci: bump integration tests to use plucky
  + test: add grub_dpkg to inactive modules
  + test: move default behavior tests into their own module
  + test(apt): add plucky version for hello pkg (#5883)
  + Docs: improved mermaid diagram for better visibility. Add "MaheshG11"
  as contributor (#5874) [Mahesh Ghumare] (GH: 5837)
  + fix(ntp): Fix RockyLinux OS support  (#5864) [Sid Shukla]
  + chore(jsonschema): migrate from deprecated Validator.iter_errors (#5856)
  + chore: remove deprecation warning getting jsonschema's version (#5856)
  + chore: use filter arg for tar.extractall (#5856)
  + chore: remove __init__ from pytest test class (#5856)
  + chore: do not test element's truth value directly (#5856)
  + chore: migrate from deprecated datetime.datetime.utcfromtimestamp (#5856)
  + chore: migrate from deprecated datetime.datetime.utcnow() (#5856)
  + chore: set recursive=False for ensure_dir if parent path is "/" (#5816)
  [sxt1001]
  + ci: fix broken daily dependencies (#5867)
  + ci: fix packaging tests (#5865)
  + feat(vultr): add override for network interface detection (#5847)
  [Andrew Davis]
  + feat(networkd): Support RequiredForOnline option (#5852) [Dan McGregor]
  + Prevent NM from handling DNS when network interfaces have DNS config
  (#5846) [Ani Sinha]
  + fix(smartos): Add `addrconf` IPv6 support (#5831)
  [blackhelicoptersdotnet]
  + freebsd: adjust to match the new pyyaml package name (#5844)
  [Gonéri Le Bouder]
  + fix: disable grub-dpkg by default (#5840)
  + fix(openbsd): Enable sysv init scripts in OpenBSD build script (#5790)
  [Hyacinthe Cartiaux] (LP: 4036, #1992853)
  + test: Fix duplicate judgment conditions in password generation (#5835)
  [sxt1001]
  + chore: don't render non-templated unit files (#5830)
  + chore: simplify and standardize cloud-final.service (#5830)
  + chore: simplify Conflicts=shutdown.target (#5830)
  + chore: remove redundant Before=NetworkManager.service (#5830)
  + chore: remove unnecessary systemd settings (#5830)
  + chore: eliminate redundant ordering dependencies (#5819)
  + fix: fix ordering cycle for distros with default deps (#5819) (GH: 5755)
  + test: unbreak pytest-xdist (#5829)
  + feat: Conditionally remove networkd online dependency on Ubuntu (#5772)
  + feat: Ensure random passwords contain multiple character types (#5815)
  [sxt1001] (GH: 5814)
  + docs: split example page into example library (#5645) [Sally]
  + doc: clarify workarounds required for single process changes (#5817)
  + chore: add 3.13 to PR CI runs, 3.14 to scheduled (#5825)
  + fix: Render v2 bridges correctly on network-manager with set-name
  (#5740) (GH: 5717)
  + test: add no_thinpool unit test (#5802)
  + chore: split lxd init config into separate function (#5802)
  + test: pytestify test_cc_lxd.py (#5802)
  + fix: Correctly handle missing thinpool in cc_lxd (#5802)
  + fix: Render bridges correctly for v2 on sysconfig with set-name (#5674)
  (GH: 5574)
  + tests(minimal): rsyslog not in minimal images expect warning (#5811)
  + tests(lxd): avoid failure on multiple calls to --show-log (#5811)
  + chore: update netplan import semantics and related tests (#5805)
  (GH: 5804)
  + lint: fix untyped-defs on /tests/unittest/cmd (#5800) [iru]
  + test: actually use devel release and verify_clean_boot enhancements
  (#5801)
  + feat(locale): locales install on minimal images when cfg requests (#5799)
  + feat(byobu): support byobu install on minimal images when cfg requests
  (#5799)
  + chore: Use devel release and no sbuild in integration CI (#5798)
  + test: Update integration tests from netplan backport (#5796)
  + test: add get_syslog_or_console for minimal images without syslog (#5793)
  + chore: Remove resize_root_tmp from cloud.cfg.tmpl (#5795) (GH: 5786)
  + docs: Fix field name from `contents` to `content` (#5787) [Igor Akkerman]
  + chore: bump pycloudlib to required version (#5792)
  + fix: avoid deprecation logs for calling cli stages (#5770) (GH: 5726)
  + tests: bump pycloudlib deps to include gce bug fix for id str (#5783)
  + fix(test): convert use p.gce.instance.id instead of instance_id (#5783)
  + fix(network-manager): bond properties and network schema (#5768)
  [Denis Kadyshev]
  + Fix metric setting for ifcfg network connections for rhel (#5777)
  [Ani Sinha] (GH: 5776)
  + fix(akamai): handle non-string user data in base64 decoding (#5751)
  [Jesse Alter]
  + fix(ci): do not auto stale issues (#5775)
  + Make pytest more verbose for easier debugging (#5778) [Ani Sinha]
  + ci: fix tox.ini pytest cmd to use cloudinit dir for coverage reporting
  (#5774) [Alec Warren]
  + tests: add OS_IMAGE_TYPE setting to allow for minimal tests (#5682)
  + test(hotplug): Simplify test_multi_nic_hotplug (#5763)
  + test(hotplug): increase nc timeout (#5763)
  + test: pytestify test_main.py (#5758)
  + test(ec2-dual-stack): fix int-test (#5762)
  + test: make verify_clean_boot really respect return code (#5761)
  + test: bump timeout in test_order (#5759)
  + docs: Properly document the cc_ubuntu_autoinstall module (#5757)
  + docs: fix WSL tutorial (#5752) (GH: 5746)
  + test: make verify_clean_boot respect return code by environment (#5754)
  + feat(integration_test): add CLOUD_INIT_PKG setting (#5739)
  + fix(ci): fix packaging check merge operation (#5750)
  + doc: do not document user.meta-data key (#5745)
  + test: avoid undocumented lxd key (#5748)
  + test: Refactor test_cc_set_hostname.py and test_cc_ntp.py (#5727)
  + chore: update docs URLs to cloud-init.io (#5741)
  + test: fix timer logging change expected logs (#5734)
  + fix: type annotations for several modules (#5733)
  + chore: add timer to io and string manipulation code
  + feat: add log package and performance module
  + remove newline injected for cloud-init status --wait (#5700)
  [Andrew Nelson] (GH: 5863)
  + test: webhook require_deprecation msg on 24.3 (#5731)
  + test: fix test_nocloud message typo introduced by 313390f8 (#5731)
  + test: Fix test_log_message_on_missing_version_file (#5730)
  + tests: assert info level warnings instead of require_deprecation
  + tests: fix test to ignore_warnings not require Used fallback ds
  + chore: clean up pytest warnings (#5721)
  + tests(pro): bump pycloudlib add noble release to pro tests (#5719)
  + fix(hotplugd.socket): remove basic.target as dependency (#5722)
  (LP: #2081124)
  + ci: fix integration test positional argument (#5718)
  + Create datasource for CloudCIX (#1351) [BrianKelleher]
  + ci: colorize output (#5716)
  + fix(schema): Allow for locale: false in schema add tests (#5647)
  + ci: fix packaging patch check (#5713)
  + chore: clean up old pickle workaround (#5714)
  + fix: force sftp cleanup when done with instance (#5698)
  + test(hotplug): reenable vpc test in focal (#5492)
  + chore: fix typing of userdata_raw (#5710)
  + fix(NetworkManager): Fix network activator (#5620)
  + fix: lxd do not check for thinpool kernel module (#5709)
  + docs: fix typo in docstring (#5708)
  + Scaleway: Force on-link: true for static networks (#5654)
  [Louis Bouchard] (LP: 5523, #2073869)
  + fix: Invalid "seedfrom" in NoCloud system configuration (#5701)
  + tests: pytestify test_nocloud.py (#5701)
  + test: make verify_clean_boot respect return code by series (#5695)
  + fix: use cross-distro netcat name (#5696)
  + ci: fix labeler (#5697)
  + chore(actions): add packaging label for any branches modifying debian/*
  + (#5693)
  + test: add verify_clean_boot() calls alongside verify_clean_log() (#5671)
  + test: add deprecation support to verify_clean_boot (#5671)
  + doc: remove misleading warning (#5681)
  + chore: Prefer other methods over $INSTANCE_ID (#5661)
  + ci: fix packaging test when no patches (#5680)
  + chore: fix tip-ruff and update to latest version (#5676)
  + chore: make ansible test serial (#5677)
  + feat(ec2): Bump url_max_timeout to 240s from 120s. (#5565)
  [Robert Nickel]
  + chore: fix typo in requirements.txt (#5637)
  + feat: make pyserial an optional dependency (#5637)
  + chore: bump ci dependency versions (#5660)
  + chore: drop broken optimization (#5666)
  24.3.1
  + test: add test coverage for iproute2 commands (#5651)
  + fix(netops): fix ip addr flush command (#5651) (GH: 5648)
  24.3
  + docs: Clarify v2 set-name behavior (#5639)
  + fix: properly handle blank lines in fstab (#5643)
  + fix: cc_user_groups incorrectly assumes "useradd" never locks password
  field (#5355) [dermotbradley]
  + tests: assert cloud-init user-data cert is the only root cert (#5641)
  + feat: add automation for ubuntu/* branches asserting quilt patches apply
  (#5622)
  + fix(sources/wsl): no error with empty .cloud-init dir (SC-1862) (#5633)
  + feat(azure): add PPS support for azure-proxy-agent (#5601)
  [Ksenija Stanojevic]
  + fix(tests): use instance.clean/restart instead of clean --reboot (#5636)
  + test: fix cmd/test_schema int test (#5629)
  + test: fix test_honor_cloud_dir int test (#5627)
  + docs: alphabetize dsname lookup table. update comment to create the csv
  (#5624)
  + docs: new datasources should update reference/ds_dsname_map (#5624)
  + test: fix ca_certs int test (#5626)
  + chore: update schema docs to use RST bold for config key names (#5562)
  + fix(doc): italics around deprecation prefix, description bolds key names
  (#5562)
  + feat(doc): add env vars to debug config module doc builds (#5562)
  + fix(doc): doc of nested objects under JSON schema items.oneOf (#5562)
  + fix(doc): object type check if patternProperties or properties (#5562)
  + doc(schema): schema descriptions should end with trailing stop (#5562)
  + fix(wsl): Properly assemble multipart data (#5538) [Carlos Nihelton]
  + feat: collect-logs improvements (#5619)
  + tests: fix test_ca_certs.py for gcp (#5621)
  + fix(nm): Ensure bond property name formatting matches schema definition
  (#5383) [Curt Moore]
  + Update behavior of base bond interface with NetworkManager (#5385)
  [Curt Moore]
  + ci: Drop Python 3.6 and 3.7 (#5607)
  + chore(black): Bump version (#5607)
  + chore(mypy): Fix failures on newer versions of mypy (#5607)
  + chore(tox.ini): Simplify configuration, fix minor bugs (#5607)
  + chore(mypy): Lint log module (#5607)
  + fix(systemd): Correct location of installed drop-in files(#5615)
  [Noah Meyerhans]
  + fix(btrfs): Version parsing (#5618)
  + docs: Remove unnecessary section, add feature flag page (#5617)
  + docs: Drop Python 3.6 and 3.7 support (#5617)
  + chore: explain other use of oauth (#5616)
  + chore(actions): add doc label for any doc related subdir file matches
  (#5602)
  + doc: Add misc links, improve wording (#5595)
  + doc(boot): Make first boot a dedicated page (#5595)
  + doc: Describe all stages in a single process (#5595)
  + chore: Deprecate old commands in help output (#5595)
  + chore: add comment explaining the NetworkManager may-fail setting
  (#5598) [Ani Sinha]
  + Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr
  (#5471)" (#5596) [PengpengSun]
  + fix: read_optional_seed to set network-config when present (#5593)
  + feat(snap): avoid refresh on package_upgrade: true and refresh.hold
  (#5426)
  + fix: Fix tests which have outdated strings (#5585)
  + fix: Fix ftp failures (#5585)
  + doc: improve integration testing configuration instructions (#5556)
  [Alec Warren]
  + azure: check azure-proxy-agent status (#5138) [Ksenija Stanojevic]
  + refactor: refactor and fix mypy in DataSourceIBMCloud.py (#5509)
  [Alec Warren]
  + fix: Update default LXD meta-data with user meta-data (#5584)
  + chore: Fix log message in url_helper.py (#5583)
  + fix: nocloud no fail when network-config absent (#5580)
  + feat: Single process optimization (#5489)
  + chore: Add helper, refactor utilities into separate module (#5573)
  + refactor: update handle function of cc_mounts (#5498)
  + fix: Integration tests (#5576)
  + fix(NoCloudNet): Add network-config support (#5566)
  + feat: Eliminate redundant configuration reads (#5536)
  + fix(actions): correct typo in cloudinit/config/schemas/ match (#5570)
  + fix: add host template for AOSC (#5557) [Yuanhang Sun]
  + chore(debian): Remove vestigial postinst and preinst code (#5569)
  + fix(actions): doc labeler needs all clause instead of default any (#5568)
  + docs: Overhaul user data formats documentation (#5551)
  + chore: Deprecate ENI as an input configuration format (#5561)
  + doc: improve drop-in custom modules (#5548)
  + doc(NoCloud): Categorize the different configuration types (#5521)
  + doc(autoinstall): Remove incorrect statements, be more direct (#5545)
  + chore: remove unneeded doc-lint tox env config (#5547)
  + fix(doc-spelling): config spelling_word_list_filename (#5547)
  + doc(modules): add section to wrap modules' doc (#5550)
  + doc: Update docs on boothooks (#5546)
  + fix: doc auto label to consider schema json changes as doc PRs (#5543)
  + feat(schema): add chef_license schema enum (#5543)
  + doc: add diagram with boot stages (#5539)
  + docs: improve qemu command line (#5540) [Christian Ehrhardt]
  + fix: auto label doc PRs (#5542)
  + fix(wsl): Put back the "path" argument to wsl_path in ds-identify
  + (#5537) [Carlos Nihelton]
  + test: fix test_kernel_command_line_match (#5529)
  + test: fix no ds cache tests (#5529)
  + fix(azurelinux): Change default usr_lib_exec path (#5526) [Minghe Ren]
  + feat: Support URI sources in `write_files` module (#5505)
  [Lucas Ritzdorf]
  + add openeuler to distros in cc_spacewalk.py (#5530) [sxt1001]
  + feat(wsl): Special handling Landscape client config tags (#5460)
  [Carlos Nihelton]
  + chore: Deprecate partially supported system config (#5515)
  + chore: Improve detection logging for user clarity (#5515)
  + fix(ds-identify): Detect nocloud when seedfrom url exists (#5515)
  + refactor: logs.py add typing and small misc refactors (#5414)
  + refactor: logs.py pathlib changes (#5414)
  + refactor: replace verbosity with log levels in logs.py (#5414)
  + feat: Add trace-level logger (#5414)
  + chore(formatting): fix squashed commit test formatting (#5524)
  + fix: Clean cache if no datasource fallback (#5499)
  + Support setting mirrorlist in yum repository config (#5522) [Ani Sinha]
  + doc(OFV): Document how to configure cloud-init (#5519)
  + fix: Update DNS behavior for NetworkManager interfaces (#5496)
  [Curt Moore]
  + Fix configuration of DNS servers via OpenStack (#5384) [Curt Moore]
  + test: Unconditionally skip test_multi_nic_hotplug_vpc (#5503)
  + tests: revert expectation of exit 2 from cloud-init init --local (#5504)
  + fix(test): Fix ip printer for non-lxd (#5488)
  + feat(systemd): convert warning level message to deprecation (#5209)
  + test: allow verify_clean_boot to ignore all or specific tracebacks
  (#5209)
  + test: Don't fail tests which call cloud-init as a command (#5209)
  + feat(systemd): Warn user of unexpected run mode (#5209)
  + fix: add schema rules for 'baseurl' and 'metalink' in yum repo config
  (#5501) [Ani Sinha]
  + Set MTU for bond parent interface (#5495) [Curt Moore]
  + refactor: util.mounts to handle errors (#5490)
  + refactor: util.get_proc_env to work with strs (#5490)
  + typing: fix check_untyped_defs in cloudinit.util (#5490)
  + test: Add missing assert to test_status.py (#5494)
  + test: Ensure mkcert executable in ftp tests (#5493)
  + test: pytestify and cleanup test_cc_mounts.py (#5459)
  + fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)
  [PengpengSun]
  + fix(openbsd): fix mtu on newline in hostname files (#5412) [Tobias Urdin]
  + feat(aosc): Add 'AOSC OS' support (#5310) [Yuanhang Sun]
  24.2
  + test: Fix no default user in test_status.py (#5478)
  + fix: correct deprecated_version=22.2 for users.sudo
  + test: Add jsonschema guard in test_cc_ubuntu_pro.py (#5479)
  + fix(test): Fix pycloudlib types in integration tests (#5350)
  + fix(test): Fix ip printing for non-lxd instances (#5350)
  + chore(mypy): Drop unused missing import exclusions (#5350)
  + type: Add stub types for network v1/v2 config (#5350)
  + chore: Auto-format network jsonschema in ci (#5350)
  + fix(tox): Update tox.ini (#5350)
  + chore(typing): Remove type ignores and casts (#5350)
  + refactor(typing): Remove unused code paths (#5350)
  + fix(typing): Add / update type annotations (#5350)
  + fix(typing): Remove type annotation for unused variable (#5350)
  + fix(typing): Remove invalid type annotations (#5350)
  + ci(mypy): Set default follow_imports value (#5350)
  + test: Update integration tests to pass on focal (#5476)
  + tests: update ubuntu_pro test to account for info-level deprecations
  (#5475)
  + tests: update nocloud deprecation test for boundary version (#5474)
  + fix(rh_subscription): add string type to org (#5453)
  + tests: integration tests aware of features.DEPRECATION_INFO_BOUNDARY
  + tests: update keyserver PPA key fur curtin-dev (#5472)
  + test: Fix deprecation test failures (#5466)
  + chore: fix schema.py formatting (#5465)
  + fix: dont double-log deprecated INFOs (#5465)
  + fix(test): Mock version boundary (#5464)
  + fix(schema): Don't report changed keys as deprecated (#5464)
  + test: fix unit test openstack vlan mac_address (#5367)
  + fix: Ensure properties for bonded interfaces are properly translated
  (#5367) [Curt Moore]
  + fix(schema): permit deprecated hyphenated keys under users key (#5456)
  + fix: Do not add the vlan_mac_address field into the VLAN object (#5365)
  [Curt Moore]
  + doc(refactor): Convert module docs to new system (#5427) [Sally]
  + test: Add unit tests for features.DEPRECATION_INFO_BOUNDARY (#5411)
  + feat: Add deprecation boundary support to schema validator (#5411)
  + feat: Add deprecation boundary to logger (#5411)
  + fix: Gracefully handle missing files (#5397) [Curt Moore]
  + test(openstack): Test bond mac address (#5369)
  + fix(openstack): Fix bond mac_address (#5369) [Curt Moore]
  + test: Add ds-identify integration test coverage (#5394)
  + chore(cmdline): Update comments (#5458)
  + fix: Add get_connection_with_tls_context() for requests 2.32.2+ (#5435)
  [eaglegai]
  + fix(net): klibc ipconfig PROTO compatibility (#5437)
  [Alexsander de Souza] (LP: #2065787)
  + Support metalink in yum repository config (#5444) [Ani Sinha]
  + tests: hard-code curtin-dev ppa instead of canonical-kernel-team (#5450)
  + ci: PR update checklist GH- anchors to align w/ later template (#5449)
  + test: update validate error message in test_networking (#5436)
  + ci: Add PR checklist (#5446)
  + chore: fix W0105 in t/u/s/h/test_netlink.py (#5409)
  + chore(pyproject.toml): migrate to booleans (#5409)
  + typing: add check_untyped_defs (#5409)
  + fix(openstack): Append interface / scope_id for IPv6 link-local metadata
  address (#5419) [Christian Rohmann]
  + test: Update validation error in test_cli.py test (#5430)
  + test: Update schema validation error in integration test (#5429)
  + test: bump pycloudlib to get azure oracular images (#5428)
  + fix(azure): fix discrepancy for monotonic() vs time() (#5420)
  [Chris Patterson]
  + fix(pytest): Fix broken pytest gdb flag (#5415)
  + fix: Use monotonic time (#5423)
  + docs: Remove mention of resolv.conf (#5424)
  + perf(netplan): Improve network v1 -&gt; network v2 performance (#5391)
  + perf(set_passwords): Run module in Network stage (#5395)
  + fix(test): Remove temporary directory side effect (#5416)
  + Improve schema validator warning messages (#5404) [Ani Sinha]
  + feat(sysconfig): Add DNS from interface config to resolv.conf (#5401)
  [Ani Sinha]
  + typing: add no_implicit_optional lint (#5408)
  + doc: update examples to reflect alternative ways to provide `sudo`
  option (#5418) [Ani Sinha]
  + fix(jsonschema): Add missing sudo definition (#5418)
  + chore(doc): migrate cc modules i through r to templates (#5313)
  + chore(doc): migrate grub_dpkg to tmpl add changed/deprecation (#5313)
  + chore(json): migrate cc_apt_configure and json schema indents (#5313)
  + chore(doc): migrate ca_certs/chef to template, flatten schema (#5313)
  + chore(doc): migrate cc_byobu to templates (#5313)
  + chore(doc): migrate cc_bootcmd to templates (#5313)
  + fix(apt): Enable calling apt update multiple times (#5230)
  + chore(VMware): Modify section of instance-id in the customization config
  (#5356) [PengpengSun]
  + fix(treewide): Remove dead code (#5332) [Shreenidhi Shedi]
  + doc: network-config v2 ethernets are of type object (#5381) [Malte Poll]
  + Release 24.1.7 (#5375)
  + fix(azure): url_helper: specify User-Agent when using headers_cb with
  readurl() (#5298) [Ksenija Stanojevic]
  + fix: Stop attempting to resize ZFS in cc_growpart on Linux (#5370)
  + doc: update docs adding YAML 1.1 spec and jinja template references
  + fix(final_message): do not warn on datasourcenone when single ds
  + fix(growpart): correct growpart log message to include value of mode
  + feat(hotplug): disable hotplugd.socket (#5058)
  + feat(hotlug): trigger hotplug after cloud-init.service (#5058)
  + test: add function to push and enable systemd units (#5058)
  + test(util): fix wait_until_cloud_init exit code 2 (#5058)
  + test(hotplug): fix race getting ipv6 (#5271)
  + docs: Adjust CSS to increase font weight across the docs (#5363) [Sally]
  + fix(ec2): Correctly identify netplan renderer (#5361)
  + tests: fix expect logging from growpart on devent with partition (#5360)
  + test: Add v2 test coverage to test_net.py (#5247)
  + refactor: Simplify collect_logs() in logs.py (#5268)
  + fix: Ensure no subp from logs.py import (#5268)
  + tests: fix integration tests for ubuntu pro 32.3 release (#5351)
  + tests: add oracular's hello package for pkg upgrade test (#5354)
  + growpart: Fix behaviour for ZFS datasets (#5169) [Mina Galić]
  + device_part_info: do not recurse if we did not match anything (#5169)
  [Mina Galić]
  + feat(alpine): add support for Busybox adduser/addgroup (#5176)
  [dermotbradley]
  + ci: Move lint tip and py3-dev jobs to daily (#5347)
  + fix(netplan): treat netplan warnings on stderr as debug for cloud-init
  (#5348)
  + feat(disk_setup): Add support for nvme devices (#5263)
  + fix(log): Do not warn when doing requested operation (#5263)
  + Support sudoers in the "/usr/usr merge" location (#5161)
  [Robert Schweikert]
  + doc(nocloud): Document network-config file (#5204)
  + fix(netplan): Fix predictable interface rename issue (#5339)
  + cleanup: Don't execute code on import (#5295)
  + fix(net): Make duplicate route add succeed. (#5343)
  + fix(freebsd): correct configuration of IPv6 routes (#5291) [Théo Bertin]
  + fix(azure): disable use-dns for secondary nics (#5314)
  + chore: fix lint failure (#5320)
  + Update pylint version to support python 3.12 (#5338) [Ani Sinha]
  + fix(tests): use regex to avoid focal whitespace in jinja debug test
  (#5335)
  + chore: Add docstrings and types to Version class (#5262)
  + ci(mypy): add type-jinja2 stubs (#5337)
  + tests(alpine): github trust lxc mounted source dir cloud-init-ro (#5329)
  + test: Add oracular release to integration tests (#5328)
  + Release 24.1.6 (#5326)
  + test: Fix failing test_ec2.py test (#5324)
  + fix: Check renderer for netplan-specific code (#5321)
  + docs: Removal of top-level --file breaking change (#5308)
  + fix: typo correction of delaycompress (#5317)
  + docs: Renderers/Activators have downstream overrides (#5322)
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix(lxd): Properly handle unicode from LXD socket (#5309)
  + docs: Prefer "artifact" over "artefact" (#5311) [Arthur Le Maitre]
  + chore(doc): migrate cc_byobu to templates
  + chore(doc): migrate cc_bootcmd to templates
  + chore(doc): migrate apt_pipelining and apk_configure to templates
  + tests: in_place mount module-docs into lxd vm/container
  + feat(docs): generate rtd module schema from rtd/module-docs
  + feat: Set RH ssh key permissions when no 'ssh_keys' group (#5296)
  [Ani Sinha]
  + test: Avoid circular import in Azure tests (#5280)
  + test: Fix test_failing_userdata_modules_exit_codes (#5279)
  + chore: Remove CPY check from ruff (#5281)
  + chore: Clean up docstrings
  + chore(ruff): Bump to version 0.4.3
  + feat(systemd): Improve AlmaLinux OS and CloudLinux OS support (#5265)
  [Elkhan Mammadli]
  + feat(ca_certs): Add AlmaLinux OS and CloudLinux OS support (#5264)
  [Elkhan Mammadli]
  + docs: cc_apt_pipelining docstring typo fix (#5273) [Alex Ratner]
  + feat(azure): add request identifier to IMDS requests (#5218)
  [Ksenija Stanojevic]
  + test: Fix TestFTP integration test (#5237) [d1r3ct0r]
  + feat(ifconfig): prepare for CIDR output (#5272) [Mina Galić]
  + fix: stop manually dropping dhcp6 key in integration test (#5267)
  [Alec Warren]
  + test: Remove some CiTestCase tests (#5256)
  + fix: Warn when signal is handled (#5186)
  + fix(snapd): ubuntu do not snap refresh when snap absent (LP: #2064300)
  + feat(landscape-client): handle already registered client (#4784)
  [Fabian Lichtenegger-Lukas]
  + doc: Show how to debug external services blocking cloud-init (#5255)
  + fix(pdb): Enable running cloud-init under pdb (#5217)
  + chore: Update systemd description (#5250)
  + fix(time): Harden cloud-init to system clock changes
  + fix: Update analyze timestamp uptime
  + fix(schema): no network validation on netplan systems without API
  + fix(mount): Don't run cloud-init.service if cloud-init disabled (#5226)
  + fix(ntp): Fix AlmaLinux OS and CloudLinux OS support (#5235)
  [Elkhan Mammadli]
  + tests: force version of cloud-init from PPA regardless of version (#5251)
  + ci: Print isort diff (#5242)
  + test: Fix integration test dependencies (#5248)
  + fix(ec2): Fix broken uuid match with other-endianness (#5236)
  + fix(schema): allow networkv2 schema without top-level key (#5239)
  [Cat Red]
  + fix(cmd): Do not hardcode reboot command (#5208)
  + test: Run Alpine tests without network (#5220)
  + docs: Add base config reference from explanation (#5241)
  + docs: Remove preview from WSL tutorial (#5225)
  + chore: Remove broken maas code (#5219)
  + feat(WSL): Add support for Ubuntu Pro configs (#5116) [Ash]
  + chore: sync ChangeLog and version.py from 24.1.x (#5228)
  + bug(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  + ci: Skip package build on tox runs (#5210)
  + chore: Fix test skip message
  + test(ec2): adopt pycloudlib public ip creation while launching instances
  + test(ec2): add ipv6 testing for multi-nic instances
  + test(ec2): adopt pycloudlib enable_ipv6 while launching instances
  + feat: tool to print diff between netplan and networkv2 schema (#5200)
  [Cat Red]
  + test: mock internet access in test_upgrade (#5212)
  + ci: Add timezone for alpine unit tests (#5216)
  + fix: Ensure dump timestamps parsed as UTC (#5214)
  + docs: Add WSL tutorial (#5206)
  + feature(schema): add networkv2 schema (#4892) [Cat Red]
  + Add alpine unittests to ci (#5121)
  + test: Fix invalid openstack datasource name (#4905)
  + test: Fix MAAS test and mark xfail (#4905)
  + chore(ds-identify): Update shellcheck ignores (#4905)
  + fix(ds-identify): Prevent various false positives and false negatives
  (#4905)
  + Use grep for faster parsing of cloud config in ds-identify (#4905)
  [Scott Moser] (LP: #2030729)
  + tests: validate netplan API YAML instead of strict content (#5195)
  + chore(templates): update ubuntu universe wording (#5199)
  + Deprecate the users ssh-authorized-keys property (#5162)
  [Anders Björklund]
  + doc(nocloud): Describe ftp and ftp over tls implementation (#5193)
  + feat(net): provide network config to netplan.State for render (#4981)
  + docs: Add breaking datasource identification changes (#5171)
  + fix(openbsd): Update build-on-openbsd python dependencies (#5172)
  [Hyacinthe Cartiaux]
  + fix: Add subnet ipv4/ipv6  to network schema (#5191)
  + docs: Add deprecated system_info to schema (#5168)
  + docs: Add DataSourceNone documentation (#5165)
  + test: Skip test if console log is None (#5188)
  + fix(dhcp): Enable interactively running cloud-init init --local (#5166)
  + test: Update message for netplan apply dbus issue
  + test: install software-properties-common if absent during PPA setup
  + test: bump pycloudlib to use latest version
  + test: Update version of hello package installed on noble
  + test: universally ignore netplan apply dbus issue (#5178)
  + chore: Remove obsolete nose workaround
  + feat: Add support for FTP and FTP over TLS (#4834)
  + feat(opennebula): Add support for posix shell
  + test: Make analyze tests not depend on GNU date
  + test: Eliminate bash dependency from subp tests
  + docs: Add breaking changes section to reference docs (#5147) [Cat Red]
  + util: add log_level kwarg for logexc() (#5125) [Chris Patterson]
  + refactor: Make device info part of distro definition (#5067)
  + refactor: Distro-specific growpart code (#5067)
  + test(ec2): fix mocking with responses==0.9.0 (focal) (#5163)
  + chore(safeyaml): Remove unicode helper for Python2 (#5142)
  + Revert "test: fix upgrade dhcp6 on ec2 (#5131)" (#5148)
  + refactor(net): Reuse netops code
  + refactor(iproute2): Make expressions multi-line for legibility
  + feat(freebsd): support freebsd find part by gptid and ufsid (#5122)
  [jinkangkang]
  + feat: Determining route metric based on NIC name (#5070) [qidong.ld]
  + test: Enable profiling in integration tests (#5130)
  + dhcp: support configuring static routes for dhclient's unknown-121
  option (#5146) [Chris Patterson]
  + feat(azure): parse ProvisionGuestProxyAgent as bool (#5126)
  [Ksenija Stanojevic]
  + fix(url_helper): fix TCP connection leak on readurl() retries (#5144)
  [Chris Patterson]
  + test: pytest-ify t/u/sources/test_ec2.py
  + Revert "ec2: Do not enable dhcp6 on EC2 (#5104)" (#5145) [Major Hayden]
  + fix: Logging sensitive data
  + test: Mock ds-identify systemd path (#5119)
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + test: fix upgrade dhcp6 on ec2 (#5131)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + ci: fix linkcheck.yml invalid yaml (#5123)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + ec2: Do not enable dhcp6 on EC2 (#5104) [Major Hayden]
  + fix: Fall back to cached local ds if no valid ds found (#4997)
  [PengpengSun]
  + ci: Make linkcheck a scheduled job (#5118)
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + Release 24.1.3
  + chore: Handle all level 1 TiCS security violations (#5103)
  + fix: Always use single datasource if specified (#5098)
  + fix(tests): Leaked mocks (#5097)
  + fix(rhel)!: Fix network boot order in upstream cloud-init
  + fix(rhel): Fix network ordering in sysconfig
  + feat: Use NetworkManager renderer by default in RHEL family
  + fix: Allow caret at the end of apt package (#5099)
  + test: Add missing mocks to prevent bleed through (#5082)
  [Robert Schweikert]
  + fix: Ensure network config in DataSourceOracle can be unpickled (#5073)
  + docs: set the home directory using homedir, not home (#5101)
  [Olivier Gayot] (LP: #2047796)
  + fix(cacerts): Correct configuration customizations for Photon (#5077)
  [Christopher McCann]
  + fix(test): Mock systemd fs path for non-systemd distros
  + fix(tests): Leaked subp.which mock
  + fix(networkd): add GatewayOnLink flag when necessary (#4996) [王煎饼]
  + Release 24.1.2
  + test: fix `disable_sysfs_net` mock (#5065)
  + refactor: don't import subp function directly (#5065)
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  + ds-identify: Improve ds-identify testing flexibility (#5047)
  + fix(ansible): Add verify_commit and inventory to ansible.pull schema
  (#5032) [Fionn Fitzmaurice]
  + doc: Explain breaking change in status code (#5049)
  + gpg: Handle temp directory containing files (#5063)
  + distro(freebsd): add_user: respect homedir (#5061) [Mina Galić]
  + doc: Install required dependencies (#5054)
  + networkd: Always respect accept-ra if set (#4928) [Phil Sphicas]
  + chore: ignore all cloud-init_*.tar.gz in .gitignore (#5059)
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + feat: Add new distro 'azurelinux' for Microsoft Azure Linux. (#4931)
  [Dan Streetman]
  + fix(gpg): Make gpg resilient to host configuration changes (#5026)
  + Sync 24.1.1 changelog and version
  + DS VMware: Fix ipv6 addr converter from netinfo to netifaces (#5029)
  [PengpengSun]
  + packages/debian: remove dependency on isc-dhcp-client (#5041)
  [Chris Patterson]
  + test: Allow fake_filesystem to work with TemporaryDirectory (#5035)
  + tests: Don't wait for GCE instance teardown (#5037)
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle
  (#5021) (LP: #2056439)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix(atomic_helper.py): ensure presence of parent directories (#4938)
  [Shreenidhi Shedi]
  + fix: Add "broadcast" to network v1 schema (#5034) (LP: #2056460)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022) [Chris Patterson]
  + fix: Make wait_for_url respect explicit arguments
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues
  (#5025) (LP: #2056194)
  + chore(cmd-modules): fix exit code when --mode init (#5017)
  + feat: pylint: enable W0201 - attribute-defined-outside-init
  + refactor: Ensure no attributes defined outside __init__
  + chore: disable attribute-defined-outside-init check in tests
  + refactor: Use _unpickle rather than hasattr() in sources
  + chore: remove unused vendordata "_pure" variables
  + chore(cmd-modules): deprecate --mode init (#5005)
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: log correct disabled path in ds-identify (#5016)
  + tests: ec2 dont spend &gt; 1 second retrying 19 times when 3 times will do
  + tests: openstack mock expected ipv6 IMDS
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  (LP: #2055077)
  + feat(run-container): Run from arbitrary commitish (#5015)
  + tests: Fix wsl test (#5008)
  + feat(ds-identify): Don't run unnecessary systemd-detect-virt (#4633)
  + chore(ephemeral): add debug log when bringing up ephemeral network
  (#5010) [Alec Warren]
  + release: sync changelog and version (#5011)
  + Cleanup test_net.py (#4840)
  + refactor: remove dependency on netifaces (#4634) [Cat Red]
  + feat: make lxc binary configurable (#5000)
  + docs: update 404 page for new doc site and bug link
  + test(aws): local network connectivity on multi-nics (#4982)
  + test: Make integration test output more useful (#4984)
  From 24.1.7
  + fix(ec2): Correctly identify netplan renderer (#5361)
  From 24.1.6
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix: Check renderer for netplan-specific code (#5321)
  + test: Fix failing test_ec2.py test (#5324)
  From 24.1.5
  + fix(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  From 24.1.4
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  + (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  From 24.1.3
  + fix: Always use single datasource if specified (#5098)
  + fix: Allow caret at the end of apt package (#5099)
  From 24.1.2
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  From 24.1.1
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix: Add "broadcast" to network v1 schema (#5034)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022)
  + fix: Make wait_for_url respect explicit arguments
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues (#5025)
  + tests: Fix wsl test (#5008)
  From 24.1
  + fix: Don't warn on vendor directory (#4986)
  + apt: kill spawned keyboxd after gpg cmd interaction
  + tests: upgrade tests should only validate current boot log
  + net/dhcp: fix maybe_perform_dhcp_discovery check for interface=None
  [Chris Patterson]
  + doc(network-v2): fix section nesting levels
  + fix(tests): don't check for clean log on minimal image (#4965) [Cat Red]
  + fix(cc_resize): Don't warn if zpool command not found (#4969)
  (LP: #2055219)
  + feat(subp): Make invalid command warning more user-friendly (#4972)
  + docs: Remove statement about device path matching (#4966)
  + test: Fix xfail to check the dhcp client name (#4971)
  + tests: avoid console prompts when removing gpg on Noble
  + test: fix test_get_status_systemd_failure
  + fix: Remove hardcoded /var/lib/cloud hotplug path (#4940)
  + refactor: Refactor status.py (#4864)
  + test: Use correct lxd network-config keys (#4950)
  + test: limit temp dhcp6 changes to &lt; NOBLE (#4942)
  + test: allow downgrades when install debs (#4941)
  + tests: on noble, expect default /etc/apt/sources.list
  + tests: lxd_vm early boot status test ordered After=systemd-remount-fs
  (#4936)
  + tests: pro integration tests supply ubuntu_advantage until pro v32
  (#4935)
  + feat(hotplug): add cmd to enable hotplug (#4821)
  + test: fix test_combined_cloud_config_json (#4925)
  + test: xfail udhcpc on azure (#4924)
  + feat: Implement the WSL datasource (#4786) [Carlos Nihelton]
  + refactor(openrc):  Improve the OpenRC files (#4916) [dermotbradley]
  + tests: use apt install instead of dpkg -i to install pkg deps
  + tests: inactive module rename ubuntu_advantage to ubuntu_pro
  + test: fix tmpdir in test_cc_apk_configure (#4914)
  + test: fix jsonschema version checking in pro test (#4915)
  + feat(dhcp): Make dhcpcd the default dhcp client (#4912)
  + feat(Alpine) cc_growpart.py: fix handling of /dev/mapper devices (#4876)
  [dermotbradley]
  + test: Retry longer in test_status.py integration test (#4910)
  + test: fix kernel override test (#4913)
  + chore: Rename sysvinit/gentoo directory to sysvinit/openrc (#4906)
  [dermotbradley]
  + doc: update ubuntu_advantage references to pro
  + chore: rename cc_ubuntu_advantage to cc_ubuntu_pro (SC-1555)
  + feat(ubuntu pro): deprecate ubuntu_pro key in favor of ubuntu_advantage
  + feat(schema): support ubuntu_pro key and deprecate ubuntu_advantage
  + test: fix verify_clean_log (#4903)
  + test: limit test_no_hotplug_triggered_by_docker to stable releases
  + tests: generalize warning Open vSwitch warning from netplan apply (#4894)
  + fix(hotplug): remove literal quotes in args
  + feat(apt): skip known /etc/apt/sources.list content
  + feat(apt): use APT deb822 source format by default
  + test(ubuntu-pro): change livepatch to esm-infra
  + doc(ec2): fix metadata urls (#4880)
  + fix: unpin jsonschema and update tests (#4882)
  + distro: add eject FreeBSD code path (#4838) [Mina Galić]
  + feat(ec2): add hotplug as a default network update event (#4799)
  + feat(ec2): support instances with repeated device-number (#4799)
  + feat(cc_install_hotplug): trigger hook on known ec2 drivers (#4799)
  + feat(ec2): support multi NIC/IP setups (#4799)
  + feat(hotplug): hook-hotplug is now POSIX shell add OpenRC init script
  [dermotbradley]
  + test: harden test_dhcp.py::test_noble_and_newer_force_client
  + test: fix test_combined_cloud_config_json (#4868)
  + feat(apport): Disable hook when disabled (#4874)
  + chore: Add pyright ignore comments (#4874)
  + bug(apport): Fix invalid typing (#4874)
  + refactor: Move general apport hook to main branch (#4874)
  + feat(bootspeed)!: cloud-config.service drop After=snapd.seeded
  + chore: update CI package build to oldest supported Ubuntu release focal
  (#4871)
  + test: fix test_cli.test_valid_userdata
  + feat: handle error when log file is empty (#4859) [Hasan]
  + test: fix test_ec2_ipv6
  + fix: Address TIOBE abstract interpretation issues (#4866)
  + feat(dhcp): Make udhcpc use same client id (#4830)
  + feat(dhcp): Support InfiniBand with dhcpcd (#4830)
  + feat(azure): Add ProvisionGuestProxyAgent OVF setting (#4860)
  [Ksenija Stanojevic]
  + test: Bring back dhcp6 integration test changes (#4855)
  + tests: add status --wait blocking test from early boot
  + tests: fix retry decorator to return the func value
  + docs: add create_hostname_file to all hostname user-data examples
  (#4727) [Cat Red]
  + fix: Fix typos (#4850) [Viktor Szépe]
  + feat(dhcpcd): Read dhcp option 245 for azure wireserver (#4835)
  + tests(dhcp): Add udhcpc client to test matrix (#4839)
  + fix: Add types to network v1 schema (#4841)
  + docs(vmware): fixed indentation on example userdata yaml (#4854)
  [Alec Warren]
  + tests: Remove invalid keyword from method call
  + fix: Handle systemctl when dbus not ready (#4842) (LP: #2046483)
  + fix(schema cli): avoid netplan validation on net-config version 1
  + tests: reduce expected reports due to dropped rightscale module
  + tests(net-config): add awareness of netplan on stable Ubuntu
  [Gilbert Gilb's]
  + feat: fall back to cdrom_id eject if eject is not available (#4769)
  [Cat Red]
  + fix(packages/bddeb): restrict debhelper-compat to 12 in focal (#4831)
  + tests: Add kernel commandline test (#4833)
  + fix: Ensure NetworkManager renderer works without gateway (#4829)
  + test: Correct log parsing in schema test (#4832)
  + refactor: Remove cc_rightscale_userdata (#4813)
  + refactor: Replace load_file with load_binary_file to simplify typing
  (#4823)
  + refactor: Add load_text_file function to simplify typing (#4823)
  + refactor: Change variable name for consistent typing (#4823)
  + feat(dhcp): Add support for dhcpcd (#4746)
  + refactor: Remove unused networking code (#4810)
  + test: Add more DNS net tests
  + BREAKING CHANGE: Stop adding network v2 DNS to global DNS
  + doc: update DataSource.default_update_events doc (#4815)
  + chore: do not modify instance attribute (#4815)
  + test: fix mocking leaks (#4815)
  + Revert "ci: Pin pytest&lt;8.0.0. (#4816)" (#4815)
  + test: Update tests for passlib (#4818)
  + fix(net-schema): no warn when skipping schema check on non-netplan
  + feat(SUSE): reboot marker file is written as /run/reboot-needed (#4788)
  [Robert Schweikert]
  + test: Cleanup unwanted logger setup calls (#4817)
  + refactor(cloudinit.util): Modernize error handling, add better warnings
  (#4812)
  + ci: Pin pytest&lt;8.0.0. (#4816)
  + fix(tests): fixing KeyError on integrations tests (#4811) [Cat Red]
  + tests: integration for network schema on netplan systems (#4767)
  + feat(schema): use netplan API to validate network-config (#4767)
  + chore: define CLOUDINIT_NETPLAN_FILE static var (#4767)
  + fix: cli schema config-file option report network-config type (#4767)
  + refactor(azure): replace BrokenAzureDataSource with reportable errors
  (#4807) [Chris Patterson]
  + Fix Alpine and Mariner /etc/hosts templates (#4780) [dermotbradley]
  + tests: revert #4792 as noble images no longer return 2 (#4809) [Cat Red]
  + tests: use client fixture instead of class_client in cleantest (#4806)
  + tests: enable ds-idenitfy xfail test LXD-kvm-not-MAAS-1 (#4808)
  + fix(tests): failing integration tests due to missing ua token (#4802)
  [Cat Red]
  + Revert "Use grep for faster parsing of cloud config in ds-identify
  (#4327)"
  + tests: Demonstrate ds-identify yaml parsing broken
  + tests: add exit 2 on noble from cloud-init status (#4792)
  + fix: linkcheck for ci to ignore scaleway anchor URL (#4793)
  + feat: Update cacerts to support VMware Photon (#4763)
  [Christopher McCann]
  + fix: netplan rendering integrations tests (#4795) [Cat Red]
  + azure: remove cloud-init.log reporting via KVP (#4715) [Chris Patterson]
  + feat(Alpine): Modify ds-identify for Alpine support and add OpenRC
  init.d script (#4785) [dermotbradley]
  + doc: Add DatasourceScaleway documentation (#4773) [Louis Bouchard]
  + fix: packaged logrotate file lacks suffix on ubuntu (#4790)
  + feat(logrotate): config flexibility more backups (#4790)
  + fix(clean): stop warning when running clean command (#4761) [d1r3ct0r]
  + feat: network schema v1 strict on nic name length 15 (#4774)
  + logrotate config (#4721) [Fabian Lichtenegger-Lukas]
  + test: Enable coverage in integration tests (#4682)
  + test: Move unit test helpers to global test helpers (#4682)
  + test: Remove snapshot option from install_new_cloud_init (#4682)
  + docs: fix cloud-init single param docs (#4682)
  + Alpine: fix location of dhclient leases file (#4782) [dermotbradley]
  + test(jsonschema): Pin jsonschema version (#4781)
  + refactor(IscDhclient): discover DHCP leases at distro-provided location
  (#4683) [Phsm Qwerty]
  + feat: datasource check for WSL (#4730) [Carlos Nihelton]
  + test: Update hostname integration tests (#4744)
  + test: Add mantic and noble releases to integration tests (#4744)
  + refactor: Ensure internal DNS state same for v1 and v2 (#4756)
  + feat: Add v2 route mtu rendering to NetworkManager (#4748)
  + tests: stable ubuntu releases will not exit 2 on warnings (#4757)
  + doc(ds-identify): Describe ds-identify irrespective of distro (#4742)
  + fix: relax NetworkManager renderer rules (#4745)
  + fix: fix growpart race (#4618)
  + feat: apply global DNS to interfaces in network-manager  (#4723)
  [Florian Apolloner]
  + feat(apt): remove /etc/apt/sources.list when deb22 preferred (#4740)
  + chore: refactor schema data as enums and namedtuples (#4585)
  + feat(schema): improve CLI message on unprocessed data files (#4585)
  + fix(config): relocate /run to /var/run on BSD (canonical#4677)
  [Mina Galić]
  + fix(ds-identify): relocate /run on *BSD (#4677) [Mina Galić]
  + fix(sysvinit): make code a bit more consistent (#4677) [Mina Galić]
  + doc: Document how cloud-init is, not how it was (#4737)
  + tests: add expected exit 2 on noble from cloud-init status (#4738)
  + test(linkcheck): ignore github md and rst link headers (#4734)
  + test: Update webhook test due to removed cc_migrator module (#4726)
  + fix(ds-identify): Return code 2 is a valid result, use cached value
  + fix(cloudstack): Use parsed lease file for virtual router in cloudstack
  + fix(dhcp): Guard against FileNotFoundError and NameError exceptions
  + fix(apt_configure): disable sources.list if rendering deb822 (#4699)
  (LP: #2045086)
  + docs: Add link to contributing to docs (#4725) [Cat Red]
  + chore: remove commented code (#4722)
  + chore: Add log message when create_hostname_file key is false (#4724)
  [Cat Red]
  + fix: Correct v2 NetworkManager route rendering (#4637)
  + azure/imds: log http failures as warnings instead of info (#4714)
  [Chris Patterson]
  + fix(setup): Relocate libexec on OpenBSD (#4708) [Mina Galić]
  + feat(jinja): better jinja feedback and error catching (#4629)
  [Alec Warren]
  + test: Fix silent swallowing of unexpected subp error (#4702)
  + fix: Move cloud-final.service after time-sync.target (#4610)
  [Dave Jones] (LP: #1951639)
  + feat(log): Make logger name more useful for __init__.py
  + chore: Remove cc_migrator module (#4690)
  + fix(tests): make cmd/devel/tests work on non-GNU [Mina Galić]
  + chore: Remove cmdline from spelling list (#4670)
  + doc: Document boot status meaning (#4670)
  + doc: Set expectations for new datasources (#4670)
  + ci: Show linkcheck broken links in job output (#4670)
  + dmi: Add support for OpenBSD (#4654) [Mina Galić]
  + ds-identify: fake dmidecode support on OpenBSD (#4654) [Mina Galić]
  + ds-identify: add OpenBSD support in uname (#4654) [Mina Galić]
  + refactor: Ensure '_cfg' in Init class is dict (#4674)
  + refactor: Make event scope required in stages.py (#4674)
  + refactor: Remove unused argument (#4674)
  + chore: Move from lintian to a sphinx spelling plugin (#3639)
  + fix(doc): Fix spelling errors found by sphinxcontrib-spelling (#3639)
  + ci: Add Python 3.13 (#4567)
  + Add AlexSv04047 to CLA signers file (#4671) [AlexSv04047]
  + fix(openbsd): services &amp; build tool (#4660) [CodeBleu]
  + tests/unittests: add a new unit test for network manager net activator
  (#4672) [Ani Sinha]
  + Implement DataSourceCloudStack.get_hostname() (#4433) [Phsm Qwerty]
  + net/nm: check for presence of ifcfg files when nm connection files
  are absent (#4645) [Ani Sinha]
  + doc: Overhaul debugging documentation (#4578)
  + doc: Move dangerous commands to dev docs (#4578)
  + doc: Relocate file location docs (#4578)
  + doc: Remove the debugging page (#4578)
  + fix(util): Fix boottime to work on OpenBSD (#4667) [Mina Galić]
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  [Ani Sinha]
  + net/network_manager: do not set "may-fail" to False for both ipv4 and
  ipv6 dhcp [Ani Sinha]
  + feat(subp): Measure subprocess command time (#4606)
  + fix(python3.13): Fix import error for passlib on Python 3.13 (#4669)
  + style(brpm/bddeb): add black and ruff for packages build scripts (#4666)
  + copr: remove TODO.rst from spec file
  + fix(packages/brpm): correct syntax error and typo
  + style(ruff): fix tip target
  + config: Module documentation updates (#4599)
  + refactor(subp): Remove redundant parameter 'env' (#4555)
  + refactor(subp): Remove unused parameter 'target' (#4555)
  + refactor: Remove 'target' boilerplate from cc_apt_configure (#4555)
  + refactor(subp): Re-add return type to subp() (#4555)
  + refactor(subp): Add type information to args (#4555)
  + refactor(subp): Use subprocess.DEVNULL (#4555)
  + refactor(subp): Remove parameter 'combine_capture' (#4555)
  + refactor(subp): Remove unused parameter 'status_cb' (#4555)
  + fix(cli): fix parsing of argparse subcommands (#4559)
  [Calvin Mwadime] (LP: #2040325)
  + chore!: drop support for dsa ssh hostkeys in docs and schema (#4456)
  + chore!: do not generate ssh dsa host keys (#4456) [shixuantong]
  From 23.4.4
  + fix(nocloud): smbios datasource definition
  + tests: Check that smbios seed works
  + fix(source): fix argument boundaries when parsing cmdline (#4825)
  From 23.4.3
  + fix: Handle systemctl when dbus not ready (#4842)
  (LP: #2046483)
  From 23.4.2
  + fix: Handle invalid user configuration gracefully (#4797)
  (LP: #2051147)
  From 23.4.1
  + fix: Handle systemctl commands when dbus not ready (#4681)
  From 23.4
  + tests: datasourcenone use client.restart to block until done (#4635)
  + tests: increase number of retries across reboot to 90 (#4651)
  + fix: Add schema for merge types (#4648)
  + feat: Allow aliyun ds to fetch data in init-local (#4590) [qidong.ld]
  + azure: report failure to eject as error instead of debug (#4643)
  [Chris Patterson]
  + bug(schema): write network-config if instance dir present (#4635)
  + test: fix schema fuzzing test (#4639)
  + Update build-on-openbsd dependencies (#4644) [CodeBleu]
  + fix(test): Fix expected log for ipv6-only ephemeral network (#4641)
  + refactor: Remove metaclass from network_state.py (#4638)
  + schema: non-root fallback to default paths on perm errors (# 4631)
  + fix: Don't loosen the permissions of the log file (#4628)
  + Revert "logging: keep current file mode of log file if its stricter
  than the new mode (#4250)"
  + ephemeral: Handle link up failure for both ipv4 and ipv6  (#4547)
  + fix(main): Don't call logging too early (#4595)
  + fix: Remove Ubuntu-specific kernel naming convention assertion (#4617)
  + fix(log): Do not implement handleError with a self parameter (#4617)
  + fix(log): Don't try to reuse stderr logger (#4617)
  + feat: Standardize logging output to stderr (#4617)
  + chore: Sever unmaintained TODO.rst (#4625)
  + test: Skip failing tests
  + distros: Add suse
  + test: Add default hello package version (#4614)
  + fix(net): Improve DHCPv4 SUSE code, add test
  + net: Fix DHCPv4 not enabled on SUSE in some cases [bin456789]
  + fix(schema): Warn if missing dependency (#4616)
  + fix(cli): main source cloud_config for schema validation (#4562)
  + feat(schema): annotation path for invalid top-level keys (#4562)
  + feat(schema): top-level additionalProperties: false (#4562)
  + test: ensure top-level properties tests will pass (#4562)
  + fix(schema): Add missing schema definitions (#4562)
  + test: Fix snap tests (#4562)
  + azure: Check for stale pps data from IMDS (#4596) [Ksenija Stanojevic]
  + test: Undo dhcp6 integration test changes (#4612)
  + azure: update diagnostic from warning level to debug [Chris Patterson]
  + azure/imds: remove limit for connection errors if route present (#4604)
  + [Chris Patterson]
  + [enhancement]: Add shellcheck to CI (#4488) [Aviral Singh]
  + chore: add conventional commits template (#4593)
  + Revert "net: allow dhcp6 configuration from
  generate_fallback_configuration()" (#4607)
  + azure: workaround to disable reporting IMDS failures on Azure Stack
  [Chris Patterson]
  + cc_apt_pipelining: Update docs, deprecate options (#4571)
  + test: add gh workflows on push to main, update status badges (#4597)
  + util: Remove function abs_join() (#4587)
  + url_helper: Remove unused function retry_on_url_exc() (#4587)
  + cc_resizefs: Add bcachefs resize support (#4594)
  + integration_tests: Support non-Ubuntu distros (#4586)
  + fix(cmdline): fix cmdline parsing with MAC containing cc:
  + azure/errors: include http code in reason for IMDS failure
  [Chris Patterson]
  + tests: cloud-init schema --system does not return exit code 2
  + github: allow pull request to specify desired rebase and merge
  + tests: fix integration test expectations of exit 2 on schema warning
  + tests: fix schema test expected cli output Valid schema &lt;type&gt;
  + fix(schema cli): check raw userdata when processed cloud-config empty
  + azure: report failure to host if ephemeral DHCP secondary NIC (#4558)
  [Chris Patterson]
  + man: Document cloud-init error codes (#4500)
  + Add support for cloud-init "degraded" state (#4500)
  + status.json: Don't override detail key with error condition (#4500)
  + status: Remove duplicated data (#4500)
  + refactor: Rename exported_errors in status.json (#4500)
  + test: Remove stale status.json value (#4500)
  + tools/render-template: Make yaml loading opt-in, fix setup.py (#4564)
  + Add summit digest/trip report to docs (#4561) [Sally]
  + doc: Fix incorrect statement about `cloud-init analyze`
  + azure/imds: ensure new errors are logged immediately when retrying
  (#4468) [Chris Patterson]
  + Clarify boothook docs (#4543)
  + boothook: allow stdout/stderr to emit to cloud-init-output.log
  + summit-notes: add 2023 notes for reference in mailinglist/discourse
  + fix: added mock to stop leaking journalctl that slows down unit test
  (#4556) [Alec Warren]
  + tests: maas test for DataSourceMAASLocal get_data
  + maas tests: avoid using CiTest case and prefer pytest.tmpdir fixture
  + MAAS: Add datasource to init-local timeframe
  + Ensure all tests passed and/or are skipped
  + Support QEMU in integration tests
  + fix(read-dependencies): handle version specifiers containing [~!]
  + test: unpin pytest
  + schema: network-config optional network key. route uses oneOf (#4482)
  + schema: add cloud_init_deepest_matches for best error message (#4482)
  + network: warn invalid cfg add /run/cloud-init/network-config  (#4482)
  + schema: add network-config support to schema subcommand (#4482)
  + Update version number and merge ChangeLog from 23.3.3 into main (#4553)
  + azure: check for primary interface when performing DHCP (#4465)
  [Chris Patterson]
  + Fix hypothesis failure
  + subp: add a log when skipping a file for execution for lack of exe
  permission (#4506) [Ani Sinha]
  + azure/imds: refactor max_connection_errors definition (#4467)
  [Chris Patterson]
  + chore: fix PR template rendering (#4526)
  + fix(cc_apt_configure): avoid unneeded call to apt-install (#4519)
  + comment difference between sysconfig and NetworkManager renderer (#4517)
  [Ani Sinha]
  + Set Debian's default locale to be c.UTF-8 (#4503) (LP: #2038945)
  + Convert test_debian.py to pytest (#4503)
  + doc: fix cloudstack link
  + doc: fix development/contributing.html references
  + doc: hide duplicated links
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen
  (#4281)" (#4511) (LP: #2039453)
  + Fix the missing mcopy argument [Vladimir Pouzanov]
  + tests: Add logging fix (#4499)
  + Update upgrade test to account for dhcp6
  + Remove logging of PPID path (#4502)
  + Make Python 3.12 CI test non-experimental (#4498)
  + ds-identify: exit 2 on disabled state from marker or cmdline (#4399)
  + cloud-init-generator: Various performance optimizations (#4399)
  + systemd: Standardize cloud-init systemd enablement (#4399)
  + benchmark: benchmark cloud-init-generator independent of ds-identify
  (#4399)
  + tests/integration_tests: add cloud-init disablement coverage (#4399)
  + doc: Describe disabling cloud-init using an environment variable (#4399)
  + fix: cloud-init status --wait broken with KERNEL_CMDLINE (#4399)
  + azure/imds: retry on 429 errors for reprovisiondata (#4470)
  [Chris Patterson]
  + cmd: Don't write json status files for non-boot stages (#4478)
  + ds-identify: Allow disable service and override environment (#4485)
  [Mina Galić]
  + Update DataSourceNWCS.py (#4496) [shell-skrimp]
  + Add r00ta to CLA signers file
  + Fix override of systemd_locale_conf in rhel [Jacopo Rota]
  + ci(linkcheck): minor fixes (#4495)
  + integration test fix for deb822 URI format (#4492)
  + test: use a mantic-compatible tz in t/i/m/test_combined.py (#4494)
  + ua: shift CLI command from ua to pro for all interactions
  + pro: avoid double-dash when enabling inviddual services on CLI
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  (#4474) [Ani Sinha]
  + tests: apt re.search to match alternative ordering of installed pkgs
  + apt: doc apt_pkg performance improvement over subp apt-config dump
  + Tidy up contributing docs (#4469) [Sally]
  + [enhancement]: Automatically linkcheck in CI (#4479) [Aviral Singh]
  + Revert allowing pro service warnings (#4483)
  + Export warning logs to status.json (#4455)
  + Fix regression in package installation (#4466)
  + schema: cloud-init schema in early boot or in dev environ (#4448)
  + schema: annotation of nested dicts lists in schema marks (#4448)
  + feat(apport): collect ubuntu-pro logs if ubuntu-advantage.log present
  (#4443)
  + apt_configure: add deb822 support for default sources file (#4437)
  + net: remove the word "on instance boot" from cloud-init generated config
  (#4457) [Ani Sinha]
  + style: Make cloudinit.log functions use snake case (#4449)
  + Don't recommend using cloud-init as a library (#4459)
  + vmware: Fall back to vmtoolsd if vmware-rpctool errs (#4444)
  [Andrew Kutz]
  + azure: add option to enable/disable secondary ip config (#4432)
  + [Ksenija Stanojevic]
  + Allow installing snaps via package_update_upgrade_install module (#4202)
  + docs: Add cloud-init overview/introduction (#4440) [Sally]
  + apt: install software-properties-common when absent but needed (#4441)
  + sources/Azure: Ignore system volume information folder while scanning
  for files in the ntfs resource disk (#4446) [Anh Vo]
  + refactor: Remove unnecessary __main__.py file
  + style: Drop vi format comments
  + cloudinit.log: Use more appropriate exception (#4435)
  + cloudinit.log: Don't configure NullHandler (#4435)
  + commit 6bbbfbbb030831c72b5aa2bba9cb8492f19d56f4
  + cloudinit.log: Remove unnecessary module function and variables (#4435)
  + cloudinit.log: Remove unused getLogger wrapper (#4435)
  + cloudinit.log: Standardize use of cloudinit's logging module (#4435)
  + Remove unnecessary logging wrapper in Cloud class (#4435)
  + integration test: allow pro service warnings (#4447)
  + integration tests: fix mount indentation (#4445)
  + sources/Azure: fix for conflicting reports to platform (#4434)
  [Chris Patterson]
  + docs: link the cloud-config validation service (#4442)
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  + Install gnupg if gpg not found (#4431)
  + Add "phsm" as contributor (#4429) [Phsm Qwerty]
  + cc_ubuntu_advantage: do not rely on uaclient.messages module (#4397)
  [Grant Orndorff]
  + tools/ds-identify: match Azure datasource's ds_detect() behavior (#4430)
  [Chris Patterson]
  + Refactor test_apt_source_v1.py to use pytest (#4427)
  + sources: do not override datasource detection if None is in list (#4426)
  [Chris Patterson]
  + feat: check for create_hostname_file key before writing /etc/hostname
  (SC-1588) (#4330) [Cat Red]
  + Pytestify apt config test modules (#4424)
  + upstream gentoo patch (#4422)
  + Work around no instance ip (#4419)
  + Fix typing issues in subp module (#4401)
  + net: fix ipv6_dhcpv6_stateful/stateless/slaac configuration for rhel
  (#4395) [Ani Sinha]
  + Release 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: fix mount indentation (#4405)
  + Use grep for faster parsing of cloud config in ds-identify (#4327)
  [Scott Moser] (LP: #2030729)
  + doc: fix instructions on how to disable cloud-init from kernel command
  line (#4406) [Ani Sinha]
  + doc/vmware: Update contents relevant to disable_vmware_customization
  [PengpengSun]
  + Bring back flake8 for python 3.6 (#4394)
  + integration tests: Fix cgroup parsing (#4402)
  + summary: Update template parameter descriptions in docs [MJ Moshiri]
  + Log PPID for better debugging (#4398)
  + integration tests: don't clean when KEEP_* flags true (#4400)
  + clean: add a new option to clean generated config files [Ani Sinha]
  + pep-594: drop deprecated pipes module import
  From 23.3.3
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  From 23.3.2
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen"
  (#4281) (#4511) (LP: #2039453)
  From 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: Fix cgroup parsing (#4402)</changelog>
  <changelog author="rjschwei@suse.com" date="1753185600">- Update to version 25.1.3 (bsc#1245401,bsc#1245403)
  + Forward port
  - cloud-init-no-openstack-guess.patch
  + docs: provide example3 for PAM and ssh_pwauth behavior (#27)
  + fix: Make hotplug socket writable only by root (#25) (CVE-2024-11584)
  + fix: Don't attempt to identify non-x86 OpenStack instances (LP: #2069607)
    (CVE-2024-6174)
  From 25.1.2
  + fix: ensure MAAS datasource retries on failure (#6167)</changelog>
  <changelog author="mmachova@suse.com" date="1759233600">- Drop unneeded test dependency on httpretty, fixed long ago
  * https://github.com/canonical/cloud-init/pull/1720</changelog>
  <changelog author="rjschwei@suse.com" date="1762862400">- Fix dependency replace -serial with -pyserial</changelog>
</package>
<package pkgid="c9e8155e322248be81c594982de040d2852d439f37ff9973ad03f7765991acf68288a23a2aca8a861a6102d27dea5c908258c5beaeeedbacdaac227eda9dfccf" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="25.1.3" rel="160000.2.1"/>
  <changelog author="rjschwei@suse.com" date="1714392000">- Add cloud-init-usr-sudoers.patch (bsc#1223469)
  + Handle the existence of /usr/etc/sudoers to search for the expected
    include location</changelog>
  <changelog author="rjschwei@suse.com" date="1717416000">- Add cloud-init-skip-rename.patch (bsc#1219680)
  + Brute force approach to skip renames if the device is already present</changelog>
  <changelog author="mmachova@suse.com" date="1718366400">- remove dependency on /usr/bin/python3 via using the macros (bsc#1212476)</changelog>
  <changelog author="rjschwei@suse.com" date="1736164800">- Add cloud-init-wait-for-net.patch (bsc#1227237)
  + Wait for udev once if we cannot find the expected MAC</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737374400">- Support python 3.13 (bsc#1233649):
  + pep-594-drop-pipes.patch, gh#canonical/cloud-init#4392
  + cloud-init-fix-python313.patch, gh#canonical/cloud-init#4669
  + cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch gh#canonical/cloud-init#5052</changelog>
  <changelog author="rjschwei@suse.com" date="1738670400">- Add cloud-init-direxist.patch (bsc#1236720)
  + Make sure the directory exists, if not create it, before writing in that
    location.</changelog>
  <changelog author="rjschwei@suse.com" date="1747310400">- Update to version 25.1.1 (bsc#1239715,jsc#PED-8680,bsc#1228414)
  + Removed included upstream
  - pep-594-drop-pipes.patch
  - cloud-init-fix-python313.patch
  - cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch
  - cloud-init-direxist.patch
  - cloud-init-wait-for-net.patch
  - cloud-init-usr-sudoers.patch
  - cloud-init-no-nmcfg-needed.patch
  - cloud-init-keep-flake.patch
  - cloud-init-lint-fixes.patch
  - cloud-init-pckg-reboot.patch
  - cloud-init-ds-deterministic.patch
  - cloud-init-write-routes.patch
  - cloud-init-skip-empty-conf.patch
  + Forward port
  - cloud-init-no-tempnet-oci.patch
  - cloud-init-no-openstack-guess.patch
  - cloud-init-lint-set-interpreter.patch
  + Add
  - cloud-init-ssh-usrmerge.patch (bsc#1237764)
  - cloud-init-lint-set-interpreter.patch
  - cloud-init-lint-fix.patch
  - cloud-init-no-single-process.patch
  - cloud-init-needs-action.patch
  + Drop hidesensitivedata in 16 &amp; greater
  + test: pytestify cc_chef tests, add migration test
  + chef: migrate files in old config directories for backups and cache
  + fix: correct the path for Chef's backups (#5994)
  + fix(Azure): don't reraise FileNotFoundError during ephemeral setup (#6113)
  + fix(azure): handle unexpected exceptions during obtain_lease() (#6092)
  [Ksenija Stanojevic]
  + Allow to set mac_address for VLAN subinterface (#6081)
  [jumpojoy] (GH: 5364)
  + fix: Remove erroneous EC2 reference from 503 warning (#6077)
  + fix: NM reload and bring up individual network conns (#6073) [Ani Sinha]
  + fix: stop warning on dual-stack request failure (#6044)
  + fix: install_method: pip cannot find ansible-pull command path (#6021)
  [Hasan Aliyev] (GH: 5720)
  + fix: Fix DataSourceAliYun exception_cb signature (#6068) (GH: 6066)
  + fix: Update OauthUrlHelper to use readurl exception_cb signature
  (GH: 6065)
  + test: add OauthUrlHelper tests
  + test: Remove CiTestCase from test_url_helper.py
  + test: pytestify test_url_helper.py
  + fix: track more removed modules (#6043)
- From 25.1
  + ci: fix post-merge packaging CI (#6038)
  + feat(azure): Fix imds-based ssh_pwauth (#6002) [Ksenija Stanojevic]
  + ci: check for sorted patches (#6036)
  + feat: aliyun datasource support crawl metadata at once (#5942)
  [jinkangkang]
  + docs: document /usr merge breaking change (#6032)
  + test: Add integration test for /var mounts (#6033)
  + test: Ensure pre-24.2 custom modules work (#6034)
  + doc: Update references to older keys (#6022) [Pedro Ribeiro]
  + fix: untyped-defs in tests/unittests/{config, net, sources} (#6023)
  [Romain]
  + fix: don't reference PR in post-merged CI (#6019)
  + chore: explicitly skip broken ansible integration tests (#5996) [a-dubs]
  + tests(oracle): fix test_install_missing_deps apt race condition (#5996)
  [a-dubs]
  + test(oracle): fix test_ubuntu_drivers_installed (#5996) [a-dubs]
  + test(oracle): fix test_frequency_override integration test (#5996)
  [a-dubs]
  + chore: add type hint to IntegrationCloud's cloud_instance field (#5996)
  [a-dubs]
  + test(oracle): fix modules/test_lxd.py::test_storage_lvm on noble (#5996)
  [a-dubs]
  + commit 9e591fff266be9d4c83f74ec02a717b74993304d [a-dubs]
  + net/sysconfig: do not remove all existing settings of
  /etc/sysconfig/network (#5991) [Ani Sinha] (GH: 5990)
  + fix: remove wrong return when checking if network necessary (#6013)
  + fix: typing for rsyslog, ubuntu_pro, power_state_change (#5985)
  [MostafaTarek124eru]
  + fix: Retry on OpenStack HTTP status codes (#5943) [weiyang] (GH: 5687)
  + fix: Ensure fqdn is treated as string in get_hostname_fqdn (#5993)
  [MKhatibzadeh] (GH: 5989)
  + feat(vmware): Convert imc network config to v2 (#5937) [PengpengSun]
  + ci: add upstream post-merge test
  + ci: check if upstream commit causes ubuntu patch conflicts
  + ci: organize cla tests together
  + test: eliminate obsolete cases, add non-error case
  + chore: remove redundant manual schema validation
  + doc: clarify subiquity docs
  + chore: cleanup `len' usage (#5956) [Shreenidhi Shedi]
  + Fix: GCE _get_data crashes if DHCP lease fails (#5998) [Bryan Fraschetti]
  + Fixes GH-5997
  + fix: correct the path for Chef's cache (#5994)
  [MostafaTarek124eru] (GH: 5090)
  + fix: Run ansible with run_user instead of root for distro install_method
  (#5986) [Amirhossein Shaerpour] (GH: 4092)
  + fix: retry AWS hotplug for async IMDS (#5995) (GH: 5373)
  + feat(integration_tests): add optional INSTANCE_TYPE setting (#5988)
  [Alec Warren]
  + feat(integration-tests): set boto3 and botocore to INFO to prevent
  log spamming [a-dubs]
  + ci: add 'tox -e integration-tests-fast' command [a-dubs]
  + chore: Add feature flag for manual network waiting (#5977)
  + Release 24.4.1
  + fix: Use /usr/lib/ rather than /lib in packaging code (#5970)
  + Use log_with_downgradable_level for user password warnings (#5927)
  [Ani Sinha]
  + doc: change to hyphenated keys (#5909) (GH: 5555)
  + fix: Wait for udev on openstack (#5947) [Robert Schweikert] (GH: 4125)
  + test: disambiguate resource cleanup from test failure (#5926)
  + fix: use program name of netcat as installed by upstream, "nc" (#5933)
  (#5933) [Andreas K. Hüttel]
  + ci: bump canonical/setup-lxd to version v0.1.2 (#5948)
  + feat(cc_chef): Allow change of Chef configuration file (#5925)
  [Sean Smith]
  + docs: fix typo in generated file in LXD tutorial (#5941) [Pavel Shpak]
  + feat: Identify Samsung Cloud Platform as OpenStack (#5924) [us0310306]
  + fix: don't deadlock when starting network service with systemctl (#5935)
  + feat: Custom keys for apt archives (#5828) [Bryan Fraschetti] (GH: 5473)
  + test: improve test initialization error path (#5920)
  + chore: improve logging when lxd detection fails (#5919)
  + fix: Add "manual" to allowed subnet types  (#5875)
  [Math Marchand] (GH: 5769)
  + fix: remove bad ssh_svcname setting for Gentoo/OpenRC (#5918)
  [Andreas K. Hüttel]
  + feat(gentoo): Add compatibility for Gentoo with systemd (#5918)
  [Andreas K. Hüttel]
  + fix(ovf): no warning should be log when rpctool found no value (#5915)
  [PengpengSun] (GH: 5914)
  + Move DS VMware to be in front of DS OVF (#5912) [PengpengSun] (GH: 4030)
  + ci: Add proper 'Breaks: ' to integration testing simple deb (#5923)
  + chore: Add akhuettel to CLA signers file (#5917) [Andreas K. Hüttel]
  + chore: eliminate calls at import time (#5889) (GH: 5344)
  + test: Add pyserial to test-requirements.txt (#5907)
  + test: Allow unknown size in growpart test (#5876)
  + doc: Update tutorials [Sally]
  + fix: bump azure key size to 3072 (#5841)
  24.4.1
  + fix: Ensure _should_wait_via_user_data() handles all user data types (#5976)
  + fix: Don't log error in wait_for_url (#5972)
  + feat(url_helper): Retry on 503 error (#5938)
  + fix: Don't break modules that use get_meta_doc() (#5953)
  + refactor: Pass deprecation log args as tuple (#5953)
  + fix: uninstall custom signal handlers before shutdown (#5913)
  24.4
  + test: Ensure unit ordering in ftp tests includes downstream units (#5892)
  + test: re-decrement expected webhook events (#5894)
  + test: allow relative path in apt-get test (#5891)
  + Fix metric setting of nmconnection for rhel (#5878) [Amy Chen]
  + chore: remove unused code(#5887)
  + feat(ephemeral): replace old has_url_connectivity() with new
  _check_connectivity_to_imds() [a-dubs]
  + feat(oracle): add true single stack ipv6 support [a-dubs]
  + feat(ephemeral): refactor ephemeralIP and add ipv6 connectivity check
  [a-dubs]
  + test: Decrement expected webhook events (#5888)
  + chore: remove `--docs` option from `cloud-init schema` (#5857) (GH: 5756)
  + test: pytestify "tests/unittests/config/test_cc_timezone.py" (#5885)
  [Mahesh Ghumare]
  + ci: bump integration tests to use plucky
  + test: add grub_dpkg to inactive modules
  + test: move default behavior tests into their own module
  + test(apt): add plucky version for hello pkg (#5883)
  + Docs: improved mermaid diagram for better visibility. Add "MaheshG11"
  as contributor (#5874) [Mahesh Ghumare] (GH: 5837)
  + fix(ntp): Fix RockyLinux OS support  (#5864) [Sid Shukla]
  + chore(jsonschema): migrate from deprecated Validator.iter_errors (#5856)
  + chore: remove deprecation warning getting jsonschema's version (#5856)
  + chore: use filter arg for tar.extractall (#5856)
  + chore: remove __init__ from pytest test class (#5856)
  + chore: do not test element's truth value directly (#5856)
  + chore: migrate from deprecated datetime.datetime.utcfromtimestamp (#5856)
  + chore: migrate from deprecated datetime.datetime.utcnow() (#5856)
  + chore: set recursive=False for ensure_dir if parent path is "/" (#5816)
  [sxt1001]
  + ci: fix broken daily dependencies (#5867)
  + ci: fix packaging tests (#5865)
  + feat(vultr): add override for network interface detection (#5847)
  [Andrew Davis]
  + feat(networkd): Support RequiredForOnline option (#5852) [Dan McGregor]
  + Prevent NM from handling DNS when network interfaces have DNS config
  (#5846) [Ani Sinha]
  + fix(smartos): Add `addrconf` IPv6 support (#5831)
  [blackhelicoptersdotnet]
  + freebsd: adjust to match the new pyyaml package name (#5844)
  [Gonéri Le Bouder]
  + fix: disable grub-dpkg by default (#5840)
  + fix(openbsd): Enable sysv init scripts in OpenBSD build script (#5790)
  [Hyacinthe Cartiaux] (LP: 4036, #1992853)
  + test: Fix duplicate judgment conditions in password generation (#5835)
  [sxt1001]
  + chore: don't render non-templated unit files (#5830)
  + chore: simplify and standardize cloud-final.service (#5830)
  + chore: simplify Conflicts=shutdown.target (#5830)
  + chore: remove redundant Before=NetworkManager.service (#5830)
  + chore: remove unnecessary systemd settings (#5830)
  + chore: eliminate redundant ordering dependencies (#5819)
  + fix: fix ordering cycle for distros with default deps (#5819) (GH: 5755)
  + test: unbreak pytest-xdist (#5829)
  + feat: Conditionally remove networkd online dependency on Ubuntu (#5772)
  + feat: Ensure random passwords contain multiple character types (#5815)
  [sxt1001] (GH: 5814)
  + docs: split example page into example library (#5645) [Sally]
  + doc: clarify workarounds required for single process changes (#5817)
  + chore: add 3.13 to PR CI runs, 3.14 to scheduled (#5825)
  + fix: Render v2 bridges correctly on network-manager with set-name
  (#5740) (GH: 5717)
  + test: add no_thinpool unit test (#5802)
  + chore: split lxd init config into separate function (#5802)
  + test: pytestify test_cc_lxd.py (#5802)
  + fix: Correctly handle missing thinpool in cc_lxd (#5802)
  + fix: Render bridges correctly for v2 on sysconfig with set-name (#5674)
  (GH: 5574)
  + tests(minimal): rsyslog not in minimal images expect warning (#5811)
  + tests(lxd): avoid failure on multiple calls to --show-log (#5811)
  + chore: update netplan import semantics and related tests (#5805)
  (GH: 5804)
  + lint: fix untyped-defs on /tests/unittest/cmd (#5800) [iru]
  + test: actually use devel release and verify_clean_boot enhancements
  (#5801)
  + feat(locale): locales install on minimal images when cfg requests (#5799)
  + feat(byobu): support byobu install on minimal images when cfg requests
  (#5799)
  + chore: Use devel release and no sbuild in integration CI (#5798)
  + test: Update integration tests from netplan backport (#5796)
  + test: add get_syslog_or_console for minimal images without syslog (#5793)
  + chore: Remove resize_root_tmp from cloud.cfg.tmpl (#5795) (GH: 5786)
  + docs: Fix field name from `contents` to `content` (#5787) [Igor Akkerman]
  + chore: bump pycloudlib to required version (#5792)
  + fix: avoid deprecation logs for calling cli stages (#5770) (GH: 5726)
  + tests: bump pycloudlib deps to include gce bug fix for id str (#5783)
  + fix(test): convert use p.gce.instance.id instead of instance_id (#5783)
  + fix(network-manager): bond properties and network schema (#5768)
  [Denis Kadyshev]
  + Fix metric setting for ifcfg network connections for rhel (#5777)
  [Ani Sinha] (GH: 5776)
  + fix(akamai): handle non-string user data in base64 decoding (#5751)
  [Jesse Alter]
  + fix(ci): do not auto stale issues (#5775)
  + Make pytest more verbose for easier debugging (#5778) [Ani Sinha]
  + ci: fix tox.ini pytest cmd to use cloudinit dir for coverage reporting
  (#5774) [Alec Warren]
  + tests: add OS_IMAGE_TYPE setting to allow for minimal tests (#5682)
  + test(hotplug): Simplify test_multi_nic_hotplug (#5763)
  + test(hotplug): increase nc timeout (#5763)
  + test: pytestify test_main.py (#5758)
  + test(ec2-dual-stack): fix int-test (#5762)
  + test: make verify_clean_boot really respect return code (#5761)
  + test: bump timeout in test_order (#5759)
  + docs: Properly document the cc_ubuntu_autoinstall module (#5757)
  + docs: fix WSL tutorial (#5752) (GH: 5746)
  + test: make verify_clean_boot respect return code by environment (#5754)
  + feat(integration_test): add CLOUD_INIT_PKG setting (#5739)
  + fix(ci): fix packaging check merge operation (#5750)
  + doc: do not document user.meta-data key (#5745)
  + test: avoid undocumented lxd key (#5748)
  + test: Refactor test_cc_set_hostname.py and test_cc_ntp.py (#5727)
  + chore: update docs URLs to cloud-init.io (#5741)
  + test: fix timer logging change expected logs (#5734)
  + fix: type annotations for several modules (#5733)
  + chore: add timer to io and string manipulation code
  + feat: add log package and performance module
  + remove newline injected for cloud-init status --wait (#5700)
  [Andrew Nelson] (GH: 5863)
  + test: webhook require_deprecation msg on 24.3 (#5731)
  + test: fix test_nocloud message typo introduced by 313390f8 (#5731)
  + test: Fix test_log_message_on_missing_version_file (#5730)
  + tests: assert info level warnings instead of require_deprecation
  + tests: fix test to ignore_warnings not require Used fallback ds
  + chore: clean up pytest warnings (#5721)
  + tests(pro): bump pycloudlib add noble release to pro tests (#5719)
  + fix(hotplugd.socket): remove basic.target as dependency (#5722)
  (LP: #2081124)
  + ci: fix integration test positional argument (#5718)
  + Create datasource for CloudCIX (#1351) [BrianKelleher]
  + ci: colorize output (#5716)
  + fix(schema): Allow for locale: false in schema add tests (#5647)
  + ci: fix packaging patch check (#5713)
  + chore: clean up old pickle workaround (#5714)
  + fix: force sftp cleanup when done with instance (#5698)
  + test(hotplug): reenable vpc test in focal (#5492)
  + chore: fix typing of userdata_raw (#5710)
  + fix(NetworkManager): Fix network activator (#5620)
  + fix: lxd do not check for thinpool kernel module (#5709)
  + docs: fix typo in docstring (#5708)
  + Scaleway: Force on-link: true for static networks (#5654)
  [Louis Bouchard] (LP: 5523, #2073869)
  + fix: Invalid "seedfrom" in NoCloud system configuration (#5701)
  + tests: pytestify test_nocloud.py (#5701)
  + test: make verify_clean_boot respect return code by series (#5695)
  + fix: use cross-distro netcat name (#5696)
  + ci: fix labeler (#5697)
  + chore(actions): add packaging label for any branches modifying debian/*
  + (#5693)
  + test: add verify_clean_boot() calls alongside verify_clean_log() (#5671)
  + test: add deprecation support to verify_clean_boot (#5671)
  + doc: remove misleading warning (#5681)
  + chore: Prefer other methods over $INSTANCE_ID (#5661)
  + ci: fix packaging test when no patches (#5680)
  + chore: fix tip-ruff and update to latest version (#5676)
  + chore: make ansible test serial (#5677)
  + feat(ec2): Bump url_max_timeout to 240s from 120s. (#5565)
  [Robert Nickel]
  + chore: fix typo in requirements.txt (#5637)
  + feat: make pyserial an optional dependency (#5637)
  + chore: bump ci dependency versions (#5660)
  + chore: drop broken optimization (#5666)
  24.3.1
  + test: add test coverage for iproute2 commands (#5651)
  + fix(netops): fix ip addr flush command (#5651) (GH: 5648)
  24.3
  + docs: Clarify v2 set-name behavior (#5639)
  + fix: properly handle blank lines in fstab (#5643)
  + fix: cc_user_groups incorrectly assumes "useradd" never locks password
  field (#5355) [dermotbradley]
  + tests: assert cloud-init user-data cert is the only root cert (#5641)
  + feat: add automation for ubuntu/* branches asserting quilt patches apply
  (#5622)
  + fix(sources/wsl): no error with empty .cloud-init dir (SC-1862) (#5633)
  + feat(azure): add PPS support for azure-proxy-agent (#5601)
  [Ksenija Stanojevic]
  + fix(tests): use instance.clean/restart instead of clean --reboot (#5636)
  + test: fix cmd/test_schema int test (#5629)
  + test: fix test_honor_cloud_dir int test (#5627)
  + docs: alphabetize dsname lookup table. update comment to create the csv
  (#5624)
  + docs: new datasources should update reference/ds_dsname_map (#5624)
  + test: fix ca_certs int test (#5626)
  + chore: update schema docs to use RST bold for config key names (#5562)
  + fix(doc): italics around deprecation prefix, description bolds key names
  (#5562)
  + feat(doc): add env vars to debug config module doc builds (#5562)
  + fix(doc): doc of nested objects under JSON schema items.oneOf (#5562)
  + fix(doc): object type check if patternProperties or properties (#5562)
  + doc(schema): schema descriptions should end with trailing stop (#5562)
  + fix(wsl): Properly assemble multipart data (#5538) [Carlos Nihelton]
  + feat: collect-logs improvements (#5619)
  + tests: fix test_ca_certs.py for gcp (#5621)
  + fix(nm): Ensure bond property name formatting matches schema definition
  (#5383) [Curt Moore]
  + Update behavior of base bond interface with NetworkManager (#5385)
  [Curt Moore]
  + ci: Drop Python 3.6 and 3.7 (#5607)
  + chore(black): Bump version (#5607)
  + chore(mypy): Fix failures on newer versions of mypy (#5607)
  + chore(tox.ini): Simplify configuration, fix minor bugs (#5607)
  + chore(mypy): Lint log module (#5607)
  + fix(systemd): Correct location of installed drop-in files(#5615)
  [Noah Meyerhans]
  + fix(btrfs): Version parsing (#5618)
  + docs: Remove unnecessary section, add feature flag page (#5617)
  + docs: Drop Python 3.6 and 3.7 support (#5617)
  + chore: explain other use of oauth (#5616)
  + chore(actions): add doc label for any doc related subdir file matches
  (#5602)
  + doc: Add misc links, improve wording (#5595)
  + doc(boot): Make first boot a dedicated page (#5595)
  + doc: Describe all stages in a single process (#5595)
  + chore: Deprecate old commands in help output (#5595)
  + chore: add comment explaining the NetworkManager may-fail setting
  (#5598) [Ani Sinha]
  + Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr
  (#5471)" (#5596) [PengpengSun]
  + fix: read_optional_seed to set network-config when present (#5593)
  + feat(snap): avoid refresh on package_upgrade: true and refresh.hold
  (#5426)
  + fix: Fix tests which have outdated strings (#5585)
  + fix: Fix ftp failures (#5585)
  + doc: improve integration testing configuration instructions (#5556)
  [Alec Warren]
  + azure: check azure-proxy-agent status (#5138) [Ksenija Stanojevic]
  + refactor: refactor and fix mypy in DataSourceIBMCloud.py (#5509)
  [Alec Warren]
  + fix: Update default LXD meta-data with user meta-data (#5584)
  + chore: Fix log message in url_helper.py (#5583)
  + fix: nocloud no fail when network-config absent (#5580)
  + feat: Single process optimization (#5489)
  + chore: Add helper, refactor utilities into separate module (#5573)
  + refactor: update handle function of cc_mounts (#5498)
  + fix: Integration tests (#5576)
  + fix(NoCloudNet): Add network-config support (#5566)
  + feat: Eliminate redundant configuration reads (#5536)
  + fix(actions): correct typo in cloudinit/config/schemas/ match (#5570)
  + fix: add host template for AOSC (#5557) [Yuanhang Sun]
  + chore(debian): Remove vestigial postinst and preinst code (#5569)
  + fix(actions): doc labeler needs all clause instead of default any (#5568)
  + docs: Overhaul user data formats documentation (#5551)
  + chore: Deprecate ENI as an input configuration format (#5561)
  + doc: improve drop-in custom modules (#5548)
  + doc(NoCloud): Categorize the different configuration types (#5521)
  + doc(autoinstall): Remove incorrect statements, be more direct (#5545)
  + chore: remove unneeded doc-lint tox env config (#5547)
  + fix(doc-spelling): config spelling_word_list_filename (#5547)
  + doc(modules): add section to wrap modules' doc (#5550)
  + doc: Update docs on boothooks (#5546)
  + fix: doc auto label to consider schema json changes as doc PRs (#5543)
  + feat(schema): add chef_license schema enum (#5543)
  + doc: add diagram with boot stages (#5539)
  + docs: improve qemu command line (#5540) [Christian Ehrhardt]
  + fix: auto label doc PRs (#5542)
  + fix(wsl): Put back the "path" argument to wsl_path in ds-identify
  + (#5537) [Carlos Nihelton]
  + test: fix test_kernel_command_line_match (#5529)
  + test: fix no ds cache tests (#5529)
  + fix(azurelinux): Change default usr_lib_exec path (#5526) [Minghe Ren]
  + feat: Support URI sources in `write_files` module (#5505)
  [Lucas Ritzdorf]
  + add openeuler to distros in cc_spacewalk.py (#5530) [sxt1001]
  + feat(wsl): Special handling Landscape client config tags (#5460)
  [Carlos Nihelton]
  + chore: Deprecate partially supported system config (#5515)
  + chore: Improve detection logging for user clarity (#5515)
  + fix(ds-identify): Detect nocloud when seedfrom url exists (#5515)
  + refactor: logs.py add typing and small misc refactors (#5414)
  + refactor: logs.py pathlib changes (#5414)
  + refactor: replace verbosity with log levels in logs.py (#5414)
  + feat: Add trace-level logger (#5414)
  + chore(formatting): fix squashed commit test formatting (#5524)
  + fix: Clean cache if no datasource fallback (#5499)
  + Support setting mirrorlist in yum repository config (#5522) [Ani Sinha]
  + doc(OFV): Document how to configure cloud-init (#5519)
  + fix: Update DNS behavior for NetworkManager interfaces (#5496)
  [Curt Moore]
  + Fix configuration of DNS servers via OpenStack (#5384) [Curt Moore]
  + test: Unconditionally skip test_multi_nic_hotplug_vpc (#5503)
  + tests: revert expectation of exit 2 from cloud-init init --local (#5504)
  + fix(test): Fix ip printer for non-lxd (#5488)
  + feat(systemd): convert warning level message to deprecation (#5209)
  + test: allow verify_clean_boot to ignore all or specific tracebacks
  (#5209)
  + test: Don't fail tests which call cloud-init as a command (#5209)
  + feat(systemd): Warn user of unexpected run mode (#5209)
  + fix: add schema rules for 'baseurl' and 'metalink' in yum repo config
  (#5501) [Ani Sinha]
  + Set MTU for bond parent interface (#5495) [Curt Moore]
  + refactor: util.mounts to handle errors (#5490)
  + refactor: util.get_proc_env to work with strs (#5490)
  + typing: fix check_untyped_defs in cloudinit.util (#5490)
  + test: Add missing assert to test_status.py (#5494)
  + test: Ensure mkcert executable in ftp tests (#5493)
  + test: pytestify and cleanup test_cc_mounts.py (#5459)
  + fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)
  [PengpengSun]
  + fix(openbsd): fix mtu on newline in hostname files (#5412) [Tobias Urdin]
  + feat(aosc): Add 'AOSC OS' support (#5310) [Yuanhang Sun]
  24.2
  + test: Fix no default user in test_status.py (#5478)
  + fix: correct deprecated_version=22.2 for users.sudo
  + test: Add jsonschema guard in test_cc_ubuntu_pro.py (#5479)
  + fix(test): Fix pycloudlib types in integration tests (#5350)
  + fix(test): Fix ip printing for non-lxd instances (#5350)
  + chore(mypy): Drop unused missing import exclusions (#5350)
  + type: Add stub types for network v1/v2 config (#5350)
  + chore: Auto-format network jsonschema in ci (#5350)
  + fix(tox): Update tox.ini (#5350)
  + chore(typing): Remove type ignores and casts (#5350)
  + refactor(typing): Remove unused code paths (#5350)
  + fix(typing): Add / update type annotations (#5350)
  + fix(typing): Remove type annotation for unused variable (#5350)
  + fix(typing): Remove invalid type annotations (#5350)
  + ci(mypy): Set default follow_imports value (#5350)
  + test: Update integration tests to pass on focal (#5476)
  + tests: update ubuntu_pro test to account for info-level deprecations
  (#5475)
  + tests: update nocloud deprecation test for boundary version (#5474)
  + fix(rh_subscription): add string type to org (#5453)
  + tests: integration tests aware of features.DEPRECATION_INFO_BOUNDARY
  + tests: update keyserver PPA key fur curtin-dev (#5472)
  + test: Fix deprecation test failures (#5466)
  + chore: fix schema.py formatting (#5465)
  + fix: dont double-log deprecated INFOs (#5465)
  + fix(test): Mock version boundary (#5464)
  + fix(schema): Don't report changed keys as deprecated (#5464)
  + test: fix unit test openstack vlan mac_address (#5367)
  + fix: Ensure properties for bonded interfaces are properly translated
  (#5367) [Curt Moore]
  + fix(schema): permit deprecated hyphenated keys under users key (#5456)
  + fix: Do not add the vlan_mac_address field into the VLAN object (#5365)
  [Curt Moore]
  + doc(refactor): Convert module docs to new system (#5427) [Sally]
  + test: Add unit tests for features.DEPRECATION_INFO_BOUNDARY (#5411)
  + feat: Add deprecation boundary support to schema validator (#5411)
  + feat: Add deprecation boundary to logger (#5411)
  + fix: Gracefully handle missing files (#5397) [Curt Moore]
  + test(openstack): Test bond mac address (#5369)
  + fix(openstack): Fix bond mac_address (#5369) [Curt Moore]
  + test: Add ds-identify integration test coverage (#5394)
  + chore(cmdline): Update comments (#5458)
  + fix: Add get_connection_with_tls_context() for requests 2.32.2+ (#5435)
  [eaglegai]
  + fix(net): klibc ipconfig PROTO compatibility (#5437)
  [Alexsander de Souza] (LP: #2065787)
  + Support metalink in yum repository config (#5444) [Ani Sinha]
  + tests: hard-code curtin-dev ppa instead of canonical-kernel-team (#5450)
  + ci: PR update checklist GH- anchors to align w/ later template (#5449)
  + test: update validate error message in test_networking (#5436)
  + ci: Add PR checklist (#5446)
  + chore: fix W0105 in t/u/s/h/test_netlink.py (#5409)
  + chore(pyproject.toml): migrate to booleans (#5409)
  + typing: add check_untyped_defs (#5409)
  + fix(openstack): Append interface / scope_id for IPv6 link-local metadata
  address (#5419) [Christian Rohmann]
  + test: Update validation error in test_cli.py test (#5430)
  + test: Update schema validation error in integration test (#5429)
  + test: bump pycloudlib to get azure oracular images (#5428)
  + fix(azure): fix discrepancy for monotonic() vs time() (#5420)
  [Chris Patterson]
  + fix(pytest): Fix broken pytest gdb flag (#5415)
  + fix: Use monotonic time (#5423)
  + docs: Remove mention of resolv.conf (#5424)
  + perf(netplan): Improve network v1 -&gt; network v2 performance (#5391)
  + perf(set_passwords): Run module in Network stage (#5395)
  + fix(test): Remove temporary directory side effect (#5416)
  + Improve schema validator warning messages (#5404) [Ani Sinha]
  + feat(sysconfig): Add DNS from interface config to resolv.conf (#5401)
  [Ani Sinha]
  + typing: add no_implicit_optional lint (#5408)
  + doc: update examples to reflect alternative ways to provide `sudo`
  option (#5418) [Ani Sinha]
  + fix(jsonschema): Add missing sudo definition (#5418)
  + chore(doc): migrate cc modules i through r to templates (#5313)
  + chore(doc): migrate grub_dpkg to tmpl add changed/deprecation (#5313)
  + chore(json): migrate cc_apt_configure and json schema indents (#5313)
  + chore(doc): migrate ca_certs/chef to template, flatten schema (#5313)
  + chore(doc): migrate cc_byobu to templates (#5313)
  + chore(doc): migrate cc_bootcmd to templates (#5313)
  + fix(apt): Enable calling apt update multiple times (#5230)
  + chore(VMware): Modify section of instance-id in the customization config
  (#5356) [PengpengSun]
  + fix(treewide): Remove dead code (#5332) [Shreenidhi Shedi]
  + doc: network-config v2 ethernets are of type object (#5381) [Malte Poll]
  + Release 24.1.7 (#5375)
  + fix(azure): url_helper: specify User-Agent when using headers_cb with
  readurl() (#5298) [Ksenija Stanojevic]
  + fix: Stop attempting to resize ZFS in cc_growpart on Linux (#5370)
  + doc: update docs adding YAML 1.1 spec and jinja template references
  + fix(final_message): do not warn on datasourcenone when single ds
  + fix(growpart): correct growpart log message to include value of mode
  + feat(hotplug): disable hotplugd.socket (#5058)
  + feat(hotlug): trigger hotplug after cloud-init.service (#5058)
  + test: add function to push and enable systemd units (#5058)
  + test(util): fix wait_until_cloud_init exit code 2 (#5058)
  + test(hotplug): fix race getting ipv6 (#5271)
  + docs: Adjust CSS to increase font weight across the docs (#5363) [Sally]
  + fix(ec2): Correctly identify netplan renderer (#5361)
  + tests: fix expect logging from growpart on devent with partition (#5360)
  + test: Add v2 test coverage to test_net.py (#5247)
  + refactor: Simplify collect_logs() in logs.py (#5268)
  + fix: Ensure no subp from logs.py import (#5268)
  + tests: fix integration tests for ubuntu pro 32.3 release (#5351)
  + tests: add oracular's hello package for pkg upgrade test (#5354)
  + growpart: Fix behaviour for ZFS datasets (#5169) [Mina Galić]
  + device_part_info: do not recurse if we did not match anything (#5169)
  [Mina Galić]
  + feat(alpine): add support for Busybox adduser/addgroup (#5176)
  [dermotbradley]
  + ci: Move lint tip and py3-dev jobs to daily (#5347)
  + fix(netplan): treat netplan warnings on stderr as debug for cloud-init
  (#5348)
  + feat(disk_setup): Add support for nvme devices (#5263)
  + fix(log): Do not warn when doing requested operation (#5263)
  + Support sudoers in the "/usr/usr merge" location (#5161)
  [Robert Schweikert]
  + doc(nocloud): Document network-config file (#5204)
  + fix(netplan): Fix predictable interface rename issue (#5339)
  + cleanup: Don't execute code on import (#5295)
  + fix(net): Make duplicate route add succeed. (#5343)
  + fix(freebsd): correct configuration of IPv6 routes (#5291) [Théo Bertin]
  + fix(azure): disable use-dns for secondary nics (#5314)
  + chore: fix lint failure (#5320)
  + Update pylint version to support python 3.12 (#5338) [Ani Sinha]
  + fix(tests): use regex to avoid focal whitespace in jinja debug test
  (#5335)
  + chore: Add docstrings and types to Version class (#5262)
  + ci(mypy): add type-jinja2 stubs (#5337)
  + tests(alpine): github trust lxc mounted source dir cloud-init-ro (#5329)
  + test: Add oracular release to integration tests (#5328)
  + Release 24.1.6 (#5326)
  + test: Fix failing test_ec2.py test (#5324)
  + fix: Check renderer for netplan-specific code (#5321)
  + docs: Removal of top-level --file breaking change (#5308)
  + fix: typo correction of delaycompress (#5317)
  + docs: Renderers/Activators have downstream overrides (#5322)
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix(lxd): Properly handle unicode from LXD socket (#5309)
  + docs: Prefer "artifact" over "artefact" (#5311) [Arthur Le Maitre]
  + chore(doc): migrate cc_byobu to templates
  + chore(doc): migrate cc_bootcmd to templates
  + chore(doc): migrate apt_pipelining and apk_configure to templates
  + tests: in_place mount module-docs into lxd vm/container
  + feat(docs): generate rtd module schema from rtd/module-docs
  + feat: Set RH ssh key permissions when no 'ssh_keys' group (#5296)
  [Ani Sinha]
  + test: Avoid circular import in Azure tests (#5280)
  + test: Fix test_failing_userdata_modules_exit_codes (#5279)
  + chore: Remove CPY check from ruff (#5281)
  + chore: Clean up docstrings
  + chore(ruff): Bump to version 0.4.3
  + feat(systemd): Improve AlmaLinux OS and CloudLinux OS support (#5265)
  [Elkhan Mammadli]
  + feat(ca_certs): Add AlmaLinux OS and CloudLinux OS support (#5264)
  [Elkhan Mammadli]
  + docs: cc_apt_pipelining docstring typo fix (#5273) [Alex Ratner]
  + feat(azure): add request identifier to IMDS requests (#5218)
  [Ksenija Stanojevic]
  + test: Fix TestFTP integration test (#5237) [d1r3ct0r]
  + feat(ifconfig): prepare for CIDR output (#5272) [Mina Galić]
  + fix: stop manually dropping dhcp6 key in integration test (#5267)
  [Alec Warren]
  + test: Remove some CiTestCase tests (#5256)
  + fix: Warn when signal is handled (#5186)
  + fix(snapd): ubuntu do not snap refresh when snap absent (LP: #2064300)
  + feat(landscape-client): handle already registered client (#4784)
  [Fabian Lichtenegger-Lukas]
  + doc: Show how to debug external services blocking cloud-init (#5255)
  + fix(pdb): Enable running cloud-init under pdb (#5217)
  + chore: Update systemd description (#5250)
  + fix(time): Harden cloud-init to system clock changes
  + fix: Update analyze timestamp uptime
  + fix(schema): no network validation on netplan systems without API
  + fix(mount): Don't run cloud-init.service if cloud-init disabled (#5226)
  + fix(ntp): Fix AlmaLinux OS and CloudLinux OS support (#5235)
  [Elkhan Mammadli]
  + tests: force version of cloud-init from PPA regardless of version (#5251)
  + ci: Print isort diff (#5242)
  + test: Fix integration test dependencies (#5248)
  + fix(ec2): Fix broken uuid match with other-endianness (#5236)
  + fix(schema): allow networkv2 schema without top-level key (#5239)
  [Cat Red]
  + fix(cmd): Do not hardcode reboot command (#5208)
  + test: Run Alpine tests without network (#5220)
  + docs: Add base config reference from explanation (#5241)
  + docs: Remove preview from WSL tutorial (#5225)
  + chore: Remove broken maas code (#5219)
  + feat(WSL): Add support for Ubuntu Pro configs (#5116) [Ash]
  + chore: sync ChangeLog and version.py from 24.1.x (#5228)
  + bug(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  + ci: Skip package build on tox runs (#5210)
  + chore: Fix test skip message
  + test(ec2): adopt pycloudlib public ip creation while launching instances
  + test(ec2): add ipv6 testing for multi-nic instances
  + test(ec2): adopt pycloudlib enable_ipv6 while launching instances
  + feat: tool to print diff between netplan and networkv2 schema (#5200)
  [Cat Red]
  + test: mock internet access in test_upgrade (#5212)
  + ci: Add timezone for alpine unit tests (#5216)
  + fix: Ensure dump timestamps parsed as UTC (#5214)
  + docs: Add WSL tutorial (#5206)
  + feature(schema): add networkv2 schema (#4892) [Cat Red]
  + Add alpine unittests to ci (#5121)
  + test: Fix invalid openstack datasource name (#4905)
  + test: Fix MAAS test and mark xfail (#4905)
  + chore(ds-identify): Update shellcheck ignores (#4905)
  + fix(ds-identify): Prevent various false positives and false negatives
  (#4905)
  + Use grep for faster parsing of cloud config in ds-identify (#4905)
  [Scott Moser] (LP: #2030729)
  + tests: validate netplan API YAML instead of strict content (#5195)
  + chore(templates): update ubuntu universe wording (#5199)
  + Deprecate the users ssh-authorized-keys property (#5162)
  [Anders Björklund]
  + doc(nocloud): Describe ftp and ftp over tls implementation (#5193)
  + feat(net): provide network config to netplan.State for render (#4981)
  + docs: Add breaking datasource identification changes (#5171)
  + fix(openbsd): Update build-on-openbsd python dependencies (#5172)
  [Hyacinthe Cartiaux]
  + fix: Add subnet ipv4/ipv6  to network schema (#5191)
  + docs: Add deprecated system_info to schema (#5168)
  + docs: Add DataSourceNone documentation (#5165)
  + test: Skip test if console log is None (#5188)
  + fix(dhcp): Enable interactively running cloud-init init --local (#5166)
  + test: Update message for netplan apply dbus issue
  + test: install software-properties-common if absent during PPA setup
  + test: bump pycloudlib to use latest version
  + test: Update version of hello package installed on noble
  + test: universally ignore netplan apply dbus issue (#5178)
  + chore: Remove obsolete nose workaround
  + feat: Add support for FTP and FTP over TLS (#4834)
  + feat(opennebula): Add support for posix shell
  + test: Make analyze tests not depend on GNU date
  + test: Eliminate bash dependency from subp tests
  + docs: Add breaking changes section to reference docs (#5147) [Cat Red]
  + util: add log_level kwarg for logexc() (#5125) [Chris Patterson]
  + refactor: Make device info part of distro definition (#5067)
  + refactor: Distro-specific growpart code (#5067)
  + test(ec2): fix mocking with responses==0.9.0 (focal) (#5163)
  + chore(safeyaml): Remove unicode helper for Python2 (#5142)
  + Revert "test: fix upgrade dhcp6 on ec2 (#5131)" (#5148)
  + refactor(net): Reuse netops code
  + refactor(iproute2): Make expressions multi-line for legibility
  + feat(freebsd): support freebsd find part by gptid and ufsid (#5122)
  [jinkangkang]
  + feat: Determining route metric based on NIC name (#5070) [qidong.ld]
  + test: Enable profiling in integration tests (#5130)
  + dhcp: support configuring static routes for dhclient's unknown-121
  option (#5146) [Chris Patterson]
  + feat(azure): parse ProvisionGuestProxyAgent as bool (#5126)
  [Ksenija Stanojevic]
  + fix(url_helper): fix TCP connection leak on readurl() retries (#5144)
  [Chris Patterson]
  + test: pytest-ify t/u/sources/test_ec2.py
  + Revert "ec2: Do not enable dhcp6 on EC2 (#5104)" (#5145) [Major Hayden]
  + fix: Logging sensitive data
  + test: Mock ds-identify systemd path (#5119)
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + test: fix upgrade dhcp6 on ec2 (#5131)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + ci: fix linkcheck.yml invalid yaml (#5123)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + ec2: Do not enable dhcp6 on EC2 (#5104) [Major Hayden]
  + fix: Fall back to cached local ds if no valid ds found (#4997)
  [PengpengSun]
  + ci: Make linkcheck a scheduled job (#5118)
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + Release 24.1.3
  + chore: Handle all level 1 TiCS security violations (#5103)
  + fix: Always use single datasource if specified (#5098)
  + fix(tests): Leaked mocks (#5097)
  + fix(rhel)!: Fix network boot order in upstream cloud-init
  + fix(rhel): Fix network ordering in sysconfig
  + feat: Use NetworkManager renderer by default in RHEL family
  + fix: Allow caret at the end of apt package (#5099)
  + test: Add missing mocks to prevent bleed through (#5082)
  [Robert Schweikert]
  + fix: Ensure network config in DataSourceOracle can be unpickled (#5073)
  + docs: set the home directory using homedir, not home (#5101)
  [Olivier Gayot] (LP: #2047796)
  + fix(cacerts): Correct configuration customizations for Photon (#5077)
  [Christopher McCann]
  + fix(test): Mock systemd fs path for non-systemd distros
  + fix(tests): Leaked subp.which mock
  + fix(networkd): add GatewayOnLink flag when necessary (#4996) [王煎饼]
  + Release 24.1.2
  + test: fix `disable_sysfs_net` mock (#5065)
  + refactor: don't import subp function directly (#5065)
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  + ds-identify: Improve ds-identify testing flexibility (#5047)
  + fix(ansible): Add verify_commit and inventory to ansible.pull schema
  (#5032) [Fionn Fitzmaurice]
  + doc: Explain breaking change in status code (#5049)
  + gpg: Handle temp directory containing files (#5063)
  + distro(freebsd): add_user: respect homedir (#5061) [Mina Galić]
  + doc: Install required dependencies (#5054)
  + networkd: Always respect accept-ra if set (#4928) [Phil Sphicas]
  + chore: ignore all cloud-init_*.tar.gz in .gitignore (#5059)
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + feat: Add new distro 'azurelinux' for Microsoft Azure Linux. (#4931)
  [Dan Streetman]
  + fix(gpg): Make gpg resilient to host configuration changes (#5026)
  + Sync 24.1.1 changelog and version
  + DS VMware: Fix ipv6 addr converter from netinfo to netifaces (#5029)
  [PengpengSun]
  + packages/debian: remove dependency on isc-dhcp-client (#5041)
  [Chris Patterson]
  + test: Allow fake_filesystem to work with TemporaryDirectory (#5035)
  + tests: Don't wait for GCE instance teardown (#5037)
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle
  (#5021) (LP: #2056439)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix(atomic_helper.py): ensure presence of parent directories (#4938)
  [Shreenidhi Shedi]
  + fix: Add "broadcast" to network v1 schema (#5034) (LP: #2056460)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022) [Chris Patterson]
  + fix: Make wait_for_url respect explicit arguments
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues
  (#5025) (LP: #2056194)
  + chore(cmd-modules): fix exit code when --mode init (#5017)
  + feat: pylint: enable W0201 - attribute-defined-outside-init
  + refactor: Ensure no attributes defined outside __init__
  + chore: disable attribute-defined-outside-init check in tests
  + refactor: Use _unpickle rather than hasattr() in sources
  + chore: remove unused vendordata "_pure" variables
  + chore(cmd-modules): deprecate --mode init (#5005)
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: log correct disabled path in ds-identify (#5016)
  + tests: ec2 dont spend &gt; 1 second retrying 19 times when 3 times will do
  + tests: openstack mock expected ipv6 IMDS
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  (LP: #2055077)
  + feat(run-container): Run from arbitrary commitish (#5015)
  + tests: Fix wsl test (#5008)
  + feat(ds-identify): Don't run unnecessary systemd-detect-virt (#4633)
  + chore(ephemeral): add debug log when bringing up ephemeral network
  (#5010) [Alec Warren]
  + release: sync changelog and version (#5011)
  + Cleanup test_net.py (#4840)
  + refactor: remove dependency on netifaces (#4634) [Cat Red]
  + feat: make lxc binary configurable (#5000)
  + docs: update 404 page for new doc site and bug link
  + test(aws): local network connectivity on multi-nics (#4982)
  + test: Make integration test output more useful (#4984)
  From 24.1.7
  + fix(ec2): Correctly identify netplan renderer (#5361)
  From 24.1.6
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix: Check renderer for netplan-specific code (#5321)
  + test: Fix failing test_ec2.py test (#5324)
  From 24.1.5
  + fix(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  From 24.1.4
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  + (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  From 24.1.3
  + fix: Always use single datasource if specified (#5098)
  + fix: Allow caret at the end of apt package (#5099)
  From 24.1.2
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  From 24.1.1
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix: Add "broadcast" to network v1 schema (#5034)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022)
  + fix: Make wait_for_url respect explicit arguments
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues (#5025)
  + tests: Fix wsl test (#5008)
  From 24.1
  + fix: Don't warn on vendor directory (#4986)
  + apt: kill spawned keyboxd after gpg cmd interaction
  + tests: upgrade tests should only validate current boot log
  + net/dhcp: fix maybe_perform_dhcp_discovery check for interface=None
  [Chris Patterson]
  + doc(network-v2): fix section nesting levels
  + fix(tests): don't check for clean log on minimal image (#4965) [Cat Red]
  + fix(cc_resize): Don't warn if zpool command not found (#4969)
  (LP: #2055219)
  + feat(subp): Make invalid command warning more user-friendly (#4972)
  + docs: Remove statement about device path matching (#4966)
  + test: Fix xfail to check the dhcp client name (#4971)
  + tests: avoid console prompts when removing gpg on Noble
  + test: fix test_get_status_systemd_failure
  + fix: Remove hardcoded /var/lib/cloud hotplug path (#4940)
  + refactor: Refactor status.py (#4864)
  + test: Use correct lxd network-config keys (#4950)
  + test: limit temp dhcp6 changes to &lt; NOBLE (#4942)
  + test: allow downgrades when install debs (#4941)
  + tests: on noble, expect default /etc/apt/sources.list
  + tests: lxd_vm early boot status test ordered After=systemd-remount-fs
  (#4936)
  + tests: pro integration tests supply ubuntu_advantage until pro v32
  (#4935)
  + feat(hotplug): add cmd to enable hotplug (#4821)
  + test: fix test_combined_cloud_config_json (#4925)
  + test: xfail udhcpc on azure (#4924)
  + feat: Implement the WSL datasource (#4786) [Carlos Nihelton]
  + refactor(openrc):  Improve the OpenRC files (#4916) [dermotbradley]
  + tests: use apt install instead of dpkg -i to install pkg deps
  + tests: inactive module rename ubuntu_advantage to ubuntu_pro
  + test: fix tmpdir in test_cc_apk_configure (#4914)
  + test: fix jsonschema version checking in pro test (#4915)
  + feat(dhcp): Make dhcpcd the default dhcp client (#4912)
  + feat(Alpine) cc_growpart.py: fix handling of /dev/mapper devices (#4876)
  [dermotbradley]
  + test: Retry longer in test_status.py integration test (#4910)
  + test: fix kernel override test (#4913)
  + chore: Rename sysvinit/gentoo directory to sysvinit/openrc (#4906)
  [dermotbradley]
  + doc: update ubuntu_advantage references to pro
  + chore: rename cc_ubuntu_advantage to cc_ubuntu_pro (SC-1555)
  + feat(ubuntu pro): deprecate ubuntu_pro key in favor of ubuntu_advantage
  + feat(schema): support ubuntu_pro key and deprecate ubuntu_advantage
  + test: fix verify_clean_log (#4903)
  + test: limit test_no_hotplug_triggered_by_docker to stable releases
  + tests: generalize warning Open vSwitch warning from netplan apply (#4894)
  + fix(hotplug): remove literal quotes in args
  + feat(apt): skip known /etc/apt/sources.list content
  + feat(apt): use APT deb822 source format by default
  + test(ubuntu-pro): change livepatch to esm-infra
  + doc(ec2): fix metadata urls (#4880)
  + fix: unpin jsonschema and update tests (#4882)
  + distro: add eject FreeBSD code path (#4838) [Mina Galić]
  + feat(ec2): add hotplug as a default network update event (#4799)
  + feat(ec2): support instances with repeated device-number (#4799)
  + feat(cc_install_hotplug): trigger hook on known ec2 drivers (#4799)
  + feat(ec2): support multi NIC/IP setups (#4799)
  + feat(hotplug): hook-hotplug is now POSIX shell add OpenRC init script
  [dermotbradley]
  + test: harden test_dhcp.py::test_noble_and_newer_force_client
  + test: fix test_combined_cloud_config_json (#4868)
  + feat(apport): Disable hook when disabled (#4874)
  + chore: Add pyright ignore comments (#4874)
  + bug(apport): Fix invalid typing (#4874)
  + refactor: Move general apport hook to main branch (#4874)
  + feat(bootspeed)!: cloud-config.service drop After=snapd.seeded
  + chore: update CI package build to oldest supported Ubuntu release focal
  (#4871)
  + test: fix test_cli.test_valid_userdata
  + feat: handle error when log file is empty (#4859) [Hasan]
  + test: fix test_ec2_ipv6
  + fix: Address TIOBE abstract interpretation issues (#4866)
  + feat(dhcp): Make udhcpc use same client id (#4830)
  + feat(dhcp): Support InfiniBand with dhcpcd (#4830)
  + feat(azure): Add ProvisionGuestProxyAgent OVF setting (#4860)
  [Ksenija Stanojevic]
  + test: Bring back dhcp6 integration test changes (#4855)
  + tests: add status --wait blocking test from early boot
  + tests: fix retry decorator to return the func value
  + docs: add create_hostname_file to all hostname user-data examples
  (#4727) [Cat Red]
  + fix: Fix typos (#4850) [Viktor Szépe]
  + feat(dhcpcd): Read dhcp option 245 for azure wireserver (#4835)
  + tests(dhcp): Add udhcpc client to test matrix (#4839)
  + fix: Add types to network v1 schema (#4841)
  + docs(vmware): fixed indentation on example userdata yaml (#4854)
  [Alec Warren]
  + tests: Remove invalid keyword from method call
  + fix: Handle systemctl when dbus not ready (#4842) (LP: #2046483)
  + fix(schema cli): avoid netplan validation on net-config version 1
  + tests: reduce expected reports due to dropped rightscale module
  + tests(net-config): add awareness of netplan on stable Ubuntu
  [Gilbert Gilb's]
  + feat: fall back to cdrom_id eject if eject is not available (#4769)
  [Cat Red]
  + fix(packages/bddeb): restrict debhelper-compat to 12 in focal (#4831)
  + tests: Add kernel commandline test (#4833)
  + fix: Ensure NetworkManager renderer works without gateway (#4829)
  + test: Correct log parsing in schema test (#4832)
  + refactor: Remove cc_rightscale_userdata (#4813)
  + refactor: Replace load_file with load_binary_file to simplify typing
  (#4823)
  + refactor: Add load_text_file function to simplify typing (#4823)
  + refactor: Change variable name for consistent typing (#4823)
  + feat(dhcp): Add support for dhcpcd (#4746)
  + refactor: Remove unused networking code (#4810)
  + test: Add more DNS net tests
  + BREAKING CHANGE: Stop adding network v2 DNS to global DNS
  + doc: update DataSource.default_update_events doc (#4815)
  + chore: do not modify instance attribute (#4815)
  + test: fix mocking leaks (#4815)
  + Revert "ci: Pin pytest&lt;8.0.0. (#4816)" (#4815)
  + test: Update tests for passlib (#4818)
  + fix(net-schema): no warn when skipping schema check on non-netplan
  + feat(SUSE): reboot marker file is written as /run/reboot-needed (#4788)
  [Robert Schweikert]
  + test: Cleanup unwanted logger setup calls (#4817)
  + refactor(cloudinit.util): Modernize error handling, add better warnings
  (#4812)
  + ci: Pin pytest&lt;8.0.0. (#4816)
  + fix(tests): fixing KeyError on integrations tests (#4811) [Cat Red]
  + tests: integration for network schema on netplan systems (#4767)
  + feat(schema): use netplan API to validate network-config (#4767)
  + chore: define CLOUDINIT_NETPLAN_FILE static var (#4767)
  + fix: cli schema config-file option report network-config type (#4767)
  + refactor(azure): replace BrokenAzureDataSource with reportable errors
  (#4807) [Chris Patterson]
  + Fix Alpine and Mariner /etc/hosts templates (#4780) [dermotbradley]
  + tests: revert #4792 as noble images no longer return 2 (#4809) [Cat Red]
  + tests: use client fixture instead of class_client in cleantest (#4806)
  + tests: enable ds-idenitfy xfail test LXD-kvm-not-MAAS-1 (#4808)
  + fix(tests): failing integration tests due to missing ua token (#4802)
  [Cat Red]
  + Revert "Use grep for faster parsing of cloud config in ds-identify
  (#4327)"
  + tests: Demonstrate ds-identify yaml parsing broken
  + tests: add exit 2 on noble from cloud-init status (#4792)
  + fix: linkcheck for ci to ignore scaleway anchor URL (#4793)
  + feat: Update cacerts to support VMware Photon (#4763)
  [Christopher McCann]
  + fix: netplan rendering integrations tests (#4795) [Cat Red]
  + azure: remove cloud-init.log reporting via KVP (#4715) [Chris Patterson]
  + feat(Alpine): Modify ds-identify for Alpine support and add OpenRC
  init.d script (#4785) [dermotbradley]
  + doc: Add DatasourceScaleway documentation (#4773) [Louis Bouchard]
  + fix: packaged logrotate file lacks suffix on ubuntu (#4790)
  + feat(logrotate): config flexibility more backups (#4790)
  + fix(clean): stop warning when running clean command (#4761) [d1r3ct0r]
  + feat: network schema v1 strict on nic name length 15 (#4774)
  + logrotate config (#4721) [Fabian Lichtenegger-Lukas]
  + test: Enable coverage in integration tests (#4682)
  + test: Move unit test helpers to global test helpers (#4682)
  + test: Remove snapshot option from install_new_cloud_init (#4682)
  + docs: fix cloud-init single param docs (#4682)
  + Alpine: fix location of dhclient leases file (#4782) [dermotbradley]
  + test(jsonschema): Pin jsonschema version (#4781)
  + refactor(IscDhclient): discover DHCP leases at distro-provided location
  (#4683) [Phsm Qwerty]
  + feat: datasource check for WSL (#4730) [Carlos Nihelton]
  + test: Update hostname integration tests (#4744)
  + test: Add mantic and noble releases to integration tests (#4744)
  + refactor: Ensure internal DNS state same for v1 and v2 (#4756)
  + feat: Add v2 route mtu rendering to NetworkManager (#4748)
  + tests: stable ubuntu releases will not exit 2 on warnings (#4757)
  + doc(ds-identify): Describe ds-identify irrespective of distro (#4742)
  + fix: relax NetworkManager renderer rules (#4745)
  + fix: fix growpart race (#4618)
  + feat: apply global DNS to interfaces in network-manager  (#4723)
  [Florian Apolloner]
  + feat(apt): remove /etc/apt/sources.list when deb22 preferred (#4740)
  + chore: refactor schema data as enums and namedtuples (#4585)
  + feat(schema): improve CLI message on unprocessed data files (#4585)
  + fix(config): relocate /run to /var/run on BSD (canonical#4677)
  [Mina Galić]
  + fix(ds-identify): relocate /run on *BSD (#4677) [Mina Galić]
  + fix(sysvinit): make code a bit more consistent (#4677) [Mina Galić]
  + doc: Document how cloud-init is, not how it was (#4737)
  + tests: add expected exit 2 on noble from cloud-init status (#4738)
  + test(linkcheck): ignore github md and rst link headers (#4734)
  + test: Update webhook test due to removed cc_migrator module (#4726)
  + fix(ds-identify): Return code 2 is a valid result, use cached value
  + fix(cloudstack): Use parsed lease file for virtual router in cloudstack
  + fix(dhcp): Guard against FileNotFoundError and NameError exceptions
  + fix(apt_configure): disable sources.list if rendering deb822 (#4699)
  (LP: #2045086)
  + docs: Add link to contributing to docs (#4725) [Cat Red]
  + chore: remove commented code (#4722)
  + chore: Add log message when create_hostname_file key is false (#4724)
  [Cat Red]
  + fix: Correct v2 NetworkManager route rendering (#4637)
  + azure/imds: log http failures as warnings instead of info (#4714)
  [Chris Patterson]
  + fix(setup): Relocate libexec on OpenBSD (#4708) [Mina Galić]
  + feat(jinja): better jinja feedback and error catching (#4629)
  [Alec Warren]
  + test: Fix silent swallowing of unexpected subp error (#4702)
  + fix: Move cloud-final.service after time-sync.target (#4610)
  [Dave Jones] (LP: #1951639)
  + feat(log): Make logger name more useful for __init__.py
  + chore: Remove cc_migrator module (#4690)
  + fix(tests): make cmd/devel/tests work on non-GNU [Mina Galić]
  + chore: Remove cmdline from spelling list (#4670)
  + doc: Document boot status meaning (#4670)
  + doc: Set expectations for new datasources (#4670)
  + ci: Show linkcheck broken links in job output (#4670)
  + dmi: Add support for OpenBSD (#4654) [Mina Galić]
  + ds-identify: fake dmidecode support on OpenBSD (#4654) [Mina Galić]
  + ds-identify: add OpenBSD support in uname (#4654) [Mina Galić]
  + refactor: Ensure '_cfg' in Init class is dict (#4674)
  + refactor: Make event scope required in stages.py (#4674)
  + refactor: Remove unused argument (#4674)
  + chore: Move from lintian to a sphinx spelling plugin (#3639)
  + fix(doc): Fix spelling errors found by sphinxcontrib-spelling (#3639)
  + ci: Add Python 3.13 (#4567)
  + Add AlexSv04047 to CLA signers file (#4671) [AlexSv04047]
  + fix(openbsd): services &amp; build tool (#4660) [CodeBleu]
  + tests/unittests: add a new unit test for network manager net activator
  (#4672) [Ani Sinha]
  + Implement DataSourceCloudStack.get_hostname() (#4433) [Phsm Qwerty]
  + net/nm: check for presence of ifcfg files when nm connection files
  are absent (#4645) [Ani Sinha]
  + doc: Overhaul debugging documentation (#4578)
  + doc: Move dangerous commands to dev docs (#4578)
  + doc: Relocate file location docs (#4578)
  + doc: Remove the debugging page (#4578)
  + fix(util): Fix boottime to work on OpenBSD (#4667) [Mina Galić]
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  [Ani Sinha]
  + net/network_manager: do not set "may-fail" to False for both ipv4 and
  ipv6 dhcp [Ani Sinha]
  + feat(subp): Measure subprocess command time (#4606)
  + fix(python3.13): Fix import error for passlib on Python 3.13 (#4669)
  + style(brpm/bddeb): add black and ruff for packages build scripts (#4666)
  + copr: remove TODO.rst from spec file
  + fix(packages/brpm): correct syntax error and typo
  + style(ruff): fix tip target
  + config: Module documentation updates (#4599)
  + refactor(subp): Remove redundant parameter 'env' (#4555)
  + refactor(subp): Remove unused parameter 'target' (#4555)
  + refactor: Remove 'target' boilerplate from cc_apt_configure (#4555)
  + refactor(subp): Re-add return type to subp() (#4555)
  + refactor(subp): Add type information to args (#4555)
  + refactor(subp): Use subprocess.DEVNULL (#4555)
  + refactor(subp): Remove parameter 'combine_capture' (#4555)
  + refactor(subp): Remove unused parameter 'status_cb' (#4555)
  + fix(cli): fix parsing of argparse subcommands (#4559)
  [Calvin Mwadime] (LP: #2040325)
  + chore!: drop support for dsa ssh hostkeys in docs and schema (#4456)
  + chore!: do not generate ssh dsa host keys (#4456) [shixuantong]
  From 23.4.4
  + fix(nocloud): smbios datasource definition
  + tests: Check that smbios seed works
  + fix(source): fix argument boundaries when parsing cmdline (#4825)
  From 23.4.3
  + fix: Handle systemctl when dbus not ready (#4842)
  (LP: #2046483)
  From 23.4.2
  + fix: Handle invalid user configuration gracefully (#4797)
  (LP: #2051147)
  From 23.4.1
  + fix: Handle systemctl commands when dbus not ready (#4681)
  From 23.4
  + tests: datasourcenone use client.restart to block until done (#4635)
  + tests: increase number of retries across reboot to 90 (#4651)
  + fix: Add schema for merge types (#4648)
  + feat: Allow aliyun ds to fetch data in init-local (#4590) [qidong.ld]
  + azure: report failure to eject as error instead of debug (#4643)
  [Chris Patterson]
  + bug(schema): write network-config if instance dir present (#4635)
  + test: fix schema fuzzing test (#4639)
  + Update build-on-openbsd dependencies (#4644) [CodeBleu]
  + fix(test): Fix expected log for ipv6-only ephemeral network (#4641)
  + refactor: Remove metaclass from network_state.py (#4638)
  + schema: non-root fallback to default paths on perm errors (# 4631)
  + fix: Don't loosen the permissions of the log file (#4628)
  + Revert "logging: keep current file mode of log file if its stricter
  than the new mode (#4250)"
  + ephemeral: Handle link up failure for both ipv4 and ipv6  (#4547)
  + fix(main): Don't call logging too early (#4595)
  + fix: Remove Ubuntu-specific kernel naming convention assertion (#4617)
  + fix(log): Do not implement handleError with a self parameter (#4617)
  + fix(log): Don't try to reuse stderr logger (#4617)
  + feat: Standardize logging output to stderr (#4617)
  + chore: Sever unmaintained TODO.rst (#4625)
  + test: Skip failing tests
  + distros: Add suse
  + test: Add default hello package version (#4614)
  + fix(net): Improve DHCPv4 SUSE code, add test
  + net: Fix DHCPv4 not enabled on SUSE in some cases [bin456789]
  + fix(schema): Warn if missing dependency (#4616)
  + fix(cli): main source cloud_config for schema validation (#4562)
  + feat(schema): annotation path for invalid top-level keys (#4562)
  + feat(schema): top-level additionalProperties: false (#4562)
  + test: ensure top-level properties tests will pass (#4562)
  + fix(schema): Add missing schema definitions (#4562)
  + test: Fix snap tests (#4562)
  + azure: Check for stale pps data from IMDS (#4596) [Ksenija Stanojevic]
  + test: Undo dhcp6 integration test changes (#4612)
  + azure: update diagnostic from warning level to debug [Chris Patterson]
  + azure/imds: remove limit for connection errors if route present (#4604)
  + [Chris Patterson]
  + [enhancement]: Add shellcheck to CI (#4488) [Aviral Singh]
  + chore: add conventional commits template (#4593)
  + Revert "net: allow dhcp6 configuration from
  generate_fallback_configuration()" (#4607)
  + azure: workaround to disable reporting IMDS failures on Azure Stack
  [Chris Patterson]
  + cc_apt_pipelining: Update docs, deprecate options (#4571)
  + test: add gh workflows on push to main, update status badges (#4597)
  + util: Remove function abs_join() (#4587)
  + url_helper: Remove unused function retry_on_url_exc() (#4587)
  + cc_resizefs: Add bcachefs resize support (#4594)
  + integration_tests: Support non-Ubuntu distros (#4586)
  + fix(cmdline): fix cmdline parsing with MAC containing cc:
  + azure/errors: include http code in reason for IMDS failure
  [Chris Patterson]
  + tests: cloud-init schema --system does not return exit code 2
  + github: allow pull request to specify desired rebase and merge
  + tests: fix integration test expectations of exit 2 on schema warning
  + tests: fix schema test expected cli output Valid schema &lt;type&gt;
  + fix(schema cli): check raw userdata when processed cloud-config empty
  + azure: report failure to host if ephemeral DHCP secondary NIC (#4558)
  [Chris Patterson]
  + man: Document cloud-init error codes (#4500)
  + Add support for cloud-init "degraded" state (#4500)
  + status.json: Don't override detail key with error condition (#4500)
  + status: Remove duplicated data (#4500)
  + refactor: Rename exported_errors in status.json (#4500)
  + test: Remove stale status.json value (#4500)
  + tools/render-template: Make yaml loading opt-in, fix setup.py (#4564)
  + Add summit digest/trip report to docs (#4561) [Sally]
  + doc: Fix incorrect statement about `cloud-init analyze`
  + azure/imds: ensure new errors are logged immediately when retrying
  (#4468) [Chris Patterson]
  + Clarify boothook docs (#4543)
  + boothook: allow stdout/stderr to emit to cloud-init-output.log
  + summit-notes: add 2023 notes for reference in mailinglist/discourse
  + fix: added mock to stop leaking journalctl that slows down unit test
  (#4556) [Alec Warren]
  + tests: maas test for DataSourceMAASLocal get_data
  + maas tests: avoid using CiTest case and prefer pytest.tmpdir fixture
  + MAAS: Add datasource to init-local timeframe
  + Ensure all tests passed and/or are skipped
  + Support QEMU in integration tests
  + fix(read-dependencies): handle version specifiers containing [~!]
  + test: unpin pytest
  + schema: network-config optional network key. route uses oneOf (#4482)
  + schema: add cloud_init_deepest_matches for best error message (#4482)
  + network: warn invalid cfg add /run/cloud-init/network-config  (#4482)
  + schema: add network-config support to schema subcommand (#4482)
  + Update version number and merge ChangeLog from 23.3.3 into main (#4553)
  + azure: check for primary interface when performing DHCP (#4465)
  [Chris Patterson]
  + Fix hypothesis failure
  + subp: add a log when skipping a file for execution for lack of exe
  permission (#4506) [Ani Sinha]
  + azure/imds: refactor max_connection_errors definition (#4467)
  [Chris Patterson]
  + chore: fix PR template rendering (#4526)
  + fix(cc_apt_configure): avoid unneeded call to apt-install (#4519)
  + comment difference between sysconfig and NetworkManager renderer (#4517)
  [Ani Sinha]
  + Set Debian's default locale to be c.UTF-8 (#4503) (LP: #2038945)
  + Convert test_debian.py to pytest (#4503)
  + doc: fix cloudstack link
  + doc: fix development/contributing.html references
  + doc: hide duplicated links
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen
  (#4281)" (#4511) (LP: #2039453)
  + Fix the missing mcopy argument [Vladimir Pouzanov]
  + tests: Add logging fix (#4499)
  + Update upgrade test to account for dhcp6
  + Remove logging of PPID path (#4502)
  + Make Python 3.12 CI test non-experimental (#4498)
  + ds-identify: exit 2 on disabled state from marker or cmdline (#4399)
  + cloud-init-generator: Various performance optimizations (#4399)
  + systemd: Standardize cloud-init systemd enablement (#4399)
  + benchmark: benchmark cloud-init-generator independent of ds-identify
  (#4399)
  + tests/integration_tests: add cloud-init disablement coverage (#4399)
  + doc: Describe disabling cloud-init using an environment variable (#4399)
  + fix: cloud-init status --wait broken with KERNEL_CMDLINE (#4399)
  + azure/imds: retry on 429 errors for reprovisiondata (#4470)
  [Chris Patterson]
  + cmd: Don't write json status files for non-boot stages (#4478)
  + ds-identify: Allow disable service and override environment (#4485)
  [Mina Galić]
  + Update DataSourceNWCS.py (#4496) [shell-skrimp]
  + Add r00ta to CLA signers file
  + Fix override of systemd_locale_conf in rhel [Jacopo Rota]
  + ci(linkcheck): minor fixes (#4495)
  + integration test fix for deb822 URI format (#4492)
  + test: use a mantic-compatible tz in t/i/m/test_combined.py (#4494)
  + ua: shift CLI command from ua to pro for all interactions
  + pro: avoid double-dash when enabling inviddual services on CLI
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  (#4474) [Ani Sinha]
  + tests: apt re.search to match alternative ordering of installed pkgs
  + apt: doc apt_pkg performance improvement over subp apt-config dump
  + Tidy up contributing docs (#4469) [Sally]
  + [enhancement]: Automatically linkcheck in CI (#4479) [Aviral Singh]
  + Revert allowing pro service warnings (#4483)
  + Export warning logs to status.json (#4455)
  + Fix regression in package installation (#4466)
  + schema: cloud-init schema in early boot or in dev environ (#4448)
  + schema: annotation of nested dicts lists in schema marks (#4448)
  + feat(apport): collect ubuntu-pro logs if ubuntu-advantage.log present
  (#4443)
  + apt_configure: add deb822 support for default sources file (#4437)
  + net: remove the word "on instance boot" from cloud-init generated config
  (#4457) [Ani Sinha]
  + style: Make cloudinit.log functions use snake case (#4449)
  + Don't recommend using cloud-init as a library (#4459)
  + vmware: Fall back to vmtoolsd if vmware-rpctool errs (#4444)
  [Andrew Kutz]
  + azure: add option to enable/disable secondary ip config (#4432)
  + [Ksenija Stanojevic]
  + Allow installing snaps via package_update_upgrade_install module (#4202)
  + docs: Add cloud-init overview/introduction (#4440) [Sally]
  + apt: install software-properties-common when absent but needed (#4441)
  + sources/Azure: Ignore system volume information folder while scanning
  for files in the ntfs resource disk (#4446) [Anh Vo]
  + refactor: Remove unnecessary __main__.py file
  + style: Drop vi format comments
  + cloudinit.log: Use more appropriate exception (#4435)
  + cloudinit.log: Don't configure NullHandler (#4435)
  + commit 6bbbfbbb030831c72b5aa2bba9cb8492f19d56f4
  + cloudinit.log: Remove unnecessary module function and variables (#4435)
  + cloudinit.log: Remove unused getLogger wrapper (#4435)
  + cloudinit.log: Standardize use of cloudinit's logging module (#4435)
  + Remove unnecessary logging wrapper in Cloud class (#4435)
  + integration test: allow pro service warnings (#4447)
  + integration tests: fix mount indentation (#4445)
  + sources/Azure: fix for conflicting reports to platform (#4434)
  [Chris Patterson]
  + docs: link the cloud-config validation service (#4442)
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  + Install gnupg if gpg not found (#4431)
  + Add "phsm" as contributor (#4429) [Phsm Qwerty]
  + cc_ubuntu_advantage: do not rely on uaclient.messages module (#4397)
  [Grant Orndorff]
  + tools/ds-identify: match Azure datasource's ds_detect() behavior (#4430)
  [Chris Patterson]
  + Refactor test_apt_source_v1.py to use pytest (#4427)
  + sources: do not override datasource detection if None is in list (#4426)
  [Chris Patterson]
  + feat: check for create_hostname_file key before writing /etc/hostname
  (SC-1588) (#4330) [Cat Red]
  + Pytestify apt config test modules (#4424)
  + upstream gentoo patch (#4422)
  + Work around no instance ip (#4419)
  + Fix typing issues in subp module (#4401)
  + net: fix ipv6_dhcpv6_stateful/stateless/slaac configuration for rhel
  (#4395) [Ani Sinha]
  + Release 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: fix mount indentation (#4405)
  + Use grep for faster parsing of cloud config in ds-identify (#4327)
  [Scott Moser] (LP: #2030729)
  + doc: fix instructions on how to disable cloud-init from kernel command
  line (#4406) [Ani Sinha]
  + doc/vmware: Update contents relevant to disable_vmware_customization
  [PengpengSun]
  + Bring back flake8 for python 3.6 (#4394)
  + integration tests: Fix cgroup parsing (#4402)
  + summary: Update template parameter descriptions in docs [MJ Moshiri]
  + Log PPID for better debugging (#4398)
  + integration tests: don't clean when KEEP_* flags true (#4400)
  + clean: add a new option to clean generated config files [Ani Sinha]
  + pep-594: drop deprecated pipes module import
  From 23.3.3
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  From 23.3.2
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen"
  (#4281) (#4511) (LP: #2039453)
  From 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: Fix cgroup parsing (#4402)</changelog>
  <changelog author="rjschwei@suse.com" date="1753185600">- Update to version 25.1.3 (bsc#1245401,bsc#1245403)
  + Forward port
  - cloud-init-no-openstack-guess.patch
  + docs: provide example3 for PAM and ssh_pwauth behavior (#27)
  + fix: Make hotplug socket writable only by root (#25) (CVE-2024-11584)
  + fix: Don't attempt to identify non-x86 OpenStack instances (LP: #2069607)
    (CVE-2024-6174)
  From 25.1.2
  + fix: ensure MAAS datasource retries on failure (#6167)</changelog>
  <changelog author="mmachova@suse.com" date="1759233600">- Drop unneeded test dependency on httpretty, fixed long ago
  * https://github.com/canonical/cloud-init/pull/1720</changelog>
  <changelog author="rjschwei@suse.com" date="1762862400">- Fix dependency replace -serial with -pyserial</changelog>
</package>
<package pkgid="501b0e3d4ae421c848cdffa2bc6aac2f3e50b52f886fb79846e44049e2b977e7ae06cecb73dd1488eabf1ea448050584e41800f392f40a8e2f5d2f8f35133e67" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.5.2" rel="160000.3.1"/>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
</package>
<package pkgid="367bb47ec0814c746b4884f00693adcb1cd7b2531cb0df384f089fa110108776a30052388daa980331f1caa4b95bf5390fd99dab93cfcace27a10b5cfed5e99e" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.3.1"/>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
</package>
<package pkgid="b0333455913810417ac7bbd44874e318d9ef4e1af8330648c91e68b9a4e68d0b22faa3bc1c7187199436130d9ebdc5af7e8f978271873bff01c9bf580b6afb18" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="160000.3.1"/>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
</package>
<package pkgid="064104145f2b578078632871ee178f45523c5526663562544dfb372dec1a707489b6ce0f9a9dae3337970b989b352d929b337e4d69837bb94d98799e68be71d3" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="160000.3.1"/>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
</package>
<package pkgid="c5d5ef2209033371431a66d15c718786aba0f6fd8b59ebc6577f9e50bc40f1fdf6ce6046a60df8d0218bc5728fea4cca2549d9d9f14c677b7529dafcdb7d1305" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.3.1"/>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
</package>
<package pkgid="86bc1e21efe11593e26c4a3141afbf90282856114ff9a05aff09810035ee0f0055ccd3ada4d0fca02442af9ec454ae8b7eb37b686ab38488ece3467eaa5f4996" name="cockpit" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="09bdafb6d6e355e17d1f695eb7f19c87b31a608b14853764443d2645e04b296d23cc1665217aeea9bf8f4c22d575a80ab08febedf6b3eea0694570a12eadacdc" name="cockpit-bridge" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="d03c37e06f0d3afec6255e0f9319f6a705e83c17d254e4101e8ac7050209d56167dea8553c42bd83960586add5667ca9c346551c7bc614d6222f0a587ca126e9" name="cockpit-machines" arch="noarch">
  <version epoch="0" ver="346" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752062400">- Explicitly set uefi as default firmware (bsc#1245145)</changelog>
  <changelog author="alice.brooks@suse.com" date="1755691200">- Update to 337
  * 337
  - Bug fixes and translation updates
  * 336
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates
  * 335
  - Bug fixes and translation updates
  * 334
  - Bug fixes and translation updates</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757592000">- Update to 339
  * 339
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions
  * 338
  - Translation and dependency updates
  - Detachable VNC console
- removed nic-domain-not-found.patch that is now part of upstream</changelog>
  <changelog author="luna.dragon@suse.com" date="1758024000">- add hostadd-allow-device-form-to-overflow-on-X-axis.patch fixes bsc#1248250</changelog>
  <changelog author="alice.brooks@suse.com" date="1758024001">- Add a hard require on libvirt bsc#1236149</changelog>
  <changelog author="miika.alikirri@suse.com" date="1758110400">- Don't set UEFI as default firmware for ppc64le and s390x
  * Fixes bsc#1249828 and bsc#1249830</changelog>
  <changelog author="alice.brooks@suse.com" date="1760961600">- Update to 342
  * 342
  - Bug fixes and translation updates
  * 341
  - Improved UX for Disks and Network interface tables
  - Bug fixes and translation updates
  * 340
  - Use exclusive VNC connections with "Remote resizing"
- Drop hostadd-allow-device-form-to-overflow-on-X-axis.patch as this has
  been upstreamed</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 344
  * 344
  - Port forwarding for user session VMs
  - "Shutdown and restart" action
  - Faster startup
  * 343
  - Memory usage now shows numbers reported by the guest (RHEL-116731)</changelog>
  <changelog author="alice.brooks@suse.com" date="1769515200">- Update dependencies for bsc#1257325/CVE-2025-13465
- Update to 346
  * 346
  - Performance improvements
  - Translation updates
  * 345
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="7b3708e90a51ec24701f9ff0583ac7422062f021b2d53a4f2123ede02f4eeb59442ce32b91da3e317267c10556bdd7f7548aa647e0b9a212916e4bf0ea24f813" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="6db2f04b199de5f770c0be3662247fd414ed4146fb336fb4daac88f8414c0f41ff8d91e1b678a1d1a2487cad0691f797cb0f8388fb21434ef077ffebf123bf66" name="cockpit-podman" arch="noarch">
  <version epoch="0" ver="117" rel="160000.2.1"/>
  <changelog author="alice.brooks@suse.com" date="1739534400">- Update to version 100
  * dropped: correct-container-search.patch as this behaviour is
    fixed upstream</changelog>
  <changelog author="alice.brooks@suse.com" date="1741608000">- Update to version 102
  * Translation updates
  * Bug fixes</changelog>
  <changelog author="luna.dragon@suse.com" date="1746187200">- New version 104, updates since 102:
  * drop correct-container-search.patch: upstreamed
  * Upgraded to Patternfly 6
  * Link service containers to service pages
  * Connect to other accounts
  * Translation updates
  * Bug fixes</changelog>
  <changelog author="alice.brooks@suse.com" date="1750075200">- Update to 107
  * Bug fixes
  * Translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1755691200">- Update to 112
  * 112
  - Translation and dependency updates
  * 111
  - Bug fixes and translation updates
  * 110
  - Bug fixes and translation updates
  * 109
  - Bug fixes and translation updates
  * 108
  - Bug fixes and translation updates</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757419200">- Update to 113
  * Sortable Images table</changelog>
  <changelog author="alice.brooks@suse.com" date="1760961600">- Update to 115
  * 115
  - List stopped quadlets
  - Translations and dependency updates
  * 114
  - Bug fixes and translation updates
  * 113
  - Sortable Images table</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 117
  * 117
  - Performance and stability improvements
  * 116
  - Support stopping/starting/restart quadlets</changelog>
  <changelog author="alice.brooks@suse.com" date="1770120000">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775736000">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="435649b807353bf211fc59db1b4c77e314ac254cf90258b05e1d4a55fa9fcc5cdbce6b8d4cbbc0eafe5e11c50e2cfa482808553071d2a1a9d2818fdb7907137f" name="cockpit-selinux" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="d667eb0b751661686e3baa38606a0290f55eda0a1d66e2feaffe75328b439495ecb5546f2387ec034bf94d1f89c6689c35bcdab77d40d0e535a19f6030857290" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="63848c371fd6556941958e67ca6cf409aaf358d48239ea15d376e4d92cba5619025897f3b9f9242b3c9ff290243b034d807739ac403067085ac90859635a4204" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="060f78db54e4ee34e15480be5a4531f0e38ed8c357d6339cbe3976aaf27d99f9c5152b81385932fe88b14059363c8f6f7b5c53d0e3047ccf5db49df3f3907341" name="cockpit-tukit" arch="noarch">
  <version epoch="0" ver="0.1.4~git0.6eacfc1" rel="160000.2.2"/>
  <changelog author="jtomasiak@suse.com" date="1655726400">- Update to version 0.0.3~git10.d8579a3:
  * Update to cockpit 271
  * Add translation template
  * Update translations
  * Add load-css-overrides.patch to start loading a custom CSS file</changelog>
  <changelog author="jtomasiak@suse.com" date="1659700800">- Update to version 0.0.3~git28.b446f50:
  * Add missing plurals
  * Added translation using Weblate (Portuguese)
  * Translated using Weblate (Polish)
  * Add Swedish Translation
  * added/corrected de.po for german
  * initial version of czech translation
  * Add support for dict-format snapshots List
  * Fix URIError: malformed URI sequence
  * Reformat spec to match Factory</changelog>
  <changelog author="miika.alikirri@suse.com" date="1690459200">- Update to version 0.0.8~git0.a915cfd:
  * Fixed arch specific esbuild depedency issues
  * remove wasm check
  * add deps for release
  * use esbuild by default and update spec
  * Port to typescript
  * Support global cockpit dark theme
  * Updated sources to work with the new dependencies
  * Update dependencies and build process to match latest cockpit
  * Translated using Weblate (Georgian)
  * Added translation using Weblate (Georgian)
  * Fix name in metainfo (bsc#1203653)
  * Add mapping for more patch levels
  * Handle tukitd service problems
  * Fix pot/po generation
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Japanese)</changelog>
  <changelog author="miika.alikirri@suse.com" date="1691582400">- Update to version 0.0.9~git0.81662cf:
  * Handle non-existing update descriptions</changelog>
  <changelog author="miika.alikirri@suse.com" date="1696420800">- Update to version 0.1.0~git0.8c6c01a:
  * Automatically update UI when user gets admin access
  * Updated minimum cockpit version in spec file
  * Updated the version to 0.1.0 so it's closer to semver</changelog>
  <changelog author="luna.dragon@suse.com" date="1705406400">- Update to version 0.1.2~git0.647b3e3:
  * Update dependencies to fix building against latest versions of Cockpit
  * Forcefully reload the whole page when getting/limitin admin access
  * Update @babel/traverse to avoid security issues</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="adam.majer@suse.de" date="1723204800">- 38.patch: pending build fixes against newer cockpit</changelog>
  <changelog author="luna.dragon@suse.com" date="1744718400">- Update to version 0.1.3~git0.41f9fbc:
  * FEAT: add ci
  * FEAT: drop rome and use styelint and eslint
  * FIX: update makefile to support updated translation utils
  * FEAT: explicitly specify cockpit-tukit is only supported on transacional systems
  * use typescript types provided by upstream
  * drop 38.patch</changelog>
  <changelog author="luna.dragon@suse.com" date="1747137600">- Update to version 0.1.4~git0.6eacfc1:
  * Display message for user if they aren't superuser (bsc#1242139)
  * UI Fixes
  * FEAT: Patternfly 6 support
  * BUMP deps to patternfly-6 and update COCKPIT_REPO_COMMIT
  * fix: Properly handle superuser.allowed
  * Bump @typescript-eslint/eslint-plugin in the types group
  * Bump qunit from 2.19.4 to 2.24.1
  * Bump the stylelint group across 1 directory with 2 updates
  * Bump ts-loader from 9.4.4 to 9.5.2
  * Bump glob from 11.0.1 to 11.0.2
  * Bump the stylelint group with 2 updates
  * Bump @typescript-eslint/eslint-plugin in the types group
  * Bump @babel/preset-typescript from 7.22.5 to 7.27.1
  * Chore: With dependabot now enabled, lets update insecure npm packages
  * Bump the react group with 2 updates
  * Bump esbuild from 0.25.2 to 0.25.4 in the esbuild group
  * ci: Add in dependabot and automated updates to cockpit-lib
  * Translated using Weblate (German)
  * Translated using Weblate (German)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Chinese (Traditional Han script))
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (French)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (German)
  * Translated using Weblate (German)
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Italian)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Chinese (Traditional Han script))
  * Translated using Weblate (French)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Spanish)
  * Update tukit.pot
  * Added translation using Weblate (Italian)
  * Added translation using Weblate (French)
  * Added translation using Weblate (Spanish)
  * Translated using Weblate (German)
  * Added translation using Weblate (Chinese (Traditional Han script))</changelog>
</package>
<package pkgid="da9a0be952d7c56b1a476158fac849240ff0ca123b221bf90136a4bd3e0889b8d787793b5776a59e64e48b96a52702cecee53ca8bc8bfd26c126f86672eb6d81" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="f2e2511a8e302742109db907656c02d29bdeb393ce9f3edcad269ec7d1aabed3fbdb7bf43d3518a7de14d681ee2c01e70a7e0c4f34bbc0a29bdf4c945b021783" name="cockpit-ws-selinux" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="e6b3461190250da647100dbb4f5b49f71c2e476b5c2287f3ec383ed12595619c2b18bb08e2b4cf8b1c6893cc4517cf9c6410525400938ab1e02317341fffaaf0" name="combustion" arch="noarch">
  <version epoch="0" ver="1.5" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1700740800">- Update to version 1.3:
  * Add udev rule for VMware guestinfo
  * Read VMware guestinfo value as base64 encoded gzipped script
  * Support VMware guestinfo</changelog>
  <changelog author="fvogt@suse.com" date="1703160000">- Update to version 1.3+git3:
  * 30firstboot: Do not detect firstboot in the zipl initrd "initgrub" mode
    (bsc#1218065)
  * Handle absence of NM and wicked properly
  * Use dracut $hookdir instead of hardcoding</changelog>
  <changelog author="fvogt@suse.com" date="1706184000">- Update to version 1.3+git5:
  * Set the snapper snapshot as important=yes
  * Remove unnecessary chmod</changelog>
  <changelog author="fvogt@suse.com" date="1709294400">- Update to version 1.3+git7:
  * Only enable all existing DASDs if it's actually the first boot (bsc#1219849)
  * Use $dracutsysrootdir</changelog>
  <changelog author="fvogt@suse.com" date="1709726400">- Update to version 1.3+git9:
  * Explicitly install modules for config sources
  * Trigger udev rules on ACTION!="remove"</changelog>
  <changelog author="fvogt@suse.com" date="1720785600">- Switch _service to use mode="manual"
- Update to version 1.3+git11:
  * 30firstboot: Leave IPL DASD enablement to s390-tools (jsc#PED-8130)
  * Wait for tee to finish in example scripts (bsc#1222411)</changelog>
  <changelog author="fvogt@suse.com" date="1722945600">- Update to version 1.4:
  * Add support for remote config files using combustion.url (jsc#PED-8591)</changelog>
  <changelog author="fvogt@suse.com" date="1723464000">- Update to version 1.4+git4:
  * Add basic automated testing
  * Don't wait for other config sources if combustion.url is set
  * Improve documentation for config sources a bit
  * Stop gpg-agent before umounting /sysroot</changelog>
  <changelog author="fvogt@suse.com" date="1724241600">- Update to version 1.4+git8:
  * Avoid misleading "Application returned with exit status 1" message
  * CI: Add an ignition config which mounts /sysroot/home
  * Bind mount API filesystems individually
  * Check for leftover /sysroot mounts on combustion exit</changelog>
  <changelog author="fvogt@suse.com" date="1742558400">- Update to version 1.5:
  * Add support for nested /etc subvolumes
  * Log combustion-prepare.service to journal+console
  * CI: Verify combustion runs only on the first boot
  * CI: Add some missing SYSTEMD_IGNORE_CHROOT=1 to poweroff calls
  * CI: Add a test with Minimal-VM
  * Silence stderr of grep in /proc/*/mountinfo</changelog>
</package>
<package pkgid="0a36c467afb020e76b359768191f8e8e4f823f8d15af04b13b1a45fbe8a2d1fdaa5be4ee4beb3cb61e4b11967352d6dfc0a8714c52a9702209354db745554228" name="compat-usrmerge-tools" arch="x86_64">
  <version epoch="0" ver="84.87" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1616673600">- catch boolean deps</changelog>
  <changelog author="obs@haasn.xyz" date="1622548800">- add fallback for filesystems without renameat2 (boo#1186637)</changelog>
  <changelog author="lnussel@suse.com" date="1622635200">- exit early if one of the affected directories has mountpoint
  beneath it</changelog>
  <changelog author="lnussel@suse.com" date="1623067200">- fix conversion with split /usr (boo#1186781)</changelog>
  <changelog author="fvogt@suse.com" date="1623153600">- Avoid dependency on mountpoint from util-linux
- Also check for availability of find</changelog>
  <changelog author="lnussel@suse.de" date="1623153601">- early exit in case of overlayfs (boo#1187027)</changelog>
  <changelog author="lnussel@suse.de" date="1623758400">- another fix for split /usr to avoid running out of space (boo#1186781)
- unsafe fallback also for ENOSYS on renameat2 as seen on WSL</changelog>
  <changelog author="lnussel@suse.de" date="1630065600">- statically link xmv to avoid glibc 2.34 dependency
  (__libc_start_main@GLIBC_2.34)
- turn on filetriggers in main package. Needed for single transaction upgrades
  (boo#1189788)</changelog>
  <changelog author="lnussel@suse.de" date="1630065601">- exit file triggers early if alread usrmerged</changelog>
  <changelog author="lnussel@suse.de" date="1633608000">- Fix logic for detecting conflicts with directories (boo#1191111)</changelog>
</package>
<package pkgid="c5c0ded81e04454bc1d52016c8fbb3d31cd5f7c43254284e04db551decdbd4c299043e1953b1d924528596a38346d239f7eef09b5de2117a8a133c4e33b162f8" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.13" rel="160000.2.2"/>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
  <changelog author="dcermak@suse.com" date="1714478400">- New upstream release 2.1.11
  * docs/Makefile: softcode GOMD2MAN by @rahilarious
  * chore(deps): update dependency containers/automation_images to v20231208 by @renovate
  * drop --tty on exec by @haircommander
  * update packit config, enable downstream tasks by @lsm5
  * Remove checks for (long)deprecated libsystemd-journal for libsystemd by @rahilarious
  * Add support for s390x by @saschagrunert
  * Build s390x binaries using musl libc by @saschagrunert</changelog>
  <changelog author="dcermak@suse.com" date="1715947200">- New upstream release 2.1.12
  * Packit: enable downstream sync to CentOS Stream 10
  * Make 'docs' target not depend on 'install.tools' if GOMD2MAN is set</changelog>
  <changelog author="dcermak@suse.com" date="1740571200">- New upstream release 2.1.13
  [#]## Bug fixes
  * Make timestamp generation never fail.
  * Change permissions of logs from 0600 to 0640
  * Avoid bogus journal filling errors
  * Fix typos and clarify man page.
  * conmon: do not create oom file under cwd
  * logging: remove unuseful fsync</changelog>
</package>
<package pkgid="775f534006b0b8482c0fd8bc898e637a26722222a1800371c4ad74323f29790b5a320777fce19e807372c39ccdebc2696890422eee858a3cc67e1a348f06b333" name="conntrack-tools" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.4.6
  * conntrackd: fix UDP IPv6 destination address not being usable
  * conntrack: Allow protocol number zero
  * conntrackd: cthelper: Add new SLP helper
- Drop conntrackd-Use-strdup-in-lexer.patch,
  conntrackd-use-strncpy-to-unix-path.patch,
  conntrackd-cthelper-Add-new-SLP-helper.patch,
  conntrackd-use-correct-max-unix-path-length.patch (merged)
- Drop require on systemd, since it can run in a namespace without.</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Modified:
  * conntrackd.service</changelog>
  <changelog author="jengelh@inai.de" date="1665057600">- Update to release 1.4.7
  * Changes to the "conntrack" program:
  * "clash_resolve" and "chaintoolong" stats counters
  * Defaults to the `unspec` family if the `-f` flag is absent,
    so as to improve support for dual-stack setups.
  * Support filtering events by IP address family.
  * Support flushing per IP address family.
  * Added the `save` output format representing data in conntrack
    parameters, and support for loading such files back.
  * Remove the `-o userspace` flag and always tag user space
    triggered events.
  * Introduce the `-A` flags, a variant of `-I` which does not
    fail if the entry exists already.</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 1.4.8
  * Fix spurious EOPNOSUPP and ENOBUFS errors with -U/--update
    command.
  * Fix spurious ENOENT -D/--delete.</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Remove rc* symlinks</changelog>
</package>
<package pkgid="33c3878db69981ac2fdf31fe184b7b9441bfcc5783ed84c5cc623026bb55b52dc846328a1c090e082317cff391f1f4d42b22860b22963c982dacd8432b478c0c" name="container-selinux" arch="noarch">
  <version epoch="0" ver="2.239.0" rel="160000.2.2"/>
  <changelog author="cathy.hu@suse.com" date="1730980800">- Update to version 2.233.0:
  * container_engine_t: small change to allow non root exec in a container
  * RPM: explicitly list ghosted paths and skip mode verification
  * container-selinux install on non selinux-policy-targeted systems (#332)
  * set container_log_t type for /var/log/kube-apiserver
  * Allow kubelet_t to create a sock file kubelet_var_lib_t
  * dontaudit spc_t to mmap_zero
  * Packit: update targets (#330)
  * container_engine_t: another round of small improvements (#327)
  * Allow container_device_plugin_t to use the network (#325)
  * RPM: cleanup changelog (#324)
  * TMT: Simplify tests</changelog>
  <changelog author="cathy.hu@suse.com" date="1736424000">- Add BuildRequires selinux-policy-%{selinuxtype} to enable building
  for SLFO. Might be removed in the future again when 1231252
  is fixed.</changelog>
  <changelog author="rfrohl@suse.com" date="1736510400">- Update to version 2.234.2:
  * TMT: enable epel idomatically
  * Packit: switch back to fedora-all
  * RPM: Bump Epoch to 4
  * rpm: ship manpage
  * Add proper labeling for RamaLama
  * Packit: remove rhel / epel jobs
  * packit: remove unused file</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- OBS service file: use the tagged commit for archive versioning and don't
  just archive the latest changes from the main branch using the latest tag</changelog>
  <changelog author="cathy.hu@suse.com" date="1741176000">- Update to version 2.235.0:
  * Bump to v2.235.0
  * OWNERS: add wrabcak and zpytela
  * OWNERS: initial commit
  * container_log{reader,writer}_t: allow watch file
  * RPM: Update gating config
  * Enable aarch64 testing
  * TMT: simplify podman tests
  * feat: support /var/lib/crio</changelog>
  <changelog author="jsegitz@suse.com" date="1743422400">- Update to version 2.236.0:
  * Allow super privileged containers to use RealtimeKit for scheduling
  * Add container_ro_file_t to the podman artifact store</changelog>
  <changelog author="jsegitz@suse.com" date="1745928000">- Update to version 2.237.0:
  * bootc/install_t: allow transition to container_runtime_t
  * Allow containers to mask parts of their /proc</changelog>
  <changelog author="jsegitz@suse.com" date="1748865600">- Update to version 2.238.0:
  * label /run/sysctl.d correctly on creation</changelog>
  <changelog author="jsegitz@suse.com" date="1751889600">- Update to version 2.239.0:
  * Allow containers to use hsa devices for ROCM</changelog>
  <changelog author="rfrohl@suse.com" date="1753358400">- Add workaround for rootless docker iptables AVCs (bsc#1246348)
  adding rootless-docker_iptables.patch</changelog>
</package>
<package pkgid="c09199508738233e616ee6c1ab0ea3f237ce10faeb881a32b5900d45f95494e2aa07be6fb3eaebd205be35f75473eb1cab292c8502dbaf49ce9877a3346ec4f9" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.27" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="9320a618e5b08b7480a1b2e52adacbb8e39601a438be40f43cac125ac221df60383f6ae25b32d0b1487318d0dadd1cdf9956228f105beea13a2ad469aac22333" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="160000.1.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
  <changelog author="jfehlig@suse.com" date="1771329600">- Update to version 1.64.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.64.0
  bsc#1235204 (CVE-2024-28180), bsc#1235365 (CVE-2024-45338),
  bsc#1239205 (CVE-2025-22868)</changelog>
</package>
<package pkgid="aed9fd8f1c89de32605a793eb782fc691d9e36136863470a3bbe6b4d6a12228308a4813cc62c9f85c932cab5f640881348e7a52836f1dc7c62d0ea91474478e2" name="coolkey" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
  <changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
  <changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1500638400">- Add nssdb installation scripts.
- Run spec-cleaner.
- Drop coolkey-1.1.0-evoandooo.patch: The patch does nothing now.
  Evolution and LibreOffice changed over time. They moved its
  directories and they don't use secmod.db any more.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Remove vision statement and development methods from description.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- light modernization of the spec file
- avoid bashism in post scripts (bsc#1195391)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="b6cd5265f04319c4ae3ab8338f4acc0baf746dccdc9e7e625d839812475ed5ff75004653883674642f1f7aa556b34b3dafa55faf4088b22c6171c5ba528dbdb0" name="coreutils" arch="x86_64">
  <version epoch="0" ver="9.6" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1711972800">- Update to 9.5:
  Bug fixes:
  * chmod -R now avoids a race where an attacker may replace a traversed file
    with a symlink, causing chmod to operate on an unintended file.
    [This bug was present in "the beginning".]
  * cp, mv, and install no longer issue spurious diagnostics like "failed
    to preserve ownership" when copying to GNU/Linux CIFS file systems.
    They do this by working around some Linux CIFS bugs.
  * cp --no-preserve=mode will correctly maintain set-group-ID bits
    for created directories.  Previously on systems that didn't support ACLs,
    cp would have reset the set-group-ID bit on created directories.
    [bug introduced in coreutils-8.20]
  * join and uniq now support multi-byte characters better.
    For example, 'join -tX' now works even if X is a multi-byte character,
    and both programs now treat multi-byte characters like U+3000
    IDEOGRAPHIC SPACE as blanks if the current locale treats them so.
  * numfmt options like --suffix no longer have an arbitrary 127-byte limit.
    [bug introduced with numfmt in coreutils-8.21]
  * mktemp with --suffix now better diagnoses templates with too few X's.
    Previously it conflated the insignificant --suffix in the error.
    [bug introduced in coreutils-8.1]
  * sort again handles thousands grouping characters in single-byte locales
    where the grouping character is greater than CHAR_MAX.  For e.g. signed
    character platforms with a 0xA0 (aka &amp;nbsp) grouping character.
    [bug introduced in coreutils-9.1]
  * split --line-bytes with a mixture of very long and short lines
    no longer overwrites the heap (CVE-2024-0684).
    [bug introduced in coreutils-9.2]
  * tail no longer mishandles input from files in /proc and /sys file systems,
    on systems with a page size larger than the stdio BUFSIZ.
    [This bug was present in "the beginning".]
  * timeout avoids a narrow race condition, where it might kill arbitrary
    processes after a failed process fork.
    [bug introduced with timeout in coreutils-7.0]
  * timeout avoids a narrow race condition, where it might fail to
    kill monitored processes immediately after forking them.
    [bug introduced with timeout in coreutils-7.0]
  * wc no longer fails to count unprintable characters as parts of words.
    [bug introduced in textutils-2.1]
  Changes in behavior:
  * base32 and base64 no longer require padding when decoding.
    Previously an error was given for non padded encoded data.
  * base32 and base64 have improved detection of corrupted encodings.
    Previously encodings with non zero padding bits were accepted.
  * basenc --base16 -d now supports lower case hexadecimal characters.
    Previously an error was given for lower case hex digits.
  * cp --no-clobber, and mv -n no longer exit with failure status if
    existing files are encountered in the destination.  Instead they revert
    to the behavior from before v9.2, silently skipping existing files.
  * ls --dired now implies long format output without hyperlinks enabled,
    and will take precedence over previously specified formats or hyperlink
    mode.
  * numfmt will accept lowercase 'k' to indicate Kilo or Kibi units on input,
    and uses lowercase 'k' when outputting such units in '--to=si' mode.
  * pinky no longer tries to canonicalize the user's login location by default,
    rather requiring the new --lookup option to enable this often slow feature.
  * wc no longer ignores encoding errors when counting words.
    Instead, it treats them as non white space.
  New features:
  * chgrp now accepts the --from=OWNER:GROUP option to restrict changes to files
    with matching current OWNER and/or GROUP, as already supported by chown(1).
  * chmod adds support for -h, -H,-L,-P, and --dereference options, providing
    more control over symlink handling.  This supports more secure handling of
    CLI arguments, and is more consistent with chown, and chmod on other
    systems.
  * cp now accepts the --keep-directory-symlink option (like tar), to preserve
    and follow existing symlinks to directories in the destination.
  * cp and mv now accept the --update=none-fail option, which is similar
    to the --no-clobber option, except that existing files are diagnosed,
    and the command exits with failure status if existing files.
    The -n,--no-clobber option is best avoided due to platform differences.
  * env now accepts the -a,--argv0 option to override the zeroth argument
    of the command being executed.
  * mv now accepts an --exchange option, which causes the source and
    destination to be exchanged.  It should be combined with
  - -no-target-directory (-T) if the destination is a directory.
    The exchange is atomic if source and destination are on a single
    file system that supports atomic exchange; --exchange is not yet
    supported in other situations.
  * od now supports printing IEEE half precision floating point with -t fH,
    or brain 16 bit floating point with -t fB, where supported by the compiler.
  * tail now supports following multiple processes, with repeated --pid options.
  Improvements:
  * cp,mv,install,cat,split now read and write a minimum of 256KiB at a time.
    This was previously 128KiB and increasing to 256KiB was seen to increase
    throughput by 10-20% when reading cached files on modern systems.
  * env,kill,timeout now support unnamed signals. kill(1) for example now
    supports sending such signals, and env(1) will list them appropriately.
  * SELinux operations in file copy operations are now more efficient,
    avoiding unneeded MCS/MLS label translation.
  * sort no longer dynamically links to libcrypto unless -R is used.
    This decreases startup overhead in the typical case.
  * wc is now much faster in single-byte locales and somewhat faster in
    multi-byte locales.
- coreutils-9.4.split-CVE-2024-0684.patch: Remove now-upstream patch.
- gnulib-readutmp-under-gdm.patch: Likewise.
- gnulib-readutmp.patch: Likewise.
- coreutils-i18n.patch: Remove multi-byte patches for join and uniq, as the
  upstream version now handles those tests.
  Pull in gnulib module mbchar manually, as it is a dependency of mbfile,
  but dropped out of the upstream dependency chain.
- coreutils-misc.patch: Remove change for gnulib-tests/test-isnanl.h.
- coreutils-fix-gnulib-time_r-tests.patch: Add upstream gnulib patch to skip
  French test if TZ='Europe/Paris' does not work.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1720526400">- coreutils-i18n.patch: fold(1): fix exit code for non-existent file.
  The exit code of fold(1) was zero for non-existent file:
    $ fold badfile; echo $?
    fold: badfile: No such file or directory
    0
  The bug was introduced by the downstrean I18N patch. (rhbz#2296201)</changelog>
  <changelog author="schwab@suse.de" date="1721390400">- Avoid empty scriptlets</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1727611200">- coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale.
  Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295)
  Original report: https://access.redhat.com/solutions/3459791</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1737115200">- Update to 9.6:
  Bug fixes
  * cp fixes support for --update=none-fail, which would have been
    rejected as an invalid option.
    [bug introduced in coreutils-9.5]
  * cp,mv --update no longer overrides --interactive or --force.
    [bug introduced in coreutils-9.3]
  * csplit no longer creates empty files given empty input.
    [This bug was present in "the beginning".]
  * ls and printf fix shell quoted output in the edge case of escaped
    first and last characters, and single quotes in the string.
    [bug introduced in coreutils-8.26]
  * ls -l no longer outputs "Permission denied" errors on NFS
    which may happen with files without read permission, and which resulted
    in inaccurate indication of ACLs (missing '+' flag after mode).
    [bug introduced in coreutils-9.4]
  * ls -l no longer outputs "Not supported" errors on virtiofs.
    [bug introduced in coreutils-9.4]
  * mv works again with macFUSE file systems.  Previously it would
    have exited with a "Function not implemented" error.
    [bug introduced in coreutils-8.28]
  * nproc gives more consistent results on systems with more than 1024 CPUs.
    Previously it would have ignored the affinity mask on such systems.
    [bug introduced with nproc in coreutils-8.1]
  * numfmt --from=iec-i now works with numbers without a suffix.
    Previously such numbers were rejected with an error.
    [bug introduced with numfmt in coreutils-8.21]
  * printf now diagnoses attempts to treat empty strings as numbers,
    as per POSIX. For example, "printf '%d' ''" now issues a diagnostic
    and fails instead of silently succeeding.
    [This bug was present in "the beginning".]
  * pwd no longer outputs an erroneous double slash on systems
    where the system getcwd() was completely replaced.
    [bug introduced in coreutils-9.2]
  * 'shuf' generates more-random output when the output is small.
    [bug introduced in coreutils-8.6]
  * `tail --follow=name` no longer waits indefinitely for watched
    file names that are moved elsewhere within the same file system.
    [bug introduced in coreutils-8.24]
  * `tail --follow` without --retry, will consistently exit with failure status
    where inotify is not used, when all followed files become inaccessible.
    [This bug was present in "the beginning".]
  * `tail --follow --pid=PID` will now exit when the PID dies,
    even in the presence of blocking inputs like unopened fifos.
    [This bug was present in "the beginning".]
  * 'tail -c 4096 /dev/zero' no longer loops forever.
    [This bug was present in "the beginning".]
  Changes in behavior
  * 'factor' now buffers output more efficiently in some cases.
  * install -C now dereferences symlink sources when comparing,
    rather than always treating as different and performing the copy.
  * kill -l and -t now list signal 0, as it's a valid signal to send.
  * ls's -f option now simply acts like -aU, instead of also ignoring
    some earlier options.  For example 'ls -fl' and 'ls -lf' are now
    equivalent because -f no longer ignores an earlier -l.  The new
    behavior is more orthogonal and is compatible with FreeBSD.
  * stat -f -c%T now reports the "fuseblk" file system type as "fuse",
    given that there is no longer a distinct "ctl" fuse variant file system.
  New Features
  * cksum -a now supports the "crc32b" option, which calculates the CRC
    of the input as defined by ITU V.42, as used by gzip for example.
    For performance pclmul instructions are used where supported.
  * ls now supports the --sort=name option,
    to explicitly select the default operation of sorting by file name.
  * printf now supports indexed arguments, using the POSIX:2024 specified
    %&lt;i&gt;$ format, where '&lt;i&gt;' is an integer referencing a particular argument,
    thus allowing repetition or reordering of printf arguments.
  * test supports the POSIX:2024 specified '&lt;' and '&gt;' operators with strings,
    to compare the string locale collating order.
  * timeout now supports the POSIX:2024 specified -f, and -p short options,
    corresponding to --foreground, and --preserve-status respectively.
  Improvements
  * cksum -a crc, makes use of AVX2, AVX512, and ARMv8 SIMD extensions
    for time reductions of up to 40%, 60%, and 80% respectively.
  * 'head -c NUM', 'head -n NUM', 'nl -l NUM', 'nproc --ignore NUM',
    'tail -c NUM', 'tail -n NUM', and 'tail --max-unchanged-stats NUM’
    no longer fail merely because NUM stands for 2**64 or more.
  * sort operates more efficiently when used on pseudo files with
    an apparent size of 0, like those in /proc.
  * stat and tail now know about the "bcachefs", and "pidfs" file system types.
    stat -f -c%T now reports the file system type,
    and tail -f uses inotify for these file systems.
  * wc now reads a minimum of 256KiB at a time.
    This was previously 16KiB and increasing to 256KiB was seen to increase
    wc -l performance by about 10% when reading cached files on modern systems.
- coreutils-fix-gnulib-time_r-tests.patch: Remove now-upstream patch.
- coreutils-9.6-ls-Z-crash-fix.patch: Add upstream patch from after the release.
- coreutils.spec (Patch920): Exchange names of above patch files accordingly.
- coreutils-i18n.patch: Refresh patch, manually porting some upstream fixes
  into the i18n chunks for expand.c, fold.c and unexpand.c.
- Refresh all other patches:
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-tests-workaround-make-fdleak.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.6-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="4892575d7251c01212ff917f6ec3a2c609897b7e644bcdbf2628aea935a2418cc39041f1716e0c161ee216aa177e95d0498b1ff3a1469b083868b88c0daa2d9a" name="coreutils-systemd" arch="x86_64">
  <version epoch="0" ver="9.6" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1711972800">- Update to 9.5:
  Bug fixes:
  * chmod -R now avoids a race where an attacker may replace a traversed file
    with a symlink, causing chmod to operate on an unintended file.
    [This bug was present in "the beginning".]
  * cp, mv, and install no longer issue spurious diagnostics like "failed
    to preserve ownership" when copying to GNU/Linux CIFS file systems.
    They do this by working around some Linux CIFS bugs.
  * cp --no-preserve=mode will correctly maintain set-group-ID bits
    for created directories.  Previously on systems that didn't support ACLs,
    cp would have reset the set-group-ID bit on created directories.
    [bug introduced in coreutils-8.20]
  * join and uniq now support multi-byte characters better.
    For example, 'join -tX' now works even if X is a multi-byte character,
    and both programs now treat multi-byte characters like U+3000
    IDEOGRAPHIC SPACE as blanks if the current locale treats them so.
  * numfmt options like --suffix no longer have an arbitrary 127-byte limit.
    [bug introduced with numfmt in coreutils-8.21]
  * mktemp with --suffix now better diagnoses templates with too few X's.
    Previously it conflated the insignificant --suffix in the error.
    [bug introduced in coreutils-8.1]
  * sort again handles thousands grouping characters in single-byte locales
    where the grouping character is greater than CHAR_MAX.  For e.g. signed
    character platforms with a 0xA0 (aka &amp;nbsp) grouping character.
    [bug introduced in coreutils-9.1]
  * split --line-bytes with a mixture of very long and short lines
    no longer overwrites the heap (CVE-2024-0684).
    [bug introduced in coreutils-9.2]
  * tail no longer mishandles input from files in /proc and /sys file systems,
    on systems with a page size larger than the stdio BUFSIZ.
    [This bug was present in "the beginning".]
  * timeout avoids a narrow race condition, where it might kill arbitrary
    processes after a failed process fork.
    [bug introduced with timeout in coreutils-7.0]
  * timeout avoids a narrow race condition, where it might fail to
    kill monitored processes immediately after forking them.
    [bug introduced with timeout in coreutils-7.0]
  * wc no longer fails to count unprintable characters as parts of words.
    [bug introduced in textutils-2.1]
  Changes in behavior:
  * base32 and base64 no longer require padding when decoding.
    Previously an error was given for non padded encoded data.
  * base32 and base64 have improved detection of corrupted encodings.
    Previously encodings with non zero padding bits were accepted.
  * basenc --base16 -d now supports lower case hexadecimal characters.
    Previously an error was given for lower case hex digits.
  * cp --no-clobber, and mv -n no longer exit with failure status if
    existing files are encountered in the destination.  Instead they revert
    to the behavior from before v9.2, silently skipping existing files.
  * ls --dired now implies long format output without hyperlinks enabled,
    and will take precedence over previously specified formats or hyperlink
    mode.
  * numfmt will accept lowercase 'k' to indicate Kilo or Kibi units on input,
    and uses lowercase 'k' when outputting such units in '--to=si' mode.
  * pinky no longer tries to canonicalize the user's login location by default,
    rather requiring the new --lookup option to enable this often slow feature.
  * wc no longer ignores encoding errors when counting words.
    Instead, it treats them as non white space.
  New features:
  * chgrp now accepts the --from=OWNER:GROUP option to restrict changes to files
    with matching current OWNER and/or GROUP, as already supported by chown(1).
  * chmod adds support for -h, -H,-L,-P, and --dereference options, providing
    more control over symlink handling.  This supports more secure handling of
    CLI arguments, and is more consistent with chown, and chmod on other
    systems.
  * cp now accepts the --keep-directory-symlink option (like tar), to preserve
    and follow existing symlinks to directories in the destination.
  * cp and mv now accept the --update=none-fail option, which is similar
    to the --no-clobber option, except that existing files are diagnosed,
    and the command exits with failure status if existing files.
    The -n,--no-clobber option is best avoided due to platform differences.
  * env now accepts the -a,--argv0 option to override the zeroth argument
    of the command being executed.
  * mv now accepts an --exchange option, which causes the source and
    destination to be exchanged.  It should be combined with
  - -no-target-directory (-T) if the destination is a directory.
    The exchange is atomic if source and destination are on a single
    file system that supports atomic exchange; --exchange is not yet
    supported in other situations.
  * od now supports printing IEEE half precision floating point with -t fH,
    or brain 16 bit floating point with -t fB, where supported by the compiler.
  * tail now supports following multiple processes, with repeated --pid options.
  Improvements:
  * cp,mv,install,cat,split now read and write a minimum of 256KiB at a time.
    This was previously 128KiB and increasing to 256KiB was seen to increase
    throughput by 10-20% when reading cached files on modern systems.
  * env,kill,timeout now support unnamed signals. kill(1) for example now
    supports sending such signals, and env(1) will list them appropriately.
  * SELinux operations in file copy operations are now more efficient,
    avoiding unneeded MCS/MLS label translation.
  * sort no longer dynamically links to libcrypto unless -R is used.
    This decreases startup overhead in the typical case.
  * wc is now much faster in single-byte locales and somewhat faster in
    multi-byte locales.
- coreutils-9.4.split-CVE-2024-0684.patch: Remove now-upstream patch.
- gnulib-readutmp-under-gdm.patch: Likewise.
- gnulib-readutmp.patch: Likewise.
- coreutils-i18n.patch: Remove multi-byte patches for join and uniq, as the
  upstream version now handles those tests.
  Pull in gnulib module mbchar manually, as it is a dependency of mbfile,
  but dropped out of the upstream dependency chain.
- coreutils-misc.patch: Remove change for gnulib-tests/test-isnanl.h.
- coreutils-fix-gnulib-time_r-tests.patch: Add upstream gnulib patch to skip
  French test if TZ='Europe/Paris' does not work.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1720526400">- coreutils-i18n.patch: fold(1): fix exit code for non-existent file.
  The exit code of fold(1) was zero for non-existent file:
    $ fold badfile; echo $?
    fold: badfile: No such file or directory
    0
  The bug was introduced by the downstrean I18N patch. (rhbz#2296201)</changelog>
  <changelog author="schwab@suse.de" date="1721390400">- Avoid empty scriptlets</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1727611200">- coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale.
  Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295)
  Original report: https://access.redhat.com/solutions/3459791</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1737115200">- Update to 9.6:
  Bug fixes
  * cp fixes support for --update=none-fail, which would have been
    rejected as an invalid option.
    [bug introduced in coreutils-9.5]
  * cp,mv --update no longer overrides --interactive or --force.
    [bug introduced in coreutils-9.3]
  * csplit no longer creates empty files given empty input.
    [This bug was present in "the beginning".]
  * ls and printf fix shell quoted output in the edge case of escaped
    first and last characters, and single quotes in the string.
    [bug introduced in coreutils-8.26]
  * ls -l no longer outputs "Permission denied" errors on NFS
    which may happen with files without read permission, and which resulted
    in inaccurate indication of ACLs (missing '+' flag after mode).
    [bug introduced in coreutils-9.4]
  * ls -l no longer outputs "Not supported" errors on virtiofs.
    [bug introduced in coreutils-9.4]
  * mv works again with macFUSE file systems.  Previously it would
    have exited with a "Function not implemented" error.
    [bug introduced in coreutils-8.28]
  * nproc gives more consistent results on systems with more than 1024 CPUs.
    Previously it would have ignored the affinity mask on such systems.
    [bug introduced with nproc in coreutils-8.1]
  * numfmt --from=iec-i now works with numbers without a suffix.
    Previously such numbers were rejected with an error.
    [bug introduced with numfmt in coreutils-8.21]
  * printf now diagnoses attempts to treat empty strings as numbers,
    as per POSIX. For example, "printf '%d' ''" now issues a diagnostic
    and fails instead of silently succeeding.
    [This bug was present in "the beginning".]
  * pwd no longer outputs an erroneous double slash on systems
    where the system getcwd() was completely replaced.
    [bug introduced in coreutils-9.2]
  * 'shuf' generates more-random output when the output is small.
    [bug introduced in coreutils-8.6]
  * `tail --follow=name` no longer waits indefinitely for watched
    file names that are moved elsewhere within the same file system.
    [bug introduced in coreutils-8.24]
  * `tail --follow` without --retry, will consistently exit with failure status
    where inotify is not used, when all followed files become inaccessible.
    [This bug was present in "the beginning".]
  * `tail --follow --pid=PID` will now exit when the PID dies,
    even in the presence of blocking inputs like unopened fifos.
    [This bug was present in "the beginning".]
  * 'tail -c 4096 /dev/zero' no longer loops forever.
    [This bug was present in "the beginning".]
  Changes in behavior
  * 'factor' now buffers output more efficiently in some cases.
  * install -C now dereferences symlink sources when comparing,
    rather than always treating as different and performing the copy.
  * kill -l and -t now list signal 0, as it's a valid signal to send.
  * ls's -f option now simply acts like -aU, instead of also ignoring
    some earlier options.  For example 'ls -fl' and 'ls -lf' are now
    equivalent because -f no longer ignores an earlier -l.  The new
    behavior is more orthogonal and is compatible with FreeBSD.
  * stat -f -c%T now reports the "fuseblk" file system type as "fuse",
    given that there is no longer a distinct "ctl" fuse variant file system.
  New Features
  * cksum -a now supports the "crc32b" option, which calculates the CRC
    of the input as defined by ITU V.42, as used by gzip for example.
    For performance pclmul instructions are used where supported.
  * ls now supports the --sort=name option,
    to explicitly select the default operation of sorting by file name.
  * printf now supports indexed arguments, using the POSIX:2024 specified
    %&lt;i&gt;$ format, where '&lt;i&gt;' is an integer referencing a particular argument,
    thus allowing repetition or reordering of printf arguments.
  * test supports the POSIX:2024 specified '&lt;' and '&gt;' operators with strings,
    to compare the string locale collating order.
  * timeout now supports the POSIX:2024 specified -f, and -p short options,
    corresponding to --foreground, and --preserve-status respectively.
  Improvements
  * cksum -a crc, makes use of AVX2, AVX512, and ARMv8 SIMD extensions
    for time reductions of up to 40%, 60%, and 80% respectively.
  * 'head -c NUM', 'head -n NUM', 'nl -l NUM', 'nproc --ignore NUM',
    'tail -c NUM', 'tail -n NUM', and 'tail --max-unchanged-stats NUM’
    no longer fail merely because NUM stands for 2**64 or more.
  * sort operates more efficiently when used on pseudo files with
    an apparent size of 0, like those in /proc.
  * stat and tail now know about the "bcachefs", and "pidfs" file system types.
    stat -f -c%T now reports the file system type,
    and tail -f uses inotify for these file systems.
  * wc now reads a minimum of 256KiB at a time.
    This was previously 16KiB and increasing to 256KiB was seen to increase
    wc -l performance by about 10% when reading cached files on modern systems.
- coreutils-fix-gnulib-time_r-tests.patch: Remove now-upstream patch.
- coreutils-9.6-ls-Z-crash-fix.patch: Add upstream patch from after the release.
- coreutils.spec (Patch920): Exchange names of above patch files accordingly.
- coreutils-i18n.patch: Refresh patch, manually porting some upstream fixes
  into the i18n chunks for expand.c, fold.c and unexpand.c.
- Refresh all other patches:
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-tests-workaround-make-fdleak.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.6-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="f28fc6754a081ace328bb3fbe6bac26b495557e232e1511d0a43ecc5b782d146a6a1a13f37644d3857b18c39b1c3d18040755102c36b4ddc931af222d68b3b87" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.15" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687521600">- Update to 2.14:
  * New option --ignore-dirnlink
    Valid in copy-out mode, it instructs cpio to ignore the actual number of
    links reported for each directory member and always store 2 instead.
  * Changes in --reproducible option
    The --reproducible option implies --ignore-dirlink.  In other words, it is
    equivalent to --ignore-devno --ignore-dirnlink --renumber-inodes.
  * Use GNU ls algorithm for deciding timestamp format in -tv mode
  * Fix cpio header verification.
  * Fix handling of device numbers on copy out.
  * Fix calculation of CRC in copy-out mode.
  * Rewrite the fix for CVE-2015-1197
  * Fix combination of --create --append --directory.
  * Fix appending to archives bigger than 2G.
- Refresh patches:
  * cpio-open_nonblock.patch
  * cpio-dev_number.patch
  * cpio-default_tape_dev.patch
  * cpio-pattern-file-sigsegv.patch
- Remove patches:
  * cpio-revert-CVE-2015-1197-fix.patch
  * fix-CVE-2021-38185.patch
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch
- Fix CVE-2023-7207, path traversal vulnerability, bsc#1218571</changelog>
  <changelog author="danilo.spinella@suse.com" date="1688990400">- Backport upstream fix for --no-absolute-filenames --make-directories
  * fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707134400">- Update to 2.15:
  * Fix the operation of --no-absolute-filenames --make-directories.
  * Restore access and modification times of symlinks in copy-in and
    copy-pass modes.
- Remove fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708948800">- Use %autopatch instead of deprecated %patchN.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1712318400">- Fix build with gcc14, bsc#1221712
  * fix-gcc14.patch</changelog>
</package>
<package pkgid="3fce0cf6dfbae97d558b33672f1272eb53d5c7ef97c803b034cb098dbbb4aef76d8a3a62ff1293c803fd0242e5124658c0d2e97a622e52121ca4b887a8bceafe" name="cpupower" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="trenn@suse.de" date="1713182400">- Parse turbostat and intel-speed-select version from kernel sources and
  add them to %description</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1728043200">- Upstream fixed lib default installation path in 3a5bb5066f4c
  [- cpupower_exclude_kernel_Makefile.patch]</changelog>
  <changelog author="trenn@suse.de" date="1741262400">- Not also adopt the kernel version, but also the exact build release
  By that it is finally possible to find out on which exact (kernel)
  sources the cpupower tools are based on.
  D amd_do_not_show_amount_of_boost_states_if_zero.patch
-&gt; This was only needed for an old Dell test env, will not go mainline
  and can vanish now.</changelog>
  <changelog author="trenn@suse.de" date="1742299200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.</changelog>
</package>
<package pkgid="96d7df4becf4837b4c76af3a855b3c22c6e3aa6dc9098387135e9aec2fb8879f192dd65862c0d1be670e45224b384327947bbfed7f161b20a875d49304535005" name="cracklib" arch="x86_64">
  <version epoch="0" ver="2.9.11" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="jengelh@inai.de" date="1628683200">- Drop --with-pic, as it has no effect with --disable-static.</changelog>
  <changelog author="pgajdos@suse.com" date="1636027200">- %check: really test the package [bsc#1191736]</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 2.9.8:
  * rules: Drop using register keyword
  * add exec perms
  * translation updates
  * Use what's in the build environment and use a current autoconf
  * util/Makefile.am: fix link with lintl
  * Force grep to treat the input as text when formatting word files</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- version update to 2.9.11
  * Merge fedora patches and man pages
  * Fix missing files in dist tarball, other automake fixes (Leandro Nini)
  * Fix error handling during build of dictionary (yixiangzhike)
  * Fix to localization support (A. Wilcox, nekopsykose)
  * Fix to test utilities (Alexander Kanavin)
  * Translation updates from weblate
  * python: adjust include path for builddir by @thesamesam in #61
  * Make buffer static and avoid returning stack-allocated memory by @drfiemost in #63
- modified patches
  % 0002-cracklib-2.9.2-visibility.patch (refreshed)</changelog>
</package>
<package pkgid="040298fa22a0bd02504636e5eff4603ed4481b79a02db938e196c0a197ef0349e1d2e3ea4625e4946a4e264904415c579d645a77d5194af7b815d86f400e7579" name="cracklib-dict-full" arch="x86_64">
  <version epoch="0" ver="2.8.12" rel="160000.2.2"/>
  <changelog author="mc@suse.de" date="1177329600">- full cracklib dictionary - splitted out from cracklib</changelog>
  <changelog author="mc@suse.de" date="1202817600">- update common password files</changelog>
  <changelog author="mc@suse.de" date="1213963200">- compress password database</changelog>
  <changelog author="mc@suse.de" date="1214568000">- update wordlist
- add german wordlists</changelog>
  <changelog author="mc@suse.de" date="1220270400">- do not zip the dict by default. A check takes too long.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mc@suse.de" date="1344513600">- correct License to LGPL-2.1</changelog>
  <changelog author="sean@suspend.net" date="1538136000">- Added additional dictionary libraries
  * http://downloads.skullsecurity.org/passwords/john.txt.bz2
  * http://downloads.skullsecurity.org/passwords/cain.txt.bz2
  * http://downloads.skullsecurity.org/passwords/500-worst-passwords.txt.bz2
  * http://downloads.skullsecurity.org/passwords/twitter-banned.txt.bz2</changelog>
</package>
<package pkgid="c63357d0ba497ecced48919e51e078a73c7024bc520d413468b111b2f2851e85d94bbe509d48f41e29073992f813a5200182049baac4691ea606f65898dcd815" name="cracklib-dict-small" arch="x86_64">
  <version epoch="0" ver="2.9.11" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="jengelh@inai.de" date="1628683200">- Drop --with-pic, as it has no effect with --disable-static.</changelog>
  <changelog author="pgajdos@suse.com" date="1636027200">- %check: really test the package [bsc#1191736]</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 2.9.8:
  * rules: Drop using register keyword
  * add exec perms
  * translation updates
  * Use what's in the build environment and use a current autoconf
  * util/Makefile.am: fix link with lintl
  * Force grep to treat the input as text when formatting word files</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- version update to 2.9.11
  * Merge fedora patches and man pages
  * Fix missing files in dist tarball, other automake fixes (Leandro Nini)
  * Fix error handling during build of dictionary (yixiangzhike)
  * Fix to localization support (A. Wilcox, nekopsykose)
  * Fix to test utilities (Alexander Kanavin)
  * Translation updates from weblate
  * python: adjust include path for builddir by @thesamesam in #61
  * Make buffer static and avoid returning stack-allocated memory by @drfiemost in #63
- modified patches
  % 0002-cracklib-2.9.2-visibility.patch (refreshed)</changelog>
</package>
<package pkgid="775b45b83ef6a896eb066933a1eee53936d1df96d8a5063c490d606c2fe7fdbdca1b5c25354d9f356220d53470369650b01fa7928d7e43d8bfe32e391ad5925b" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20250714.cd6043a" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1742299200">- Allow sshd in FIPS mode when using the DEFAULT policy [bsc#1227370]
  * Add crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1743076800">- Relax the nss version requirement since the mlkem768secp256r1
  enablement has been reverted.</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Allow openssl to load when using the DEFAULT policy, and also
  other policies, in FIPS mode. [bsc#1243830, bsc#1242233]
  * Add crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update to version 20250324.3714354:
  * NO-PQ: introduce
  * LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  * _openssl_block_sha1_signatures: flip the default to 1
  * sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  * sequoia: refactor a bit
  * openssl: specify default key size for req
  * gnutls: support P384-MLKEM1024
  * openssl: stop generating `openssl` in favour of `opensslcnf`
  * gnutls: drop kyber (switching to leancrypto took it away)
  * openssl: use both names for P384-MLKEM1024
  * Detect the presence of nss-policy-check
  * Don't use hardcoded python3 path
  * Make xsltproc settable as XSLTPROC
  * python/cryptopolicies/validation/scope.py: fix new ruff rule RUF021
  * Update the info in the README.SUSE file
  * Remove the FEDORA policies and directories
  * Remove patches:
  - crypto-policies-supported.patch
  - crypto-policies-FIPS.patch
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148801">- Add the FIPS scripts fips-finish-install and fips-mode-setup as
  sources in the spec file as they have been removed upstream.
  * We will maintain these scripts downstream.
  * Update the man pages for update-crypto-policies.8.gz
  * Rebase crypto-policies-no-build-manpages.patch
  * Add crypto-policies-FIPS-output.patch
  * Add man pages in text file in compressed form in the file
    man-fips-scripts.tar.xz and add them to the Makefile.</changelog>
  <changelog author="pmonreal@suse.com" date="1753444800">- Update to version 20250425.9267dee:
  * openssl: fix mistakes in integrity-only cipher definitions
  * NO-PQ, cryptopolicies: add experimental value suppression
  * nss: add mlkem768x25519 and mlkem768secp256r1
  * gnutls: 'allow-rsa-pkcs1-encrypt = false' everywhere but in LEGACY
  * TEST-PQ, openssh: add support for MLKEM768 key_exchange
  * LEGACY: drop cipher@pkcs12 = SEED-CBC
  * fips-crypto-policy-overlay: automount FIPS policy, follow-up fixes
  * nss: TLS-REQUIRE-EMS in FIPS
  * DEFAULT: disable RSA key exchange
  * LEGACY: disable sign = *-SHA1
  * nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768
  * Removed patches fixed upstream:
  - crypto-policies-pylint.patch
  * Rebased patches:
  - crypto-policies-nss.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1762776000">- Update to version 20250714.cd6043a: [bsc#1253025, bsc#1252696]
  * gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert
  * python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  * FIPS: disable MLKEM768-X25519 for openssh (no-op)
  * FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  * TEST-PQ: be more careful with the ordering
  * openssl: send one PQ and one classic key_share; prioritize PQ groups
  * sequoia: Generate AEAD policy
  * Do not include EdDSA in FIPS policy
  * sequoia: Add PQC algorithm
  * sequoia: Run tests against PQC capable policy-config-check
  * Revert "openssl, policies: implement group_key_share option"
  * openssl, policies: implement group_key_share option
  * FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  * python/build-crypto-policies: output diffs on --test mismatches
  * sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  * policies, alg_lists, openssl: remove KYBER from allowed values
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * nss: be stricter with new purposes
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-crypto-policy-overlay: automount FIPS policy
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * TEST-PQ: disable pure Kyber768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00</changelog>
  <changelog author="pmonreal@suse.com" date="1762776001">- Adapt the manpages to SUSE/openSUSE:
  * Add crypto-policies-SUSE-manpages.patch
  * Compress all the man pages for update-crypto-policies.8.gz,
    crypto-policies.7.gz, fips-finish-install.8.gz and
    fips-mode-setup.8.gz into man-crypto-policies.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1762862400">- Fix the testsuite:
  * Port all the policy changes to the config files in the test suite.
  * Use the newly introduced SKIP_LINTING=1 option.
  * Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
</package>
<package pkgid="5afd2d9bd309c858b1738d24d17e1013c0d116545fc60d6883299a0738f76967710da051ca9222a629abb37880654f6d970ff23acdfc010ffc58dc8b49d66bea" name="crypto-policies-scripts" arch="noarch">
  <version epoch="0" ver="20250714.cd6043a" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1742299200">- Allow sshd in FIPS mode when using the DEFAULT policy [bsc#1227370]
  * Add crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1743076800">- Relax the nss version requirement since the mlkem768secp256r1
  enablement has been reverted.</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Allow openssl to load when using the DEFAULT policy, and also
  other policies, in FIPS mode. [bsc#1243830, bsc#1242233]
  * Add crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update to version 20250324.3714354:
  * NO-PQ: introduce
  * LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  * _openssl_block_sha1_signatures: flip the default to 1
  * sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  * sequoia: refactor a bit
  * openssl: specify default key size for req
  * gnutls: support P384-MLKEM1024
  * openssl: stop generating `openssl` in favour of `opensslcnf`
  * gnutls: drop kyber (switching to leancrypto took it away)
  * openssl: use both names for P384-MLKEM1024
  * Detect the presence of nss-policy-check
  * Don't use hardcoded python3 path
  * Make xsltproc settable as XSLTPROC
  * python/cryptopolicies/validation/scope.py: fix new ruff rule RUF021
  * Update the info in the README.SUSE file
  * Remove the FEDORA policies and directories
  * Remove patches:
  - crypto-policies-supported.patch
  - crypto-policies-FIPS.patch
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148801">- Add the FIPS scripts fips-finish-install and fips-mode-setup as
  sources in the spec file as they have been removed upstream.
  * We will maintain these scripts downstream.
  * Update the man pages for update-crypto-policies.8.gz
  * Rebase crypto-policies-no-build-manpages.patch
  * Add crypto-policies-FIPS-output.patch
  * Add man pages in text file in compressed form in the file
    man-fips-scripts.tar.xz and add them to the Makefile.</changelog>
  <changelog author="pmonreal@suse.com" date="1753444800">- Update to version 20250425.9267dee:
  * openssl: fix mistakes in integrity-only cipher definitions
  * NO-PQ, cryptopolicies: add experimental value suppression
  * nss: add mlkem768x25519 and mlkem768secp256r1
  * gnutls: 'allow-rsa-pkcs1-encrypt = false' everywhere but in LEGACY
  * TEST-PQ, openssh: add support for MLKEM768 key_exchange
  * LEGACY: drop cipher@pkcs12 = SEED-CBC
  * fips-crypto-policy-overlay: automount FIPS policy, follow-up fixes
  * nss: TLS-REQUIRE-EMS in FIPS
  * DEFAULT: disable RSA key exchange
  * LEGACY: disable sign = *-SHA1
  * nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768
  * Removed patches fixed upstream:
  - crypto-policies-pylint.patch
  * Rebased patches:
  - crypto-policies-nss.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1762776000">- Update to version 20250714.cd6043a: [bsc#1253025, bsc#1252696]
  * gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert
  * python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  * FIPS: disable MLKEM768-X25519 for openssh (no-op)
  * FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  * TEST-PQ: be more careful with the ordering
  * openssl: send one PQ and one classic key_share; prioritize PQ groups
  * sequoia: Generate AEAD policy
  * Do not include EdDSA in FIPS policy
  * sequoia: Add PQC algorithm
  * sequoia: Run tests against PQC capable policy-config-check
  * Revert "openssl, policies: implement group_key_share option"
  * openssl, policies: implement group_key_share option
  * FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  * python/build-crypto-policies: output diffs on --test mismatches
  * sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  * policies, alg_lists, openssl: remove KYBER from allowed values
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * nss: be stricter with new purposes
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-crypto-policy-overlay: automount FIPS policy
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * TEST-PQ: disable pure Kyber768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00</changelog>
  <changelog author="pmonreal@suse.com" date="1762776001">- Adapt the manpages to SUSE/openSUSE:
  * Add crypto-policies-SUSE-manpages.patch
  * Compress all the man pages for update-crypto-policies.8.gz,
    crypto-policies.7.gz, fips-finish-install.8.gz and
    fips-mode-setup.8.gz into man-crypto-policies.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1762862400">- Fix the testsuite:
  * Port all the policy changes to the config files in the test suite.
  * Use the newly introduced SKIP_LINTING=1 option.
  * Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
</package>
<package pkgid="f66f47d298c498205519ca03b7e562ddf80faeaa99b00e0ab91021c7bdef3e01a421571d0756e92a81d68c268df47251fec01ac7660905ce54f6ccd8f220c28b" name="cryptsetup" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1722340800">- Update to 2.7.3:
  * Do not allow formatting LUKS2 with Opal SED (hardware encryption)
    if the reported logical sector size for the block device and Opal
    encryption logical block differs.
  * Fixes to wiping LUKS2 headers after Opal locking area erase.
  * Mention the need for possible PSID revert before Opal format for some
    drives (man page).
  * Fix Bitlocker-compatible code to ignore newly seen metadata entries.
  * Fix interactive query retry if LUKS2 unbound keyslot is present.
  * Detect unsupported zoned devices for LUKS header devices.
  * Allow "capi" cipher format for benchmark command and fix parsing
    of plain IV in "capi" format.
  * Add support for HCTR2 encryption mode.
  * Source code now uses SPDX license identifiers instead of full
    license preambles.
  * Fix missing includes for cryptographic backend that could cause
    compilation errors for some systems.
  * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2.
  * Fix various (mostly false positive) issues detected by Coverity.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1722427200">- Update to 2.7.4:
  * Detect device busy failure for device-mapper table-referenced
    devices.
  * Fix shared activation for dm-verity devices.
  * Add --shared option for veritysetup open action.
  * Do not use exclusive flag for the allocated backing loop files.
  * Fixes for problems found by static analyzers and Valgrind.
  * Fixes to tests and CI scripts.
- Use fdupes to link identical man pages.</changelog>
  <changelog author="meissner@suse.com" date="1725019200">- cryptsetup-fips140-3.patch: extend the password for PBKDF2 benchmarking
  to be more than 20 chars to meet FIPS 140-3 requirements (bsc#1229975)</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 2.7.5:
  * Fix possible online reencryption data corruption (only in 2.7.x).
    In some situations (initializing a suspended device-mapper device),
    cryptsetup disabled direct-io device access. This caused unsafe
    online reencryption operations that could lead to data corruption.
    The code now adds strict checks (and aborts the operation) and
    changes direct-io detection code to prevent data corruption.
  * Fix a clang compilation error in SSH token plugin.
    As clang linker treats missing symbols as errors, the linker phase
    for the SSH token failed as the optional cryptsetup_token_buffer_free
    was not defined.
  * Fix crypto backend initialization in crypt_format_luks2_opal API call.</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
  [bsc#1236375, bsc#1236164]
  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
    but its not FIPS compliant. A system would be unbootable if using
    Argon2id or Argon2i for disk encryption and then switching to
    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
  * Remove the dependency on libargon2 as is now provided by openssl.</changelog>
  <changelog author="pmonreal@suse.com" date="1748520000">- Add a dependency on device-mapper to libcryptsetup12 to install
  the required device-mapper udev rules. [bsc#1241612]</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Update to 2.8.0:
  * Full release notes in:
  - https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes
  * Introduce support for inline mode (use HW sectors with additional hardware
    metadata space).
  * Finalize use of keyslot context API.
  * Make all keyslot context types fully self-contained.
  * Add --key-description and --new-key-description cryptsetup options.
  * Support more precise keyslot selection in reencryption initialization.
  * Allow reencryption to resume using token and volume keys.
  * Cryptsetup repair command now tries to check LUKS keyslot areas for corruption.
  * Opal2 SED: PSID keyfile is now expected to be 32 alphanumeric characters.
  * Opal2: Avoid the Erase method and use Secure Erase for locking range.
  * Opal2: Fix some error description (in debug only).
  * Opal2: Do not allow deferred deactivation.
  * Allow --reduce-device-size and --device-size combination for reencryption
    (encrypt) action.
  * Fix the userspace storage backend to support kernel "capi:" cipher specification format.
  * Disallow conversion from LUKS2 to LUKS1 if kernel "capi:" cipher specification is used.
  * Explicitly disallow kernel "capi:" cipher specification format for LUKS2
    keyslot encryption.
  * Do not allow conversion of LUKS2 to LUKS1 if an unbound keyslot is present.
  * cryptsetup: Adjust the XTS key size for kernel "capi:" cipher specification.
  * Remove keyslot warning about possible failure due to low memory.
  * Do not limit Argon2 KDF memory cost on systems with more than 4GB of available memory.
  * Properly report out of memory error for cryptographic backends implementing Argon2.
  * Avoid KDF2 memory cost overflow on 32-bit platforms.
  * Do not use page size as a fallback for device block size.
  * veritysetup: Check hash device size in advance.
  * Print a better error message for unsupported LUKS2 AEAD device resize.
  * Optimize LUKS2 metadata writes.
  * veritysetup: support --error-as-corruption option.
  * Report all sizes in status and dump command output in the correct units.
  * Add --integrity-key-size option to cryptsetup.
  * Support trusted &amp; encrypted keyrings for plain devices.
  * Support plain format resize with a keyring key.
  * TCRYPT: Clear mapping of system-encrypted partitions.
  * TCRYPT: Print all information from the decrypted metadata header in
    the tcryptDump command.
  * Always lock the volume key structure in memory.
  * Do not run direct-io read check on block devices.
  * Fix a possible segfault in deferred deactivation.
  * Exclude cipher allocation time from the cryptsetup benchmark.
  * Add Mbed-TLS optional crypto backend.
  * Fix the wrong preprocessor use of #ifdef for config.h processed by Meson.
  * Reorganize license files. The license text files are now in docs/licenses.
    The COPYING file in the root directory is the default license.
  * Remove cc-by-sa-4.0.txt as already shipped now in docs/licenses
    and named as COPYING.CC-BY-SA-4.0.
  * Libcryptsetup API extensions. The libcryptsetup API is backward compatible
    with all existing symbols. Due to the self-contained memory allocation,
    these symbols have the new version:
  - crypt_keyslot_context_init_by_passphrase;
  - crypt_keyslot_context_init_by_keyfile;
  - crypt_keyslot_context_init_by_token;
  - crypt_keyslot_context_init_by_volume_key;
  - crypt_keyslot_context_init_by_signed_key;
  - crypt_keyslot_context_init_by_keyring;
  - crypt_keyslot_context_init_by_vk_in_keyring;
  * New symbols:
  - crypt_format_inline
  - crypt_get_old_volume_key_size
  - crypt_reencrypt_init_by_keyslot_context
  - crypt_safe_memcpy
  * New defines:
  - CRYPT_ACTIVATE_HIGH_PRIORITY
  - CRYPT_ACTIVATE_ERROR_AS_CORRUPTION
  - CRYPT_ACTIVATE_INLINE_MODE
  - CRYPT_REENCRYPT_CREATE_NEW_DIGEST
  * New requirement flag:
  - CRYPT_REQUIREMENT_INLINE_HW_TAGS</changelog>
  <changelog author="pmonreal@suse.com" date="1755777600">- Update to 2.8.1:
  * Fix status and deactivation of TCRYPT (VeraCrypt compatible) devices that use chained ciphers.
  * Fix unlocking BITLK (BitLocker compatible) devices with multibyte UTF8 characters in the passphrase.
  * Do not allow activation of the LUKS2 device if the used keyslot is not encrypted (it uses a null cipher).
  - Such a configuration cannot be created by cryptsetup, but can be crafted outside of it.
  - Null cipher is sometimes used to create an empty container for later reencryption.
  - Only an empty passphrase can activate such a container (the same as in LUKS1).
  * Do not silently decrease PBKDF parallel cost (threads) if set by an option.
  - The maximum parallel cost is limited to 4 threads.
  * Fixes to configuration and installation scripts.
  - Meson and autoconf tools now properly support --prefix option for temporary directory installation.
  - Multiple fixes and cleanups to config.h for compatibility between Meson and autoconf.
  - Fix the luks2-external-tokens-path Meson option to work the same as in autoconf.
  - Fix Meson install for tool binaries, install fvault2Open man page and include test/fuzz/meson.build in release.
  * Major update to manual pages.
  - Try to explain the PBKDF hardcoded limits.
  - Add a better explanation for automatic integrity tag recalculation.
  - Mention crypt/verity/integritytab.
  - Remove or reformulate some misleading warnings present only with old and no longer supported kernels.
  - Clarify that some commands do not wipe data and unify OPAL reset wording.
  - Clarify the --label option.
  - There are also many other grammar and stylistic fixes to unify the man-page style.
  * Fixes for false-positive and annoying (optional) warnings added in recent compilers.</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Update to 2.8.3:
  * Stable bug-fix release with minor extensions.
- Update to 2.8.2:
  * BITLK: Fix for BitLocker metadata validation on big-endian systems.</changelog>
  <changelog author="pmonreal@suse.com" date="1770033600">- Update to 2.8.4: (jsc#PED-15889)
  * Fix integritysetup resize (grow) of the device if integrity bitmap
    mode is used. Increasing the integrity device in bitmap mode did
    not work as integritysetup incorrectly used journal settings that
    were not applicable.
  * Fix device size status reports in cryptsetup and integritysetup.
    If the device uses a sector size larger than 512 bytes, the newly
    reported byte sizes (introduced in 2.8.0) in the status report
    were incorrectly displayed.
  * BITLK: Fix unlocking BitLocker device with recovery passphrase.
    If the recovery passphrase was present in the first keyslot, the
    device failed to unlock. This bug was introduced in 2.8.2 with
    Clear Key support.</changelog>
</package>
<package pkgid="351595f6aa8883c2023f46d091c9f682c136ba24a90895fe5c57eaf342b20f453a1f2049c0ea84f4e243dacba3f0650822bac1136e35b398348b86bc82f19864" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.4.16" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
</package>
<package pkgid="f9b2ca1d95318028615ca25211cf281b32af70f79e35eb23b5de22c8649b9378cc005205a0e5445ea17461ee6868f146a89bf32820cdfc4e25224acd73dd3266" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="160000.5.1"/>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * tool_operate: reset the URL --url-query between --next (510fdad)
  * Add patches:
  - curl-CVE-2026-1965.patch curl-CVE-2026-1965-disable-ntlm-fix.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="280208c30220635b4512ee27fb89284c2bdc1c18b4609729bbd3e1f71164c777ab7cf501c7255a3ee72f9f1b6dae8b91908c6432cee520481279407f30bb757f" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="54ccd42038383eeedb12de6ad9b5a1d25478b1b7844f6cd84bd676809ae3eaa29fa39010b2967a9a5aea53294d7b580993f25bbbfef75ef12772dd6a037ccff8" name="cyrus-sasl-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="c23188bb82f03b79232657df83ef3ef912b0144e5e58d89d943eaa9253b30f94686556a2bb10f6b204eca997c630ef95a82ff9caa015e120488c1728095ed171" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="fb4a5854cca8fcd91420c5a6ef18eefcbf820db3d0f903b28f44b4298a542184efeaa19ad08d731baeda51dd5dae2d1e771eb6b973c33fba78e244f7510a4043" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
  <changelog author="sflees@suse.de" date="1695297600">- No longer start or offer starting dbus as a system service
  dbus-broker will be the only supported system dbus. Although
  the existing daemon will stay as some things (gdm) require
  dbus-run-session</changelog>
  <changelog author="dimstar@opensuse.org" date="1695297601">- Explicitly require /usr/bin/cmp for the post scripts instead of
  diffutils: allow other implementations like busybox-diffutils to
  be acceptable.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1701518400">- common: dbus.socket still gets used after migration to
  dbus-broker so keep pre/post/postun scriptlets</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Add feature-suse-auto-socket-target-wants.patch: move
  from static enable symlinks to systemd created symlinks otherwise
  it can't be enabled by systemd-presets-common-SUSE
- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing the socket or user service aswell</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Add RH/Fedora compat provides dbus-libs to library package
  needed by Mullvad</changelog>
  <changelog author="sflees@suse.de" date="1714392000">- Drop feature-suse-auto-socket-target-wants.patch and use the
  filesystem instead, this works more consistenly with dbus-broker</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="743c5aef58fef4135a0f715183aa7676cd1f241aa317f7a3f77086b35392cbebe1254a43e4d98fa8f2a59a4893e8c0d700d3424117f79161721f39bddb0f5ea4" name="dbus-1-common" arch="noarch">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
  <changelog author="sflees@suse.de" date="1695297600">- No longer start or offer starting dbus as a system service
  dbus-broker will be the only supported system dbus. Although
  the existing daemon will stay as some things (gdm) require
  dbus-run-session</changelog>
  <changelog author="dimstar@opensuse.org" date="1695297601">- Explicitly require /usr/bin/cmp for the post scripts instead of
  diffutils: allow other implementations like busybox-diffutils to
  be acceptable.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1701518400">- common: dbus.socket still gets used after migration to
  dbus-broker so keep pre/post/postun scriptlets</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Add feature-suse-auto-socket-target-wants.patch: move
  from static enable symlinks to systemd created symlinks otherwise
  it can't be enabled by systemd-presets-common-SUSE
- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing the socket or user service aswell</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Add RH/Fedora compat provides dbus-libs to library package
  needed by Mullvad</changelog>
  <changelog author="sflees@suse.de" date="1714392000">- Drop feature-suse-auto-socket-target-wants.patch and use the
  filesystem instead, this works more consistenly with dbus-broker</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="dcd6b51d666f57b04a1cf8a95d3e6676bb45fda0e93e50b29c1a8dc4a17950df3bff9ee1c78a60e0c04a697c34ccb0ab3e261af9966c76fd03a27ce1e3fe056f" name="dbus-1-daemon" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
  <changelog author="sflees@suse.de" date="1695297600">- No longer start or offer starting dbus as a system service
  dbus-broker will be the only supported system dbus. Although
  the existing daemon will stay as some things (gdm) require
  dbus-run-session</changelog>
  <changelog author="dimstar@opensuse.org" date="1695297601">- Explicitly require /usr/bin/cmp for the post scripts instead of
  diffutils: allow other implementations like busybox-diffutils to
  be acceptable.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1701518400">- common: dbus.socket still gets used after migration to
  dbus-broker so keep pre/post/postun scriptlets</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Add feature-suse-auto-socket-target-wants.patch: move
  from static enable symlinks to systemd created symlinks otherwise
  it can't be enabled by systemd-presets-common-SUSE
- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing the socket or user service aswell</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Add RH/Fedora compat provides dbus-libs to library package
  needed by Mullvad</changelog>
  <changelog author="sflees@suse.de" date="1714392000">- Drop feature-suse-auto-socket-target-wants.patch and use the
  filesystem instead, this works more consistenly with dbus-broker</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="6e3eb68bdde52ad418cb20a56e25c40b23e5f824d554d075e76fe4146dc8d2ba14ecb77ff2e100420b6151dc66e76fa2a4fbd29ec1e9de7b5967c27c8e7464c1" name="dbus-1-tools" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
  <changelog author="sflees@suse.de" date="1695297600">- No longer start or offer starting dbus as a system service
  dbus-broker will be the only supported system dbus. Although
  the existing daemon will stay as some things (gdm) require
  dbus-run-session</changelog>
  <changelog author="dimstar@opensuse.org" date="1695297601">- Explicitly require /usr/bin/cmp for the post scripts instead of
  diffutils: allow other implementations like busybox-diffutils to
  be acceptable.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1701518400">- common: dbus.socket still gets used after migration to
  dbus-broker so keep pre/post/postun scriptlets</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Add feature-suse-auto-socket-target-wants.patch: move
  from static enable symlinks to systemd created symlinks otherwise
  it can't be enabled by systemd-presets-common-SUSE
- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing the socket or user service aswell</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Add RH/Fedora compat provides dbus-libs to library package
  needed by Mullvad</changelog>
  <changelog author="sflees@suse.de" date="1714392000">- Drop feature-suse-auto-socket-target-wants.patch and use the
  filesystem instead, this works more consistenly with dbus-broker</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="fa24d5a36362b3ef3b34fe06172707a0dbc365b178e92020c1d0e530ca5240c76bfba7014e6961f828915c678b8f9cb23b26e97d1253bdadcbec95607fcfaabc" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579435200">- Move generation of API docs to a separate package, avoid doxygen
  dependency for building main package.
- Build x11 and devel-doc (API doc) using _multibuild.</changelog>
  <changelog author="elimat@opensuse.org" date="1594900800">- Update to 1.12.20
  * On Unix, avoid a use-after-free if two usernames have the same
    numeric uid. In older versions this could lead to a crash (denial of
    service) or other undefined behaviour, possibly including incorrect
    authorization decisions if &lt;policy group=...&gt; is used.
    Like Unix filesystems, D-Bus' model of identity cannot distinguish
    between users of different names with the same numeric uid, so this
    configuration is not advisable on systems where D-Bus will be used.
    Thanks to Daniel Onaca.
    (dbus#305, dbus!166; Simon McVittie)
- From 1.12.18
  * CVE-2020-12049: If a message contains more file descriptors than can
    be sent, close those that did get through before reporting error.
    Previously, a local attacker could cause the system dbus-daemon (or
    another system service with its own DBusServer) to run out of file
    descriptors, by repeatedly connecting to the server and sending fds that
    would get leaked.
    Thanks to Kevin Backhouse of GitHub Security Lab.
    (dbus#294, GHSL-2020-057; Simon McVittie)
  * Fix a crash when the dbus-daemon is terminated while one or more
    monitors are active (dbus#291, dbus!140; Simon McVittie)
  * The dbus-send(1) man page now documents --bus and --peer instead of
    the old --address synonym for --peer, which has been deprecated since
  the introduction of --bus and --peer in 1.7.6
  (fd.o #48816, dbus!115; Chris Morin)
  * Fix a wrong environment variable name in dbus-daemon(1)
    (dbus#275, dbus!122; Mubin, Philip Withnall)
  * Fix formatting of dbus_message_append_args example
  (dbus!126, Felipe Franciosi)
  * Avoid a test failure on Linux when built in a container as uid 0, but
    without the necessary privileges to increase resource limits
  (dbus!58, Debian #908092; Simon McVittie)
  * When building with CMake, cope with libX11 in a non-standard location
  (dbus!129, Tuomo Rinne)
- Run spec-cleaner</changelog>
  <changelog author="schubi@suse.de" date="1628078400">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1631793600">- Fixed spec file regarding removing old update-alternatives
  entries.</changelog>
  <changelog author="schubi@suse.de" date="1632398400">- Added BuildRequires alts for libalternatives.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646136000">- Update to version 1.12.22:
  + On Linux, when using traditional (non-systemd) service
    activation, don't log warnings about failing to reset OOM score
    adjustment if the process is already more susceptible to the
    OOM killer, as user processes usually are with systemd ≥ 250.
  + On Linux, when using traditional (non-systemd) system bus
    activation, reset the OOM score adjustment to 0 as intended.
    If the system dbus-daemon is protected from the OOM killer,
    this avoids that protection unintentionally being inherited by
    every system service.
  + Avoid malloc() after fork on non-GNU libc.
  + Fix build with clang 13 by using Standard C offsetof where
    available.
  + Fix build of tests on FreeBSD.
  + Make documentation build more reproducible.
  + On Unix, make X11 autolaunch cope with slashes in DISPLAY.
  + Don't try to raise RLIMIT_NOFILE beyond OPEN_MAX on macOS.
  + Fix compilation if embedded tests are enabled but verbose mode
    and stats are both disabled.
  + On Linux, fix a race condition in the integration test for
    transient services.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 1.14.0:
  + Dependencies:
  - dbus now requires at least a basic level of support for C99
    variadic macros, as implemented in gcc &gt;= 3, all versions of
    Clang, and MSVC &gt;= 2005. In practice this requirement has
    existed since version 1.9.2, but it is now official.
  - dbus now requires a C99-compatible va_copy() macro
    (or a __va_copy() macro with the same behaviour), except when
    building for Windows using MSVC and CMake.
  - On Unix platforms, if getpwnam_r() and getgrnam_r() are
    implemented, they must be POSIX-conformant. The non-POSIX
    signature seen in ancient Solaris versions will no longer
    work.
  - GLib &gt;= 2.38 is required if full test coverage is enabled
    (reduced from 2.40 in dbus 1.12.x.)
  - Building using CMake now requires CMake 3.4.
  - Building documentation using CMake now requires xsltproc,
    Docbook DTDs (for example docbook-xml on Debian derivatives),
    and Docbook XSLT stylesheets (for example docbook-xsl on
    Debian derivatives). Using KDE's meinproc4 documentation
    processor is no longer supported.
  + Build-time configuration changes: Move CMake build system to
    top level, matching normal practice for CMake projects
  + Deprecations:
  - Third-party software should install default dbus policies for
    the system bus into ${datadir}/dbus-1/system.d (this has been
    supported since dbus 1.10, released in August 2015).
    Installing default dbus policies in
    ${sysconfdir}/dbus-1/system.d is now considered to be
    deprecated. Policy files in ${sysconfdir}/dbus-1/system.d
    continue to be read, but this directory should only be used
    by system administrators wishing to override the default
    policies.
  - The ${datadir} applicable to dbus is usually /usr/share and
    the ${sysconfdir} is usually /etc.
  - A similar pattern applies to the session bus policies in
    session.d.
  - The dbus-send(1) man page now documents --bus and --peer
    instead of the old --address synonym for --peer, which has
    been deprecated since the introduction of --bus and --peer in
    1.7.6
  - The dbus-daemon man page now has scarier warnings about
    &lt;allow_anonymous/&gt; and non-local TCP, which are insecure and
    should not be used, particularly for the standard system and
    session buses.
  - DBusServer (and hence the dbus-daemon) no longer accepts
    usernames (login names) for the recommended EXTERNAL
    authentication mechanism, only numeric user IDs or the empty
    string. See 1.13.0 release notes for full details.
  + New features:
  - On Linux 4.13 or later when built against a suitable glibc
    version, GetConnectionCredentials() now includes
    UnixGroupIDs, the effective group IDs of the initiator of the
    connection, taken from SO_PEERGROUPS.
  - On Linux 4.13 or later, &lt;policy group="…"&gt; now uses the
    SO_PEERGROUPS credentials-passing socket option to get the
    effective group IDs of the initiator of the connection. See
    1.13.4 release notes for details.
  - Add a --sender option to dbus-send, which requests a name and
    holds it until the signal has been sent
  - dbus-daemon &lt;allow&gt; and &lt;deny&gt; rules can now specify a
    send_destination_prefix attribute, which is like a
    combination of send_destination and the arg0namespace keyword
    in match rules. See 1.13.12 release notes for more details.
  - The dbus-daemon now filters the messages that it relays,
    removing header fields that it does not understand. Clients
    must not rely on this behaviour unless they have confirmed
    that they are connected to a suitable message bus
    implementation, for example by querying its Features
    property.
  - The dbus-daemon now emits a signal,
    ActivatableServicesChanged, when the list of activatable
    services may have changed. Support for this signal can be
    discovered by querying the Features property.
  - It is now possible to disable traditional (non-systemd)
    service activation at build-time (Autotools:
  - -disable-traditional-activation, CMake:
  - DENABLE_TRADITIONAL_ACTIVATION=OFF). See 1.13.10 release
    notes for details.
  - The API reference manual can be built as a Qt compiled help
    file if qhelpgenerator(-qt5) is available. See 1.13.16
    release notes for details.
  + Miscellaneous behaviour changes:
  - When using the "user bus" (--enable-user-session), put the
    dbus-daemon in the session slice
  - Several environment variables set by systemd are no longer
    passed on to activated services
  - If the dbus-daemon is compiled for Linux with systemd
    support, it now informs systemd that it is ready for use via
    the sd_notify() mechanism.
  - Tarball releases no longer contain pre-2007 changelogs and
    are now compressed with xz, making them around 35% smaller.
- Drop conditionals for old obsolete versions of openSUSE.
- Rebase patches with quilt.
- Use https for source and sig URL.</changelog>
  <changelog author="fvogt@suse.com" date="1647604800">- Use --with-x=auto to actually enable X11 integration (boo#1197258,
  workaround https://gitlab.freedesktop.org/dbus/dbus/-/merge_requests/263)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665835200">- Disable asserts in dbus-1-x11.spec and dbus-1-devel-doc.spec too</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 1.14.4 (bsc#1204111, CVE-2022-42010,
    bsc#1204112, CVE-2022-42011,
    bsc#1204113, CVE-2022-42012):
  This is a security update for the dbus 1.14.x stable branch, fixing
  denial-of-service issues (CVE-2022-42010, -42011, -42012) and applying
  security hardening (dbus#416).
  Behaviour changes:
  * On Linux, dbus-daemon and other uses of DBusServer now create a
    path-based Unix socket, unix:path=..., when asked to listen on a
    unix:tmpdir=... address. This makes unix:tmpdir=... equivalent to
    unix:dir=... on all platforms.
    Previous versions would have created an abstract socket, unix:abstract=...,
    in this situation.
    This change primarily affects the well-known session bus when run via
    dbus-launch(1) or dbus-run-session(1). The user bus, enabled by configuring
    dbus with --enable-user-session and running it on a systemd system,
    already used path-based Unix sockets and is unaffected by this change.
    This behaviour change prevents a sandbox escape via the session bus socket
    in sandboxing frameworks that can share the network namespace with the host
    system, such as Flatpak.
    This change might cause a regression in situations where the abstract socket
    is intentionally shared between the host system and a chroot or container,
    such as some use-cases of schroot(1). That regression can be resolved by
    using a bind-mount to share either the D-Bus socket, or the whole /tmp
    directory, with the chroot or container.
    (dbus#416, Simon McVittie)
  * Denial of service fixes:
  - Evgeny Vereshchagin discovered several ways in which an authenticated
    local attacker could cause a crash (denial of service) in
    dbus-daemon --system or a custom DBusServer. In uncommon configurations
    these could potentially be carried out by an authenticated remote attacker.
  - An invalid array of fixed-length elements where the length of the array
    is not a multiple of the length of the element would cause an assertion
    failure in debug builds or an out-of-bounds read in production builds.
    This was a regression in version 1.3.0.
    (dbus#413, CVE-2022-42011; Simon McVittie)
  - A syntactically invalid type signature with incorrectly nested parentheses
    and curly brackets would cause an assertion failure in debug builds.
    Similar messages could potentially result in a crash or incorrect message
    processing in a production build, although we are not aware of a practical
    example. (dbus#418, CVE-2022-42010; Simon McVittie)
  - A message in non-native endianness with out-of-band Unix file descriptors
    would cause a use-after-free and possible memory corruption in production
    builds, or an assertion failure in debug builds. This was a regression in
    version 1.3.0. (dbus#417, CVE-2022-42012; Simon McVittie)
  - Preserve errno on failure to open /proc/self/oom_score_adj
    (dbus!285, Gentoo#834725; Mike Gilbert)
  - On Linux, don't log warnings if oom_score_adj is read-only but does not
    need to be changed (dbus!291, Simon McVittie)
  - Slightly improve error-handling for inotify
    (dbus!235, Simon McVittie)
  - Don't crash if dbus-daemon is asked to watch more than 128 directories
    for changes (dbus!302, Jan Tojnar)</changelog>
</package>
<package pkgid="11984b4c5463ccc64c236a048e1627a587e9c062189dd761a9cc6a69e323b0ba7eb0546da267bab4ccd08aeb47b870698875800babb332ff9987a5afb72553c6" name="dbus-broker" arch="x86_64">
  <version epoch="0" ver="36" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1695988800">- Add BuildIgnore to break cycle with dbus-1.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing user service aswell</changelog>
  <changelog author="jengelh@inai.de" date="1702555200">- Update to release 34
  * Use AT_RANDOM for libexpat initialization to avoid a hidden
    dependency in libexpat-hashtables on `/dev/urandom` at
    runtime.
  * Check for SELinux Enforcing-mode and honor its value.
  * Support the new `ProcessFD` key in `GetConnectionCredentials()`.
  * Loading files from a directory will not enumerate the files
    in a predictable order rather than the pseudo-random order
    returned by the kernel.</changelog>
  <changelog author="jengelh@inai.de" date="1703073600">- Update to release 35
  * drop an error-checking remnant of old dir-iteration</changelog>
  <changelog author="mrueckert@suse.de" date="1705406400">- Make restart behavior an admin decision:
  - drop feature-suse-refuse-manual-start-stop.patch
  - introduce 2 new subpackages:
    dbus-broker-allow-restart
    dbus-broker-block-restart (default to reflect the old patch
    behavior)
    one of the 2 packages is required and leaves the admin the
    choice if they want to be able to restart dbus-broker without
    reboot or not.</changelog>
  <changelog author="mrueckert@suse.de" date="1705406401">- Downgrade the recommends to suggests based on suggestion from
  dimstar</changelog>
  <changelog author="mrueckert@suse.de" date="1705406402">- Make provides versioned
- Ensure that not both packages can be installed at the same time
  by adding a conflicts</changelog>
  <changelog author="jengelh@inai.de" date="1712923200">- Update to release 36
  * Fix possible file-descriptor use-after-close
  * More verbose activation failures</changelog>
  <changelog author="sflees@suse.de" date="1722945600">- Looks like we need systemd_user_ scripts for some upgrades to
  work</changelog>
  <changelog author="sflees@suse.de" date="1734609600">- Requires(pre): systemd &gt;= 253.6 to ensure scripts in %post are
  run correctly, (bsc#1234697) Thanks to Thorsten for the detailed
  report.</changelog>
</package>
<package pkgid="b1f6fcba641d23f94ba7d36b074876dc4f6f0cb43d8d079156ab3d81917ed63e2a80a11ddb1205a3176c18d437080d05dcf0b118e9f43881dacc68f3e7309bc6" name="dbus-broker-block-restart" arch="noarch">
  <version epoch="0" ver="36" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1695988800">- Add BuildIgnore to break cycle with dbus-1.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing user service aswell</changelog>
  <changelog author="jengelh@inai.de" date="1702555200">- Update to release 34
  * Use AT_RANDOM for libexpat initialization to avoid a hidden
    dependency in libexpat-hashtables on `/dev/urandom` at
    runtime.
  * Check for SELinux Enforcing-mode and honor its value.
  * Support the new `ProcessFD` key in `GetConnectionCredentials()`.
  * Loading files from a directory will not enumerate the files
    in a predictable order rather than the pseudo-random order
    returned by the kernel.</changelog>
  <changelog author="jengelh@inai.de" date="1703073600">- Update to release 35
  * drop an error-checking remnant of old dir-iteration</changelog>
  <changelog author="mrueckert@suse.de" date="1705406400">- Make restart behavior an admin decision:
  - drop feature-suse-refuse-manual-start-stop.patch
  - introduce 2 new subpackages:
    dbus-broker-allow-restart
    dbus-broker-block-restart (default to reflect the old patch
    behavior)
    one of the 2 packages is required and leaves the admin the
    choice if they want to be able to restart dbus-broker without
    reboot or not.</changelog>
  <changelog author="mrueckert@suse.de" date="1705406401">- Downgrade the recommends to suggests based on suggestion from
  dimstar</changelog>
  <changelog author="mrueckert@suse.de" date="1705406402">- Make provides versioned
- Ensure that not both packages can be installed at the same time
  by adding a conflicts</changelog>
  <changelog author="jengelh@inai.de" date="1712923200">- Update to release 36
  * Fix possible file-descriptor use-after-close
  * More verbose activation failures</changelog>
  <changelog author="sflees@suse.de" date="1722945600">- Looks like we need systemd_user_ scripts for some upgrades to
  work</changelog>
  <changelog author="sflees@suse.de" date="1734609600">- Requires(pre): systemd &gt;= 253.6 to ensure scripts in %post are
  run correctly, (bsc#1234697) Thanks to Thorsten for the detailed
  report.</changelog>
</package>
<package pkgid="3cfa82caca9da287ecb098c8d0601efb6997181c0aaf81f9f75d17c6b513c5225e61cdd2bb4b78fd7a5a5cef8c6ae6e363a09d3db1d916a7e365d1ea6e7daacd" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="2.03.29_1.02.203" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1723550400">- lvm2-monitor.service fails to start (boo#1228854)
  + bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch</changelog>
  <changelog author="glass.su@suse.com" date="1725019200">- [SLFO] systemd 254 is missing reworked SYSTEMD_READY logic in device mapper udev rules (bsc#1229518)
  * update udev dependency version in lvm2.spec</changelog>
  <changelog author="glass.su@suse.com" date="1734350400">- Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29
  * ** WHATS_NEW from 2.03.24 to 2.03.29 ***
  Version 2.03.29 - 09th December 2024
  ====================================
    Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify.
    Allow test mode when lvmlockd is built without dlm support.
    Add a note about RAID + integrity synchronization to lvmraid(7) man page.
    Add a function for running lvconvert --repair on RAID LVs to lvmdbusd.
    Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}).
    Fix renaming of raid sub LVs when converting a volume to raid (2.03.28).
    Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize.
    Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27).
  Version 2.03.28 - 04th November 2024
  ====================================
    Use radix_tree to lookup for UUID within committed metadata.
    Use radix_tree to lookup LV list entry within VG struct.
    Introduce setting config/validate_metadata = full | none.
    Restore fs resize call for lvresize -r on the same size LV (2.03.17).
    Correct off-by-one devicesfile backup counting.
    Replace use of dm_hash with radix_tree for lv names and uuids.
    Refactor vg_validate with uniq_insert and better use of CPU caches.
    Add radix_tree_uniq_insert.
    Update DM cache when taking next VG lock instead of dropping it.
    Generate json string id only for json reporting.
    For vgsummary use new API call dm_config_parse_only_section().
    Use radix_tree for PV names mapping.
    Split check_lv_segment into separate _in/complete_vg variant.
    Use find_lv instead of find_lv_in_vg when possible.
    Do a mirror fixup only when mirrors with logs are imported.
    Add faster crc32 calculation from zlib code for x86_64.
    Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization.
  Version 2.03.27 - 02nd October 2024
  ===================================
    Fix swap device size detection using blkid for lvresize/lvreduce/lvextend.
    Detect GPT partition table and pass partition filter if no partitions defined.
    Add global/sanlock_align_size option to configure sanlock lease size.
    Disable mem locking when activation/reserved_stack or reserved_memory is 0.
    Fix locking issues in lvmlockd leaving thin pool locked.
    Deprecate vdo settings vdo_write_policy and vdo_write_policy.
    Lots of typo fixes across lvm2 code base (codespell).
    Corrected integrity parameter interleave_sectors for DM table line.
    Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10.
    Do not accept duplicate device names for pvcreate.
  Version 2.03.26 - 23rd August 2024
  ==================================
    Fix internal error reported by pvmove on a VG with single PV.
    Also accept --mknodes --refresh for vgscan.
    Fix vgmknodes --refresh to wait for udev before checking /dev content.
    Use log/report_command_log=1 config setting by default for JSON output format.
    Fix unreleased memory pools on RAID lvextend.
    Add --integritysettings option to manipulate dm-integrity settings.
  Version 2.03.25 - 12nd July 2024
  ================================
    Utilize more radix_tree instead of dm_hash and btree.
    Refactor DM uuid caching from device_mapper directory.
    Enhance checking for DM uuid device.
    Fix lvm shell command completion on tab key (2.03.24).
    Avoid lockd_vg call to lvmlockd for local VGs.
    Allow forced change of locktype from none.
    Handle OPTIONS defined in /etc/sysconfig/lvmlockd.
  * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 ***
  Version 1.02.203 - 09th December 2024
  =====================================
  Version 1.02.202 - 04th November 2024
  =====================================
    Introduce dm_config_parse_only_section to stop parsing after section.
    For shorter string use on stack buffers when generating sections.
    Enhance dm_config tokenizer.
  Version 1.02.201 - 02nd October 2024
  ====================================
    Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails.
    Improve error messages on failed udev cookie create/inc/dec operation.
  Version 1.02.200 - 23rd August 2024
  ===================================
  Version 1.02.199 - 12nd July 2024
  =================================
- update lvm2.spec
  - change lvm2_version to 2.03.29
  - change upstream_device_mapper_version and device_mapper_version to 1.02.203
  - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package
  - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd
  - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="glass.su@suse.com" date="1738756800">- thin-provisioning-tools 1.1.0 requires device-mapper-devel, this creates a cycle (boo#1236749)
  * update lvm2.spec
  - remove build require dependency thin-provisioning-tools from devicemapper
  - remove thin-provisioning-tools related configure options from devicemapper
  - remove a trivial empty line in extra_opts if default_use_devices_file=1</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1740657600">- fixing HA16.0 Product building issues for packages: lvm2-lockd, cluster-md, dlm, drbd (bsc#1237701)
  * update lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="d8c1ee46d1ea3ffbf686a9e98c86d12a95d172ac4370c24f0bd42635385f38d85a8b7ec67e056207a92d68c28c1c6a58b9fac2302d604930fc15f33dc271d08e" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.4.2.P1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="d2a43388286800cef9b516a3d3dd83d3d1be4ceb11c7605d8d6f061f6243b0814dc82dcd16904675880eb1d2771ca008b79443e4b549158e85a6e762c93ea5c5" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.4.2.P1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="ffdcf7e4d28c6564ce8850cfe0a17bb548a96320a595ecb441c1d673f7db2c53f94c9e65e71e81d3c994d36cd84527526e7dfa1a6f9cb36da3103fba2cd5fc7f" name="dhcpcd" arch="x86_64">
  <version epoch="0" ver="10.2.4" rel="160000.2.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1719835200">- Initial packaging @ 10.0.8</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1724241600">- Update to 10.0.10
  * Option 2: Fix stdin parsing
  * IPv4LL: Restart ARP probling on address conflict
  * DHCP: Handle option 108 correctly when receiving 0.0.0.0 OFFER
  * DHCP: No longer set interface mtu
  * Update privsep-linux.c to allow statx</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1728302400">- Update to 10.1.0
  * dhcp: get_option_uint32/16 only accept options with correct len
  * Include frame header in buffer length</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1739361600">- Update to 10.2.0
  * dhcp6: start request when advertise received after IRT
  * dhcpcd: stdout output sometimes empty when redirected to a file
  * Fix help text formatting
  * Apply lastlease behavior to DHCPv6
  * dhcpcd not ignoring source-based routes on linux
  * DHCP6: lastlease behavior after Confim non-response
  * Allow limited RLIMIT_FSIZE when dumping lease
  * IPv6: Avoid uninitialized ifp state when adding address
  * DHCPv6: Add support for sending Option 17 (VSIO)
  * Exit the timesyncd hook if not on systemd and not executable
  * Add route lifetime from Router Advertisement
  * revert e3c5de1
  * Fix using multiple enterprise IDs with vendclass (Option 124
    DHCP / Option 16 DHCPv6)
  * Update route if acquired time changes
  * Always send req for InfoRefreshTime option on Inform-Req
  * Increase max IPv4 clientid
  * Update build.yml to fix BSD builds</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1740398400">- Update to 10.2.1
  * Fix building with different options
  * Only drop IPv4 LL addresses if configured to handle them</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1740571200">- Update to 10.2.2
  * DHCP6: Fix dhcpcd vendor class option
  * options: Allow interface block to be pattern matching</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747396800">- Update to 10.2.3
  * Restore logic on when to open an address specific socket
  * [Fix] DHCP Failure on WAN Interface Rename (Fixes #504)
  * BSD: routes via P2P interfaces now find their out-going
    interface
  * -b --background fixed
  * resolv: Fix processing more DNSSL options than RDNSS]
  * dhcpcd: Remove option rapid_commit from dhcpcd.conf
  * privsep: Fix valgrind and hardened-malloc on Linux with SECCOMP
  * route: Don't spam route changes for lifetime</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1748865600">- Update to 10.2.4
  * compat: use timingsafe_bcmp if available
  * IPv6: Sort routers by reachability correctly.
  * definitions: define ND Route Information option
  * IPv6: Clear previous address RA flags on receipt of a RA.</changelog>
</package>
<package pkgid="4fbfb6eca4f8c63b5ccc63918143354208b4d3e117bf6d3308b879fd20607827dc6215eec2ccc0c6b461d7547976fc984247304bcd6891c91927c01cd1d8193e" name="dialog" arch="x86_64">
  <version epoch="0" ver="1.3" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
  <changelog author="sbrabec@suse.com" date="1541592000">- Fix mangled Hindi translation (bsc#1115005).</changelog>
  <changelog author="werner@suse.de" date="1550059200">- Update to version 1.3-20190211
  + modify to work with ncurses' threaded-library, which does not allow
    assignment to LINES/COLS (report by Marcus Roeckrath).
  + correct clearing after text in progressbox from 2018/06/21 changes
    for resizing (reports by David Boyd, Alan Somers).
  + improved configure macros CF_GNU_SOURCE, CF_POSIX_C_SOURCE,
    CF_XOPEN_SOURCE
  + update config.guess, config.sub
- Includes also version 1.3-20181107
  + convert ja.po to UTF-8 for consistency (suggested by Stanislav
    Brabec).
  + repair mis-encoded hi.po (report/analysis by Stanislav Brabec).
- Includes also version 1.3-20181022
  + improved configure macros CF_CC_ENV_FLAGS, CF_LD_RPATH_OPT,
    CF_LIBRARY_PATH, CF_SHARED_OPTS, CF_WITH_MAN2HTML,
    CF_WITH_VERSIONED_SYMS from ncurses
  + add ast.po, from
    http://translationproject.org/latest/dialog/
- Includes also version 1.3-20180621
  + improve file-offset computation in textbox.c (Werner Fink).
  + fix an overlooked case with real_auto_size() to maximize when
    height or width is given as -1.
  + build-fixes for configure options "--disable-Xdialog2" and
    "--disable-form"
  + add traces for each widget to show its parameters.
  + modify color scheme for mixedgauge to use the dialog window colors,
    like the captions.
  + fix a too-small malloc in the mixedgauge widget.
  + fix a use-after-free in dlg_remove_callback().
  + improve handling of SIGWINCH for several widgets (Debian #865840).
    + menubox, the point of the Debian report was that it would be nice
    to increase the window size if the terminal size increases.  Did
    that as a special case less problematic than decreasing the
    terminal size.  Added samples/menubox11 to demonstrate by
    comparison with menubox10 a problem with debconf which puts extra
    newlines in the caption that interfere with autowrap.
    + progressbox and derived prgbox, programbox, now handle resizing.
    + yesno, window was cleared
  + add dlg_ttysize() to support new options, allowing scripts to obtain
    some text-formatting details without initializing the terminal.
  + add options --print-text-only, and --print-text-size for scripts that
    adjust the widget size according to how the captions are formatted.
  + improve dialog.pl:
    + add demo.pl, to demonstrate the functions
    + quote/escape string parameters passed to dialog.
    + ensure all "integer" parameters are really integers.
    + use actual screensize for list captions rather than assuming 24
    lines.
  + when trimming blanks, treat unconverted tabs the same as spaces.
  + correct parameter to test when trimming blanks from the script,
    e.g., with "--trim" (report by Jarno Suni).
  + improve documentation of the various whitespace-filtering options,
    to show which take precedence (Debian #867536, cf: Debian #102942).
  + modify msgbox.c, yesno.c to bind SCROLLKEY_BINDINGS before
    TRAVERSE_BINDINGS so that up/down arrow will by default scroll the
    message up/down rather than be aliases for tab-traversal (report by
    Fredrik Kers).
  + modify dump_one_binding() to show when a binding is overridden.
  + improve format of trace-file, making comment-syntax consistent,
    as well as showing argv-splitting as a series of comments.
  + modify dlg_string_to_argv() to change the quoting behavior to be
    more consistent with shell behavior (patch by Denilson Sa Maia).
  + modify dlg_getc() to return ESC when a timeout expires, notifying
    callers that a quit occurred rather than exiting the application
    (suggested by Rodrigo Freitas).
  + modify handle_inputs() to ensure cursor-visibility is restored when
    there is no input character available (report by Guillaume Vareille).
  + improve comment in manual page regarding which widgets can use the
    "--help-button" (prompted by discussion with Csanyi Pal).
  + add a check for valid object pointer in tailbox's main loop since
    the getc-callback may have been freed within ui_getc.c (report by
    "David").
  + improved configure macros for ncurses: CF_GNU_SOURCE, CF_SHARED_OPTS,
    CF_CURSES_LIBS, CF_CURSES_FUNCS, CF_NCURSES_CONFIG
  + improved configure script checks for groff vs man2html:
    CF_PROG_GROFF and CF_WITH_MAN2HTML
  + build-fix from lynx for AM_WITH_NLS configure macro
  + update config.guess, config.sub
- Remove fix for Hindi translation as now upstream
- Remove patch textbox-file_size.patch now upstream
- Remove dialog.ko.po.bz2 as ko.po now upstream
- Modify patch dialog-1.2-20121230.dif</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="werner@suse.de" date="1616068800">- Update to version 1.3-20210306
  + add several usage-messages to dialog.pot
  + improve configure-check for ld searchpath on HP-UX and Solaris.
  + fix a few cppcheck warnings
  + updated eo.po, fi.po, pt.po, sq.po, sv.po, ru.po, uk.po, zh_CN.po
    from http://translationproject.org/latest/dialog/
  + updated dialog.pot
  + add option --no-hot-list, to allow suppressing the hotkey feature
    from lists.
  + increase minimum height of inputbox to avoid input field overlapping
    with the button-box (report by Victor Ananjevsky).
  + modify options-parsing to permit a "no" on any boolean option and
    deprecating the "no" options without a "-" , e.g., generalizing on
    "--nook" equivalence to "--no-ok".
  + minor spelling fixes, per codespell
  + update configure macros, for quoting/escaping fixes per shellcheck
  + update config.guess, config.sub
  + modify configure script's compiler check to work around Xcode's
    useless aliases for standard C.
  + enable keep-tite feature for NetBSD 8 and up; earlier releases would
    dump core.
  &gt; new features/fixes (Glenn Herteg)
  + add option "--cursor-off-label"
  + add option "--erase-on-exit"
  + fix errata in manpage.
  + fix logic: dlg_button_to_char() would return wrong value if no
    uppercase was found
  + add DIALOG_TIMEOUT to sample scripts, and use report-button more
    consistently to handle unexpected exit-status values.
  + add dlg_getenv_num() and dlg_getenv_str().
  + add DLG_EXIT_TIMEOUT to allow scripts to exit on an expired timeout
    with an exit-status different from DLG_EXIT_ERROR or DLG_EXIT_ESC
    (patch by Norbert Koch).
  + modify dlg_ok_label() and dlg_ok_labels() to ignore --no-ok if all
    buttons would be omitted.
  + add/use dlg_der_window() to account for derived windows just like
    subwindows, to fix regression in dlg_getc() in fselect/dselect
    widget.
  + modify several widgets to make their handling of --no-ok consistent
    with the majority of the widgets: editbox.c, menubox.c, msgbox.c,
    rangebox.c, textbox.c, timebox.c
  + add ^D as binding for new virtual key DLGK_LEAVE, which will close
    the current dialog by activating the currently-selected button.
  + improve manual-page description of --no-ok option (reports by
    Hans Mueller, Gil Delescluse).
  + modify configure script to make Solaris -R rpath feature work
  + fix regression in dlg_getc() caused by not taking into account
    subwindows used for input (report by Michael Wihl).
  + add validity-checks for window pointer (report/testcase by Michael
    Wihl).
  + improve configure macros:
    CF_CLANG_COMPILER: apply compiler-flags needed for test.
    CF_WITH_SCREEN_PDCURSES: use this to reduce X11-checks.
  + amend initialization for dlg_getc to fix regression in pause widget
    from 2020/03/27 changes (reports by Aidan Tessier, Norbert Koch,
    Josmar Pierri).
  + improve configure macros:
    CF_CLANG_COMPILER: split-out check for -Qunused-arguments to ensure
    that clang supports it.  IBM xlclang does not.
    CF_MIXEDCASE_FILENAMES: when cross-compiling to darwin (macOS),
    assume the filesystem doesn't support mixed-case
  + modify init_dialog's initialization of tab_len and aspect_ratio to
    avoid overwriting initialization done in process_common_options
    (report/patch by Rainer Weikusat, Debian #970508).
  + fix out-of-order description for --tailbox vs --rangebox in manpage
    (report by Glenn Herteg).
  + updated configure-macros: compiler-warnings and shared-library
    options.  Changed configure --with-warnings to --enable-warnings for
    consistency.
  + update config.guess
  + updated sq.po from http://translationproject.org/latest/dialog/
  + add clarification in manual page to show when the single/double
    quotes may be needed (prompted by discussion with Danilo G Baio).
  + fix an extra ".exe" in makefile.in which prevented Cygwin build.
  + fix most cppcheck warnings
  + tailbox/tailboxbg's exit-button now works with mouse-clicks
  + fix repainting while resizing for the editbox widget.
  + add configure-check for curses_exit() from ncurses 6.2
  + fix a few memory leaks in fselect.c, mixedgauge.c when resizing.
  + fix inconsistency in dlg_string_to_argv() which made the checklist9
    example not work.
  + add empty-string check in dlg_print_listitem() to avoid indexing past
    the end of the array of character-offsets.
  + improve handling of KEY_RESIZE by repainting the backtitle after
    clearing the screen (integrated patch by Rainer Weikusat, Debian
    [#954185]).
  + improve logic for wtimeout() calls which are used to set temporary
    non-blocking reads (prompted by patch by Rainer Weikusat, Debian
    [#954220]).
  + add "make check" rule.
  + updated configure-macros.
  + updated configure-macros, to work around ncurses vs xcode's c99 -W
  + update config.guess
  + updated configure-macros.
  + update config.guess
  + correct rc-file lookup of "default" color (report by Grady Martin,
    cf: 2019/09/24).
  + fix several issues in the sample scripts reported by shellcheck.
  + fix a few spelling errors reported by codespell (report by Jens
    Schleusener).
  + correct check for return-value of isblank(), which is not necessarily
    0/1 (report/patch by Paul Cercueil, Peter Korsgaard, cf: 2018/05/31).
  + amend change for parsing command-options before calling init_dialog,
    to handle --no-shadow, etc., which are initialized in init_dialog
    (report by Paul Cercueil, cf: 2018/06/21).
  + add dlg_trace_va_msg to manpage, symbol files.
  + improve layout of several widgets' data area when maximizing.
  + modify dselect/fselect to work with autosizing (Debian #915949).
  + add error messages from dlg_exiterr() to trace file.
  + improve manual page description of escaping in key-bindings.
  + modify inputmenu to recognize the "Cancel" button and keys bound to
    that feature while editing a renamed menu item.
  + revert one change, in form.c to the --last-key feature (Debian
    [#942025]).
  + correct ordering of libraries in configure-script, which appended
    in a case where it should have prepended.
  + update config.guess, config.sub
  + improve dialog-config script's filtering of -L options using the
    linker default directories.
  + improve dialog-config script, adding a -L option corresponding to
    the configure --libdir option if it would be a duplicate (report by
    Andrew Kosteltsev).
  + build-fix for configure --disable-trace
  + updated pt.po from http://translationproject.org/latest/dialog/
  + allow for underline- and reverse-video flags in the ".rc" file
    (integrated patch by Richard Robbins).
  + amend change to --last-key feature to eliminate an unnecessary
    separator (report by Gabriele Balducci).
  + extend --last-key feature to the remaining widgets which have
    ok/cancel buttons, and add logic to map keys which happen to be
    bound to ok/extra/cancel/help to simulate a button-press on the
    corresponding button (report by "sgewrk").
  + further fixes for dialog-config.in (report by Andrew Kosteltsev).
  + modify dialog-config.in so that setting prefix or exec-prefix to
    a given value with --prefix=VALUE or --exec-prefix=VALUE has the
    expected result of changing bindir, etc.
  + correct substitution for $LIBS value in dialog-config.in (report by
    Andrew Kosteltsev).
  + modify dlg_will_resize() and dlg_result_key() functions to reduce
    the chance that dialog exits on a SIGWINCH (Debian #930775).
  + make test-package for the development headers/library
  + add --libs-only-L, etc., to dialog-config script (prompted by
    discussion with Andrew Kosteltsev).
  + fix a memory leak in gauge widget (Andrew Kosteltsev).
  + minor fix for CF_GCC_WARNINGS
  + update config.guess, config.sub
- Modify patch dialog-1.2-20121230.dif
- This update fixes boo#1183668</changelog>
  <changelog author="dimstar@opensuse.org" date="1623844800">- Update to version 1.3-20210530:
  + amend adjustment to inputbox height so the autosized dimensions
    match  older versions (boo#1184503).
  + improve configure checks, to reduce warnings during those checks
  + updated translations.
- Changes from version 1.3-20210509:
  + improve configure checks, e.g., for libtool version
- Changes from version 1.3-20210324:
  + add configure option --enable-stdnoreturn to build when C11
    _Noreturn feature is enabled in recent ncurses development.
- Changes from version 1.3-20210319:
  Updated translations.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743076800">- Use %autosetup to work with rpm-4.20 (bsc#1240154)</changelog>
</package>
<package pkgid="18ac2469b47176877a593e43a73da1d08fc95aec4a31e890f9862388b0d4a6f3a8737d159f106a53f11f968d7d6de05e11fef4f2d2ab73210471a5e0fa32fcd6" name="diffutils" arch="x86_64">
  <version epoch="0" ver="3.12" rel="160000.2.2"/>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: avoid false-positive
  error in gnulib tests 'test-perror2' and 'test-strerror_r',
  visible on armv7l.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- gnulib-c-stack.patch: c-stack: stop using SIGSTKSZ</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1628337600">- diffutils 3.8:
  * diff no longer treats a closed stdin as representing an absent
    file in usage like 'diff --new-file - foo &lt;&amp;-'
  * diff and related programs no longer get confused if stdin,
    stdout, or stderr are closed
  * cmp, diff and sdiff no longer treat negative command-line
    option-arguments as if they were large positive numbers
- drop gnulib-test-avoid-FP-perror-strerror.patch, upstream
- drop gnulib-c-stack.patch, equivalent change in c-stack
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="schwab@suse.de" date="1632139200">- Skip stack overflow tests under qemu emulation (bsc#1190046)</changelog>
  <changelog author="schwab@suse.de" date="1663156800">- Skip gnulib test test-free under qemu emulation (bsc#1202260)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1673870400">- diffutils 3.9:
  * fixes for other platforms</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1684756800">- diffutils 3.10:
  * cmp/diff can again work with file dates past Y2K38
  * diff -D no longer fails to output #ifndef lines</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1738756800">- diffutils 3.11:
  * quote file names more consistently in diagnostics
  * diff now outputs more information when symbolic links differ
  * diff's --ignore-case (-i) and --ignore-file-name-case options
    now support multi-byte characters
  * diff now supports multi-byte characters when treating white
    space
  * In options like --expand-tabs (-t), --ignore-space-change (-b)
    and --ignore-tab-expansion (-E), diff now recognizes non-ASCII
    space characters and counts columns for non-ASCII characters.
  * cmp -bl no longer omits "M-" from bytes with the high bit set
    in single-byte locales like en_US.iso8859-1
  * cmp -i N and -n N no longer fail merely because N is enormous.
  * cmp -s no longer mishandles /proc files
  * diff -E no longer mishandles some input lines containing '\a',
    '\b', '\f', '\r', '\v', or '\0'.
  * diff -ly no longer mishandles non-ASCII input.
  * diff - A/B now works correctly when standard input is a
    directory, by reading a file named B in that directory.
  * diff no longer suffers from race conditions in some cases when
    comparing files in a mutating file system</changelog>
  <changelog author="tonyj@suse.com" date="1743854400">- Fix failure (noticed in sdiff as fatal "realloc(): invalid next size")
  Original upstream report: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=77265
  New patch: diff-fix-allocation-typo-leading-to-crashes.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- diffutils 3.12:
  * diff -r no longer merely summarizes when comparing an empty
    regular file to a nonempty regular file.
  * diff -y no longer crashes when given nontrivial differences
- drop diff-fix-allocation-typo-leading-to-crashes.patch</changelog>
</package>
<package pkgid="d96a416c07e2281c7de6942d465f5a1ad1529767427e83e7d61999ca49e891f2a975f9015689bd7ef5f8296a79b2679495ce84e244a9e81561147dc67416a553" name="distribution-logos-branding-SLE" arch="noarch">
  <version epoch="0" ver="16" rel="160000.2.2"/>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
  <changelog author="mchang@suse.com" date="1654603200">- Support %posttrans with macros provided by update-bootloader-rpm-macros
  package (bsc#997317) (bsc#1199818)</changelog>
  <changelog author="fcrozat@suse.com" date="1707998400">- Remove update-alternatives usage, we don't have dynamic
  wallpapers anymore which were using that (bsc#1219919).</changelog>
  <changelog author="fcrozat@suse.com" date="1727784000">- grub2: fix progress bar positionning
- grub2: add keybinding label for menu editing (bsc#888313).</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1738238400">- Bump to version 16 (bsc#1235774)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1745409600">- Do not build main package as noarch, as we're actually looking at the
  build architecture in the spec file itself to control which
  subpackages to build. Required after rpm 4.20 update.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1747310400">- Add distribution-logos (bsc#1243104).</changelog>
  <changelog author="fcrozat@suse.com" date="1748347200">- Drop branding-SLE main package, its content is moved to release
  package (bsc#1239169).</changelog>
  <changelog author="fcrozat@suse.com" date="1749556800">- Merge all files from distributions-logos-SLE into
  distributions-logos-branding-SLE.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1752494400">- Update square-hicolor.svg to adapt the GNOME light color style
  (bsc#1243104).</changelog>
</package>
<package pkgid="338e8ee9dc17e8e37793768cb34ffc64f8779cd849afd97706ec1d6696ecefc6db4ec60b083f50a44778e19635e44b365a7ec78e8e6ad1b8498aaacb8a8f4063" name="distribution-logos-openSUSE-LeapMicro" arch="noarch">
  <version epoch="0" ver="20240404" rel="160000.1.105"/>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1609588800">- Only build Leap subpackage on Leap base and Tumbleweed based
  distros subpackages on Tumbleweed base</changelog>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1622980800">- Add icons package to handle systemd branding better</changelog>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1645185600">- Fix the obsoleted and provided versions of the old systemd logo branding package</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1647950400">- Initial Leap Micro 5.2 branding</changelog>
  <changelog author="Jacob Michalskie &lt;hel@lcp.world&gt;" date="1695297600">- Add Aeon branding</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1706788800">- Update Leap 15.6 branding poo#131666</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706788801">- list the source url</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1707393600">- switch to a service using zstd</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1708948800">- Add handling for Leap Micro 6.X and Leap 16.X</changelog>
  <changelog author="lubos.kocman@suse.com" date="1712232000">- Update to version 20240404:
  * Turn apple-touch-icon into round square ones
  * SLES Compatability supply apple-touch-icon for Leap, LeapMicro, TW
  * Delete dist/package directory
  * fix source mismatch with package name</changelog>
</package>
<package pkgid="84d238e304d25651a6bd1e5a91ab41b016c197e59135456aa427eb8722d1d2bc1ba571856be553cfcd70db4a11929fabb8c40d2f34036d1752946a0029bc3caa" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.6" rel="160000.2.2"/>
  <changelog author="jdelvare@suse.de" date="1602676800">- Update to upstream version 3.3:
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Add bios-revision, firmware-revision and system-sku-number to -s option.
  * Use the most appropriate unit for cache size.
  * Decode system slot base bus width and peers.
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-allow-overriding-build-settings-from-env.patch,
    dmidecode-dont-choke-on-invalid-processor-voltage.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-fix-the-alignment-of-type-25-name.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch, and
    dmidecode-print-type-33-name-unconditionally.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1611316800">2 recommended fixes from upstream:
- dmidecode-fix-the-condition-error-in-ascii_filter.patch:
  dmidecode: Fix the condition error in ascii_filter.
- dmidecode-fix-crash-with-u-option.patch: dmidecode: Fix crash
  with -u option.</changelog>
  <changelog author="jdelvare@suse.de" date="1656331200">- Update to upstream version 3.4:
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-fix-crash-with-u-option.patch and
    dmidecode-fix-the-condition-error-in-ascii_filter.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1662724800">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1678968000">- Update to upstream version 3.5:
  * Decode HPE OEM records 216, 224, 230, 238 and 242.
  * Fortify entry point length checks.
  * Add a --no-quirks option.
  * Drop the CPUID exception list.
  * Do not let --dump-bin overwrite an existing file.
  * Ensure /dev/mem is a character device file.
  * Obsoletes news-fix-typo.patch and
    dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1679313600">- arm-use-alignment-workaround.patch: Fix the massive build
  warnings on armv7l.</changelog>
  <changelog author="jdelvare@suse.de" date="1680523200">- dmioem-hpe-oem-record-237-firmware-change.patch: Fix the decoding
  of the last field of HPE OEM record type 237 (DIMM Vendor
  Information).</changelog>
  <changelog author="jdelvare@suse.de" date="1682596800">Fix a potential regression:
- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes.</changelog>
  <changelog author="jdelvare@suse.com" date="1722254400">- Update to upstream version 3.6 (jsc#PED-8647):
  * Support for SMBIOS 3.6.0. This includes new memory device types, new
    processor upgrades, and Loongarch support.
  * Support for SMBIOS 3.7.0. This includes new port types, new processor
    upgrades, new slot characteristics and new fields for memory modules.
  * Add bash completion.
  * Decode HPE OEM records 197, 239 and 245.
  * Implement options --list-strings and --list-types.
  * Update HPE OEM records 203, 212, 216, 221, 233, 236, 238 and 242.
  * Update Redfish support.
  * Bug fixes:
    Fix enabled slot characteristics not being printed
  * Minor improvements:
    Print slot width on its own line
    Use standard strings for slot width
  * Obsoletes arm-use-alignment-workaround.patch,
    dmioem-hpe-oem-record-237-firmware-change.patch and
    use-read_file-to-read-from-dump.patch.
  Update for HPE servers from upstream:
- dmioem-update-hpe-oem-type-238.patch: Decode PCI bus segment in
  HPE type 238 records.
- Drop legacy Provides: and Obsoletes: tags. The split from the
  pmtools package happened 15 years ago so they are no longer
  relevant.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %autosetup to work with rpm-4.20 (bsc#1240154)</changelog>
</package>
<package pkgid="e98088cda4e931bf25fe0bef91a2bc8f84c9cd0a08d43f56bcd0aceae90f72d3f68d41077158d787ece761083043bd302bf4ca4a60e96b16a795ae5620a65fa3" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.90" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1649160000">- bsc#1197872, CVE-2022-0934, dnsmasq-CVE-2022-0934.patch:
  Heap use after free in dhcp6_no_relay</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Move the dbus-1 system.d file to /usr (bsc#1200344)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1662724800">- Ensure the dnsmasq user's group is used
- Remove nogroup requirement</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 2.87 (bsc#1197872, CVE-2022-0934):
  * Allow arbitrary prefix lengths in --rev-server and
  - -domain=....,local
  * Replace --address=/#/..... functionality which got
    missed in the 2.86 domain search rewrite.
  * Add --nftset option, like --ipset but for the newer nftables.
  * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6
    addresses from DNS answers.
  * Fix crash doing netbooting when --port is set to zero
    to disable the DNS server. Thanks to Drexl Johannes
    for the bug report.
  * Generalise --dhcp-relay. Sending via broadcast/multicast is
    now supported for both IPv4 and IPv6 and the configuration
    syntax made easier (but backwards compatible).
  * Add snooping of IPv6 prefix-delegations to the DHCP-relay system.
  * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated
    as hex, the pattern must consist of only hex digits AND contain
    at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped
    over a pattern consisting of a decimal number which was interpreted
    surprisingly.
  * Include client address in TFTP file-not-found error reports.
    Thanks to Stefan Rink for the initial patch, which has been
    re-worked by me (srk). All bugs mine.
  * Note in manpage the change in behaviour of -address. This behaviour
    actually changed in v2.86, but was undocumented there. From 2.86 on,
    (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other
    types of query will be sent upstream. Pre 2.86, that would catch the
    whole example.com domain and queries for other types would get
    a local NODATA answer. The pre-2.86 behaviour is still available,
    by configuring --address=/example.com/1.2.3.4 --local=/example.com/
  * Fix problem with binding DHCP sockets to an individual interface.
    Despite the fact that the system call tales the interface _name_ as
    a parameter, it actually, binds the socket to interface _index_.
    Deleting the interface and creating a new one with the same name
    leaves the socket bound to the old index. (Creating new sockets
    always allocates a fresh index, they are not reused). We now
    take this behaviour into account and keep up with changing indexes.
  * Add --conf-script configuration option.
  * Enhance --domain to accept, for instance,
  - -domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain
    which relects the interface they are attached to in a way which
    doesn't require hard-coding addresses. Thanks to Sten Spans for
    the idea.
  * Fix write-after-free error in DHCPv6 server code.
    CVE-2022-0934 refers.
  * Add the ability to specify destination port in
    DHCP-relay mode. This change also removes a previous bug
    where --dhcp-alternate-port would affect the port used
    to relay _to_ as well as the port being listened on.
    The new feature allows configuration to provide bug-for-bug
    compatibility, if required. Thanks to Damian Kaczkowski
    for the feature suggestion.
  * Bound the value of UDP packet size in the EDNS0 header of
    forwarded queries to the configured or default value of
    edns-packet-max. There's no point letting a client set a larger
    value if we're unable to return the answer. Thanks to Bertie
    Taylor for pointing out the problem and supplying the patch.
- drop dnsmasq-CVE-2022-0934.patch, dnsmasq-resolv-conf.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.88:
  * Fix bug in --dynamic-host when an interface has /16 IPv4
  * address.
  * Add --fast-dns-retry option. This gives dnsmasq the ability
    to originate retries for upstream DNS queries itself, rather
    than relying on the downstream client. This is most useful
    when doing DNSSEC over unreliable upstream networks. It comes
    with some cost in memory usage and network bandwidth.
  * Add --use-stale-cache option. When set, if a DNS name exists
    in the cache, but its time-to-live has expired, dnsmasq will
    return the data anyway.
  * handle removal of whole files or entries within files.</changelog>
  <changelog author="info@paolostivanin.com" date="1675684800">- update to 2.89:
  * Fix bug introduced in 2.88 (commit fe91134b) which can result
    in corruption of the DNS cache internal data structures and
    logging of "cache internal error". This has only been seen
    in one place in the wild, and it took considerable effort
    to even generate a test case to reproduce it, but there's
    no way to be sure it won't strike, and the effect is to break
    the cache badly. Installations with DNSSEC enabled are more
    likely to see the problem, but not running DNSSEC does not
    guarantee that it won't happen. Thanks to Timo van Roermund
    for reporting the bug and for his great efforts in chasing
    it down. (boo#1207174)
- remove no longer needed rpmlintrc filters</changelog>
  <changelog author="max@suse.com" date="1682424000">- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch:
  default maximum EDNS.0 UDP packet size should be 1232</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Correct rundir from /var/run to /run for pid file</changelog>
  <changelog author="kukuk@suse.com" date="1697198400">- SLP got dropped, remove config (bsc#1214884)</changelog>
  <changelog author="max@suse.com" date="1707912000">- update to 2.90:
  * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826:
    Denial Of Service while trying to validate specially crafted
    DNSSEC responses
  * CVE-2023-49441, bsc#1226091: integer overflow via forward_query
  * Fix reversion in --rev-server introduced in 2.88 which caused
    breakage if the prefix length is not exactly divisible by 8
    (IPv4) or 4 (IPv6).
  * Fix possible SEGV when there server(s) for a particular domain
    are configured, but no server which is not qualified for a
    particular domain.
  * Set the default maximum DNS UDP packet sice to 1232.
    Obsoletes: dnsmasq-CVE-2023-28450.patch
  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better
    control over which inetrfaces are providing DHCP service.
  * Fix issue with stale caching
  * Add configurable caching for arbitrary RR-types.
  * Add --filter-rr option, to filter arbitrary RR-types.</changelog>
</package>
<package pkgid="49d5f996d07e09be56792752bacf397e7434b9e76c60b47b2c5b04b059604956726cd23fb19e41d4c032c42482939a7a628443dfbaa2e1f532bd1b57bd605b8b" name="docker" arch="x86_64">
  <version epoch="0" ver="28.5.1_ce" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="ad1c6ccd419a0f8bc483e7a8a3598f43709bf93e2bc128a70ae47fb244f5513cac6bb9f72d493f3a570146de8d0f958358c5a3998b955f51a8fcfe7d7b09d314" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.29.0" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="4fbc1564e0acd41527849d12cc4004d5e28c3675ca553ea8437eab580aa0e483196dbea5b67ebb8ff5c04041cc698b6e8c275de649e83009032dd72c643d9328" name="docker-compose" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="160000.4.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732881600">- Update to version 2.31.0:
  * bump containerd to v1.7,24
  * bump google.golang.org/grpc to v1.68.0
  * build(deps): bump github.com/moby/buildkit from 0.17.1 to
    0.17.2
  * build(deps): bump github.com/compose-spec/compose-go/v2
  * only stop dependent containers ... if there's some
  * disable TestNetworkConfigChanged which is unstable on CI
  * only check attached networks on running containers
  * fix: commit tests
  * feat: add commit command
  * run build tests against bake
  * delegate build to buildx bake
  * build(deps): bump github.com/stretchr/testify from 1.9.0 to
    1.10.0
  * use service.stop to stop dependent containers
  * Update wait-timeout flag usage to include the unit
  * go.mod: github.com/docker/cli v27.4.0-rc.2
  * go.mod: github.com/docker/docker v27.4.0-rc.2
  * go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev)
  * go.mod: github.com/docker/cli v27.4.0-rc.1
  * go.mod: github.com/docker/docker v27.4.0-rc.1
  * Update pkg/compose/convergence.go
  * detect network config changes and recreate if needed
  * go.mod: github.com/docker/buildx v0.18.0
  * go.mod: github.com/moby/buildkit v0.17.1
  * gha: test against docker engine v27.4.0
  * push empty descriptor layer when using OCI version 1.1 for
    Compose artifact it fixes a repository creation issue when
    pushing the 1st time a Compose OCI artifact on the Hub
  * remove ddev e2e tests
  * implement remove-orphans on run
  * ci: enable testifylint linter
  * Emit events for building images
  * Fix compose images that reutn a different image with the same
    ID
  * remove obsolete containers first on scale down
  * pass stal bot inactivity limit from 6 to 3 months
  * fix(config): Print service names with --no-interpolate
  * build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
  * build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1734091200">- Update to version 2.32.0:
  * e2e test for recreate volume
  * build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1
  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0
  * build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
  * prompt user to confirm volume recreation
  * Recreate container on volume configuration change
  * introduce watch restart action
  * bump otel dependencies to v1.28.0 and v0.53.0 to align with
    buildx, buildkit and engine versions
  * bump docker/buildx to latest release
  * fix support for service.mac_address
  * update xx to v1.6.1 for compatibility with alpine 3.21 and file
    5.46+
  * build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0
  * Update pkg/e2e/watch_test.go
  * first watch action for a file event wins
  * fix
  * revisit TestDebounceBatching
  * introduce sync+exec watch action
  * log configuration error as a watch log event
  * do not require a build section but for `rebuild` action
  * pull --quiet should not drop status message, only progress
  * use latest engine tags
  * Bump buildx to 0.19.1
  * be sure everything has been cleanup at the end of each tests
  * add local config.json to test configuration dir if exists
  * disable failing TestBuildSSH test
  * fix build with bake</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1734436800">- Update to version 2.32.1:
  * e2e test to prevent future regression
  * only check volume mounts for updated config</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1736337600">- Update to version 2.32.2:
  * remove engine v25 from e2e test matrix The 1st version
    available for Ubuntu 24.x is Docker Engine v26
  * fix relative path in compose file
  * bump compose-go to v2.4.7
  * replace tibdex/github-app-token by official GitHub
    create-github-app-token
  * bump golang.org/x/net to v0.33.0 to fix potential security
    issue https://github.com/golang/go/issues/70906
  * checkExpectedVolumes must ignore anonymous volumes
  * When retrying to resolveOrCreateNetwork, retry with a valid
    network name
  * only check bind mount conflict if sync action is involved
  * use the 3 latest major versions of the engine to run e2e step
  * bump Golang version to v1.22.10 and update CI actions
  * add --pull to run command
  * CI to validate fmt
  * `make fmt` so any contributor can enforce formatting
  * format code with gofumpt</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1736769600">- Update to version 2.32.3:
  * ci: update bake-action to v6
  * simplification
  * image can be set to a local ID, that isn't a valid docker ref
  * can't render progress concurrently with buildkit
  * exclude one-off container running convergence
  * Only override service mac if set on the main network.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737028800">- Update to version 2.32.4:
  * add missing tag for build during merge workflow
  * ci: re-use local source to build binary images
  * ci: use local source for binary builds</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739361600">- Update to version 2.33.0:
  * Important
  - This release introduce support for Bake to manage builds as
    an alternative to the internal buildkit client. This new
    feature can be enabled by setting COMPOSE_BAKE=1 variable.
    Bake will become the default builder in a future release.
  * Improvements
  - let user know bake is now supported by @ndeloof in #12524
  - support additional_context reference to another service by
    @ndeloof in #12485
  - add support for BUILDKIT_PROGRESS by @ndeloof in #12458
  - add --with-env flag to publish command by @glours in #12482
  - Update ls --quiet help description by @maxproske in #12541
  - Publish warn display env vars by @glours in #12486
  * Fixes
  - Fix bake support by @ndeloof in #12507
  - Update link in stats --help output by @maxproske in #12523
  - Properly handle "builtin" seccomp profile by @r-bk in #12478
  - manage watch applied to mulitple services by @ndeloof in
    [#12469]
  * Internal
  - use main branch for docs upstream validation workflow by
    @crazy-max in #12487
  - fix provenance for binaries and generate sbom by @crazy-max
    in #12479
  - add codeowners file by @glours in #12480
  - remove exit code per error type used by legacy metrics system
    by @ndeloof in #12502
  - Dockerfile: update golangci-lint to v1.63.4 by @thaJeztah in
    [#12546]
  - Full test coverage for compatibility cmd by @maxproske in
    [#12528]
  - don't send raw os.Args to opentelemetry but a pseudo command
    line by @ndeloof in #12530
  - add docker engine v28.x to the test-matrix by @thaJeztah in
    [#12539]
  - enable copyloopvar linter by @thaJeztah in #12542
  - go.mod: remove toolchain directive by @thaJeztah in #12551
  * Dependencies
  - bump buildx v0.20.1 by @ndeloof in #12488
  - bump docker to v27.5.1 by @ndeloof in #12491
  - bump compose-go v2.4.8 by @ndeloof in #12543
  - bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot in
    [#12529]
  - bump github.com/moby/term v0.5.2 by @thaJeztah in #12540
  - bump github.com/otiai10/copy from 1.14.0 to 1.14.1 by
    @dependabot in #12493
  - bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0 by
    @dependabot in #12430
  - bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by
    @dependabot in #12548
  - bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot
    in #12547
  - bump gotest.tools/v3 from 3.5.1 to 3.5.2 by @dependabot in
    [#12549]</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739361601">- remove docker-compose-switch dependency</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740139200">- Update to version 2.33.1:
  * Improvements
  - Add support for gw_priority, enable_ipv4 (requires docker
    v28.0) by @thaJeztah in #12570
  * Fixes
  - Run watch standalone if menu fails to start by @ndeloof in
    [#12536]
  - Report error using non-file secret|config with read-only
    service by @ndeloof in #12531
  - Don't display bake suggestion when using --progress with
    quiet or json option by @glours in #12561
  - Fix pull --parallel and --no-parallel deprecation warnings
    missing by @maxproske in #12555
  - Fix error message when detach is implied by wait by @ndeloof
    in #12566
  * Dependencies
  - build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1
    by @dependabot in #12556
  - build(deps): bump google.golang.org/grpc from 1.68.1 to
    1.70.0 by @dependabot in #12494
  - go.mod: update to docker v28.0.0 by @thaJeztah in #12545</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1771848000">- Add patch for CVE-2025-47914 (bsc#1254041), CVE-2025-47913 (bsc#1253584):
  * 0001-CVE-2025-47913-CVE-2025-47914-ssh-agent-fixes.patch
- Add patch for CVE-2025-62725 (bsc#1252752)
  * 0002-CVE-2025-62725-fix-Enforce-compose-files-from-OCI-ar.patch</changelog>
</package>
<package pkgid="f122571357d76bf267faec7aa007293133d8de333b37eef8ca193218e0bc32c4cc951a6c7c0fabd5a95fec828222a362f467bfd5e09cf13a4f46b763580642c2" name="dosfstools" arch="x86_64">
  <version epoch="0" ver="4.2" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="lnussel@suse.de" date="1605009600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="mcepl@cepl.eu" date="1610712000">- Update to version 4.1+git.1610658652.9443732 (bsc#1172863):
  * testsuite: Add mkfs test for 600MB large 4K disk
  * mkfs.fat: Do not show verbose messages not relevant to selected FAT size
  * mkfs.fat: Fix text of verbose messages
  * mkfs.fat: Fix limits for number of clusters
  * mkfs.fat: Fix calculation of FAT32 cluster size on non 512 bytes sector disks
  * mkfs.fat: Fix printing number of sectors
  * mkfs.fat: Align total number of sectors to be multiple of sectors per track
  * testsuite: Add referenceFAT32mbr test data to dist_check_DATA
  * manpages: Escape dot in fsck.fat manpage at the beginning of the line
  * fsck.fat: properly check for valid "." and ".." entries</changelog>
  <changelog author="dmueller@suse.com" date="1612267200">- update to 4.2:
  * mkfs.fat: Allow to specify disk geometry via new -g option
  * fsck.fat: Add code for fixing first FAT cluster
  * fatlabel: Do not call parts of fsck repair procedure
  * Update warning message about lowercase labels
  * mkfs.fat: Read geom_start from sysfs
  * Add missing files into distribution tarball
- BREAKING CHANGES (boo#1188401):
  After fixing of bsc#1172863 in the last update, mkfs started to
  create different images than before. Applications that depend on
  exact FAT file format (e. g. embedded systems) may be broken in
  two ways:
  * The introduction of the alignment may create smaller images
    than before, with a different positions of important image
    elements. It can break existing software that expect images in
    doststools &lt;= 4.1 style.
    To work around these problems, use "-a" command line argument.
  * The new image may contain a different geometry values. Geometry
    sensitive applications expecting doststools &lt;= 4.1 style images
    can fails to accept different geometry values.
    There is no direct work around for this problem. But you can
    take the old image, use "file -s $IMAGE", check its
    "sectors/track" and "heads", and use them in the newly
    introduced "-g" command line argument.</changelog>
  <changelog author="dimstar@opensuse.org" date="1643889600">- Drop vim BuildRequires: the test suite passes without it present.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="5339af4dbf7cecf3a306ed055311033d66ab36e74c93cdba2e88967421ab9577d603ce7824518906554c087a4d9f6009053386ff18672a83495a9a7eacf89945" name="dpdk" arch="x86_64">
  <version epoch="0" ver="24.11.4" rel="160000.1.1"/>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
</package>
<package pkgid="d8205a650460bf640dc9ee47cce59d56d726ed05f8d5789f0ab6c6e6c8796771e56b1f63c58241698477f171fb4abcaca3dc2c8b0057bbc389c0ae73026acbd6" name="dracut" arch="x86_64">
  <version epoch="0" ver="059+suse.717.g75494a30" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
</package>
<package pkgid="7691a19029655b1357f0a9777faa16926125f7345230690c5b0f9bc9688742f002c96e4d17707b626733a12208d98336b605b28b241e8ef49afd717c7b506b8a" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="059+suse.717.g75494a30" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
</package>
<package pkgid="4653c5d6d7a1d294c12698fc1b3ce3da549014c37a9be4b7a300d718dab397a2677e843cebba664efe6bb1eeffa25daa8af5a435e4e8707bea15424914e1f8c2" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763380800">- Fixed spec file requires
  The package requirement for binutils was set to TW (&gt;=1650)
  only but is also required for SLES16/Leap16 which is 1600
  This commit fixes the condition to match with all required
  distributions and fixes bsc#1253637</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763985600">- Delete workflows conflicting with upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1767960000">- Fixed ramdisk sysroot generator
  Do not use a custom _dev name and stick with the UUID representation
  of the disk image in RAM after deployment. Former versions of udev
  did not create a by-uuid device representation which now seems to
  have changed. This then leads to the device name RamDisk_rootfs
  not being created the and respective .device unit times out.
  In addition the timer unit for the standard device representation
  changed to infinity. This fixes bsc#1254116</changelog>
</package>
<package pkgid="06fee661ce9e9b89edceee6bdbca173b6f8611523d06c7e5381a8f17d02f73d945b82c442fe75e8045684461570ebd593b85058792b09a10c417cfd5fcf36317" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763380800">- Fixed spec file requires
  The package requirement for binutils was set to TW (&gt;=1650)
  only but is also required for SLES16/Leap16 which is 1600
  This commit fixes the condition to match with all required
  distributions and fixes bsc#1253637</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763985600">- Delete workflows conflicting with upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1767960000">- Fixed ramdisk sysroot generator
  Do not use a custom _dev name and stick with the UUID representation
  of the disk image in RAM after deployment. Former versions of udev
  did not create a by-uuid device representation which now seems to
  have changed. This then leads to the device name RamDisk_rootfs
  not being created the and respective .device unit times out.
  In addition the timer unit for the standard device representation
  changed to infinity. This fixes bsc#1254116</changelog>
</package>
<package pkgid="9c2a6f4c4c8b0a2c050ed83db4981e71c57601db9367fd3bc9bcc27c20f7694f035e050dc7986c0597ae30e009bdcc0c3e91fc2a88d43d42a854cdcd77976115" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763380800">- Fixed spec file requires
  The package requirement for binutils was set to TW (&gt;=1650)
  only but is also required for SLES16/Leap16 which is 1600
  This commit fixes the condition to match with all required
  distributions and fixes bsc#1253637</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763985600">- Delete workflows conflicting with upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1767960000">- Fixed ramdisk sysroot generator
  Do not use a custom _dev name and stick with the UUID representation
  of the disk image in RAM after deployment. Former versions of udev
  did not create a by-uuid device representation which now seems to
  have changed. This then leads to the device name RamDisk_rootfs
  not being created the and respective .device unit times out.
  In addition the timer unit for the standard device representation
  changed to infinity. This fixes bsc#1254116</changelog>
</package>
<package pkgid="ab3a5176237d4fe135ec4628c5265bd2e7cdbac85403f263ac115b4e49c751acf662319971fb82a2778bc7cb2042f677035b6a71d20c3db5c41aad2444c75ff8" name="dracut-transactional-update" arch="x86_64">
  <version epoch="0" ver="5.0.7" rel="160000.1.2"/>
  <changelog author="iforster@suse.com" date="1736683200">- Version 5.0.0
  - Rework /etc handling; instead of maintaining complex overlay
    mount layers use a btrfs subvolume of the corresponding
    snapshot instead.
    Syncing changes before the reboot will be done by during boot
    (or during apply) by transactional-update-sync-etc-state
    instead. [jsc#SMO-367]
    Also resolves: [boo#1140472],
    [gh#openSUSE/transactional-update#117]
  - Add EXPERIMENTAL support for performing updates using a
    container image [gh#openSUSE/transactional-update#128]. Note
    that this command is only available via
    `transactional-update apply-oci ...` for now and cannot be
    triggered from the API or D-Bus interface. Moreover the syntax
    may and probably will change in future releases.
  - Removed `status` command - it was disabled by default for a
    long time already and unmaintained
  - tukit: Fix snippet directory in man page
  - t-u: Don't apply again if snapshot is current already
  - t-u: Prevent self-updates between major t-u versions because
    these usually require additional files
  - Fix missing files when using `make dist`
  - Unified Copyright headers
  - Make Bash scripts shellcheck compatible
  - Replace tabs with spaces in Shell scripts to avoid the complex
    tab / space changes
  - Various other minor internal optimizations and fixes</changelog>
  <changelog author="fvogt@suse.com" date="1744113600">- Version 5.0.1
  - Fix path to rebootmgrctl [bsc#1236908]</changelog>
  <changelog author="fvogt@suse.com" date="1744891200">- Version 5.0.2
  - Fix continuing from an already booted snapshot
  - Fix check for overlayfs when using tukit open with --discard</changelog>
  <changelog author="fvogt@suse.com" date="1745496000">- Version 5.0.3
  - When continuing a transaction that was based on the running
    system, sync new changes from /etc into the new snapshot.
    This way it behaves as-if the snapshot was booted into
    before continuing the transaction, which matches the
    behaviour of versions &lt; 5.0.
  - Fix syncing of file times and ownership
  - Do not sync /etc/etc.syncpoint/ into the running system
    (or parent snapshot) when using --discard</changelog>
  <changelog author="fvogt@suse.com" date="1749729600">- Version 5.0.4
  - Don't override soft-reboot with hard reboot
  - Fix stdio when returning from selfupdate [boo#1243910],
    [gh#openSUSE/transactional-update#151]</changelog>
  <changelog author="iforster@suse.com" date="1750420800">- Add correct SELinux policy version dependency for SLE 16</changelog>
  <changelog author="iforster@suse.com" date="1751630400">- Version 5.0.5
  - Add support for kdump 2.1.0 [bsc#1243758]
  - Integrate test to support `make check`</changelog>
  <changelog author="iforster@suse.com" date="1752062400">- Version 5.0.6
  - Fix missing x-initrd.mount in fstab on migration [boo#1246139]
    When migrating overlayfs based /etc to btrfs subvolumes, then
    the attribute was not set - this may result in failures from
    services operating on /etc during initrd phase such as SELinux
    relabelling
  - Optimize execution time of tests</changelog>
  <changelog author="iforster@suse.com" date="1753099200">- Version 5.0.7
  - Add sysext compatibility [bsc#1246140]
  - Fix soft-reboot with btrfs subvolume based /etc
  - Sync /etc layers also on soft-reboot
  - Bind mount /run/systemd/journal to allow log calls
    [gh#openSUSE/transactional-update#149]
  - Use rootlesskit instead of fakeroot for tests
  - Small coding style fixes
- Temporarily disabling the testsuite because it doesn't run in
  the build environment so far</changelog>
  <changelog author="iforster@suse.com" date="1753272000">- Add journalmount.patch to bind mount systemd journal only when
  available</changelog>
</package>
<package pkgid="3fbc9c554bd0b32c3c9de874f5d7df03d61c252f8423ab0bb9a460238882f0c95eb9c0ab37bf74cdfd612e94d2dbd3a0c92ffc9f015d4a06e80bf8c8331fb806" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.1.23" rel="160000.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="glass.su@suse.com" date="1713182400">- drbd: fix build error against kernel v6.8.2 (boo#1222397)
  * add upstream patches
    + 0024-compat-fixup-FMODE_READ-FMODE_WRITE-usage.patch
    + 0025-compat-drdb-Convert-to-use-bdev_open_by_path.patch
    + 0026-compat-gate-blkdev_-patches-behind-bdev_open_by_path.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1718798400">- drbd: fix build error against kernel v6.9.3 (boo#1226510)
  * add patch
    + bsc1226510-fix-build-err-against-6.9.3.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1723464000">- drbd: fix build error against kernel v6.10.3 (boo#1229062)
  * add patch
    + boo1229062-re-enable-blk_queue_max_hw_sectors.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1726574400">- drbdadm down fails to remove sysfs holder file (boo#1230635)
  * add patch
    + boo1230635_01-compat-fix-nla_nest_start_noflag-test.patch
    + boo1230635_02-drbd-port-block-device-access-to-file.patch
  * update patch
    + bsc1226510-fix-build-err-against-6.9.3.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1728648000">- Update DRBD version from 9.1.16 to 9.1.22
  * Changelog from Linbit:
    9.1.22 (api:genl2/proto:86-121/transport:18)
  - -------
  * Upgrade from partial resync to a full resync if necessary when the
    user manually resolves a split-brain situation
  * Fix a potential NULL deref when a disk fails while doing a
    forget-peer operation.
  * Fix a rcu_read_lock()/rcu_read_unlock() imbalance
  * Restart the open() syscall when a process auto promoting a drbd device gets
    interrupted by a signal
  * Remove a deadlock that caused DRBD to connect sometimes
    exceptionally slow
  * Make detach operations interruptible
  * Added dev_is_open to events2 status information
  * Improve log readability for 2PC state changes and drbd-threads
  * Updated compability code for Linux 6.9
    9.1.21 (api:genl2/proto:86-121/transport:18)
  - -------
  * fix a deadlock that can trigger when deleting a connection and
    another connection going down in parallel. This is a regression of
    9.1.20
  * Fix an out-of-bounds access when scanning the bitmap. It leads to a
    crash when the bitmap ends on a page boundary, and this is also a
    regression in 9.1.20.
    9.1.20 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fix a kernel crash that is sometimes triggered when downing drbd
    resources in a specific, unusual order (was triggered by the
    Kubernetes CSI driver)
  * Fix a rarely triggering kernel crash upon adding paths to a
    connection by rehauling the path lists' locking
  * Fix the continuation of an interrupted initial resync
  * Fix the state engine so that an incapable primary does not outdate
    indirectly reachable secondary nodes
  * Fix a logic bug that caused drbd to pretend that a peer's disk is
    outdated when doing a manual disconnect on a down connection; with
    that cured impact on fencing and quorum.
  * Fix forceful demotion of suspended devices
  * Rehaul of the build system to apply compatibility patches out of
    place that allows one to build for different target kernels from a
    single drbd source tree
  * Updated compability code for Linux 6.8
    9.1.19 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fix a resync decision case where drbd wrongly decided to do a full
    resync, where a partial resync was sufficient; that happened in a
    specific connect order when all nodes were on the same data
    generation (UUID)
  * Fix the online resize code to obey cached size information about
    temporal unreachable nodes
  * Fix a rare corner case in which DRBD on a diskless primary node
    failed to re-issue a read request to another node with a backing
    disk upon connection loss on the connection where it shipped the
    read request initially
  * Make timeout during promotion attempts interruptible
  * No longer write activity-log updates on the secondary node in a
    cluster with precisely two nodes with backing disk; this is a
    performance optimization
  * Reduce CPU usage of acknowledgment processing
    9.1.18 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fixed connecting nodes with differently sized backing disks,
    specifically when the smaller node is primary, before establishing
    the connections
  * Fixed thawing a device that has I/O frozen after loss of quorum
    when a configuration change eases its quorum requirements
  * Properly fail TLS if requested (only available in drbd-9.2)
  * Fixed a race condition that can cause auto-demote to trigger right
    after an explicit promote
  * Fixed a rare race condition that could mess up the handshake result
    before it is committed to the replication state.
  * Preserve "tiebreaker quorum" over a reboot of the last node (3-node
    clusters only)
  * Update compatibility code for Linux 6.6
    9.1.17 (api:genl2/proto:86-121/transport:18)
  - -------
  * fix a potential crash when configuring drbd to bind to a
    non-existent local IP address (this is a regression of drbd-9.1.8)
  * Cure a very seldom triggering race condition bug during
    establishing connections; when you triggered it, you got an OOPS
    hinting to list corruption
  * fix a race condition regarding operations on the bitmap while
    forgetting a bitmap slot and a pointless warning
  * Fix handling of unexpected (on a resource in secondary role) write
    requests
  * Fix a corner case that can cause a process to hang when closing the
    DRBD device, while a connection gets re-established
  * Correctly block signal delivery during auto-demote
  * Improve the reliability of establishing connections
  * Do not clear the transport with `net-options --set-defaults`. This
    fix avoids unexpected disconnect/connect cycles upon an `adjust`
    when using the 'lb-tcp' or 'rdma' transports in drbd-9.2.
  * New netlink packet to report path status to drbdsetup
  * Improvements to the content and rate-limiting of many log messages
  * Update compatibility code and follow Linux upstream development
    until Linux 6.5
  * remove patches which already included in the new version:
    0001-drbd-allow-transports-to-take-additional-krefs-on-a-.patch
    0002-drbd-improve-decision-about-marking-a-failed-disk-Ou.patch
    0003-drbd-fix-error-path-in-drbd_get_listener.patch
    0004-drbd-build-fix-spurious-re-build-attempt-of-compat.p.patch
    0005-drbd-log-error-code-when-thread-fails-to-start.patch
    0006-drbd-log-numeric-value-of-drbd_state_rv-as-well-as-s.patch
    0007-drbd-stop-defining-__KERNEL_SYSCALLS__.patch
    0008-compat-block-introduce-holder-ops.patch
    0009-drbd-reduce-net_ee-not-empty-info-to-a-dynamic-debug.patch
    0010-drbd-do-not-send-P_CURRENT_UUID-to-DRBD-8-peer-when-.patch
    0011-compat-block-pass-a-gendisk-to-open.patch
    0012-drbd-Restore-DATA_CORKED-and-CONTROL_CORKED-bits.patch
    0013-drbd-remove-unused-extern-for-conn_try_outdate_peer.patch
    0014-drbd-include-source-of-state-change-in-log.patch
    0015-compat-block-use-the-holder-as-indication-for-exclus.patch
    0016-drbd-Fix-net-options-set-defaults-to-not-clear-the-t.patch
    0017-drbd-propagate-exposed-UUIDs-only-into-established-c.patch
    0018-drbd-rework-autopromote.patch
    0019-compat-block-remove-the-unused-mode-argument-to-rele.patch
    0020-drbd-do-not-allow-auto-demote-to-be-interrupted-by-s.patch
    0021-compat-sock-Remove-sendpage-in-favour-of-sendmsg-MSG.patch
    0022-compat-block-replace-fmode_t-with-a-block-specific-t.patch
    0023-compat-genetlink-remove-userhdr-from-struct-genl_inf.patch
    0024-compat-fixup-FMODE_READ-FMODE_WRITE-usage.patch
    0025-compat-drdb-Convert-to-use-bdev_open_by_path.patch
    0026-compat-gate-blkdev_-patches-behind-bdev_open_by_path.patch
    boo1230635_01-compat-fix-nla_nest_start_noflag-test.patch
    boo1230635_02-drbd-port-block-device-access-to-file.patch
  * removed patches which are not needed anymore:
    boo1229062-re-enable-blk_queue_max_hw_sectors.patch
    bsc1226510-fix-build-err-against-6.9.3.patch
  * update:
    drbd_git_revision
    suse-coccinelle.patch
    drbd.spec
  * add upstream patches to align commit 13ada1be201e:
    0001-drbd-properly-rate-limit-resync-progress-reports.patch
    0002-drbd-inherit-history-UUIDs-from-sync-source-when-res.patch
    0003-build-compat-fix-line-offset-in-annotation-pragmas-p.patch
    0004-drbd-fix-exposed_uuid-going-backward.patch
    0005-drbd-Proper-locking-around-new_current_uuid-on-a-dis.patch
    0006-build-CycloneDX-fix-bom-ref-add-purl.patch
    0007-build-Another-update-to-the-spdx-files.patch
    0008-build-generate-spdx.json-not-tag-value-format.patch
    0009-compat-fix-gen_patch_names-for-bdev_file_open_by_pat.patch
    0010-compat-fix-nla_nest_start_noflag-test.patch
    0011-compat-fix-blk_alloc_disk-rule.patch
    0012-drbd-remove-const-from-function-return-type.patch
    0013-drbd-don-t-set-max_write_zeroes_sectors-in-decide_on.patch
    0014-drbd-split-out-a-drbd_discard_supported-helper.patch
    0015-drbd-atomically-update-queue-limits-in-drbd_reconsid.patch
    0016-compat-test-and-patch-for-queue_limits_start_update.patch
    0017-compat-specify-which-essential-change-was-not-made.patch
    0018-gen_patch_names-reorder-blk_mode_t.patch
    0019-compat-fix-blk_queue_update_readahead-patch.patch
    0020-compat-test-and-patch-for-que_limits-max_hw_discard_.patch
    0021-compat-fixup-write_zeroes__no_capable.patch
    0022-compat-fixup-queue_flag_discard__yes_present.patch
    0023-drbd-move-flags-to-queue_limits.patch
    0024-compat-test-and-patch-for-queue_limits.features.patch
    0025-drbd-Annotate-struct-fifo_buffer-with-__counted_by.patch
    0026-compat-test-and-patch-for-__counted_by.patch
    0027-drbd-fix-function-cast-warnings-in-state-machine.patch
    0028-Add-missing-documentation-of-peer_device-parameter-t.patch
    0030-drbd-kref_put-path-when-kernel_accept-fails.patch
    0031-build-fix-typo-in-Makefile.spatch.patch
    0032-drbd-open-do-not-delay-open-if-already-Primary.patch
  * add patch to fix kernel imcompatibility issue (boo#1231290):
    boo1231290_fix_drbd_build_error_against_kernel_v6.11.0.patch</changelog>
  <changelog author="glass.su@suse.com" date="1731326400">- drbd: fix build error against kernel v6.11.6 (boo#1233222)
  * add patch
    + boo1233222_fix_drbd_build_error_against_kernel_v6.11.6.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1733918400">- Update DRBD version from 9.1.22 to 9.1.23 (boo#1234849)
  * Changelog from Linbit:
    9.1.23 (api:genl2/proto:86-101,118-121/transport:18)
  - -------
  * Fix a corner case that can happen when DRBD establishes multiple
    connections in parallel, which could lead one connection to end up in
    an inconsistent replication state of WFBitMapT/Established
  * Fix a corner case in which a reconciliation resync ends up in
    WFBitMapT/Established
  * Restrict protocol compatibility to the most recent 8.4 and 9.0 releases
  * Fix a corner case causing a module ref leak on drbd_transport_tcp;
    if it hits, you can not rmmod it
  * rate-limit resync progress while resync is paused
  * resync-target inherits history UUIDs when resync finishes,
    this can prevent unexpected "unrelared data" events later
  * Updated compatibility code for Linux 6.11 and 6.12
  * remove patches which already included in the new version:
    0001-drbd-properly-rate-limit-resync-progress-reports.patch
    0002-drbd-inherit-history-UUIDs-from-sync-source-when-res.patch
    0003-build-compat-fix-line-offset-in-annotation-pragmas-p.patch
    0004-drbd-fix-exposed_uuid-going-backward.patch
    0005-drbd-Proper-locking-around-new_current_uuid-on-a-dis.patch
    0006-build-CycloneDX-fix-bom-ref-add-purl.patch
    0007-build-Another-update-to-the-spdx-files.patch
    0008-build-generate-spdx.json-not-tag-value-format.patch
    0009-compat-fix-gen_patch_names-for-bdev_file_open_by_pat.patch
    0010-compat-fix-nla_nest_start_noflag-test.patch
    0011-compat-fix-blk_alloc_disk-rule.patch
    0012-drbd-remove-const-from-function-return-type.patch
    0013-drbd-don-t-set-max_write_zeroes_sectors-in-decide_on.patch
    0014-drbd-split-out-a-drbd_discard_supported-helper.patch
    0015-drbd-atomically-update-queue-limits-in-drbd_reconsid.patch
    0016-compat-test-and-patch-for-queue_limits_start_update.patch
    0017-compat-specify-which-essential-change-was-not-made.patch
    0018-gen_patch_names-reorder-blk_mode_t.patch
    0019-compat-fix-blk_queue_update_readahead-patch.patch
    0020-compat-test-and-patch-for-que_limits-max_hw_discard_.patch
    0021-compat-fixup-write_zeroes__no_capable.patch
    0022-compat-fixup-queue_flag_discard__yes_present.patch
    0023-drbd-move-flags-to-queue_limits.patch
    0024-compat-test-and-patch-for-queue_limits.features.patch
    0025-drbd-Annotate-struct-fifo_buffer-with-__counted_by.patch
    0026-compat-test-and-patch-for-__counted_by.patch
    0027-drbd-fix-function-cast-warnings-in-state-machine.patch
    0028-Add-missing-documentation-of-peer_device-parameter-t.patch
    0030-drbd-kref_put-path-when-kernel_accept-fails.patch
    0031-build-fix-typo-in-Makefile.spatch.patch
    0032-drbd-open-do-not-delay-open-if-already-Primary.patch
  * removed patch which is not needed anymore:
    boo1231290_fix_drbd_build_error_against_kernel_v6.11.0.patch
    boo1233222_fix_drbd_build_error_against_kernel_v6.11.6.patch
    bsc-1216666-compat-sock-Remove-sendpage-in-favour-of-sendmsg-MSG.patch
  * update:
    drbd_git_revision
    drbd.spec
  * add upstream patches to align commit d64ebe7eb7df:
    0001-drbd-Fix-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1736337600">- fix the warning of blk_validate_limits when running drbdadm down (boo#1235399)
  * add patch
    boo1235399-fix_the_warning_of_blk_validate_limits.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1737720000">-  drbd failed to build with SLFO kernel candidate (bsc#1235595)
  * update drbd.spec</changelog>
</package>
<package pkgid="6e2311b38b9de782a1d8187c190f2a2e6507b978a8c6dd3aeb60b3646a9c0d95c1af8383312f38dc5aaf1dde4843c6ca426b7635b6a3e9dfb085d8296900fb9b" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.1.23_k6.12.0_160000.5" rel="160000.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="glass.su@suse.com" date="1713182400">- drbd: fix build error against kernel v6.8.2 (boo#1222397)
  * add upstream patches
    + 0024-compat-fixup-FMODE_READ-FMODE_WRITE-usage.patch
    + 0025-compat-drdb-Convert-to-use-bdev_open_by_path.patch
    + 0026-compat-gate-blkdev_-patches-behind-bdev_open_by_path.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1718798400">- drbd: fix build error against kernel v6.9.3 (boo#1226510)
  * add patch
    + bsc1226510-fix-build-err-against-6.9.3.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1723464000">- drbd: fix build error against kernel v6.10.3 (boo#1229062)
  * add patch
    + boo1229062-re-enable-blk_queue_max_hw_sectors.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1726574400">- drbdadm down fails to remove sysfs holder file (boo#1230635)
  * add patch
    + boo1230635_01-compat-fix-nla_nest_start_noflag-test.patch
    + boo1230635_02-drbd-port-block-device-access-to-file.patch
  * update patch
    + bsc1226510-fix-build-err-against-6.9.3.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1728648000">- Update DRBD version from 9.1.16 to 9.1.22
  * Changelog from Linbit:
    9.1.22 (api:genl2/proto:86-121/transport:18)
  - -------
  * Upgrade from partial resync to a full resync if necessary when the
    user manually resolves a split-brain situation
  * Fix a potential NULL deref when a disk fails while doing a
    forget-peer operation.
  * Fix a rcu_read_lock()/rcu_read_unlock() imbalance
  * Restart the open() syscall when a process auto promoting a drbd device gets
    interrupted by a signal
  * Remove a deadlock that caused DRBD to connect sometimes
    exceptionally slow
  * Make detach operations interruptible
  * Added dev_is_open to events2 status information
  * Improve log readability for 2PC state changes and drbd-threads
  * Updated compability code for Linux 6.9
    9.1.21 (api:genl2/proto:86-121/transport:18)
  - -------
  * fix a deadlock that can trigger when deleting a connection and
    another connection going down in parallel. This is a regression of
    9.1.20
  * Fix an out-of-bounds access when scanning the bitmap. It leads to a
    crash when the bitmap ends on a page boundary, and this is also a
    regression in 9.1.20.
    9.1.20 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fix a kernel crash that is sometimes triggered when downing drbd
    resources in a specific, unusual order (was triggered by the
    Kubernetes CSI driver)
  * Fix a rarely triggering kernel crash upon adding paths to a
    connection by rehauling the path lists' locking
  * Fix the continuation of an interrupted initial resync
  * Fix the state engine so that an incapable primary does not outdate
    indirectly reachable secondary nodes
  * Fix a logic bug that caused drbd to pretend that a peer's disk is
    outdated when doing a manual disconnect on a down connection; with
    that cured impact on fencing and quorum.
  * Fix forceful demotion of suspended devices
  * Rehaul of the build system to apply compatibility patches out of
    place that allows one to build for different target kernels from a
    single drbd source tree
  * Updated compability code for Linux 6.8
    9.1.19 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fix a resync decision case where drbd wrongly decided to do a full
    resync, where a partial resync was sufficient; that happened in a
    specific connect order when all nodes were on the same data
    generation (UUID)
  * Fix the online resize code to obey cached size information about
    temporal unreachable nodes
  * Fix a rare corner case in which DRBD on a diskless primary node
    failed to re-issue a read request to another node with a backing
    disk upon connection loss on the connection where it shipped the
    read request initially
  * Make timeout during promotion attempts interruptible
  * No longer write activity-log updates on the secondary node in a
    cluster with precisely two nodes with backing disk; this is a
    performance optimization
  * Reduce CPU usage of acknowledgment processing
    9.1.18 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fixed connecting nodes with differently sized backing disks,
    specifically when the smaller node is primary, before establishing
    the connections
  * Fixed thawing a device that has I/O frozen after loss of quorum
    when a configuration change eases its quorum requirements
  * Properly fail TLS if requested (only available in drbd-9.2)
  * Fixed a race condition that can cause auto-demote to trigger right
    after an explicit promote
  * Fixed a rare race condition that could mess up the handshake result
    before it is committed to the replication state.
  * Preserve "tiebreaker quorum" over a reboot of the last node (3-node
    clusters only)
  * Update compatibility code for Linux 6.6
    9.1.17 (api:genl2/proto:86-121/transport:18)
  - -------
  * fix a potential crash when configuring drbd to bind to a
    non-existent local IP address (this is a regression of drbd-9.1.8)
  * Cure a very seldom triggering race condition bug during
    establishing connections; when you triggered it, you got an OOPS
    hinting to list corruption
  * fix a race condition regarding operations on the bitmap while
    forgetting a bitmap slot and a pointless warning
  * Fix handling of unexpected (on a resource in secondary role) write
    requests
  * Fix a corner case that can cause a process to hang when closing the
    DRBD device, while a connection gets re-established
  * Correctly block signal delivery during auto-demote
  * Improve the reliability of establishing connections
  * Do not clear the transport with `net-options --set-defaults`. This
    fix avoids unexpected disconnect/connect cycles upon an `adjust`
    when using the 'lb-tcp' or 'rdma' transports in drbd-9.2.
  * New netlink packet to report path status to drbdsetup
  * Improvements to the content and rate-limiting of many log messages
  * Update compatibility code and follow Linux upstream development
    until Linux 6.5
  * remove patches which already included in the new version:
    0001-drbd-allow-transports-to-take-additional-krefs-on-a-.patch
    0002-drbd-improve-decision-about-marking-a-failed-disk-Ou.patch
    0003-drbd-fix-error-path-in-drbd_get_listener.patch
    0004-drbd-build-fix-spurious-re-build-attempt-of-compat.p.patch
    0005-drbd-log-error-code-when-thread-fails-to-start.patch
    0006-drbd-log-numeric-value-of-drbd_state_rv-as-well-as-s.patch
    0007-drbd-stop-defining-__KERNEL_SYSCALLS__.patch
    0008-compat-block-introduce-holder-ops.patch
    0009-drbd-reduce-net_ee-not-empty-info-to-a-dynamic-debug.patch
    0010-drbd-do-not-send-P_CURRENT_UUID-to-DRBD-8-peer-when-.patch
    0011-compat-block-pass-a-gendisk-to-open.patch
    0012-drbd-Restore-DATA_CORKED-and-CONTROL_CORKED-bits.patch
    0013-drbd-remove-unused-extern-for-conn_try_outdate_peer.patch
    0014-drbd-include-source-of-state-change-in-log.patch
    0015-compat-block-use-the-holder-as-indication-for-exclus.patch
    0016-drbd-Fix-net-options-set-defaults-to-not-clear-the-t.patch
    0017-drbd-propagate-exposed-UUIDs-only-into-established-c.patch
    0018-drbd-rework-autopromote.patch
    0019-compat-block-remove-the-unused-mode-argument-to-rele.patch
    0020-drbd-do-not-allow-auto-demote-to-be-interrupted-by-s.patch
    0021-compat-sock-Remove-sendpage-in-favour-of-sendmsg-MSG.patch
    0022-compat-block-replace-fmode_t-with-a-block-specific-t.patch
    0023-compat-genetlink-remove-userhdr-from-struct-genl_inf.patch
    0024-compat-fixup-FMODE_READ-FMODE_WRITE-usage.patch
    0025-compat-drdb-Convert-to-use-bdev_open_by_path.patch
    0026-compat-gate-blkdev_-patches-behind-bdev_open_by_path.patch
    boo1230635_01-compat-fix-nla_nest_start_noflag-test.patch
    boo1230635_02-drbd-port-block-device-access-to-file.patch
  * removed patches which are not needed anymore:
    boo1229062-re-enable-blk_queue_max_hw_sectors.patch
    bsc1226510-fix-build-err-against-6.9.3.patch
  * update:
    drbd_git_revision
    suse-coccinelle.patch
    drbd.spec
  * add upstream patches to align commit 13ada1be201e:
    0001-drbd-properly-rate-limit-resync-progress-reports.patch
    0002-drbd-inherit-history-UUIDs-from-sync-source-when-res.patch
    0003-build-compat-fix-line-offset-in-annotation-pragmas-p.patch
    0004-drbd-fix-exposed_uuid-going-backward.patch
    0005-drbd-Proper-locking-around-new_current_uuid-on-a-dis.patch
    0006-build-CycloneDX-fix-bom-ref-add-purl.patch
    0007-build-Another-update-to-the-spdx-files.patch
    0008-build-generate-spdx.json-not-tag-value-format.patch
    0009-compat-fix-gen_patch_names-for-bdev_file_open_by_pat.patch
    0010-compat-fix-nla_nest_start_noflag-test.patch
    0011-compat-fix-blk_alloc_disk-rule.patch
    0012-drbd-remove-const-from-function-return-type.patch
    0013-drbd-don-t-set-max_write_zeroes_sectors-in-decide_on.patch
    0014-drbd-split-out-a-drbd_discard_supported-helper.patch
    0015-drbd-atomically-update-queue-limits-in-drbd_reconsid.patch
    0016-compat-test-and-patch-for-queue_limits_start_update.patch
    0017-compat-specify-which-essential-change-was-not-made.patch
    0018-gen_patch_names-reorder-blk_mode_t.patch
    0019-compat-fix-blk_queue_update_readahead-patch.patch
    0020-compat-test-and-patch-for-que_limits-max_hw_discard_.patch
    0021-compat-fixup-write_zeroes__no_capable.patch
    0022-compat-fixup-queue_flag_discard__yes_present.patch
    0023-drbd-move-flags-to-queue_limits.patch
    0024-compat-test-and-patch-for-queue_limits.features.patch
    0025-drbd-Annotate-struct-fifo_buffer-with-__counted_by.patch
    0026-compat-test-and-patch-for-__counted_by.patch
    0027-drbd-fix-function-cast-warnings-in-state-machine.patch
    0028-Add-missing-documentation-of-peer_device-parameter-t.patch
    0030-drbd-kref_put-path-when-kernel_accept-fails.patch
    0031-build-fix-typo-in-Makefile.spatch.patch
    0032-drbd-open-do-not-delay-open-if-already-Primary.patch
  * add patch to fix kernel imcompatibility issue (boo#1231290):
    boo1231290_fix_drbd_build_error_against_kernel_v6.11.0.patch</changelog>
  <changelog author="glass.su@suse.com" date="1731326400">- drbd: fix build error against kernel v6.11.6 (boo#1233222)
  * add patch
    + boo1233222_fix_drbd_build_error_against_kernel_v6.11.6.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1733918400">- Update DRBD version from 9.1.22 to 9.1.23 (boo#1234849)
  * Changelog from Linbit:
    9.1.23 (api:genl2/proto:86-101,118-121/transport:18)
  - -------
  * Fix a corner case that can happen when DRBD establishes multiple
    connections in parallel, which could lead one connection to end up in
    an inconsistent replication state of WFBitMapT/Established
  * Fix a corner case in which a reconciliation resync ends up in
    WFBitMapT/Established
  * Restrict protocol compatibility to the most recent 8.4 and 9.0 releases
  * Fix a corner case causing a module ref leak on drbd_transport_tcp;
    if it hits, you can not rmmod it
  * rate-limit resync progress while resync is paused
  * resync-target inherits history UUIDs when resync finishes,
    this can prevent unexpected "unrelared data" events later
  * Updated compatibility code for Linux 6.11 and 6.12
  * remove patches which already included in the new version:
    0001-drbd-properly-rate-limit-resync-progress-reports.patch
    0002-drbd-inherit-history-UUIDs-from-sync-source-when-res.patch
    0003-build-compat-fix-line-offset-in-annotation-pragmas-p.patch
    0004-drbd-fix-exposed_uuid-going-backward.patch
    0005-drbd-Proper-locking-around-new_current_uuid-on-a-dis.patch
    0006-build-CycloneDX-fix-bom-ref-add-purl.patch
    0007-build-Another-update-to-the-spdx-files.patch
    0008-build-generate-spdx.json-not-tag-value-format.patch
    0009-compat-fix-gen_patch_names-for-bdev_file_open_by_pat.patch
    0010-compat-fix-nla_nest_start_noflag-test.patch
    0011-compat-fix-blk_alloc_disk-rule.patch
    0012-drbd-remove-const-from-function-return-type.patch
    0013-drbd-don-t-set-max_write_zeroes_sectors-in-decide_on.patch
    0014-drbd-split-out-a-drbd_discard_supported-helper.patch
    0015-drbd-atomically-update-queue-limits-in-drbd_reconsid.patch
    0016-compat-test-and-patch-for-queue_limits_start_update.patch
    0017-compat-specify-which-essential-change-was-not-made.patch
    0018-gen_patch_names-reorder-blk_mode_t.patch
    0019-compat-fix-blk_queue_update_readahead-patch.patch
    0020-compat-test-and-patch-for-que_limits-max_hw_discard_.patch
    0021-compat-fixup-write_zeroes__no_capable.patch
    0022-compat-fixup-queue_flag_discard__yes_present.patch
    0023-drbd-move-flags-to-queue_limits.patch
    0024-compat-test-and-patch-for-queue_limits.features.patch
    0025-drbd-Annotate-struct-fifo_buffer-with-__counted_by.patch
    0026-compat-test-and-patch-for-__counted_by.patch
    0027-drbd-fix-function-cast-warnings-in-state-machine.patch
    0028-Add-missing-documentation-of-peer_device-parameter-t.patch
    0030-drbd-kref_put-path-when-kernel_accept-fails.patch
    0031-build-fix-typo-in-Makefile.spatch.patch
    0032-drbd-open-do-not-delay-open-if-already-Primary.patch
  * removed patch which is not needed anymore:
    boo1231290_fix_drbd_build_error_against_kernel_v6.11.0.patch
    boo1233222_fix_drbd_build_error_against_kernel_v6.11.6.patch
    bsc-1216666-compat-sock-Remove-sendpage-in-favour-of-sendmsg-MSG.patch
  * update:
    drbd_git_revision
    drbd.spec
  * add upstream patches to align commit d64ebe7eb7df:
    0001-drbd-Fix-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1736337600">- fix the warning of blk_validate_limits when running drbdadm down (boo#1235399)
  * add patch
    boo1235399-fix_the_warning_of_blk_validate_limits.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1737720000">-  drbd failed to build with SLFO kernel candidate (bsc#1235595)
  * update drbd.spec</changelog>
</package>
<package pkgid="317a743b1ac7bd53cbf7778dc261d26d46a4a76f6e7de77a401c8bf9be833d4d58c70cb22ad7a4091aa5251d694393f584db31d58908458e6a937dbc371ac990" name="drbd-selinux" arch="x86_64">
  <version epoch="0" ver="9.29.0" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1731412800">- drbd: Support and adaptations for OCF 1.1 standard (bsc#1233273)
  * bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
  * bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
  * bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1736337600">- Update drbd-utils from 9.25.0 to 9.29.0
  * Changelog from Linbit:
    9.29.0
  - ----------
  * drbdmeta: fix initialization for external md
  * build: allow disbling keyutils
  * tests: export sanitized environment
  * drbdmon: various improvements
  * build: add cyclonedx
  * drbsetup,v9: fix multiple paths drbdsetup show --json
    strictly spreaking breaking change, but maily used internally
  * events2: expose if device is open
  * drbdadm: fix undefined behavior that triggered on amd64
  * shared: fix out-of-bounds access in parsing
  * drbsetup,v9: event consistency with peer devices
  * drbdadm: fix parsing of v8.4 configs for compatibility
  * drbdmeta: fix segfault for check-resize on intentionally diskless
  * drbd-promote@.service: check if ExecCondition is available
    9.28.0
  - ----------
  * events2: set may_promote:no promotion_score:0 while
    force-io-failure:yes
  * drbdsetup,v9: show TLS in connection status
  * drbdsetup,v9: add udev command
  * 8.3: remove
  * crm-fence-peer.9.sh: fixes for pacemaker 2.1.7
  * events2: improved out of order message handling
    9.27.0
  - ----------
  * adjust,v9: retry for diskless primaries
  * tests: sanitize env (e.g., TZ)
  * drbdmeta: dump and restore the members field
    9.26.0
  - ----------
  * config,v9: new config option load-balance-paths
  * config,v9: new config options rdma-ctrls-(snd|rcv)buf-size
  * drbdadm,v9: fix segfault if proxy has no path
  * drbd: increase maximum CPU mask size
  * systemd: introduce drbd-graceful-shutdown.service
  * drbdmeta,v9: fix regression, allow attach after offline resize
  * drbdsetup,v9: add path established information to JSON status
  * events2: terminate on module unload even under --poll
  * events2: specif exit code if module unload
  * docs: add spdx license file
  * drbdmon: various smaller improvements
  * drbdsetup,v9: support for TLS/kTLS
  * remove patches which are already included in upstream code:
    0001-drbdadm-v9-do-not-segfault-when-re-configuring-proxy.patch
    0002-user-drbrdmon-add-missing-stdint.h-includes.patch
    0003-Introduce-default_types.h-header.patch
    bsc-1219263_crm-fence-peer.9.sh-fix-parsing-in_ccm-crmd-fields-o.patch
    bsc-1219263_crm-fence-peer.9.sh-use-join-of-node_state-to-judge-.patch
    bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
    usrmerge_move_lib_to_prefix_lib.patch
  * add upstream patches to align commit 0a014f290802:
    0001-drbd-verify.py-relax-host-key-checking.patch
    0002-DRBDmon-Disabled-DRBD-commands-warning-only-for-actu.patch
    0003-DRBDmon-Integrate-global-local-command-delegation.patch
    0004-DRBDmon-Adjust-events-log-supplier-program-name.patch
    0005-DRBDmon-Add-drbd-events-log-supplier.patch
    0006-DRBDmon-Adjust-Makefile.patch
    0007-DRBDmon-Version-V1R4M1.patch
    0008-drbdadm-add-proxy-options-to-add-connection-command.patch
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
    0010-Fix-typo-in-warning-there-is-no-po4a-translage-comma.patch
    0011-drbd.ocf-explicitly-timeout-crm_master-IPC-early.patch
    0012-drbd.ocf-the-text-output-of-crm_resource-locate-has-.patch
  * update patches according to source code changes:
    bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
    fence-after-pacemaker-down.patch
  * modify upstream patch for passing build:
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
  * add new service:
    drbd-graceful-shutdown.service
  * add new binrary:
    drbd-events-log-supplier</changelog>
  <changelog author="heming.zhao@suse.com" date="1741867200">- drbd_passive resource times out after 10 minutes and drbd device doesn't exist (bsc#1239437)
  * add patch
    + bsc-1239437_drbd.rules-fix-missing-udev-device.patch
  * update drbd.spec
    + remove '--without-83support' from configure, which is not needed anymore</changelog>
  <changelog author="heming.zhao@suse.com" date="1742212800">- Default SELinux Profile prevents configuration of drbd_passive resources in cluster (bsc#1239436)
  * update spec file to create a new package drbd-selinux
  * update patch bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch
  - fix the commit log mistake and typo, no code change</changelog>
  <changelog author="cathy.hu@suse.com" date="1750161600">- Fix SELinux equivalency rules in module (bsc#1242915)
  * add patch
    + 0001-Fix-selinux-policy-for-usr-bin-equivalency-rules.patch
    + 0002-Fix-selinux-module-for-run-lock-equivalency-rules.patch
    + 0003-Fix-selinux-module-for-run-equivalency-rules.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1750161601">- merge upstream patch to fix build error
  * add patch
    + DRBDmon-Add-missing-default_types.h-include-in-strin.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1755259200">- drbd_passive didn't start due to drbd.rules returning error (bsc#1247534)
  * remove patch
  - bsc-1239437_drbd.rules-fix-missing-udev-device.patch
  * add patch
  - bsc-1247534_drbd-didnt-start-due-to-drbd_rules-returning-err.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1755604800">- drbd_passive didn't start due to drbd.rules returning error (bsc#1247534)
  * update patch
  - bsc-1247534_drbd-didnt-start-due-to-drbd_rules-returning-err.patch</changelog>
  <changelog author="cathy.hu@suse.com" date="1763121600">- Allow domtrans from kernel_t to drbd_t (bsc#1252991)
  * add patch
  - 1252991-selinux-domtrans-from-kernel.patch</changelog>
  <changelog author="glass.su@suse.com" date="1763467200">- [SELinux] nfs_drbd: "fence-peer helper broken, returned 0" and nfs WRITE hang when power off the secondary node (bsc#1252991)
  * Update and rename patch
  - bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch
    + bsc-1233273-1252991_drbd.ocf-update-for-OCF-1.1.patch</changelog>
</package>
<package pkgid="d62561f554b80fd0f3e8f9076ca6ca14140122e599636bde25e37a9bb21f29ee14b07e767969fc1817710aa4312eb5c3a4afc06341e0abeb25f19ea22ff979e2" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.29.0" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1731412800">- drbd: Support and adaptations for OCF 1.1 standard (bsc#1233273)
  * bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
  * bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
  * bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1736337600">- Update drbd-utils from 9.25.0 to 9.29.0
  * Changelog from Linbit:
    9.29.0
  - ----------
  * drbdmeta: fix initialization for external md
  * build: allow disbling keyutils
  * tests: export sanitized environment
  * drbdmon: various improvements
  * build: add cyclonedx
  * drbsetup,v9: fix multiple paths drbdsetup show --json
    strictly spreaking breaking change, but maily used internally
  * events2: expose if device is open
  * drbdadm: fix undefined behavior that triggered on amd64
  * shared: fix out-of-bounds access in parsing
  * drbsetup,v9: event consistency with peer devices
  * drbdadm: fix parsing of v8.4 configs for compatibility
  * drbdmeta: fix segfault for check-resize on intentionally diskless
  * drbd-promote@.service: check if ExecCondition is available
    9.28.0
  - ----------
  * events2: set may_promote:no promotion_score:0 while
    force-io-failure:yes
  * drbdsetup,v9: show TLS in connection status
  * drbdsetup,v9: add udev command
  * 8.3: remove
  * crm-fence-peer.9.sh: fixes for pacemaker 2.1.7
  * events2: improved out of order message handling
    9.27.0
  - ----------
  * adjust,v9: retry for diskless primaries
  * tests: sanitize env (e.g., TZ)
  * drbdmeta: dump and restore the members field
    9.26.0
  - ----------
  * config,v9: new config option load-balance-paths
  * config,v9: new config options rdma-ctrls-(snd|rcv)buf-size
  * drbdadm,v9: fix segfault if proxy has no path
  * drbd: increase maximum CPU mask size
  * systemd: introduce drbd-graceful-shutdown.service
  * drbdmeta,v9: fix regression, allow attach after offline resize
  * drbdsetup,v9: add path established information to JSON status
  * events2: terminate on module unload even under --poll
  * events2: specif exit code if module unload
  * docs: add spdx license file
  * drbdmon: various smaller improvements
  * drbdsetup,v9: support for TLS/kTLS
  * remove patches which are already included in upstream code:
    0001-drbdadm-v9-do-not-segfault-when-re-configuring-proxy.patch
    0002-user-drbrdmon-add-missing-stdint.h-includes.patch
    0003-Introduce-default_types.h-header.patch
    bsc-1219263_crm-fence-peer.9.sh-fix-parsing-in_ccm-crmd-fields-o.patch
    bsc-1219263_crm-fence-peer.9.sh-use-join-of-node_state-to-judge-.patch
    bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
    usrmerge_move_lib_to_prefix_lib.patch
  * add upstream patches to align commit 0a014f290802:
    0001-drbd-verify.py-relax-host-key-checking.patch
    0002-DRBDmon-Disabled-DRBD-commands-warning-only-for-actu.patch
    0003-DRBDmon-Integrate-global-local-command-delegation.patch
    0004-DRBDmon-Adjust-events-log-supplier-program-name.patch
    0005-DRBDmon-Add-drbd-events-log-supplier.patch
    0006-DRBDmon-Adjust-Makefile.patch
    0007-DRBDmon-Version-V1R4M1.patch
    0008-drbdadm-add-proxy-options-to-add-connection-command.patch
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
    0010-Fix-typo-in-warning-there-is-no-po4a-translage-comma.patch
    0011-drbd.ocf-explicitly-timeout-crm_master-IPC-early.patch
    0012-drbd.ocf-the-text-output-of-crm_resource-locate-has-.patch
  * update patches according to source code changes:
    bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
    fence-after-pacemaker-down.patch
  * modify upstream patch for passing build:
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
  * add new service:
    drbd-graceful-shutdown.service
  * add new binrary:
    drbd-events-log-supplier</changelog>
  <changelog author="heming.zhao@suse.com" date="1741867200">- drbd_passive resource times out after 10 minutes and drbd device doesn't exist (bsc#1239437)
  * add patch
    + bsc-1239437_drbd.rules-fix-missing-udev-device.patch
  * update drbd.spec
    + remove '--without-83support' from configure, which is not needed anymore</changelog>
  <changelog author="heming.zhao@suse.com" date="1742212800">- Default SELinux Profile prevents configuration of drbd_passive resources in cluster (bsc#1239436)
  * update spec file to create a new package drbd-selinux
  * update patch bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch
  - fix the commit log mistake and typo, no code change</changelog>
  <changelog author="cathy.hu@suse.com" date="1750161600">- Fix SELinux equivalency rules in module (bsc#1242915)
  * add patch
    + 0001-Fix-selinux-policy-for-usr-bin-equivalency-rules.patch
    + 0002-Fix-selinux-module-for-run-lock-equivalency-rules.patch
    + 0003-Fix-selinux-module-for-run-equivalency-rules.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1750161601">- merge upstream patch to fix build error
  * add patch
    + DRBDmon-Add-missing-default_types.h-include-in-strin.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1755259200">- drbd_passive didn't start due to drbd.rules returning error (bsc#1247534)
  * remove patch
  - bsc-1239437_drbd.rules-fix-missing-udev-device.patch
  * add patch
  - bsc-1247534_drbd-didnt-start-due-to-drbd_rules-returning-err.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1755604800">- drbd_passive didn't start due to drbd.rules returning error (bsc#1247534)
  * update patch
  - bsc-1247534_drbd-didnt-start-due-to-drbd_rules-returning-err.patch</changelog>
  <changelog author="cathy.hu@suse.com" date="1763121600">- Allow domtrans from kernel_t to drbd_t (bsc#1252991)
  * add patch
  - 1252991-selinux-domtrans-from-kernel.patch</changelog>
  <changelog author="glass.su@suse.com" date="1763467200">- [SELinux] nfs_drbd: "fence-peer helper broken, returned 0" and nfs WRITE hang when power off the secondary node (bsc#1252991)
  * Update and rename patch
  - bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch
    + bsc-1233273-1252991_drbd.ocf-update-for-OCF-1.1.patch</changelog>
</package>
<package pkgid="a3b05ba6db29c8a44ae3919b724fb8fd3b98d0767629119c2f333d6178cf10e52dda5b6235fb08ef6069540ee9f73f29235cf8a70d1ec8efe5cd828fe319d165" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.47.0" rel="160000.3.2"/>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="lhenriques@suse.com" date="1705060800">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck:
  Suppress "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="00a903810ce958439264ff54cc64c0b70172bfa7326294ffcb2c0896b5c8e48ba98d1a23d7f4ccc132b7edfec3a0b5885885760ab14f77c57cc1489ad154059d" name="efibootmgr" arch="x86_64">
  <version epoch="0" ver="18" rel="160000.2.2"/>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
  <changelog author="glin@suse.com" date="1671537600">- Update to v18
  * fixed the simple run example
  * Restore activation error message in efibootmgr
  * remove-dupes: update error message
  * Fix typo in manual page
  * README: Note efivarfs as the current required kernel module
  * Fix possible read out of bounds in ucs2_to_utf8
  * Add code of conduct
  * Fix help messages
  * Add option for insertion location of new entries
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="39dd2358b4414ad5012f49d926f38421878cc4ee5bcfe2c5240e11c726263c9704f3df73313a517cdfd328d7e5d98cc6ce04b3405fedcf57ba7c747a342e40bc" name="elfutils" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190:
  * libelf: Add RELR support.
  * libdw: Recognize .debug_[ct]u_index sections
  * readelf:
  - Support readelf -Ds, --use-dynamic --symbol.
  - Support .gdb_index version 9
  * scrlines: New tool that compiles a list of source files associated
    with a specified dwarf/elf file.
  * backends: Various LoongArch updates.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove files packaged by elfutils-debuginfod</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734004800">- Add fix-static-linking.patch (bsc#1234445)</changelog>
</package>
<package pkgid="96d46c1e6fdcc27d67b95b38ad3ae9bc7fd20fdbf91e8dc4a027c9214153bb300bed30bb3628196c79b912dac9d00991590a9be97c3f7d56ed7f07af99502f7d" name="envsubst" arch="x86_64">
  <version epoch="0" ver="0.22.5" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dcermak@suse.com" date="1712232000">- Add missing Requires: find to gettext-tools</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Require this-is-only-for-build-envs by the -mini packages: ensure
  those mini packages never find their way onto a system, even when
  published.</changelog>
  <changelog author="dcermak@suse.com" date="1715688000">- Split out envsubst into a separate package
  This allows us to pull in envsubst into containers without enlarging them
  substantially. Additionally, this binary is standalone and useful outside of
  the context of gettext.</changelog>
  <changelog author="schwab@suse.de" date="1716292800">- Require glibc-gconv-modules-extra by the gettext-tools packages</changelog>
  <changelog author="dcermak@suse.com" date="1717502400">- add optional -mini suffix to envsubst package</changelog>
  <changelog author="dimstar@opensuse.org" date="1717675200">- Fix envsubst-mini:
  + Conflicts with the 'full' envsubst
  + Require 'this-is-only-for-build-envs': ensure this does not
    find it's way out of OBS onto installations.</changelog>
  <changelog author="bwiedemann@suse.com" date="1721131200">- Use %autosetup</changelog>
  <changelog author="dcermak@suse.com" date="1726142400">- Move envsubst requires into main package, gettext.sh is not part of
  gettext-tools, but gettext-runtime (fixes boo#1227070)</changelog>
  <changelog author="sbrabec@suse.com" date="1740571200">- Fix crash while handling po files with malformed header and
  process them properly
  (0003-Fix-malformed-header-processing.patch, boo#1227316).</changelog>
</package>
<package pkgid="94d5373e275c196901261d79107b4e600605cf96a12817053ecaa7d80903318c906cce3b00d934c5bb1742876b13c5c9247f623f868cf25274b9a586231ae14b" name="ethtool" arch="x86_64">
  <version epoch="0" ver="6.14" rel="160000.2.2"/>
  <changelog author="mkubecek@suse.cz" date="1688212800">- make ethtool-bash-completion noarch</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212801">- update to upstream release 6.4
  * Feature: get/set Tx push buffer length (-G)
  * Feature: sff-8636 and cmis: report LOL / LOS / Tx Fault (-m)
  * Fix: fix duplex setting parser (-s)
  * Misc: check and require C11 language standard
  * Misc: clean up obsolete pre-build checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1694520000">- update to upstream release 6.5
  * Feature: register dump for hns3 driver (-d)
  * Fix: fix fallback to ioctl for sset (-s)
  * Fix: fix empty slot search in rmgr (-N)</changelog>
  <changelog author="mkubecek@suse.cz" date="1700740800">- update to upstream release 6.6
  * Feature: support for more CMIS transceiver modules (-m)
  * Fix: fix build on systems with old kernel uapi headers</changelog>
  <changelog author="mkubecek@suse.cz" date="1706443200">- update to upstream release 6.7
  * Feature: support for setting TCP data split
  * Fix: fix new gcc14 warning
  * Fix: fix SFF-8472 transceiver module identification (-m)</changelog>
  <changelog author="mkubecek@suse.cz" date="1716465600">- update to upstream release 6.9
  * Feature: support for rx-flow-hash gtp (-N)
  * Feature: support for RSS input transformation (-X)
  * Fix: typo in coalescing output (-c)
  * Fix: document all debugging flags in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1723204800">- update to upstream release 6.10
  * Feature: suport for PoE in PSE (--show-pse and --set-pse)
  * Feature: add statistics support to tsinfo (-T)
  * Feature: add JSON output to base command (no option)
  * Feature: add JSON output to EEE info (--show-eee)
  * Fix: qsfp: better handling on page 03h read failure (-m)
  * Fix: handle zero arguments for module eeprom dump (-m)
  * Fix: check for missing arguments in do_srxfh() (-X)
  * Misc: more descriptive error when JSON output is not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1744804800">- adapt package to git based patch tracking</changelog>
  <changelog author="mkubecek@suse.cz" date="1744804801">- update to upstream release 6.14 (jsc#PED-11353)
  Normally we want the ethtool package version to match kernel
  version but upstream skipped 6.12 and 6.13 versions so that
  version 6.14 is going to be used instead. For list of features
  and fixes between versions 6.10 and 6.14 see the NEWS file in the
  package.</changelog>
  <changelog author="mkubecek@suse.cz" date="1744804802">- fix AppStream metainfo XML file
  * misc-fix-AppStream-metainfo-XML.patch</changelog>
</package>
<package pkgid="967648141367791e1f80807f7556b6b2c4b063d209d99d92136a60966479418ff8743609dc225e653ea6af7666e90679a4ea16dfc24a5dd5cc9b32fc36b41313" name="fcoe-utils" arch="x86_64">
  <version epoch="0" ver="1.0.34" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="lduncan@suse.com" date="1585915200">- Change use of "ifconfig" to "ip", since ifconfig is no
  longer around (bsc#1073886), adding:
  * fcoe-utils-stop-using-ifconfig.patch</changelog>
  <changelog author="lduncan@suse.com" date="1591704000">- Updated with latest upstream v1.0.33 from v1.0.32:
  * Added "-Wextra" and enabled "-Werror" for compiling
  * Ignore auto-generated files
  * Update systemd service files (several updates)
  * A bunch of gcc-10-related fixes, such as marking unused
    arguments, fixing strncpy()s, string truncation/overflow
  * better error handling/retry for link issues (like EBUSY)
  * replace use of "ifconfig" with "ip" in debug scripts
  * fix long-standing issue with netlink buffer resizing
  * move bash completions to proper system directory
  This replaces fcoe-utils-v1.0.32.tar.xz with
  fcoe-utils-v1.0.33.tar.xz, and it does away with the
  following patches, since they are all fixed upstream:
  * 0003-systemctl-cannot-start-fcoemon.socket.patch
  * 0004-fcoemon-Correctly-handle-options-in-the-service-file.patch
  * 0005-fcoe.service-Add-foreground-to-prevent-fcoemon-to-be.patch
  * 0006-fipvlan-fixup-return-value-on-error.patch
  * 0008-Use-correct-socket-for-fcoemon.socket.patch
  * 0012-fcoemon-Retry-fcm_link_getlink-on-EBUSY.patch
  * fcoe-utils-1.0.29-make.patch
  * fcoe-utils-stop-using-ifconfig.patch
  And the following patch was removed because we can
  successfully compile with "-Werror" now:
  * 0009-disable-Werror-building.patch</changelog>
  <changelog author="lduncan@suse.com" date="1594814400">- Handle NIC names longer than 7 characters for the output of
  "fcoeadm -s" output (bsc#1010047), adding patch:
  * Handle-NIC-names-longer-than-7-characters.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1597924800">- Add patch to fix build on architectures where char is
  unsigned (%arm, aarch64):
  * fcoe-utils-fix-arm.patch</changelog>
  <changelog author="lduncan@suse.com" date="1616673600">- Update to version 1.0.34 (fixing bsc#1182804), which replaces the
  source tarball, and removes these two patches, which are fixed
  upstream:
  * Handle-NIC-names-longer-than-7-characters.patch
  * fcoe-utils-fix-arm.patch
  Change summary:
    Chris Leech (6):
  21 string-op truncation, format truncation, and format overflow errors
  use of uninitialized values detected during LTO
  Revert "Make gcc compiler happy about ifname string truncation."
  fix VLAN device name overflow check
  fix regressions caused by safe_makepath change in libopenfcoe.c
  minor fcoeadm output issues
    Guillaume Gardet (1):
  char can be unsigned on arm, so set signed explicitly as the check expects it can be negative
    Lee Duncan (6):
  Handle NIC names longer than 7 characters.
  Change debug-&gt;log message if daemon running
  Remove references to open-fcoe.org
  Fix two gcc-11 compiler warnings.
  Remove comment that doesn't match code.
  Preparing for version v1.0.34
    Lily Nie (1):
  fix one bug introduced by commit b06c3df
    Nitin U. Yewale (1):
  Exit fcoemon command if fcoemon daemon is already running.</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_fcoe.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="lduncan@suse.com" date="1643284800">- Added upstream commit to fix gcc12 warning/errors:
  * fcoe-utils-Fix-GCC-12-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="c6612c333dc210ca224632921e4bda9e5ccf06e674828a46ecb8916aa4b45efe622a6c6a09856cd4ce2c7332b48e006d8269af0e88320f7f27ea8aaf50dce6da" name="fde-tools" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="160000.3.1"/>
  <changelog author="glin@suse.com" date="1741694400">- Add fde-tools-bsc1238593-firstboot-more-bootloader-functions.patch
  to define non-expanded functions for the firstboot script
  (bsc#1238593)</changelog>
  <changelog author="glin@suse.com" date="1747224000">- Add fde-tools-bsc1243166-firstboot-disable-tpm2-when-sb-is-off.patch
  to not skip the encryption process when Secure Boot is off
  (bsc#1243166)</changelog>
  <changelog author="glin@suse.com" date="1747310400">- Update to version 0.7.3
  + Detect the supported RSA key size
  + Take snapshot when signing
  + Switch to "--target-platform" when available
  + Allow RPM_MACRO_DIR to be defined during build time
  + Fix naming and disable ccid
  + tpm: fix tpm-present with the newer pcr-oracle
  + firstboot: make "Pass phrase" mandatory
  + firstboot: disable FDE/TPM2 when secure boot is off
  + Conditional helper
  + firstboot: replace the key file path in crypttab
  + firstboot: add more alias bootloader functions
  + firstboot: detect the early reencryption
- Refresh fde-tools-firstboot-alp-snapshot.patch
- Drop merged patches
  + fde-tools-bsc1213945-set-rsa-key-size.patch
  + fde-tools-bsc1223771-firstboot-make-Pass-phrase-mandatory.patch
  + fde-tools-bsc1223002-firstboot-disable-ccid.patch
  + fde-tools-bsc1218181-replace-crypttab-key-path.patch
  + fde-tools-bsc1220160-conditional-requires.patch
  + fde-tools-change-rpm-macro-dir.patch
  + fde-tools-bsc1243166-firstboot-disable-tpm2-when-sb-is-off.patch
  + fde-tools-bsc1222970-firstboot-replace-ALP.patch
  + fde-tools-bsc1218390-fix-tpm-present-with-the-newer-pcr-oracle.patch
  + fde-tools-bsc1238593-firstboot-more-bootloader-functions.patch
  + fde-tools-bsc1218390-Switch-to-target-platform-when-available.patch</changelog>
  <changelog author="glin@suse.com" date="1749124800">- Add fde-tools-bsc1243877-firstboot-remove-key-conf.patch to
  remove the dracut conf for the key file to avoid the error from
  dracut (bsc#1243877)</changelog>
  <changelog author="glin@suse.com" date="1749643200">- Add fde-tools-bsc1244323-firstboot-fix-lsinitrd.patch to fix the
  empty LUKS header checksum from lsinitrd (bsc#1244323)</changelog>
  <changelog author="glin@suse.com" date="1753185600">- Add fde-tools-bsc1246464-use-default-uefi-boot-path.patch to
  use the default EFI boot path if there is no FILE compoment in
  in the boot entry (bsc#1246464)</changelog>
  <changelog author="glin@suse.com" date="1753790400">- Add the missing /var/log/fde (bsc#1247228)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1764849600">- Build with distro flags</changelog>
  <changelog author="glin@suse.com" date="1767182400">- Add fde-tools.conf to create /var/log/fde with tmpfiles.d
  (jsc#PED-14754)</changelog>
  <changelog author="glin@suse.com" date="1769774400">- Add fde-tools-bsc1248516-tpm-Support-persistent-SRK.patch to
  support persistent SRK (bsc#1248516)</changelog>
</package>
<package pkgid="72ac6020842401608e36bcbfe535e43245a7dfc2836101518646f2251b60161cce291b06d492cd61bd543823a2e85e0aee591c02ae70fbc988e8fe2fb0283d2f" name="fde-tpm-helper" arch="noarch">
  <version epoch="0" ver="0.7.3" rel="160000.3.1"/>
  <changelog author="glin@suse.com" date="1741694400">- Add fde-tools-bsc1238593-firstboot-more-bootloader-functions.patch
  to define non-expanded functions for the firstboot script
  (bsc#1238593)</changelog>
  <changelog author="glin@suse.com" date="1747224000">- Add fde-tools-bsc1243166-firstboot-disable-tpm2-when-sb-is-off.patch
  to not skip the encryption process when Secure Boot is off
  (bsc#1243166)</changelog>
  <changelog author="glin@suse.com" date="1747310400">- Update to version 0.7.3
  + Detect the supported RSA key size
  + Take snapshot when signing
  + Switch to "--target-platform" when available
  + Allow RPM_MACRO_DIR to be defined during build time
  + Fix naming and disable ccid
  + tpm: fix tpm-present with the newer pcr-oracle
  + firstboot: make "Pass phrase" mandatory
  + firstboot: disable FDE/TPM2 when secure boot is off
  + Conditional helper
  + firstboot: replace the key file path in crypttab
  + firstboot: add more alias bootloader functions
  + firstboot: detect the early reencryption
- Refresh fde-tools-firstboot-alp-snapshot.patch
- Drop merged patches
  + fde-tools-bsc1213945-set-rsa-key-size.patch
  + fde-tools-bsc1223771-firstboot-make-Pass-phrase-mandatory.patch
  + fde-tools-bsc1223002-firstboot-disable-ccid.patch
  + fde-tools-bsc1218181-replace-crypttab-key-path.patch
  + fde-tools-bsc1220160-conditional-requires.patch
  + fde-tools-change-rpm-macro-dir.patch
  + fde-tools-bsc1243166-firstboot-disable-tpm2-when-sb-is-off.patch
  + fde-tools-bsc1222970-firstboot-replace-ALP.patch
  + fde-tools-bsc1218390-fix-tpm-present-with-the-newer-pcr-oracle.patch
  + fde-tools-bsc1238593-firstboot-more-bootloader-functions.patch
  + fde-tools-bsc1218390-Switch-to-target-platform-when-available.patch</changelog>
  <changelog author="glin@suse.com" date="1749124800">- Add fde-tools-bsc1243877-firstboot-remove-key-conf.patch to
  remove the dracut conf for the key file to avoid the error from
  dracut (bsc#1243877)</changelog>
  <changelog author="glin@suse.com" date="1749643200">- Add fde-tools-bsc1244323-firstboot-fix-lsinitrd.patch to fix the
  empty LUKS header checksum from lsinitrd (bsc#1244323)</changelog>
  <changelog author="glin@suse.com" date="1753185600">- Add fde-tools-bsc1246464-use-default-uefi-boot-path.patch to
  use the default EFI boot path if there is no FILE compoment in
  in the boot entry (bsc#1246464)</changelog>
  <changelog author="glin@suse.com" date="1753790400">- Add the missing /var/log/fde (bsc#1247228)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1764849600">- Build with distro flags</changelog>
  <changelog author="glin@suse.com" date="1767182400">- Add fde-tools.conf to create /var/log/fde with tmpfiles.d
  (jsc#PED-14754)</changelog>
  <changelog author="glin@suse.com" date="1769774400">- Add fde-tools-bsc1248516-tpm-Support-persistent-SRK.patch to
  support persistent SRK (bsc#1248516)</changelog>
</package>
<package pkgid="e54fea79012ca9db4e1f0d6561a34d23de2511c7d687a5e342925b54ea9528365b4bf0e9b8a8789e56c06b1d0b05d10d74d0a772b75465b4f2aba8640d4a6712" name="fdo-client" arch="x86_64">
  <version epoch="0" ver="1.1.4+git20221209.c8ef757" rel="160000.2.2"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1677758400">- Update to version 1.0.0+git20171208.5da1bad:
  * Use secure functions where appropriate
  * Added extern definition
  * Fix Klocwork Errors
  * Fix output
  * Fix Core Dump in Unit Test
  * Add Makefile
  * publish unit tests
  * strpcpu_s: remove unsed redundant variable overlap_bumper
  * Update LICENSE&amp;COPYING.txt</changelog>
  <changelog author="schubi@suse.com" date="1677758401">- Update to version 1.1.4+git20221209.c8ef757:
  * Readme update (#210)
  * Updating the readme with openssl 1.1.1s (#209)
  * Fix TO when IP/RV is empty string (#208)
  * * Replaced unsafe string function (#207)
  * Increase max message buffer size to 64000 (#205)
  * Update Curl version as 7.86 in Readme (#206)
  * Readme updates (#204)
  * Minimal logs by default (compile time) (#203)
  * Revert openssl3 (#201)
  * Update HTTPS connection to use TLS 1.2 (#196)
  * Openssl 3 porting (#194)
  * Add curl support for HTTP connection (#195)
  * Update NOTICE file (#192)
  * Add CURL support for HTTPS connection (#188)
  * Readme update for installing safestringlib (#191)
  * Updating the readme with openssl 1.1.1q (#187)
  * switch to host.docker.internal (#185)
  * Fix to enable compilation of CSDK in ubuntu 22 (#183)
  * Fix TO when IP is NULL (#184)
  * Update EAT-UEID value as per FIDO working draft specification (#180)
  * Revert "Update EAT-UEID value as per FIDO working draft specification (#178)" (#179)
  * Update EAT-UEID value as per FIDO working draft specification (#178)
  * Updating comments in fdonet.c (#177)
  * Upgrade OpenSSL toolkit version to 1.1.1n (#176)
  * Documentation updates (#175)
  * Add a note regarding fdosys issue (#174)
  * Update Jenkinsfile to copy PRI artifacts from master (#173)
  * Merging 1.1 dev branch to master. (#172)
  * Fix multiple owner support for CSDK devices. (#167)
  * Fix: fdo_sys:exec_cb/exec not working after initial fdo_sys:exec (#166)
  * Add implementation for fdo_sys keep-alive (#165)
  * Fix an issue with keeping in-memory Mfg PublicKey hash (#164)
  * Update/Tweak Device Status and Cred management (#163)
  * Updating EAT IANA numbers as per spec ERRATA (#160)
  * Updating Device ServiceInfo framework to handle writes (#162)
  * Add TPM support on RHEL (#161)
  * Update README for RHEL support (#159)
  * Remove disclaimer from README (#158)</changelog>
  <changelog author="schubi@suse.com" date="1699876800">- Remove build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build using RPM 4.19: builddir does contain the extracted
  tartball, but can also contain special directories used by RPM,
  resolving in globbing to behave differently.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1707825600">- Remove the hardcoded libopenssl-1_1-devel and replace it with
  libopenssl-devel (bsc#1219879).</changelog>
</package>
<package pkgid="481f97aae0fa9cead319f32ced2785bad98b9010961d6adcd2e51f45a2e880f1326cdbe5fef5e1755531aab948bc7b9da4ec23772faed9daad2fd45ca0ce5251" name="fdo-client-devel" arch="x86_64">
  <version epoch="0" ver="1.1.4+git20221209.c8ef757" rel="160000.2.2"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1677758400">- Update to version 1.0.0+git20171208.5da1bad:
  * Use secure functions where appropriate
  * Added extern definition
  * Fix Klocwork Errors
  * Fix output
  * Fix Core Dump in Unit Test
  * Add Makefile
  * publish unit tests
  * strpcpu_s: remove unsed redundant variable overlap_bumper
  * Update LICENSE&amp;COPYING.txt</changelog>
  <changelog author="schubi@suse.com" date="1677758401">- Update to version 1.1.4+git20221209.c8ef757:
  * Readme update (#210)
  * Updating the readme with openssl 1.1.1s (#209)
  * Fix TO when IP/RV is empty string (#208)
  * * Replaced unsafe string function (#207)
  * Increase max message buffer size to 64000 (#205)
  * Update Curl version as 7.86 in Readme (#206)
  * Readme updates (#204)
  * Minimal logs by default (compile time) (#203)
  * Revert openssl3 (#201)
  * Update HTTPS connection to use TLS 1.2 (#196)
  * Openssl 3 porting (#194)
  * Add curl support for HTTP connection (#195)
  * Update NOTICE file (#192)
  * Add CURL support for HTTPS connection (#188)
  * Readme update for installing safestringlib (#191)
  * Updating the readme with openssl 1.1.1q (#187)
  * switch to host.docker.internal (#185)
  * Fix to enable compilation of CSDK in ubuntu 22 (#183)
  * Fix TO when IP is NULL (#184)
  * Update EAT-UEID value as per FIDO working draft specification (#180)
  * Revert "Update EAT-UEID value as per FIDO working draft specification (#178)" (#179)
  * Update EAT-UEID value as per FIDO working draft specification (#178)
  * Updating comments in fdonet.c (#177)
  * Upgrade OpenSSL toolkit version to 1.1.1n (#176)
  * Documentation updates (#175)
  * Add a note regarding fdosys issue (#174)
  * Update Jenkinsfile to copy PRI artifacts from master (#173)
  * Merging 1.1 dev branch to master. (#172)
  * Fix multiple owner support for CSDK devices. (#167)
  * Fix: fdo_sys:exec_cb/exec not working after initial fdo_sys:exec (#166)
  * Add implementation for fdo_sys keep-alive (#165)
  * Fix an issue with keeping in-memory Mfg PublicKey hash (#164)
  * Update/Tweak Device Status and Cred management (#163)
  * Updating EAT IANA numbers as per spec ERRATA (#160)
  * Updating Device ServiceInfo framework to handle writes (#162)
  * Add TPM support on RHEL (#161)
  * Update README for RHEL support (#159)
  * Remove disclaimer from README (#158)</changelog>
  <changelog author="schubi@suse.com" date="1699876800">- Remove build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build using RPM 4.19: builddir does contain the extracted
  tartball, but can also contain special directories used by RPM,
  resolving in globbing to behave differently.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1707825600">- Remove the hardcoded libopenssl-1_1-devel and replace it with
  libopenssl-devel (bsc#1219879).</changelog>
</package>
<package pkgid="26904e9adf60897e4c41262ad7d8a5b322724e6106e69f389c5cb6849526e76f1409f474955a816375271089e72c88e8a6390ecab429b078a376f40c5afb3478" name="file" arch="x86_64">
  <version epoch="0" ver="5.46" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1690545600">- On 32bit systems define _TIME_BITS=64 to make it build</changelog>
  <changelog author="werner@suse.de" date="1690804800">- Add patch file-5.45-type_t.dif
  * Partly upstream check of type_t is wide on 32bit systems
  * Extend (auto)configure to enable wide type_t type if possible</changelog>
  <changelog author="werner@suse.de" date="1708948800">- Prepare for RPM 4.20</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1730980800">- file-seccomp.patch: glibc uses getrandom in malloc, rseq and prctl
  in various other places, allow these syscalls in seccomp filter.</changelog>
  <changelog author="werner@suse.de" date="1732795200">- Update to 5.46:
  * Add OFFPOSITIVE
  * avoid leaking symbols in libmagic
  * PR/562: jsummers: Search/regex offsets are absolute to the
    beginning of the file, so adjust them by subtracting the
    offset that the "use" starts so that we don't double-count it.
  * PR/543: matshch: bump nbuf so we can get the flags into the buffer.
  * Add Android elf notes (enh)
  * Add limit for number of magic warnings allowed
  * check regex bounds (found by clusterfuzz)
- Remove patch file-5.45-type_t.dif now upstream
- Port patches
  * file-4.24-autoconf.dif
  * file-5.17-option.dif
  * file-5.18-javacheck.dif
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.19-zip2.0.dif
  * file-5.22-elf.dif
  * file-5.28-btrfs-image.dif
  * file-5.45-type_t.dif
  * file-secure_getenv.patch
- Port patch file-5.45.dif and rename it to file-5.46.dif
  * Note that our kernel magics do not fit anymore as
    upstream now has a huge rework and extended features</changelog>
  <changelog author="werner@suse.de" date="1740139200">- Add patch boo1237209.patch temporary
  * Fix stack overrun (boo#1237209)</changelog>
  <changelog author="werner@suse.de" date="1742299200">- Add patch file-seccomp-ppc.patch
  * Minimal patch to work around of wrong provide of used TCGETS</changelog>
  <changelog author="werner@suse.de" date="1742385600">- Change patch file-seccomp.patch
  * Remove the dumb prctl allow rule as for glibc malloc the prctl
    PR_SET_VMA with flag PR_SET_VMA_ANON_NAME is already allowed
- Require at build zlib-devel to enable direct uncompresion of
  zip'ed files as well</changelog>
  <changelog author="werner@suse.de" date="1742990400">- baselibs.conf: drop it</changelog>
  <changelog author="munix9@googlemail.com" date="1748174400">- Add file-zipdata.patch
  * Fix "Some zip files are misclassified as data"
    see https://bugs.astron.com/view.php?id=571
    based on https://github.com/file/file/commit/60b2032b96fc185b37fb0f2152e834efb2edad6e</changelog>
</package>
<package pkgid="2f98731ca95a7b451466e0738f402f6977333f58c0f3203d1aeb2c1cf9faea89ec78e4fb18c87e3bd5bfc0577ed4062aab28622933cc01e528c52b358c573457" name="file-magic" arch="noarch">
  <version epoch="0" ver="5.46" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1690545600">- On 32bit systems define _TIME_BITS=64 to make it build</changelog>
  <changelog author="werner@suse.de" date="1690804800">- Add patch file-5.45-type_t.dif
  * Partly upstream check of type_t is wide on 32bit systems
  * Extend (auto)configure to enable wide type_t type if possible</changelog>
  <changelog author="werner@suse.de" date="1708948800">- Prepare for RPM 4.20</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1730980800">- file-seccomp.patch: glibc uses getrandom in malloc, rseq and prctl
  in various other places, allow these syscalls in seccomp filter.</changelog>
  <changelog author="werner@suse.de" date="1732795200">- Update to 5.46:
  * Add OFFPOSITIVE
  * avoid leaking symbols in libmagic
  * PR/562: jsummers: Search/regex offsets are absolute to the
    beginning of the file, so adjust them by subtracting the
    offset that the "use" starts so that we don't double-count it.
  * PR/543: matshch: bump nbuf so we can get the flags into the buffer.
  * Add Android elf notes (enh)
  * Add limit for number of magic warnings allowed
  * check regex bounds (found by clusterfuzz)
- Remove patch file-5.45-type_t.dif now upstream
- Port patches
  * file-4.24-autoconf.dif
  * file-5.17-option.dif
  * file-5.18-javacheck.dif
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.19-zip2.0.dif
  * file-5.22-elf.dif
  * file-5.28-btrfs-image.dif
  * file-5.45-type_t.dif
  * file-secure_getenv.patch
- Port patch file-5.45.dif and rename it to file-5.46.dif
  * Note that our kernel magics do not fit anymore as
    upstream now has a huge rework and extended features</changelog>
  <changelog author="werner@suse.de" date="1740139200">- Add patch boo1237209.patch temporary
  * Fix stack overrun (boo#1237209)</changelog>
  <changelog author="werner@suse.de" date="1742299200">- Add patch file-seccomp-ppc.patch
  * Minimal patch to work around of wrong provide of used TCGETS</changelog>
  <changelog author="werner@suse.de" date="1742385600">- Change patch file-seccomp.patch
  * Remove the dumb prctl allow rule as for glibc malloc the prctl
    PR_SET_VMA with flag PR_SET_VMA_ANON_NAME is already allowed
- Require at build zlib-devel to enable direct uncompresion of
  zip'ed files as well</changelog>
  <changelog author="werner@suse.de" date="1742990400">- baselibs.conf: drop it</changelog>
  <changelog author="munix9@googlemail.com" date="1748174400">- Add file-zipdata.patch
  * Fix "Some zip files are misclassified as data"
    see https://bugs.astron.com/view.php?id=571
    based on https://github.com/file/file/commit/60b2032b96fc185b37fb0f2152e834efb2edad6e</changelog>
</package>
<package pkgid="6bf1954a9aef31c26f2d98fc47b9fa2ae261548020e2c7f312fef2e9332da103c9c5429332fc96104a27650b8494fd5821e45d56772a955039d34046ae018785" name="filesystem" arch="x86_64">
  <version epoch="0" ver="84.87" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Add Korean man pages directory used by xz</changelog>
  <changelog author="kukuk@suse.com" date="1676030400">- Remove /etc/sysconfig/network hierachy again, YaST got fixed</changelog>
  <changelog author="dmueller@suse.com" date="1694520000">- remove complex dependency on rpmlib(X-CheckUnifiedSystemdir),
  there is nothing that ever provided it and it triggers
  a libsolv bug (in progress of being fixed)</changelog>
  <changelog author="lnussel@suse.com" date="1695643200">- Add /run/lock (boo#1212926)
- Remove /var/spool/mail (boo#1179574)
- Remove obsolete home dir check. The filesystem package is not
  meant to contain home directories of random system users anymore
- Create ghost symlinks also in pretrans, needed to get /var/run as
  link right away</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Create systemd-tmpfile for /run (/run/lock missing bug report)</changelog>
  <changelog author="kukuk@suse.com" date="1727265600">- Move /srv/www hierachy to the packages which use them
  [bsc#1231027]</changelog>
  <changelog author="mardnh@gmx.de" date="1735300800">- Add /usr/$march directories for HPPA. Will be packaging both
  hppa-suse-linux and hppa64-suse-linux because the compiler
  suite is usually configured with the latter on this arch.</changelog>
  <changelog author="heitor@opensuse.org" date="1735473600">- Remove /usr/etc/skel/bin/</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1737979200">- Add support for loongarch64</changelog>
  <changelog author="ro@suse.de" date="1738065600">- add Provides: may-perform-usrmerge (bsc#1236481)</changelog>
</package>
<package pkgid="781fd68bfc99701f548d97db7c9f1f293f82d142605d7429aa9f339e09baf6a27ce208fff20e743c833fa2f95881b4870d0c86b7ceb34c2e4cbdb9f239a0bc5c" name="fillup" arch="x86_64">
  <version epoch="0" ver="1.42" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1414756800">- Keep /bin/fillup as a symlink in the package: there are hundreds
  of RPMs out there referencing it in the %post scriptlets, when
  any of the %*fillup* macros was used. Even updating the macro
  will not make the existing RPMs magically be fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1415016000">- Also return back the /bin/fillup provides line</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- fillup-fno-common.patch: fix compilation on Tumbleweed
  (boo#1160871)</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1651060800">- use https as url</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- Makefile is not parallel-safe</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dmueller@suse.com" date="1705492800">- remove bin symlink for non-suse distributions</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="42b651bff1ddbd208828236128610d0ed6aaa52f78518a3d43c0e64a2eed87cf2a52b8849877d90422fc4147ec5ba20d26956305ae0d5466a172bee1436d2001" name="findutils" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="160000.2.2"/>
  <changelog author="mail@bernhard-voelker.de" date="1610193600">- Update to 4.8.0.
  Announcement: https://savannah.gnu.org/forum/forum.php?forum_id=9914
- findutils.spec:
  - Source0: Fix download URL: remove "pub/".
  - %check: Output the content of all test-suite files in case of errors.
- Remove now-upstream patches:
  - disable-null-ptr-test.patch
  - findutils-gnulib-disable-test-float.patch
  - findutils-gnulib-test-avoid-FP-perror-strerror.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610193601">- update upstream signing key
- remove deprecated texinfo packaging macros
- run spec-cleaner</changelog>
  <changelog author="christian.voegl@suse.com" date="1618833600">- Use new Group Release Keyring</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1633348800">- gnulib-port-year2038-to-glibc-2.34.patch: Add patch to avoid
  build failure regarding 64-bit time_t on i586 with glibc-2.34.
- findutils.spec: Reference it, and add BR:automake and run 'autoreconf'.
  While at it, remove obsolete condition for suse_version 1100.
- findutils-xautofs.patch: Refresh.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1643803200">- Update to 4.9.0.
  Announcement: https://savannah.gnu.org/forum/forum.php?forum_id=10108
- gnulib-port-year2038-to-glibc-2.34.patch: Remove now-upstream patch.
- findutils.spec: Update version and remove above patch.
- findutils-xautofs.patch: Refresh.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- Remove obsolete qemu workaround</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1717243200">- Update to 4.10.0.
  Announcement: https://savannah.gnu.org/news/?id=10638
- findutils-xautofs.patch: Refresh.</changelog>
  <changelog author="pgajdos@suse.com" date="1738670400">- do not crash when file system loop was encountered [bsc#1231472]
- added patches
  fix https://git.savannah.gnu.org/cgit/findutils.git/commit/?id=e5d6eb919b9
  + findutils-avoid-crash-system-loop.patch
- modified patches
  % findutils-xautofs.patch (p1)</changelog>
</package>
<package pkgid="4c90e67d505582ad9ccf644bc238bc950ab198d947958dd86cc1dbff0bc628fc0399111ebada56bb9fd1fa102e2c9b50611886bc157cb86b298d7b42d65af5a9" name="firewalld" arch="noarch">
  <version epoch="0" ver="2.1.2" rel="160000.2.2"/>
  <changelog author="steven.kowalik@suse.com" date="1695643200">- python3-dbus isn't correct either, it's python3-dbus-python.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to 2.0.1:
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
- removed following patch:
  [- fix_list_all_zones_output.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1701259200">- update to 2.0.2:
  * fix(policy): runtime dispatch update if *-zone=ANY (e8b9637)
  * fix(nm): release NM client after a timeout (d534f07)</changelog>
  <changelog author="mohd.saquib@suse.com" date="1704715200">- update to 2.1.0:
  * eat(service): add DNS over QUIC (DoQ) Service (5130430)
  * feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types (dd88bbf)
  * feat(fw): add ReloadPolicy option in firewalld.conf (0019371)
  * feat(service): add submission service (tcp 587) (d6a9561)
  * feat(service): Add alvr (3a92358)
  * feat(service): add vrrp (d62fc8d)
  [* Renamed patch 0002-Disable-FlushAllOnReload-option.patch to
    0001-Disable-FlushAllOnReload-option.patch
  [* Renamed patch firewalld-runstatedir.patch to 0002-firewalld-runstatedir.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1706529600">- update to 2.1.1:
  * fix(offline-cmd): use family when creating ipset (64f78a9)
  * fix(firewall-config): allow rich rule forwarded ports to be logged (d46ea62)
  * fix(ipXtables): log forwarded ports only (07dc202)
  * fix(nftables): log forwarded ports (5c26b73)
  * fix(io.ipset): raise exception if entries exceed limit (a2da5fb)
  * fix(policy): ipXtables: multiple policies using same zone (b6f2f09)
  * fix(policy): dispatch update for active policies (7f6f0e2)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- update to 2.1.2:
  * fix(policy): allow forward ports w/ to-addr for egress-
    zone=HOST
  * fix(rich): fix range check for large rule limit
  * fix(tests): fix skip detection in fw-in-container environment</changelog>
  <changelog author="dimstar@opensuse.org" date="1716552000">- Keep English 'translations' (en_US, en_GB) in the main package:
  do not force the lang package on plain English systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1718366400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="alarrosa@suse.com" date="1744718400">- Require python3-PyQt6 in firewall-applet, since that's preferred
  over PyQt5.</changelog>
</package>
<package pkgid="5b6cb06e3392c35c7cb96e99f82c789e2579d9009983836ef85242ec6d683d404763044de7b316f16639ab37e1fd1f317a39f0e7935877b9eddf3517a9e7124f" name="fontconfig" arch="x86_64">
  <version epoch="0" ver="2.16.0" rel="160000.2.2"/>
  <changelog author="badshah400@gmail.com" date="1549713600">- Add fontconfig-do-not-remove-UUID-file.patch: Removing .uuid
  files caused frequent rescanning of all system fonts causing
  intermittent CPU usage surges, for example, when browsing using
  firefox; patch taken from upstream commit (boo#1124816,
  https://gitlab.freedesktop.org/fontconfig/fontconfig/merge_requests/8).</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- adding bug reference to this changelog [bsc#1172301]</changelog>
  <changelog author="dmueller@suse.com" date="1650024000">- update to 2.14.0:
  * Fix endianness on generating MD5 cache name
  * Fix a typo in the description of FcWeightFromOpenTypeDouble
  * fc-validate: returns an error code when missing some glyphs
  * Fallback uuid-based name to read a cache if no MD5-based cache
  * fc-cache: Show font directories to generate cache with -v
  * Replace UUID file mechanism with per-directory 'map' attribute [v2]
  * memleak fixes
- drop fontconfig-do-not-remove-UUID-file.patch (obsolete)
- add skip-network-test.patch</changelog>
  <changelog author="sflees@suse.de" date="1651147200">- Seems we now need python3 for building</changelog>
  <changelog author="dmueller@suse.com" date="1667908800">- update to 2.14.1:
  * Bump the cache version to 8 in doc/fontconfig-user.sgm
  * Enable 10-sub-pixel-rgb.conf by default
  * build fixes and translation updates
  * Avoid misuse of ctype</changelog>
  <changelog author="dmueller@suse.com" date="1674907200">- update to 2.14.2:
  * Adjust indentation between programlisting in fontconfig-user.sgml
  * Add some missing constant names for weight
  * Report more detailed logs instead of assertion
  * Fix a typo in description for HAVE_STDATOMIC_PRIMITIVES
  * Ignore LC_CTYPE if set to "UTF-8"
  * add --with-default-sub-pixel-rendering option
  * Add FC_DESKTOP_NAME property</changelog>
  <changelog author="tiwai@suse.com" date="1701172800">- Run autoreconf for Leap 15.x to fix build breakage</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 2.15.0:
  * Do not change the order of orth files
  * Convert tabs to spaces
  * Convert more tabs to spaces in docs
  * Report more detailed logs instead of assertion.
  * Add some missing constant names for weight.
  * Adujst indentation between programlisting in fontconfig-user.sgml
  * Add another test case for flatpak
  * Update 65-nonlatin.conf for macOS
  * Change the order of the properties to the order of fontconfig
    cache format
  * Add missing property descriptions
  * Add namedinstance property
  * Remove the problematic language from code and doc
  * Use 'outline' instead of 'scalable' for bitmaps
  * Add more docs about selectfont
  * Rework CI implementation
  * Fix uninitialized memory access when failing memory allocation.
  * Create a symlink with relative path
  * Fix an error of "initializer element is not constant"
  * Update CaseFolding.txt to Unicode 15.1
  * Update the encoding table for Simplified Chinese
  * Retry to decode strings in the name table as UTF-16BE in some
    cases.
  * Work around decoding strings in Macintosh encoding for the
    name table.
  * Use memmove instead of memcpy
  * Rename README to NEWS and add README.md
  * Update so version
  * Fix leak of `reason` in _FcConfigParse when not complaining</changelog>
  <changelog author="foss@grueninger.de" date="1721131200">- Run autoreconf unconditionally to allow newer versions
  of Automake.</changelog>
  <changelog author="i@marguerite.su" date="1739793600">- update to 2.16.0:
  * Fix misleading-indentation warning
  * Deal with glob string properly
  * Allow comma as a delimiter in postscriptname and ignore it on matching
  * Refactor exclusive language logic into separate file
  * Use proper postscriptname for named instance if any
  * Remove redundant leaf assignment in fcfreetype.c
  * Ensure lock/unlock symmetry
  * Ensure config is locked during retry in FcConfigReference
  * Unlock on allocation failure in FcCacheInsert
  * Fix FcSerialize undefined behavior with null pointer usage
  * Fix undefined behavior issue on qsort call
  * Add cop.orth for Coptic language
  * Add got.orth for Gothic language
  * Fix a memory leak in fc-list/fc-query/fc-scan
  * mark _FcPatternIter as may_alias
  * Accept integer for pixelsize
  * Improve hinting detection for fonthashint object
  * Add FcConfigSetFontSetFilter
  * Fix some code found by SAST
  * Set FcTypeVoid if no valid types to convert
  * Fix a memory leak in _get_real_paths_from_prefix
  * Fix double slashes in path
  * More information when no writable cache directories
  * Fix test case for reproducible builds
  * Fix invalid escape character \s
  * Sort out bitmap related config files
  * Clean up .uuid files with fc-cache -f too
- add fontconfig-autoconf269.patch to start leap build</changelog>
</package>
<package pkgid="bf8f7bb6f3ccf86eac3445c25033787481baf597a74a8c25d7b787e99aaac5881ae17a913d2b92f37c944dd19facb3bb7f32bc449a8128ff97006a49342b1b4d" name="fuse-overlayfs" arch="x86_64">
  <version epoch="0" ver="1.15" rel="160000.2.2"/>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
  <changelog author="idonmez@suse.com" date="1613995200">- Update to version 1.4.0
  * add squash_to_uid and squash_to_gid
  * add squash_to_root mount option.
  * honor option "volatile".
  * when writing mode to xattr, create files with mode 0755.
  * support ID mapping when using xattr permissions.
  * allow opening not accessible but still referenced files.
  * invalidate directory cache on create/rename.
  * fix segfault if no mountpoint specified
  * fix file_exists_at musl compatibility
  * introduce extended attribute to override gid/uid/mode.
  * support writing uid/gid/mode to an extended attribute.
  * fix a memory leak, where inodes are maintained in memory
    even if not needed.</changelog>
  <changelog author="kkaempf@suse.com" date="1632830400">- Update to version 1.7.1
  * set FUSE_CAP_POSIX_ACL only when it is supported by FUSE.
  * treat statx failure with EINVAL as ENOSYS, so that the fallback
    is attempted.
- Update to version 1.7.0
  * fix read xattrs for device files
  * don't create whiteout files in opaque dirs.
  * fix reading files when running with euid != 0.
  * enable POSIX ACLs.
- Update to version 1.6.0
  * fix an invalid access when filtering internal xattrs that could
    deal to a segfault.
- Update to version 1.5.0
  * honor FUSE_OVERLAYFS_DISABLE_OVL_WHITEOUT also for renames
  * use strncpy instead of strcpy
  * fix renameat2(RENAME_NOREPLACE) on older kernels that lack
    device whiteouts for unprivileged users.
  * fix creating a symlink on top of a removed file.
  * fix copyup of xattrs longer than 256 bytes.</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 1.10:
  * main: use /proc/self/fd to read xattrs.
  * main: inherit ACLs for new files/dirs.
  * main: fix passing noatime.
  * main: add checks for valid /proc mount.
  * main: fix copy_file_range for deleted files.
  * main: fix creating links of just deleted files.
  * main: fix setting attributes on file without permissions.
  * main: ignore EOVERFLOW when copying xattrs.
  * main: set the correct value for RENAME_NOREPLACE when it is not already
    defined in the system headers.
  * main: create source whiteout only when needed
  * main: fix missing source whiteout when destination is whiteout
  * main: fix lookup if underlying path is a symlink, but a directory on a
    upper directory.
  * main: fix race when looking up an inode that was renamed.
  * main: fix type used for ioctl.
  * main: honor user.overlay. xattrs.  Native overlay uses user.overlay to
    store the overlay metadata instead of trusted.overlay.
  * main: add a mount flag to disable ACLs.</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- update to 1.12:
  * change license to GPL-2.0-or-later.
  * main: if a lower layer doesn't support ACLs do not enable
    them.</changelog>
  <changelog author="dmueller@suse.com" date="1700568000">- update to 1.13:
  * fix a performance issue when dealing with big directories.</changelog>
  <changelog author="pgajdos@suse.com" date="1739188800">- version update to 1.14
  * isolate security xattrs for STAT_OVERRIDE_CONTAINERS. Prefix all security xattrs with XATTR_CONTAINERS_OVERRIDE_PREFIX.
  * prefer user.containers.override_stat over user.fuseoverlayfs.
  * do not force -1 for owner overriding extended attributes. Otherwise the value is written to the override extended attribute.
  * fix file owner retrieval for chmod.
  * honor umask with xattr_permissions.
  * honor mode for devices with xattr_permissions.
  * propagate extended attributes permissions with copyup.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1747483200">- update to 0.15:
  * main: lookup upperdir only for created directories
  * main: allow escaped colons in directory paths
  * main: use extended override xattr to support devices
  * remove unsupported option "lazytime"</changelog>
</package>
<package pkgid="c974a508927511d3911937e0dbb092f47e8a245f859b0f4732a48d7ee1cb7c178dcb5e8439eea1f34998e5eed8318c14e43f535599b210618bfe58b88f67d5f7" name="fwupd" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1757505600">- Update to version 2.0.15:
  + This release adds the following features:
  - Allow child devices to use the parent name as a prefix
  + This release fixes the following bugs:
  - Add newer commands and options for Fish completion
  - Allow installing archives named as .CAB rather than .cab
  - Erase Firehose modem devices correctly
  - Fix Goodix enumeration issues
  - Fix sending firmware reports without --force
  - Fix the FreeBSD build
  - Fix version number of BnR MTD devices
  - Require additional requirements for the default PS5512 devboard
  - Require a full system shutdown for all Micron NVMe updates
  - Use a better name for Elan touchpad and Intel PCH SPI devices
  + This release adds support for the following hardware:
  - Foxconn SDX61 Modem
  - Jabra Evolve2 child devices
  - NVIDIA ConnectX-6, ConnectX-7 and ConnectX-8 NICs</changelog>
  <changelog author="dimstar@opensuse.org" date="1757678400">- Update to version 2.0.16:
  + This release adds the following features:
  - Add a 'search' feature to fwupdtool and fwupdmgr
  + This release fixes the following bugs:
  - Fix missing release locations when loading from artifact
  - Fix remaining issues to make updates on FreeBSD work</changelog>
  <changelog author="schwab@suse.de" date="1759406400">- Fix file list</changelog>
  <changelog author="dimstar@opensuse.org" date="1762344000">- Update to version 2.0.17:
  + This release adds the following features:
  - Add support for client-side phased update deployment
  - Add support for post-quantum signatures
  - Allow clearing the cache dirirectory
  - Allow fwupdtpmevlog to dump the raw eventlog data
  - Build a NVMe GUID derived from the serial number
  - Make fwupdtool extract work with deeply nested images
  - Parse VSS and FTW variable stores from EFI volumes
  - Reintroduce the FreeBSD CI target
  - Support very old versions of UDisks
  + This release fixes the following bugs:
  - Add 'fwupdmgr hwids' by exposing another daemon property
  - Add offline hashes for the Microsoft 20250902 dbx
  - Add the Framework-specific KEK and db hashes
  - Allow updating IFD BIOS region via parent MTD
  - Avoid showing reinstall prompts for composite devices
  - Clean up the fwupdtool lock file in all cases
  - Correctly match the correct historical composite component
  - Do not allow PK or KEK updates when system has a test key installed
  - Do not allow reinstalling when using ONLY_VERSION_UPGRADE
  - Do not require AC power to run the installed tests
  - Do not scan EFI volumes when constructing MTD BIOS devices
  - Ensure REGION is always set for MTD IFD children
  - Ensure SCSI instance IDs are valid ASCII values
  - Fix a critical warning when parsing invalid Jabra firmware
  - Fix an Ilitek parsing crash found when fuzzing
  - Fix an inotify race when refreshing metadata
  - Fix a pending-activation problem with Dell docking stations
  - Fix a potential hang when creating a chunk array with aligned sizes
  - Fix MTD emulation recording for PCI-backed devices
  - Fix the device order when the parent specifies install-parent-first
  - Fix the FLMSTR layout when reading IFD partitions
  - Fix the thunderbolt controller rushing to finalize before onlining retimers
  - Fix writing Intel GPU OptionROM data and OptionROM code
  - Flush stale events to make the Logitech Rallybar more reliable
  - Ignore all the Intel GPU MTD devices
  - Ignore errors when writing the last page of Dell dock firmware
  - Make an error message more specific
  - Modify the Dell dock needs-activation flag after updates are installed
  - Only add one devlink device for each PCI card
  - Parse the FMAP SBOM area as uSWID when required
  - Relax the USI dock DMC child device checks for new firmware
  - Revert back to the flashrom deprecated API as the new API is unusable
  - Rewrite the fwupdmgr manpage to be more useful
  - Use higher delay when update status for Logitech peripheral devices
  + This release adds support for the following hardware:
  - ASUS CX9406 (touch controller)
  - Framework Copilot keyboard
  - Genesys GL352530 and GL352360
  - Huddly C1
  - Lexar and Maxio NVMe SSDs
  - Primax Ryder mouse 2
- Add pkgconfig(libmnl) BuildRequires: new dependency.</changelog>
  <changelog author="mgorse@suse.com" date="1762862400">- Do not try to load i2c_dev kernel module on s390x. S390x has no
  native i2c devices and does not have the module (bsc#1253138).</changelog>
  <changelog author="dimstar@opensuse.org" date="1764590400">- Update to version 2.0.18:
  + This release adds the following features:
  - Add a MOTD message for devices needing reboot after staged updates
  - Create the reboot-required file when a firmware update requires reboot
  - Record the system state for each composite emulation
  - Update USI docking station firmware without requiring a manual replug
  + This release fixes the following bugs:
  - Add a MTD device problem if the Intel SPI BIOS lock is set
  - Allow changing the child name when using PARENT_NAME_PREFIX
  - Allow UpdateCapsule to work on systems that do not support SecureBoot
  - Correctly parse the EFI_CAPSULE_RESULT_VARIABLE_HEADER
  - Fall back to the SMBIOS version for BIOS MTD devices
  - Fix a crash when trying to record an i2c emulation
  - Fixed Huddly upgrade problems with major version changes
  - Fix man page compatibility with apropos and whatis
  - Fix parsing USB BOS descriptors
  - Fix up the x86_64-specific capsule flags when deploying UEFI firmware
  - Improve firmware stream searching speed by a huge amount
  - Only convert the release uint32_t to device version format for UEFI devices
  - Only handle SIGINT in fwupdtool when required
  - Refactor the hypervisor and container detection to be usable from plugins
  - Set PlatformArchitecture as the CPU architecture for RISC-V machines
  - Use a sensible timeout when doing qc-s5gen2 HID requests
  + This release adds support for the following hardware:
  - HP Portable USB-C 4K HDMI Hub
  - Lenovo Legion Go 2 (as a HID device)
  - Synaptics HapticsPad
- Rebase fwupd-bsc1130056-change-shim-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1766145600">- Update to version 2.0.19:
  + This release adds the following features:
  - Add two commands to fwupdtool to calculate and find CRCs
  - Allow systems to use the udev event source without using systemd
  + This release fixes the following bugs:
  - Always show the correct new firmware version in 'fwupdmgr get-history'
  - Fix an integer underflow when parsing a malicious PE file
  - Fix a regression when enumerating the dell-dock status component
  - Fix the fuzzer timeout when parsing a synaptics-rmi SBL container
  - Fix updating the Intel GPU FWDATA section
  - Respect 'fwupdmgr --force' when installing firmware
  + This release adds support for the following hardware:
  - Lenovo Sapphire Folio Keyboard</changelog>
  <changelog author="holden@opensuse.org" date="1767441600">- Actually build and install manpages:
  * These were originally removed because including them would
    have required pulling a nasty set of ghc/pandocs build
    dependencies directly into Ring 1
  * fwupd upstream quickly reverted this change in 1.8.13, but
    the conditional to block building/installing the manpages by
    default was never removed from the specfile
  * This restores the fwupd manpages, which have been sorely
    missing in openSUSE for a couple years</changelog>
  <changelog author="dimstar@opensuse.org" date="1768305600">- Add 0001-Allow-systemd-service-to-access-block-sr-cdrom-devic.patch:
  allow fwupd.service to interact with cdrom (boo#1256507)</changelog>
  <changelog author="dimstar@opensuse.org" date="1772107200">- Update to version 2.0.20:
  + This release adds the following features:
  - Add support for changing AMD UMA carveout size
  - Warn the user if they are using the blocked-firmware
    functionality
  + This release fixes the following bugs:
  - Disable the UEFI plugins on 32bit x86
  - Do not hang when parsing an invalid USB descriptor
  - Do not return an error if the fastboot property is not
    provided
  - Fix a CCGX DMC regression when installing on the HP G5 dock
  - Fix a harmless heap OOB read in AMD kria SOM EEPROM parser
  - Fix a potential fastboot string over-read
  - Fix a regression causing MBIM QDU updates to fail
  - Honor polkit auth for emulation tag modify device
  - Speed up calculating the cab checksum by ~21%
  - Verify the uncompressed size when decompressing CAB files
  + This release adds support for the following hardware:
  - HP Engage One G2 Advanced Hub
  - PixArt PJP274 (Framework Laptop)
  - Several new Jabra GNP devices</changelog>
</package>
<package pkgid="2b1f857c8acbeeb55d3f9b11e85018a0eadb73c37393d1b8b19145acc24b6dcf1269e79cd2c7a7deb76ac95955d0f30a4938b1381079041777b7b5b26477dff9" name="fwupd-efi" arch="x86_64">
  <version epoch="0" ver="1.7" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1636113600">- Re-add fwupdx64.efi.signed symlink (boo#1192206)</changelog>
  <changelog author="fcrozat@suse.com" date="1647000000">- Update to version 1.2:
  * Release fwupd-efi 1.2
  * meson: use stadard objcopy binary
  * meson: use find_program() to find the helper scripts we run
  * meson: using local copy ldscript when local copy crt0 be used for SBAT
  * sbat: clarify project URL
  * trivial: Ignore some markdown issues
  * Wait 5 seconds to reboot on errors
  * Port pre-commit clang-format, codespell, markdownlint from fwupd
  * trivial: fixup python errors by codacity/precommit
  * trivial: fixup markdown format
  * trivial: spelling errors
  * Sleep longer when no updates to process
  * README: fix typo and URL
  * trivial: post release version bump
- Remove 0001-meson-using-local-copy-ldscript-when-local-copy-crt0.patch
  (merged upstream)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1649937600">- Use sbat macros (bsc#1193282)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1670932800">- Update to version 1.3:
  * Release fwupd-efi 1.3
  * Fix a regression when applying updates on an HP M60
  * Show the version when starting fwupd-efi
  * trivial: Update precommit versions to fix CI
  * meson: fix ARM system crt0 name
  * trivial: post release version bump
- Add binutils-2.38-arm-objcopy.patch: use objcopy with ARM on
  binutils 2.38+
- Add binutils-2.38-arm-system-crt0.patch: system crt0 doesn't need
  to contain the SBAT section if we have binutils 2.38+
- Enable ARM and ix86 support</changelog>
  <changelog author="gmbr3@opensuse.org" date="1671019200">- Add arm32-short-wchar.patch: fix an issue where fwup_sbat.o
  had a different wchar length</changelog>
  <changelog author="gmbr3@opensuse.org" date="1672660800">- Add ARM-fixes.patch: multiple fixes for ARM EFI after binutils
  2.38
- Remove arm32-short-wchar.patch: included in ARM-fixes.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674475200">- Update ARM-fixes.patch to current git copy to add checks for
  an incompatible crt0</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677240000">- Disable ix86 and arm32: shim doesn't build on these platforms</changelog>
  <changelog author="gmbr3@opensuse.org" date="1724932800">- Update to version 1.6:
  * Require gnu-efi 3.0.18 or later
  * Ship an objcopy capable LDS for ARM64
  * Detect gnu-efi via pkgconfig
  * Backport the ctors and dtors work from gnu-efi upstream
  * Tidy up crt0 generator
  * Add RISC-V support
  * Fix per NX bit and UEFI 2.10 Microsoft requirements
- Remove un-needed BRs:
  * pkgconfig(efiboot)
  * pkgconfig(efivar)
- Remove shim requirement: it doesn't need it, it's a UEFI binary
- Restore ix86 and ARM32 support
- Add RISC-V support
- Remove patches (fixed upstream):
  * binutils-2.38-arm-objcopy.patch
  * binutils-2.38-arm-system-crt0.patch
  * ARM-fixes.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1734436800">- Update to version 1.7:
  * Fix compilation with GNU-EFI 4.0
- Use upstream tarball: source service isn't useful on this
  package
- Add 106.patch:
  * Improves ARM32 crt0 by splitting header and code
  * Use pkgconfig for gnu-efi - fixes RISC-V build
  * Update lds from gnu-efi 4.0</changelog>
</package>
<package pkgid="55c6696febb8b6caf8930eb9ff5d7fb43570f1c74dfdf0466607da315b643958a2926243608be54ea4814ee3ea603f031ee7b820a85159a2579a5b9caaf3be11" name="gawk" arch="x86_64">
  <version epoch="0" ver="5.3.2" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1669204800">- Update to gawk 5.2.1
  * Issues related to the sign of NaN and Inf values on RiscV have
    been fixed
  * A few issues with the debugger have been fixed.
  * More subtle issues with untyped array elements being passed to
    functions have been fixed.
  * The rwarray extension's readall() function has had some bugs fixed.
  * The PMA allocator is now supported on FreeBSD, OpenBSD and Linux on
    S/390x.
- double-free.patch, pma.patch, nan-sign.patch: Removed</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683633600">- Update to gawk 5.2.2
  * will now diagnose if a heap file was created with a different
    setting of -M/--bignum than in the current invocation and exit
    with a fatal message if so.
  * no longer "leaks" its free list of NODEs in the heap file,
    resulting in much more efficient usage of persistent storage
  * PROCINFO["pma"] exists if the PMA allocator is compiled into
    gawk. Its value is the PMA version.
  * The time extension is no longer deprecated. The strptime()
    function from gawkextlib's timex extension has been added to
    it.
  * Better information is passed to input parsers for when they
    want to decide whether or not to take control of a file.
  * The various PNG files are now installed for Info and HTML
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683979200">- enable profiling</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699099200">- Update to 5.3.0:
  * Built-in CSV file parsing (--csv)
  * Support a new \u escape sequence for specifying code points in
    multi-byte encodings
  * Pipe output is buffered if PROCINFO["BUFFERPIPE"] exists</changelog>
  <changelog author="dmueller@suse.com" date="1729684800">- update to 5.3.1:
  * More subtle issues related to uninitialized array elements
    have been fixed.
  * A number of bugs in the debugger related to handling of
    arrays have been fixed.
  * Some subtle bugs in the API have been fixed.
  * Use of MPFR is now possible again on 32-bit Power PC Mac
    systems.
  * Race conditions around broken pipes for system() and read
    and write pipes should now be closed off.
  * Support for OSF/1 has been removed.
  * The never-documented --nostalgia option has been removed.
    It was causing bug reports.
  * The implementation of printf/sprintf has been thoroughly
    reworked in order to make the code more maintainable and to
    fix a goodly number of corner cases.</changelog>
  <changelog author="schwab@suse.de" date="1733313600">- Reenable pma tests</changelog>
  <changelog author="bwiedemann@suse.com" date="1737979200">- Stop using -fprofile-arcs in the final build
  instrumentation is not wanted there and
  it broke reproducible builds (boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1742385600">- Mark profiling as non-deterministic (boo#1040589, jsc#PED-12137)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1743768000">- GNU awk 5.3.2:
  * pretty printer now produces fewer spurious newlines
  * -no-pie linker flag is no longer required
  * fix more subtle issues related to uninitialized array elements
  * Associative arrays should now not grow quite as fast as they
    used to
  * documentation updates</changelog>
</package>
<package pkgid="c852a60b6e6b55693763d9f628f9bac789b2a1ef2a3266d9615449c29a3d1e97c0411f310a7061c9d1f7f605707eedaab0131d121911e70ae4f199dfdb7648a7" name="gdk-pixbuf-loader-rsvg" arch="x86_64">
  <version epoch="0" ver="2.60.2" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1726488000">- Update to version 2.59.0:
  + The biggest change in this release is that librsvg now uses the
    Meson build system instead of autotools.
  + With Meson, librsvg now builds a lot more reliably on Windows
    and MacOS.
  + Librsvg now uses Meson instead of Autotools
  + There is a -Davif meson option to include support for AVIF in
    the image-rs crate, which librsvg uses to load raster images.
  + Librsvg now explicitly builds only its supported raster formats
    for image-rs: JPEG, PNG, GIF, WEBP, and optional compile-time
    support for AVIF). Other raster image formats are not
    supported, to minimize the attack surface.
  + Librsvg now supports cancellable rendering; you can start
    rendering an RsvgHandle in one thread, and stop it from another
    thread with a GCancellable. In the C API, you can use the
    rsvg_handle_set_cancellable_for_rendering() function; in the
    Rust API, CairoRenderer now has a with_cancellable() method.
  + For Rust users, there is now a 'librsvg-rebind' crate that
    binds the C API for use from Rust. Internally this links to the
    system's librsvg shared library, in contrast with the 'librsvg'
    crate, which is statically linked and which has a native Rust
    API. The 'librsvg-rebind' crate is for cases where the
    additional code size from static linking is not desired. This
    librsvg-rebind crate is available from crates.io.
  + A bunch of fixes to bugs found through fuzz testing.
- Use ldconfig_scriptlets macro for some of the post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727524800">- Update to version 2.59.1:
  + Two mitigations for crashes found throuh fuzz testing:
  - Cairo is easy to crash by giving it path coordinates that are
    outside of the range that it can represent internally with
    its fixed-point arithmetic. Fuzzers usually produce SVGs with
    very large numbers for coordinates, which overflow Cairo's
    arithmetic.
    This is just a *mitigation*, not a complete fix: librsvg will
    now check if path coordinates are outside of Cairo's
    supported range, and it will not render shapes with
    problematic coordinates. However, fuzzers may still produce
    coordinates that are in range but that still make Cairo
    crash. I am starting to learn Cairo's code to see if this can
    be fixed gradually.</changelog>
  <changelog author="dimstar@opensuse.org" date="1730289600">- Update to version 2.59.2:
  + Fix stack overflow due to unbounded recursion.  Now there is
    a hard limit on the number of nested layers that an SVG
    document may have.  This is not a hard limit on the amount of
    stack space consumed, but it is a general mitigation.
  + Fix regression when rendering paths with very flat elliptical
    arcs.  This bug was introduced in 2.59.1 as part of the
    mitigation for paths with coordinates that Cairo is unable to
    handle.
  + Fix centering and text-anchor in general for scaled text.
  + Fix building with Rust 1.82 on Windows (Christoph Reiter).
  + Make cancellation work for all the resource loading
    functions.
  + Add documentation for rsvg-bench to the development guide.
  + Slight improvement in memory consumption for language tags.
  + Many updates to the developer's documentation, for Outreachy
    interns.</changelog>
  <changelog author="mgorse@suse.com" date="1730376000">- Change license to LGPL-2.1-or-later AND MIT.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1739275200">- Update to version 2.59.90 (Unstable):
  + Basic support for the dominant-baseline property.
  + Report errors correctly from the parsers for attribute values.
  + Slightly improved test coverage.
  + Don't use defined() in C macro definitions, since it is not
    portable.
  + Parse the white-space property. It is not processed yet; this
    will come after the Outreachy internship.
  + Documentation fixes.
  + Many build fixes.
  + Improvements for cross builds.
  + Fix CRLF characters in Python sources.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.59.91 (Unstable):
  + Fix linkage on Illumos.
  + Fix the build of the static library on MinGW.
  + Fix versioning of library name.
  + Enable cross-compilation of the gdk-pixbuf loader if meson/qemu
    can handle it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742385600">- Update to version 2.60.0:
  + The minimum supported Rust version (MSRV) is 1.77.2.
  + Many build fixes for various platforms.
  + Basic support for the dominant-baseline property.
  + Parse the white-space property. It is not processed yet; this
    is part of the work to support SVG2 text layout.
  + Report errors correctly from the parsers for attribute values.
  + Portability fixes to the C header files.</changelog>
  <changelog author="federico@suse.com" date="1764936000">- Update to version 2.60.1 -
  (CVE-2024-12224 / bsc#1243867),
  (CVE-2024-43806 / bsc#1229950)
  + This is a security release for RUSTSEC-2024-0421, RUSTSEC-2024-0404,
    and GHSA-c827-hfw6-qwvm (CVE-2024-43806 / bsc#1229376).
  - glgo#GNOME/librsvg#1193 - RUSTSEC-2024-0421 - idna accepts Punycode
    labels that do not produce any non-ASCII when decoded.
  - RUSTSEC-2024-0404 - Unsoundness in anstream.
  - GHSA-c827-hfw6-qwvm - Memory explosion in rustix.  Note that librsvg
    does not use rustix except in the test suite.</changelog>
  <changelog author="federico@suse.com" date="1769601600">- Update to version 2.60.2:
  + Fix the check for the cargo-cbuild version.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1776427200">- Add librsvg-CVE-2026-25727.patch: Fix denial of service when
  parsing rfc2822. (bsc#1257922, CVE-2026-25727)</changelog>
</package>
<package pkgid="c2e085a067c4a1c43f9c9a3cde22eab27b5f89aa2d2dc444cbab07959d5f5f9b0019847c9a599b18f1cea45e5e40aad1a9a7aabdaff2dec14ef3cb60f54e0fd3" name="gdk-pixbuf-query-loaders" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
  <changelog author="mgorse@suse.com" date="1775736000">- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).</changelog>
</package>
<package pkgid="dc40489dfc7bb1311b19e33bf994abc492bb5dc96ee692b689e73702377cbd51973aeb06f73cb12bfe73e30d80acff05d85c433a63267496a1c736f9c7ce771b" name="gettext-runtime" arch="x86_64">
  <version epoch="0" ver="0.22.5" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dcermak@suse.com" date="1712232000">- Add missing Requires: find to gettext-tools</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Require this-is-only-for-build-envs by the -mini packages: ensure
  those mini packages never find their way onto a system, even when
  published.</changelog>
  <changelog author="dcermak@suse.com" date="1715688000">- Split out envsubst into a separate package
  This allows us to pull in envsubst into containers without enlarging them
  substantially. Additionally, this binary is standalone and useful outside of
  the context of gettext.</changelog>
  <changelog author="schwab@suse.de" date="1716292800">- Require glibc-gconv-modules-extra by the gettext-tools packages</changelog>
  <changelog author="dcermak@suse.com" date="1717502400">- add optional -mini suffix to envsubst package</changelog>
  <changelog author="dimstar@opensuse.org" date="1717675200">- Fix envsubst-mini:
  + Conflicts with the 'full' envsubst
  + Require 'this-is-only-for-build-envs': ensure this does not
    find it's way out of OBS onto installations.</changelog>
  <changelog author="bwiedemann@suse.com" date="1721131200">- Use %autosetup</changelog>
  <changelog author="dcermak@suse.com" date="1726142400">- Move envsubst requires into main package, gettext.sh is not part of
  gettext-tools, but gettext-runtime (fixes boo#1227070)</changelog>
  <changelog author="sbrabec@suse.com" date="1740571200">- Fix crash while handling po files with malformed header and
  process them properly
  (0003-Fix-malformed-header-processing.patch, boo#1227316).</changelog>
</package>
<package pkgid="d4b992c50f867c44858a491705bc12806c7705efa89f8e5d2896fb718c37f864ac94f247c548984eb1f6102b8c84dddf7a4d8b370576212bf447e3f131410e0b" name="gio-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="42.1" rel="160000.1.129"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1600430400">- Update .gschema.override.in (jsc#SLE-14772):
  * add different key for screenlock
  * update background color for SLE.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1602417600">- Add priority of 20 to gschema override, otherwise you can't
  override it</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1629720000">- Update for libreoffice-* desktop files no longer dropping the
  libreoffice- prefix.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Drop gnome-documents from favorite-apps for both openSUSE and
  SLED, package is archived upstream.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1647345600">- Update .gschema.override.in: Change default libreoffice startup
  entry to libreoffice-startcenter.desktop according to the
  libreoffice update (bsc#1195836, bsc#1196951).</changelog>
  <changelog author="Milachew &lt;milachew@mail.lv&gt;" date="1666008000">- Fix default openSUSE wallpaper is not present in dark mode (boo#1204138).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669896000">- Adjust desktop file names of preferred applications:
  + evince.desktop =&gt; org.gnome.evince.desktop (since GNOME 3.30).
  + eog.desktop =&gt; org.gnome.eog.desktop (since GNOME 3.36).
  + file-roller.desktop =&gt; org.gnome.FileRoller.desktop
- Fix name to impress: libreoffice-impress.destop.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1671537600">- Prefer file-roller over nautilus for archives.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681905600">- prefer org.gnome.TextEditor.desktop instead of gedit.
  patterns-gnome was changed to install TextEditor (boo#1210648).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710417600">- Ensure flavor has a value, at least %nil.
- ExclusiveArch: %nil is invalid: give it a value (do-not-build).</changelog>
</package>
<package pkgid="bd23eff455a284afa84146c65470bf1e5c0984705d757aea3dbc1c68bd483145f35d778eae2639baa0d93491b5a02ba93617ac01d61e0e594c59d8a434c4cc77" name="girepository-1_0" arch="x86_64">
  <version epoch="0" ver="1.84.0" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1714392000">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725364800">- Update to version 1.81.2:
  * Add strict mode warning for enumeration members starting with a
    number
  * Set deprecation message for signals and properties
  * Fix HTML definition lists in the documentation generator
  * Catch up with Python-Markdown 3.4 extension API changes
  * Propagate scanner errors
  * Do not break when parsing ARM SVE types in system headers
  * Pair pointer GTypes with their opaque structure
  * Fix property accessor pairing
  * Handle pid_t, etc. as their own top-level types
  * Add warning for closure annotation
  * Warn on invalid callback annotations
  * Make sure to set a GError with an invalid introspect-dump
    string
  * Move gobject-introspection tests to a submodule
  * Remove dependency on distutils.msvccompiler
  * Be more thorough about applying -Wl,--no-as-needed option
  * Documentation and build fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725364801">- Update to version 1.81.4:
  + Add rpath when building the type dumper on macOS
  + Fix regression in the installation of GIRepository-2.0.typelib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726228800">- Update to version 1.82.0:
  + Require GLib 2.82.0</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- Add python3-setuptools Requires: needed for python 3.13 which
  dropped distutils; setuptools now provides it.</changelog>
  <changelog author="adrian@suse.de" date="1733486400">- Fix dependency generation for loongarch64.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740830400">- Update to version 1.83.2:
  + Improve GType inspection helper
  + Parse C11's _Alignas
  + Respect custom Python binary
  + Fix build on the latest Windows SDK
  + Small performance improvement when looking up a signal
    information
  + Use standard imports in the JavaScript templates for
    g-ir-doctool
  + Ensure that enumeration members can be marked as deprecated
  + Add more test coverage for structured union types
  + Add an option to skip tests when building
  + Fix various MSVC compatibility issues
  + Add support for "static" virtual functions
  + Allow specifying the format of the documentation inside doc
    blocks
  + Handle C99's _Complex
  + Consider UCRT64 and CLANG64 as mingw32 compilers
  + Handle static NSString syntax
  + Add instance parameter checks to strict validation
  + Documentation improvements
  + Add documentation to the RelaxNG schema
  + tests: Fix compatibility with Python 3.5
  + gir: Include C header in cairo gir file
  + tests: Add functions using flat struct arrays</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741435200">- Update to version 1.83.4:
  + Revert support for "static" virtual functions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742040000">- Update to version 1.84.0:
  + No changes, stable version bump only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1749124800">- Add explicit python3-setuptools BuildRequires: this was already
  used in the past, but was pulled in by python3-Mako. As meson
  explicitly tests for it, it's our responsibility it's there.</changelog>
</package>
<package pkgid="d2c75f799935ac1318d920e7e9cace46d099ff918dbefcb76719e15fc7148fc7630b6cb3b8d33d29744a63f44e4cfb33f99488e6622113c1ef42edc3d9566f8d" name="git" arch="x86_64">
  <version epoch="0" ver="2.51.0" rel="160000.1.2"/>
  <changelog author="mrueckert@suse.de" date="1741953600">- update to 2.49.0
  https://about.gitlab.com/blog/2025/03/14/whats-new-in-git-2-49-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.49.0/Documentation/RelNotes/2.49.0.adoc
- switch to zlib-ng for code 16
- docs switched to asciidoc</changelog>
  <changelog author="tiwai@suse.com" date="1742817600">- Add support of SHA256 git repo for gitk (bsc#1239989):
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="tiwai@suse.com" date="1749816000">- Refresh gitk SHA256 patch and add SHA256 support to git-gui (bsc#1239989):
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
  The previous patches are dropped:
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1750161600">- update to 2.50.0
  https://about.gitlab.com/blog/what-s-new-in-git-2-50-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.50.0/Documentation/RelNotes/2.50.0.adoc</changelog>
  <changelog author="tiwai@suse.com" date="1750939200">- Fix git-gui citool SHA256 repo handling:
  refreshed 0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1752062400">- update to 2.50.1 (boo#1245938 boo#1245939 boo#1245942 boo#1245943
  boo#1245946 boo#1245947)
  Security fixes for CVE-2025-27613, CVE-2025-27614,
  CVE-2025-46334, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385,
  and CVE-2025-48386
  CVE-2025-27613, Gitk:
  When a user clones an untrusted repository and runs Gitk without
  additional command arguments, any writable file can be created and
  truncated. The option "Support per-file encoding" must have been
  enabled. The operation "Show origin of this line" is affected as
  well, regardless of the option being enabled or not.
  CVE-2025-27614, Gitk:
  A Git repository can be crafted in such a way that a user who has
  cloned the repository can be tricked into running any script
  supplied by the attacker by invoking `gitk filename`, where
  `filename` has a particular structure.
  CVE-2025-46334, Git GUI (Windows only):
  A malicious repository can ship versions of sh.exe or typical
  textconv filter programs such as astextplain. On Windows, path
  lookup can find such executables in the worktree. These programs
  are invoked when the user selects "Git Bash" or "Browse Files" from
  the menu.
  CVE-2025-46835, Git GUI:
  When a user clones an untrusted repository and is tricked into
  editing a file located in a maliciously named directory in the
  repository, then Git GUI can create and overwrite any writable
  file.
  CVE-2025-48384, Git:
  When reading a config value, Git strips any trailing carriage
  return and line feed (CRLF). When writing a config entry, values
  with a trailing CR are not quoted, causing the CR to be lost when
  the config is later read.  When initializing a submodule, if the
  submodule path contains a trailing CR, the altered path is read
  resulting in the submodule being checked out to an incorrect
  location. If a symlink exists that points the altered path to the
  submodule hooks directory, and the submodule contains an executable
  post-checkout hook, the script may be unintentionally executed
  after checkout.
  CVE-2025-48385, Git:
  When cloning a repository Git knows to optionally fetch a bundle
  advertised by the remote server, which allows the server-side to
  offload parts of the clone to a CDN. The Git client does not
  perform sufficient validation of the advertised bundles, which
  allows the remote side to perform protocol injection.
  This protocol injection can cause the client to write the fetched
  bundle to a location controlled by the adversary. The fetched
  content is fully controlled by the server, which can in the worst
  case lead to arbitrary code execution.
  CVE-2025-48386, Git:
  The wincred credential helper uses a static buffer (`target`) as a
  unique key for storing and comparing against internal storage. This
  credential helper does not properly bounds check the available
  space remaining in the buffer before appending to it with
  `wcsncat()`, leading to potential buffer overflows.</changelog>
  <changelog author="mrueckert@suse.de" date="1752062401">- refreshed gitk sha256 patches:
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="tiwai@suse.com" date="1752580800">- update git-gui sha256 patches after the upstream review:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- Update to 2.51.0
  - UI, Workflows &amp; Features
  - Userdiff patterns for the R language have been added.
  - Documentation for "git send-email" has been updated with a
    bit more credential helper and OAuth information.
  - "git cat-file --batch" learns to understand %(objectmode)
    atom to allow the caller to tell missing objects (due to
    repository corruption) and submodules (whose commit objects
    are OK to be missing) apart.
  - "git diff --no-index dirA dirB" can limit the comparison with
    pathspec at the end of the command line, just like normal
    "git diff".
  - "git subtree" (in contrib/) learned to grok GPG signing its
    commits.
  - "git whatchanged" that is longer to type than "git log --raw"
    which is its modern rough equivalent has outlived its
    usefulness more than 10 years ago.  Plan to deprecate and
    remove it.
  - An interchange format for stash entries is defined, and
    subcommand of "git stash" to import/export has been added.
  - "git merge/pull" has been taught the "--compact-summary"
    option to use the compact-summary format, intead of diffstat,
    when showing the summary of the incoming changes.
  - "git imap-send" has been broken for a long time, which has
    been resurrected and then taught to talk OAuth2.0 etc.
  - Some error messages from "git imap-send" has been updated.
  - When "git daemon" sees a signal while attempting to accept()
    a new client, instead of retrying, it skipped it by mistake,
    which has been corrected.
  - The reftable ref backend has matured enough; Git 3.0 will
    make it the default format in a newly created repositories by
    default.
  - "netrc" credential helper has been improved to understand
    textual service names (like smtp) in addition to the numeric
    port numbers (like 25).
  - Lift the limitation to use changed-path filter in "git log"
    so that it can be used for a pathspec with multiple literal
    paths.
  - Clean up the way how signature on commit objects are exported
    to and imported from fast-import stream.
  - Remove unsupported, unused, and unsupportable old option from
    "git log".
  - Document recently added "git imap-send --list" with an
    example.
  - "git pull" learned to pay attention to pull.autostash
    configuration variable, which overrides
    rebase/merge.autostash.
  - "git for-each-ref" learns "--start-after" option to help
    applications that want to page its output.
  - "git switch" and "git restore" are declared to be no longer
    experimental.
  - "git -c alias.foo=bar foo -h baz" reported "'foo' is aliased
    to 'bar'" and then went on to run "git foo -h baz", which was
    unexpected.  Tighten the rule so that alias expansion is
    reported only when "-h" is the sole option.
  - Performance, Internal Implementation, Development Support etc.
  - "git pack-objects" learned to find delta bases from blobs at
    the same path, using the --path-walk API.
  - CodingGuidelines update.
  - Add settings for Solaris 10 &amp; 11.
  - Meson-based build/test framework now understands TAP output
    generated by our tests.
  - "Do not explicitly initialize to zero" rule has been
    clarified in the CodingGuidelines document.
  - A test helper "test_seq" function learned the "-f &lt;fmt&gt;"
    option, which allowed us to simplify a lot of test scripts.
  - A lot of stale stuff has been removed from the contrib/
    hierarchy.
  - "git push" and "git fetch" are taught to update refs in
    batches to gain performance.
  - Some code paths in "git prune" used to ignore the passed-in
    repository object and used the `the_repository` singleton
    instance instead, which has been corrected.
  - Update ".clang-format" and ".editorconfig" to match our style
    guide a bit better.
  - "make coccicheck" succeeds even when spatch made suggestions,
    which has been updated to fail in such a case.
  - Code clean-up around object access API.
  - Define .precision to more canned parse-options type to avoid
    bugs coming from using a variable with a wrong type to
    capture the parsed values.
  - Flipping the default hash function to SHA-256 at Git 3.0
    boundary is planned.
  - Declare weather-balloon we raised for "bool" type 18 months
    ago a success and officially allow using the type in our
    codebase.
  - GIT_TEST_INSTALLED was not honored in the recent topic
    related to SHA256 hashes, which has been corrected.
  - The pop_most_recent_commit() function can have quite
    expensive worst case performance characteristics, which has
    been optimized by using prio-queue data structure.
  - Move structure definition from unrelated header file to where
    it belongs.
  - To help our developers, document what C99 language features
    are being considered for adoption, in addition to what past
    experiments have already decided.
  - The reftable unit tests are now ported to the "clar" unit
    testing framework.
  - Redefine where the multi-pack-index sits in the object
    subsystem, which recently was restructured to allow multiple
    backends that support a single object source that belongs to
    one repository.  A MIDX does span multiple "object sources".
  - Reduce implicit assumption and dependence on the_repository
    in the object-file subsystem.
  - Fixes since v2.50 Unless otherwise noted, all the changes in
    2.50.X maintenance track, including security updates, are
    included in this release.
  - A memory-leak in an error code path has been plugged. (merge
    7082da85cb ly/commit-graph-graph-write-leakfix later to
    maint).
  - A memory-leak in an error code path has been plugged. (merge
    aedebdb6b9 ly/fetch-pack-leakfix later to maint).
  - Some leftover references to documentation source files that
    no longer exist, due to recent ".txt" -&gt; ".adoc" renaming,
    have been corrected. (merge 3717a5775a
    jw/doc-txt-to-adoc-refs later to maint).
  - "git stash -p &lt;pathspec&gt;" improvements. (merge 468817bab2
    pw/stash-p-pathspec-fixes later to maint).
  - "git send-email" incremented its internal message counter
    when a message was edited, which made logic that treats the
    first message specially misbehave, which has been corrected.
    (merge 2cc27b3501 ag/send-email-edit-threading-fix later to
    maint).
  - "git stash" recorded a wrong branch name when submodules are
    present in the current checkout, which has been corrected.
    (merge ffb36c64f2 kj/stash-onbranch-submodule-fix later to
    maint).
  - When asking to apply mailmap to both author and committer
    field while showing a commit object, the field that appears
    later was not correctly parsed and replaced, which has been
    corrected. (merge abf94a283f sa/multi-mailmap-fix later to
    maint).
  - "git maintenance" lacked the care "git gc" had to avoid
    holding onto the repository lock for too long during packing
    refs, which has been remedied. (merge 1b5074e614
    ps/maintenance-ref-lock later to maint).
  - Avoid regexp_constraint and instead use comparison_constraint
    when listing functions to exclude from application of
    coccinelle rules, as spatch can be built with different
    regexp engine X-&lt;. (merge f2ad545813
    jc/cocci-avoid-regexp-constraint later to maint).
  - Updating submodules from the upstream did not work well when
    submodule's HEAD is detached, which has been improved. (merge
    ca62f524c1 jk/submodule-remote-lookup-cleanup later to
    maint).
  - Remove unnecessary check from "git daemon" code. (merge
    0c856224d2 cb/daemon-fd-check-fix later to maint).
  - Use of sysctl() system call to learn the total RAM size used
    on BSDs has been corrected. (merge 781c1cf571
    cb/total-ram-bsd-fix later to maint).
  - Drop FreeBSD 4 support and declare that we support only
    FreeBSD 12 or later, which has memmem() supported. (merge
    0392f976a7 bs/config-mak-freebsd later to maint).
  - A diff-filter with negative-only specification like "git log
  - -diff-filter=d" did not trigger correctly, which has been
    fixed. (merge 375ac087c5 jk/all-negative-diff-filter-fix
    later to maint).
  - A failure to open the index file for writing due to
    conflicting access did not state what went wrong, which has
    been corrected. (merge 9455397a5c
    hy/read-cache-lock-error-fix later to maint).
  - Tempfile removal fix in the codepath to sign commits with SSH
    keys. (merge 4498127b04 re/ssh-sign-buffer-fix later to
    maint).
  - Code and test clean-up around string-list API. (merge
    6e5b26c3ff sj/string-list later to maint).
  - "git apply -N" should start from the current index and
    register only new files, but it instead started from an empty
    index, which has been corrected. (merge 2b49d97fcb
    rp/apply-intent-to-add-fix later to maint).
  - Leakfix with a new and a bit invasive test on pack-bitmap
    files. (merge bfd5522e98 ly/load-bitmap-leakfix later to
    maint).
  - "git fetch --prune" used to be O(n^2) expensive when there
    are many refs, which has been corrected. (merge 87d8d8c5d0
    ph/fetch-prune-optim later to maint).
  - When a ref creation at refs/heads/foo/bar fails, the files
    backend now removes refs/heads/foo/ if the directory is
    otherwise not used. (merge a3a7f20516
    ps/refs-files-remove-empty-parent later to maint).
  - "pack-objects" has been taught to avoid pointing into objects
    in cruft packs from midx.
  - "git remote" now detects remote names that overlap with each
    other (e.g., remote nickname "outer" and "outer/inner" are
    used at the same time), as it will lead to overlapping
    remote-tracking branches. (merge a5a727c448
    jk/remote-avoid-overlapping-names later to maint).
  - The gpg.program configuration variable, which names a
    pathname to the (custom) GPG compatible program, can now be
    spelled with ~tilde expansion. (merge 7d275cd5c0
    jb/gpg-program-variable-is-a-pathname later to maint).
  - Our &lt;sane-ctype.h&gt; header file relied on that the
    system-supplied &lt;ctype.h&gt; header is not later included, which
    would override our macro definitions, but "amazon linux"
    broke this assumption.  Fix this by preemptively including
    &lt;ctype.h&gt; near the beginning of &lt;sane-ctype.h&gt; ourselves.
    (merge 9d3b33125f ps/sane-ctype-workaround later to maint).
  - Clean-up compat/bswap.h mess. (merge f4ac32c03a
    ss/compat-bswap-revamp later to maint).
  - Meson-based build did not handle libexecdir setting
    correctly, which has been corrected. (merge 056dbe8612
    rj/meson-libexecdir-fix later to maint).
  - Document that we do not require "real" name when signing your
    patches off. (merge 1f0fed312a
    bc/contribution-under-non-real-names later to maint).
  - "git commit" that concludes a conflicted merge failed to
    notice and remove existing comment added automatically (like
    "# Conflicts:") when the core.commentstring is set to 'auto'.
    (merge 92b7c7c9f5 ac/auto-comment-char-fix later to maint).
  - "git rebase -i" with bogus rebase.instructionFormat
    configuration failed to produce the todo file after recording
    the state files, leading to confused "git status"; this has
    been corrected. (merge ade14bffd7
    ow/rebase-verify-insn-fmt-before-initializing-state later to
    maint).
  - A few file descriptors left unclosed upon program completion
    in a few test helper programs are now closed. (merge
    0f1b33815b hl/test-helper-fd-close later to maint).
  - Interactive prompt code did not correctly strip CRLF from the
    end of line on Windows. (merge 711a20827b js/prompt-crlf-fix
    later to maint).
  - The config API had a set of convenience wrapper functions
    that implicitly use the_repository instance; they have been
    removed and inlined at the calling sites.
  - "git add/etc -p" now honor the diff.context configuration
    variable, and also they learn to honor the -U&lt;n&gt; command-line
    option. (merge 2b3ae04011 lm/add-p-context later to maint).
  - The case where a new submodule takes a path where there used
    to be a completely different subproject is now dealt with a
    bit better than before. (merge 5ed8c5b465
    kj/renamed-submodule later to maint).
  - The deflate codepath in "git archive --format=zip" had a
    longstanding bug coming from misuse of zlib API, which has
    been corrected.
- drop patches included in update:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
- refreshed patches:
  CVE-2024-24577.patch
  completion-wordbreaks.diff
  git-tcsh-completion-fixes.diff
  setup-don-t-fail-if-commondir-reference-is-deleted.patch
- contrib/workdir is dropped. remove references for it.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1755691200">- Use zlib instead of zlib-ng for SLES16</changelog>
</package>
<package pkgid="38eac1f803d1c7941e6ef82c183c9be13007d80e41b836fa8e5928781a60de87cf71b3abf1222fca4c24d37e7c7c9b0e65a271e5184fa24fef184faa221167b3" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.51.0" rel="160000.1.2"/>
  <changelog author="mrueckert@suse.de" date="1741953600">- update to 2.49.0
  https://about.gitlab.com/blog/2025/03/14/whats-new-in-git-2-49-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.49.0/Documentation/RelNotes/2.49.0.adoc
- switch to zlib-ng for code 16
- docs switched to asciidoc</changelog>
  <changelog author="tiwai@suse.com" date="1742817600">- Add support of SHA256 git repo for gitk (bsc#1239989):
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="tiwai@suse.com" date="1749816000">- Refresh gitk SHA256 patch and add SHA256 support to git-gui (bsc#1239989):
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
  The previous patches are dropped:
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1750161600">- update to 2.50.0
  https://about.gitlab.com/blog/what-s-new-in-git-2-50-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.50.0/Documentation/RelNotes/2.50.0.adoc</changelog>
  <changelog author="tiwai@suse.com" date="1750939200">- Fix git-gui citool SHA256 repo handling:
  refreshed 0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1752062400">- update to 2.50.1 (boo#1245938 boo#1245939 boo#1245942 boo#1245943
  boo#1245946 boo#1245947)
  Security fixes for CVE-2025-27613, CVE-2025-27614,
  CVE-2025-46334, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385,
  and CVE-2025-48386
  CVE-2025-27613, Gitk:
  When a user clones an untrusted repository and runs Gitk without
  additional command arguments, any writable file can be created and
  truncated. The option "Support per-file encoding" must have been
  enabled. The operation "Show origin of this line" is affected as
  well, regardless of the option being enabled or not.
  CVE-2025-27614, Gitk:
  A Git repository can be crafted in such a way that a user who has
  cloned the repository can be tricked into running any script
  supplied by the attacker by invoking `gitk filename`, where
  `filename` has a particular structure.
  CVE-2025-46334, Git GUI (Windows only):
  A malicious repository can ship versions of sh.exe or typical
  textconv filter programs such as astextplain. On Windows, path
  lookup can find such executables in the worktree. These programs
  are invoked when the user selects "Git Bash" or "Browse Files" from
  the menu.
  CVE-2025-46835, Git GUI:
  When a user clones an untrusted repository and is tricked into
  editing a file located in a maliciously named directory in the
  repository, then Git GUI can create and overwrite any writable
  file.
  CVE-2025-48384, Git:
  When reading a config value, Git strips any trailing carriage
  return and line feed (CRLF). When writing a config entry, values
  with a trailing CR are not quoted, causing the CR to be lost when
  the config is later read.  When initializing a submodule, if the
  submodule path contains a trailing CR, the altered path is read
  resulting in the submodule being checked out to an incorrect
  location. If a symlink exists that points the altered path to the
  submodule hooks directory, and the submodule contains an executable
  post-checkout hook, the script may be unintentionally executed
  after checkout.
  CVE-2025-48385, Git:
  When cloning a repository Git knows to optionally fetch a bundle
  advertised by the remote server, which allows the server-side to
  offload parts of the clone to a CDN. The Git client does not
  perform sufficient validation of the advertised bundles, which
  allows the remote side to perform protocol injection.
  This protocol injection can cause the client to write the fetched
  bundle to a location controlled by the adversary. The fetched
  content is fully controlled by the server, which can in the worst
  case lead to arbitrary code execution.
  CVE-2025-48386, Git:
  The wincred credential helper uses a static buffer (`target`) as a
  unique key for storing and comparing against internal storage. This
  credential helper does not properly bounds check the available
  space remaining in the buffer before appending to it with
  `wcsncat()`, leading to potential buffer overflows.</changelog>
  <changelog author="mrueckert@suse.de" date="1752062401">- refreshed gitk sha256 patches:
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="tiwai@suse.com" date="1752580800">- update git-gui sha256 patches after the upstream review:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- Update to 2.51.0
  - UI, Workflows &amp; Features
  - Userdiff patterns for the R language have been added.
  - Documentation for "git send-email" has been updated with a
    bit more credential helper and OAuth information.
  - "git cat-file --batch" learns to understand %(objectmode)
    atom to allow the caller to tell missing objects (due to
    repository corruption) and submodules (whose commit objects
    are OK to be missing) apart.
  - "git diff --no-index dirA dirB" can limit the comparison with
    pathspec at the end of the command line, just like normal
    "git diff".
  - "git subtree" (in contrib/) learned to grok GPG signing its
    commits.
  - "git whatchanged" that is longer to type than "git log --raw"
    which is its modern rough equivalent has outlived its
    usefulness more than 10 years ago.  Plan to deprecate and
    remove it.
  - An interchange format for stash entries is defined, and
    subcommand of "git stash" to import/export has been added.
  - "git merge/pull" has been taught the "--compact-summary"
    option to use the compact-summary format, intead of diffstat,
    when showing the summary of the incoming changes.
  - "git imap-send" has been broken for a long time, which has
    been resurrected and then taught to talk OAuth2.0 etc.
  - Some error messages from "git imap-send" has been updated.
  - When "git daemon" sees a signal while attempting to accept()
    a new client, instead of retrying, it skipped it by mistake,
    which has been corrected.
  - The reftable ref backend has matured enough; Git 3.0 will
    make it the default format in a newly created repositories by
    default.
  - "netrc" credential helper has been improved to understand
    textual service names (like smtp) in addition to the numeric
    port numbers (like 25).
  - Lift the limitation to use changed-path filter in "git log"
    so that it can be used for a pathspec with multiple literal
    paths.
  - Clean up the way how signature on commit objects are exported
    to and imported from fast-import stream.
  - Remove unsupported, unused, and unsupportable old option from
    "git log".
  - Document recently added "git imap-send --list" with an
    example.
  - "git pull" learned to pay attention to pull.autostash
    configuration variable, which overrides
    rebase/merge.autostash.
  - "git for-each-ref" learns "--start-after" option to help
    applications that want to page its output.
  - "git switch" and "git restore" are declared to be no longer
    experimental.
  - "git -c alias.foo=bar foo -h baz" reported "'foo' is aliased
    to 'bar'" and then went on to run "git foo -h baz", which was
    unexpected.  Tighten the rule so that alias expansion is
    reported only when "-h" is the sole option.
  - Performance, Internal Implementation, Development Support etc.
  - "git pack-objects" learned to find delta bases from blobs at
    the same path, using the --path-walk API.
  - CodingGuidelines update.
  - Add settings for Solaris 10 &amp; 11.
  - Meson-based build/test framework now understands TAP output
    generated by our tests.
  - "Do not explicitly initialize to zero" rule has been
    clarified in the CodingGuidelines document.
  - A test helper "test_seq" function learned the "-f &lt;fmt&gt;"
    option, which allowed us to simplify a lot of test scripts.
  - A lot of stale stuff has been removed from the contrib/
    hierarchy.
  - "git push" and "git fetch" are taught to update refs in
    batches to gain performance.
  - Some code paths in "git prune" used to ignore the passed-in
    repository object and used the `the_repository` singleton
    instance instead, which has been corrected.
  - Update ".clang-format" and ".editorconfig" to match our style
    guide a bit better.
  - "make coccicheck" succeeds even when spatch made suggestions,
    which has been updated to fail in such a case.
  - Code clean-up around object access API.
  - Define .precision to more canned parse-options type to avoid
    bugs coming from using a variable with a wrong type to
    capture the parsed values.
  - Flipping the default hash function to SHA-256 at Git 3.0
    boundary is planned.
  - Declare weather-balloon we raised for "bool" type 18 months
    ago a success and officially allow using the type in our
    codebase.
  - GIT_TEST_INSTALLED was not honored in the recent topic
    related to SHA256 hashes, which has been corrected.
  - The pop_most_recent_commit() function can have quite
    expensive worst case performance characteristics, which has
    been optimized by using prio-queue data structure.
  - Move structure definition from unrelated header file to where
    it belongs.
  - To help our developers, document what C99 language features
    are being considered for adoption, in addition to what past
    experiments have already decided.
  - The reftable unit tests are now ported to the "clar" unit
    testing framework.
  - Redefine where the multi-pack-index sits in the object
    subsystem, which recently was restructured to allow multiple
    backends that support a single object source that belongs to
    one repository.  A MIDX does span multiple "object sources".
  - Reduce implicit assumption and dependence on the_repository
    in the object-file subsystem.
  - Fixes since v2.50 Unless otherwise noted, all the changes in
    2.50.X maintenance track, including security updates, are
    included in this release.
  - A memory-leak in an error code path has been plugged. (merge
    7082da85cb ly/commit-graph-graph-write-leakfix later to
    maint).
  - A memory-leak in an error code path has been plugged. (merge
    aedebdb6b9 ly/fetch-pack-leakfix later to maint).
  - Some leftover references to documentation source files that
    no longer exist, due to recent ".txt" -&gt; ".adoc" renaming,
    have been corrected. (merge 3717a5775a
    jw/doc-txt-to-adoc-refs later to maint).
  - "git stash -p &lt;pathspec&gt;" improvements. (merge 468817bab2
    pw/stash-p-pathspec-fixes later to maint).
  - "git send-email" incremented its internal message counter
    when a message was edited, which made logic that treats the
    first message specially misbehave, which has been corrected.
    (merge 2cc27b3501 ag/send-email-edit-threading-fix later to
    maint).
  - "git stash" recorded a wrong branch name when submodules are
    present in the current checkout, which has been corrected.
    (merge ffb36c64f2 kj/stash-onbranch-submodule-fix later to
    maint).
  - When asking to apply mailmap to both author and committer
    field while showing a commit object, the field that appears
    later was not correctly parsed and replaced, which has been
    corrected. (merge abf94a283f sa/multi-mailmap-fix later to
    maint).
  - "git maintenance" lacked the care "git gc" had to avoid
    holding onto the repository lock for too long during packing
    refs, which has been remedied. (merge 1b5074e614
    ps/maintenance-ref-lock later to maint).
  - Avoid regexp_constraint and instead use comparison_constraint
    when listing functions to exclude from application of
    coccinelle rules, as spatch can be built with different
    regexp engine X-&lt;. (merge f2ad545813
    jc/cocci-avoid-regexp-constraint later to maint).
  - Updating submodules from the upstream did not work well when
    submodule's HEAD is detached, which has been improved. (merge
    ca62f524c1 jk/submodule-remote-lookup-cleanup later to
    maint).
  - Remove unnecessary check from "git daemon" code. (merge
    0c856224d2 cb/daemon-fd-check-fix later to maint).
  - Use of sysctl() system call to learn the total RAM size used
    on BSDs has been corrected. (merge 781c1cf571
    cb/total-ram-bsd-fix later to maint).
  - Drop FreeBSD 4 support and declare that we support only
    FreeBSD 12 or later, which has memmem() supported. (merge
    0392f976a7 bs/config-mak-freebsd later to maint).
  - A diff-filter with negative-only specification like "git log
  - -diff-filter=d" did not trigger correctly, which has been
    fixed. (merge 375ac087c5 jk/all-negative-diff-filter-fix
    later to maint).
  - A failure to open the index file for writing due to
    conflicting access did not state what went wrong, which has
    been corrected. (merge 9455397a5c
    hy/read-cache-lock-error-fix later to maint).
  - Tempfile removal fix in the codepath to sign commits with SSH
    keys. (merge 4498127b04 re/ssh-sign-buffer-fix later to
    maint).
  - Code and test clean-up around string-list API. (merge
    6e5b26c3ff sj/string-list later to maint).
  - "git apply -N" should start from the current index and
    register only new files, but it instead started from an empty
    index, which has been corrected. (merge 2b49d97fcb
    rp/apply-intent-to-add-fix later to maint).
  - Leakfix with a new and a bit invasive test on pack-bitmap
    files. (merge bfd5522e98 ly/load-bitmap-leakfix later to
    maint).
  - "git fetch --prune" used to be O(n^2) expensive when there
    are many refs, which has been corrected. (merge 87d8d8c5d0
    ph/fetch-prune-optim later to maint).
  - When a ref creation at refs/heads/foo/bar fails, the files
    backend now removes refs/heads/foo/ if the directory is
    otherwise not used. (merge a3a7f20516
    ps/refs-files-remove-empty-parent later to maint).
  - "pack-objects" has been taught to avoid pointing into objects
    in cruft packs from midx.
  - "git remote" now detects remote names that overlap with each
    other (e.g., remote nickname "outer" and "outer/inner" are
    used at the same time), as it will lead to overlapping
    remote-tracking branches. (merge a5a727c448
    jk/remote-avoid-overlapping-names later to maint).
  - The gpg.program configuration variable, which names a
    pathname to the (custom) GPG compatible program, can now be
    spelled with ~tilde expansion. (merge 7d275cd5c0
    jb/gpg-program-variable-is-a-pathname later to maint).
  - Our &lt;sane-ctype.h&gt; header file relied on that the
    system-supplied &lt;ctype.h&gt; header is not later included, which
    would override our macro definitions, but "amazon linux"
    broke this assumption.  Fix this by preemptively including
    &lt;ctype.h&gt; near the beginning of &lt;sane-ctype.h&gt; ourselves.
    (merge 9d3b33125f ps/sane-ctype-workaround later to maint).
  - Clean-up compat/bswap.h mess. (merge f4ac32c03a
    ss/compat-bswap-revamp later to maint).
  - Meson-based build did not handle libexecdir setting
    correctly, which has been corrected. (merge 056dbe8612
    rj/meson-libexecdir-fix later to maint).
  - Document that we do not require "real" name when signing your
    patches off. (merge 1f0fed312a
    bc/contribution-under-non-real-names later to maint).
  - "git commit" that concludes a conflicted merge failed to
    notice and remove existing comment added automatically (like
    "# Conflicts:") when the core.commentstring is set to 'auto'.
    (merge 92b7c7c9f5 ac/auto-comment-char-fix later to maint).
  - "git rebase -i" with bogus rebase.instructionFormat
    configuration failed to produce the todo file after recording
    the state files, leading to confused "git status"; this has
    been corrected. (merge ade14bffd7
    ow/rebase-verify-insn-fmt-before-initializing-state later to
    maint).
  - A few file descriptors left unclosed upon program completion
    in a few test helper programs are now closed. (merge
    0f1b33815b hl/test-helper-fd-close later to maint).
  - Interactive prompt code did not correctly strip CRLF from the
    end of line on Windows. (merge 711a20827b js/prompt-crlf-fix
    later to maint).
  - The config API had a set of convenience wrapper functions
    that implicitly use the_repository instance; they have been
    removed and inlined at the calling sites.
  - "git add/etc -p" now honor the diff.context configuration
    variable, and also they learn to honor the -U&lt;n&gt; command-line
    option. (merge 2b3ae04011 lm/add-p-context later to maint).
  - The case where a new submodule takes a path where there used
    to be a completely different subproject is now dealt with a
    bit better than before. (merge 5ed8c5b465
    kj/renamed-submodule later to maint).
  - The deflate codepath in "git archive --format=zip" had a
    longstanding bug coming from misuse of zlib API, which has
    been corrected.
- drop patches included in update:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
- refreshed patches:
  CVE-2024-24577.patch
  completion-wordbreaks.diff
  git-tcsh-completion-fixes.diff
  setup-don-t-fail-if-commondir-reference-is-deleted.patch
- contrib/workdir is dropped. remove references for it.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1755691200">- Use zlib instead of zlib-ng for SLES16</changelog>
</package>
<package pkgid="e0fe7250a5b7588118e93f7e9a635c3e1c51e0c561502d532b6dd10226bf8bba5f8a2ec91e11e7713e0fb1ec1ab4ec28c15bc2eb5ded84e7c81796aed4a53f67" name="glib-networking" arch="x86_64">
  <version epoch="0" ver="2.80.1" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1677499200">- Update to version 2.76.beta:
  + Hopefully fix environment proxy resolver on Windows.
  + Remove static_modules build option, use
  - Ddefault_library=static instead.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 2.76.0:
  + Fix OpenSSL sessions becoming unresumable.
  + Fix installed libproxy test.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1686830400">- Add a7db10e8862050f19af5c2eebcd1d590a04d5ced.patch: Fix tests
  using libproxy 0.5.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 2.76.1:
  + Fix proxy tests when built against libproxy 0.5.
  + Updated translations.
- Drop a7db10e8862050f19af5c2eebcd1d590a04d5ced.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1691755200">- Ignore test suite errors for now: the test passes when run
  locally in a chroot build env, but fails inside a kvm build env.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.78.0:
  + Respect root certificates added to macOS system keychain by
    users
  + Disable PKCS #11 tests when GnuTLS is built without PKCS #11
    support
  + Fix connection tests on 32-bit systems with 64-bit time_t
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Update to version 2.80.alpha:
  + GnuTLS: Add warning when system has no trusted certificates.
  + OpenSSL: Fix bug when populating trust store.
  + Fix license on dtls-connection.c test.
  + Updated translations.
- Require ca-certificates-mozilla to not run into the new warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709294400">- Update to version 2.80.rc:
  + GnuTLS:
  - fix improper use of IP address in SNI extension.
  - major performance improvement: reduce unnecessary trust list
    creation.
  + OpenSSL: properly handle BIO_CTRL_EOF.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710504000">- Update to version 2.80.0:
  + Mark plugin functions as exports on Windows.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736337600">- Update to version 2.80.1:
  + OpenSSL:
  - Fix crash in complete_handshake
  - Fix invalid free in
    openssl_get_binding_tls_server_end_point()
  + TLS test should handle G_IO_ERROR_WOULD_BLOCK
  + Updated translations.</changelog>
</package>
<package pkgid="e411bafb6cb33420798d72c2fe48b268b91d711c2940d9743c1a1ae2c3510fc192fd5a4c4f3f9d33c7ee9c664da4d3d74bec06361f1671969bc990d8fa0e07fb" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.84.4" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1740052800">- Update to version 2.83.4 (Unstable):
  + Fix Python shebang paths so they work on Windows again
  + Fix refcounting semantics of
    `g_dbus_connection_register_object_with_closures()` by adding a
    replacement API
  + Support static vfuncs in GIRepository
  + Add support for QNX8.0
  + Add a soft dependency on C11 — if your toolchain doesn’t
    support C11, you have six months to tell us before this becomes
    a hard dependency
  + Port from `net.hadess.PowerProfiles` to
    `org.freedesktop.UPower.PowerProfiles` for
    `GPowerProfileMonitorDBus`
  + Various bugs fixed.
  + Updated translations.
  + gdatetime: Fix integer overflow when parsing very long ISO8601 inputs.
  (CVE-2025-3360, bsc#1240897)
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.83.5 (Unstable):
  + A few improvements for when GLib is used as a subproject
  + Fix out-of-order parameters in a marshaller generated by
    `gdbus-codegen`
  + Various bugs fixed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.84.0:
  + Bugs fixed:
  - tests: Minor fixes to reference and stream-rw_all tests
  - gdebugcontrollerdbus: Fix a minor typo in a code example in
    the docs
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743681600">- Update to version 2.84.1:
  + Fix test failure when building against gobject-introspection
    ≥1.83.4
  + Bugs fixed:
  - 2.84.0 build failure on Linux:
    ../gio/gnetworkmonitornetlink.c:47:10: fatal error:
    netlink/netlink_route.h: No such file or directory
  - test failure with gobject-introspection 1.83.4: warning:
    element doc:format from state 3 is unknown, ignoring
  - gio/trash does not handle special characters well
  - `g_cancellable_connect()` documentation incorrect
  - g_cancellable_connect(): is it safe to unref cancellable from
    callback?
  - Crash with some registry key values in GWin32AppInfo
  - Memory sanitizer fixes
  - gobject: Be consistent in using atomic logic to handle the
    GParamSpecPool
  - gsettings: Port docs to gi-docgen format, add missing
    annotations and make various improvements
  - tests: Don't install runner scripts without installed_tests
  - docs: Document GSignalFlags members added after 2.0
  - tests: Add a test for g_object_freeze_notify() being called
    too often
  - gfileinfo: Slightly expand docs for
    g_file_info_get_attribute_as_string()
  - gi: Dynamically set doc-format
  - tests: Various fixes to create temporary files in /tmp rather
    than the build directory
  - gdbusnameowning: Convert docs to gi-docgen linking syntax
  - giounix-private: Fix macro for checking for epoll_create1()
  - Fix LGPL in header
  - gutils: make documentation of g_set_prgname() clearer
  - docs: Add some detail
  - gspawn-win32: Fix potential integer overflows in argv
    handling
  - gvarianttype: Improve docs on type validation
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747828800">- Update to version 2.84.2:
  + Bugs fixed:
  - gclosure: fix ATOMIC_CHANGE_FIELD to read vint atomically
  - Windows: fix wrong typelib path
  - gstring: carefully handle gssize parameters
  - Update macOS job for new CI runner
  - gdate: Call tzset before localtime_r
  - Backport -Wsign-conversion fixes for g_get_locale_variants()
  - glocalfile: Disable faccessat()-based query_exists on Android</changelog>
  <changelog author="dimstar@opensuse.org" date="1749816000">- Update to version 2.84.3:
  + Bug fixed: gstring: Fix overflow check when expanding the
    string (CVE-2025-6052, boo#1244596).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1754654400">- Update to version 2.84.4 (bsc#1249055):
  + Bugs fixed:
  - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib
    through glib/gfileutils.c via get_tmp_file()
  - GFile leak in g_local_file_set_display_name during error
    handling
  - Incorrect output parameter handling in closure helper of
    g_settings_bind_with_mapping_closures
  - gfileutils: fix computation of temporary file name
  - Fix GFile leak in  g_local_file_set_display_name()
  - gthreadpool: Catch pool_spawner creation failure
  - gio/filenamecompleter: Fix leaks
  - gfilenamecompleter: Fix g_object_unref() of undefined value</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="90168b5c8b4d715393e42efc7958d6f2e08c78254d9e330aafcf8a35a1bd395088cc6c4e2c355829ff48644de2e3fa4987898f1d57234369a0f2992ba4cc5cf2" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.40" rel="160000.4.1"/>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="552cdc70a84b8865e73e0142007f59a5d855439b840de30e2cca02361f73d2e8129ca1fe168efca4b312db90aa5b545a8260e68e351b31cdca91e4349e0bd61f" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.40" rel="160000.4.1"/>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="f054849211929afe4e0764977eac030200e29b62bb5b45c732b0d5f6c2e7e5bf738f2a74821481486e3d7a3042d651fc1449f3ebe49ed62b9468f59459a0ce09" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.40" rel="160000.4.1"/>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="d877a4bbec39d8c57c9e7c36f42a6347fc864d68f286c79cd4293535606ff048e015e16ffc23bbae72fa102b98bd5bf67d7937515fe2769f5de7e398722659a5" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.40" rel="160000.4.1"/>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="becf6f4819230640c7ed2370221111b5b045ff7e4f6757ddb87a78eba2f5251ae7d85a5df3b7946cb307cb30064cb08428d2d1c8b878d7352e9a368073985e43" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="160000.2.1"/>
  <changelog author="angel.yankov@suse.com" date="1742817600">- FIPS: Mark SHA-1 as non-approved in the SLI for all operations. [jsc#PED-12224]
  * Add gnutls-FIPS-disable-mac-sha1.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1743681600">- Disable liboqs on armv6</changelog>
  <changelog author="angel.yankov@suse.com" date="1745841600">- Fix FIPS mode running on Tumbleweed [bsc#1237101]
  * When nettle or libhogweed are installed with glbic-hwcaps for x86_64-v3,
    some paths differ and we are unable to match the hmac file for the lib.
  * Add gnutls-FIPS-HMAC-x86_64-v3-opt.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1752408000">- enable ktls support
- enable brotli and zstd compression support</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Update to 3.8.10:
  * libgnutls: Fix NULL pointer dereference when 2nd Client Hello omits PSK
    Reported by Stefan Bühler. [GNUTLS-SA-2025-07-07-4, CVSS: medium]
    [bsc#1246299, CVE-2025-6395]
  * libgnutls: Fix heap read buffer overrun in parsing X.509 SCTS timestamps
    Spotted by oss-fuzz and reported by OpenAI Security Research Team,
    and fix developed by Andrew Hamilton. [GNUTLS-SA-2025-07-07-1,
    CVSS: medium] [bsc#1246233, CVE-2025-32989]
  * libgnutls: Fix double-free upon error when exporting otherName in SAN
    Reported by OpenAI Security Research Team. [GNUTLS-SA-2025-07-07-2,
    CVSS: low] [bsc#1246232, CVE-2025-32988]
  * certtool: Fix 1-byte write buffer overrun when parsing template
    Reported by David Aitel. [GNUTLS-SA-2025-07-07-3,
    CVSS: low] [bsc#1246267, CVE-2025-32990]
  * libgnutls: PKCS#11 modules can now be used to override the default
    cryptographic backend. Use the [provider] section in the system-wide config
    to specify path and pin to the module (see system-wide config Documentation).
  * libgnutls: Linux kernel version 6.14 brings a Kernel TLS (kTLS) key update
    support. The library running on the aforementioned version now utilizes the
    kernel’s key update mechanism when kTLS is enabled, allowing uninterrupted
    TLS session. The --enable-ktls configure option as well as the system-wide
    kTLS configuration(see GnuTLS Documentation) are still required to enable
    this feature.
  * libgnutls: liboqs support for PQC has been removed
    For maintenance purposes, support for post-quantum cryptography
    (PQC) is now only provided through leancrypto. The experimental key
    exchange algorithm, X25519Kyber768Draft00, which is based on the
    round 3 candidate of Kyber and only supported through liboqs has
    also been removed altogether.
  * libgnutls: TLS certificate compression methods can now be set with
    cert-compression-alg configuration option in the gnutls priority file.
  * libgnutls: All variants of ML-DSA private key formats are supported
    While the previous implementation of ML-DSA was based on
    draft-ietf-lamps-dilithium-certificates-04, this updates it to
    draft-ietf-lamps-dilithium-certificates-12 with support for all 3
    variants of private key formats: "seed", "expandedKey", and "both".
  * libgnutls: ML-DSA signatures can now be used in TLS
    The ML-DSA signature algorithms, ML-DSA-44, ML-DSA-65, and
    ML-DSA-87, can now be used to digitally sign TLS handshake
    messages.
  * API and ABI modifications:
  - GNUTLS_PKCS_MLDSA_SEED: New enum member of gnutls_pkcs_encrypt_flags_t
  - GNUTLS_PKCS_MLDSA_EXPANDED: New enum member of gnutls_pkcs_encrypt_flags_t
- Add patch gnutls-3.8.10-disable-ktls_test.patch
- Rebased patches:
  * gnutls-FIPS-140-3-references.patch
  * gnutls-FIPS-disable-mac-sha1.patch
  * gnutls-disable-flaky-test-dtls-resume.patch
  * gnutls-skip-pqx-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752580800">- Build with TPM 2.0 support via tpm2-0-tss.</changelog>
  <changelog author="pmonreal@suse.com" date="1752580801">- Build with leancrypto. The liboqs support for post-quantum
  cryptography (PQC) has been removed and is only provided through
  leancrypto.</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="ba82e93d29d08f7b23c2471f3c01e9c1e1388cfd6860e4bd1506b20236d4bf6e40bee15f0f9f9cb60722bf51c6788e4ba2cfc1d4f6c1aaf035993d99fbbe3a20" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="160000.5.1"/>
  <changelog author="lucas.mulling@suse.com" date="1741348800">- Update to 2.5.5: [bsc#1236931, bsc#1239119]
  * gpg: Fix a verification DoS due to a malicious subkey in the
    keyring.  [T7527]
  * dirmngr: Fix possible hangs due to blocking connection requests.
    [T6606, T7434]
  Release-info: https://dev.gnupg.org/T7530</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750161600">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix another regression due to the T7547 fix.
  * The fix for CVE-2025-30258 was introduced in 2.5.5
  * Add gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873601">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601600">- Security fix [bsc#1256389] (gpg.fail/filename)
  * Added gnupg-accepts-path-separators-literal-data.patch
  * GnuPG Accepts Path Separators and Path Traversals in Literal Data</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601601">- Security fix
  * [bsc#1257396, CVE-2026-24882]
  - gpg2: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys
  - Added gnupg-CVE-2026-24882.patch
  * [bsc#1257395, CVE-2026-24883]
  - gpg2: denial of service due to long signature packet length causing parse_signature to return success with sig-&gt;data[] set to a NULL value
  - Added gnupg-CVE-2026-24883.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Fix Y2K38 FTBFS:
  * gpg2 quick-key-manipulation test FTBFS-2038 (bsc#1251214)
  * Upstream issue: dev.gnupg.org/T8096
  * Add gnupg-gpgscm-New-operator-long-time-t-to-detect-proper-tim.patch</changelog>
</package>
<package pkgid="c24ddd821cf55d63f6ce51d9041f7bf7dea993e62bda7a329340c20bc0375f5b8ca7956ba0ea3b8fd5c39e805970eeb633d2bb7d27961c28e1f005c3df29fd9f" name="gptfdisk" arch="x86_64">
  <version epoch="0" ver="1.0.10" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1590494400">- Update to 1.0.5
  * Changed number of columns in type code output ("sgdisk -L"
    and equivalents in gdisk and cgdisk) from 3 to 2, since some
    descriptions are long enough that they are ambiguous with
    three columns.
  * You can now put the 0xEE partition last in a hybrid MBR using
    sgdisk. (Previously, this was possible with gdisk but not
    with sgdisk.) See the sgdisk man page for details.
  * Added numerous type codes for Container Linux, Veracrypt, and
    Freedesktop.org's Discoverable Partitions Specification
  * Partition type name searches are now case-insensitive.
  * It is now possible to quit out of partition type name
    searches by typing "q".
  * When changing a partition type code, the default is now the
    current type code, not a platform-specific type code.</changelog>
  <changelog author="jengelh@inai.de" date="1599220800">- Remove old specfile constructs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1612872000">- Update to 1.0.6
  * Fixed bug that could cause segfault if GPT header claimed partition
    entries are oversized. See:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0256
  * Fixed bug that could cause a crash if a badly-formatted MBR disk was
    read. See:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0308
  * Renamed the partition type "Freedesktop $BOOT" to "XBOOTLDR partition".
  * Added several more Freedesktop partition table type codes (0x8312 through
    0x831C).
  * Fixed type code definition in diskio-unix.cc that prevented 32-bit builds
    from correctly handling disks over 4 TiB in size.
  * Minor tweaks to get the software to compile on FreeBSD; that seems to have
    fallen into disrepair.</changelog>
  <changelog author="manfred99@gmx.ch" date="1613476800">- fix regression from version 1.0.6: misleading warning when reading MBR disks,
    upstream commit f063fe08e424c99f133df18bf9dce49c851bcb0a
- Add fix-spurious-warnings.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623326400">- Update to 1.0.8
  * Fixed double byte swap operation on writes of partition name data on
    big-endian systems; this is in addition to the double byte swap fix on
    reading partition label data fixed in 1.0.7. (Thanks to Erik Larsson for
    both fixes.)
  * Added feature to gdisk and sgdisk to enable swapping the byte order of
    partition names, so as to correct disks already affected by the preceding
    bug. This option is 'b' on the experts' menu in gdisk and
  - b/--byte-swap-name in sgdisk. This seems advanced/obscure enough that I
    don't want to clutter cgdisk's menu with this option, so I haven't added
    it there.
  * Added type code for the Barebox boot loader (0xbb00;
    4778ED65-BF42-45FA-9C5B-287A1DC4AAB1).
  * Fixed bug that caused spurious warnings about the partition table
    header claiming an invalid size of partition entries when reading
    some MBR disks.
  * Added ARM64 as an architecture for the Mac builds of gdisk and fixparts.
    The official GPT fdisk binaries of these files for macOS are now
    "universal" x86-64/ARM64 binaries, so they will run natively on the new M1
    (ARM64) Macs. The sgdisk and cgdisk binaries, though, remain built only
    for x86-64, because they rely on libraries that are not easily built in
    "universal" form.
  * Fixed double byte swap operation on partition label data on big-endian
    CPUs. This resulted in partition names becoming gibberish on such CPUs.
  * Added three new type codes:
  - 0x0701 - Microsoft Storage Replica
  - 0x0702 - ArcaOS Type 1
  - 0x8401 - Storage Performance Development Kit (SPDK) block device
- Drop fix-spurious-warnings.patch</changelog>
  <changelog author="jengelh@inai.de" date="1661601600">- Update to release 1.0.9
  * Added support for aligning partitions' end points, as well as
    their start points. This support affects the default
    partition size when using 'n' in gdisk; it affects the
    default partition size in cgdisk; and it is activated by the
    new `-I` option in sgdisk.
  * Added check for too-small disks (most likely to be an issue
    when trying to use a too-small disk image); program now
    aborts if this happens.
  * Added new parition type codes.</changelog>
  <changelog author="fvogt@suse.com" date="1664539200">- Add patch to fix sgdisk with popt 1.19:
  * 0001-Fix-failure-crash-of-sgdisk-when-compiled-with-lates.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1678190400">- Add gptfdisk-fix-null-pointer-dereference.patch: Fix NULL pointer
  dereference in pervious patch, poptGetArg can return NULL so we
  should not pass it to strdup directly (bsc#1208877).</changelog>
  <changelog author="fvogt@suse.com" date="1694088000">- Add patch to fix UUID generation with util-linux &gt;= 2.38:
  * gptfdisk-1.0.9-libuuid.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1740052800">- Update to release 1.0.10
  * Fix failure &amp; crash of sgdisk when compiled with latest popt
  * Fix NULL dereference when duplicating string argument
  * Allow partition dynamically allocated by --largest-new to be
    referenced by other options
  * Truncate decimal inputs (e.g. "9.5G" becomes "9G")
  * New partition type codes from the Discoverable Partitions
    Specification
- Delete 0001-Fix-failure-crash-of-sgdisk-when-compiled-with-lates.patch
  gptfdisk-1.0.9-libuuid.patch,
  gptfdisk-fix-null-pointer-dereference.patch (merged)</changelog>
</package>
<package pkgid="781e749a60f7120d9cc31cbc41f71218135e0bd6f0ca7aaf28951698fd297d2145c1ef186c14fcef04586b44d8bbcfe0120495ace7251643d183c6ba0355698a" name="grep" arch="x86_64">
  <version epoch="0" ver="3.11" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1653393600">- use release keyring rather than full one for validation</changelog>
  <changelog author="schwab@suse.de" date="1659528000">- Skip more gnulib tests in qemu build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- GNU grep 3.8 (jsc#PED-6579):
  * The -P option is now based on PCRE2 instead of the older PCRE
    (boo#1201803)
  * egrep and fgrep commands, deprecated since release 2.5.3 (2007), now
    warn that they are obsolescent and should be replaced by grep -E and
    grep -F
  * The confusing GREP_COLOR environment variable is now obsolescent
  * Regular expressions with stray backslashes now cause warnings
  * Regular expressions like [:space:] are now errors even if
    POSIXLY_CORRECT is set, since POSIX now allows the GNU behavior
  * In locales using UTF-8 encoding, the regular expression '.' no
    longer sometimes fails to match Unicode characters
  * The -s option no longer suppresses "binary file matches"
    messages.
- doc: fix man page syntax errors (bsc#1201001)</changelog>
  <changelog author="schwab@suse.de" date="1663675200">- efgrep-warning.patch: remove warning from [ef]grep</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- Update to grep 3.9
  * With -P, some non-ASCII UTF8 characters were not recognized as
    word-constituent due to our omission of the PCRE2_UCP flag.
  * When given multiple patterns the last of which has a back-reference,
    grep no longer sometimes mistakenly matches lines in some cases</changelog>
  <changelog author="dmueller@suse.com" date="1680177600">- update to 3.10:
  * With -P, \d now matches only ASCII digits, regardless of
    PCRE options/modes. The changes in grep-3.9 to make ^H and \w
    work properly had the undesirable side effect of making \d
    also match e.g., the Arabic digits: ٠١٢٣٤٥٦٧٨٩.
    With grep-3.9, -P '\d+' would match that ten-digit (20-byte)
    string. Now, to match such a digit, you would use \p{Nd}.
    Similarly, \D is now mapped to [^0-9].</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 3.11:
  * With -P, patterns like [\d] now work again. Fixing this
    has caused grep to revert to the behavior of grep 3.8, in that
    patterns like \w and ^H go back to using ASCII rather
    than Unicode interpretations.
    However, future versions of GNU grep and/or PCRE2 are
    likely to fix this and change the behavior of \w and ^H
    back to Unicode again, without breaking [\d] as 3.10 did.</changelog>
  <changelog author="dimstar@opensuse.org" date="1692187200">- export CONFIG_SHELL=/bin/sh before running configure: results in
  the shell script (egrep/fgrep) to receive a /bin/sh shebang
  instead of requiring bash (the local shell used to build).</changelog>
  <changelog author="dmueller@suse.com" date="1712750400">- restore texinfo macros for SLE15</changelog>
</package>
<package pkgid="6aa97086bb0bd535a6ede5da750d9373c791597b0c4a4436f188972f82ffe4f721f036a3c263dc652aaec6cde9a8236ced08ee25308a446ff23085712944e687" name="groff" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1602331200">- Don't create recursive link 'current' inside
  /usr/share/groff/%{version}.</changelog>
  <changelog author="sbrabec@suse.com" date="1638273600">- Remove /usr/share/groff/current from groff-full. It creates file
  conflicts during version upgrade (bsc#1192195#c8).</changelog>
  <changelog author="sbrabec@suse.com" date="1644235200">- Do not fail with rpm --excludedocs (bsc#1192195).</changelog>
  <changelog author="pgajdos@suse.com" date="1671105600">- set doc-default-operating-system and doc-volume-operating-system
  to $PRETTY_NAME [bsc#1185613]</changelog>
  <changelog author="pgajdos@suse.com" date="1672833600">- set doc-default-operating-system and doc-volume-operating-system
  to SUSE [bsc#1185613c#5], $PRETTY_NAME cannot be used build time</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- ship %{_docdir}/groff/pdf also in groff-doc [bsc#1208498]</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1693310400">- Update to 1.23.0:
  * Too many changes, see NEWS file for details.
- Refreshed patches:
  * 0002-documentation-for-the-locale-keyword.patch
  * 0004-don-t-use-usr-bin-env-in-shebang.patch
  * groff-1.20.1-deunicode.patch
  * groff-1.20.1-nroff-empty-LANGUAGE.patch
  * groff-1.21-CVE-2009-5081.patch
  * groff-force-locale-usage.patch
- Drop sort-perl-hash-keys.patch (upstreamed)
- Drop doc-volume-operating-system and doc-default-operating-system
  changes (doesn't default to BSD anymore)
- Configure flag --with-appresdir has been renamed to --with-appdefdir
- Update file list with files that were removed from the package</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1694174400">- Refresh bash-scripts.patch
- Add nroff-map-CW-to-R.patch
  * Fixes man-db build errors</changelog>
  <changelog author="luc14n0@opensuse.org" date="1696420800">- Define ext_man="%{?ext_man}%{!?ext_man:.gz}" shell variable in
  the install directive, and replace "%{?ext_man}" with
  "${ext_man:-}" to fix groff-gf.7.gz file ending up uncompressed
  (despite the name) due to the use of %{?ext_man} in the mv/ln
  TARGET parameter used for the preparation of Alternatives. Also
  define a simple shell contruct which identifies whether the
  manpage file is compressed. If not, it unsets the $ext_man
  variable, then ajdusting the mv/ln calls. That's all necessary
  because even though ext_man macro is defined, it doesn't mean the
  file has the extension (which dependes whether the build script
  compresses it).</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1726228800">- Add groff-restore-hyphen-minus.patch (bsc#1226153)</changelog>
</package>
<package pkgid="4962cdfc316ddb07828cc601561fa3187c7eab4d89970a2c9d48036878b6ae2770bcad6661a8b1d67cb0c3b8af41691167ff59174cec2049582dc2923523c62b" name="growpart" arch="noarch">
  <version epoch="0" ver="0.33" rel="160000.3.2"/>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ms@suse.com" date="1571313600">- Deleted rootgrow source and sub-package build
  rootgrow is provided on github: https://github.com/SUSE-Enceladus/rootgrow
  and builds a standalone package now</changelog>
  <changelog author="ms@suse.com" date="1571918400">- Reference entry for maintenance
  Tracker bug for the submission set to: bsc#1154357</changelog>
  <changelog author="iforster@suse.com" date="1572004800">- Replaced hardcoded systemd paths with macros in spec file</changelog>
  <changelog author="fvogt@suse.com" date="1572350400">- Clean growpart.spec:
  * Drop obsolete tags
  * Use install instead of mkdir+cp+chmod
  * Fix build on SLE 12 SP4</changelog>
  <changelog author="rjschwei@suse.com" date="1582804800">- Update to version 0.31 (bsc#1164736)
  + mount-image-callback: mount with -o 'rw' or -o 'ro' (LP: #1663722)
  + mount-image-callback: run blockdev and udevadm settle on nbd devices.
    (LP: #1741096, 1741300)
  + mount-image-callback: Drop support for mounting lxd containers.
    (LP: #1715994)
  + growpart: fix bug that stopped GPT disks from being grown past 2TB.
    (LP: #1762748)
  + mount-image-callback: mention --help and -C/--cd-mountpoint in Usage
  + growpart: fix bug when resizing a middle partition with sgdisk
    (LP: #1706751) [Fred De Backer]
  + growpart: Resolve symbolic links before operating.
    [Kevin Locke] (LP: #1744406)
  + growpart: fix bug occurring if start sector and size were the same.
    [Lars Kellogg-Stedman] (LP: #1807171)
  + debian/control: drop Suggests on lxc1
  + debian/tests/control: add test growpart-start-matches-size.
  + White space cleanup.  Remove trailing space and tabs.
  + Move to git.
- drop licenseGPLv3.patch (upstream)</changelog>
  <changelog author="rjschwei@suse.com" date="1690977600">- Update to verion 0.32
  + Only listing growpart changes we do not ship other parts of the source
  + Growpart fix undefined variable in growpart error message. [Scott Moser]
  + Add test for growpart lvm resize. [Scott Moser]
  + Growpart: add support for resizing an lvm pv after growing the
    partition. [Scott Moser] (LP: #1799953)
  + growpart: parse the kernel version in a more robust way (#2)
    [Paride Legovini] (LP: #1881014)
  + growpart: Do not fail if only sgdisk is available. [Scott Moser]
  + growpart: Fix reading sector size with newer sgdisk versions.
    [Scott Moser]
  + growpart: Fail on unknown values of GROWPART_RESIZER. [Scott Moser]
  + growpart: add flock support to prevent udev races
    [Ryan Harper] (LP: #1834875)
  + test-growpart: fix logic error resulting in test failure.
    [Scott Moser] (LP: #1842682)
  + Fix race condition in test-growpart teardown seen on ppc64el.
    [Scott Moser] (LP: #1836593)
  + growpart: Fix bug when file image ends in a digit.
    [Scott Moser] (LP: #1835124)</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 0.33:
  * More busybox compatibility changes
  * growpart: Add support for overprovisioning (#35)
  * mount-image-callback: do not rely on udevadm
  * growpart: only run `udevadm` if it exists (#36) [oittaa]
  * growpart: detect whether blkid is util-linux version and
    act accordingly
  * growpart doesn't work when LANG=cs_CZ.UTF-8
  * growpart: change flock call to use short option for
    Busybox compatibility [Dermot Bradley]
  * growpart: Use LANG=C to parse sfdisk output
  * Fix bad variable use.
  * Whitespace cleanups.
  * Growpart fix undefined variable in growpart error message.
  * cloud-image-utils: Add depends on fdisk, drop e2fsprogs
  * growpart: add flock support to prevent udev races
  * Drop the python2 only cloud-utils-euca package and tools.
  * test-growpart: fix logic error resulting in test failure.
- fix URL (development moved to GitHub)
- use fully qualified urls for source validation
- drop licenseGPLv3.patch (upstream)</changelog>
</package>
<package pkgid="61d44490bac811e07d1e6df2fcba378085bfb1ff42502aa2e8c984792eb833812a300f1eec47025d2418e7b69553e0776b4c902fbc47df8f5a01a150e3910adc" name="growpart-generator" arch="noarch">
  <version epoch="0" ver="0.8" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1573214400">- Initial packaging of the standalone generator</changelog>
  <changelog author="fvogt@suse.com" date="1573473600">- Use %{_systemdgeneratordir} macro</changelog>
  <changelog author="fvogt@suse.com" date="1645012800">- Get the parent device with lsblk
- Improve the partition number extraction to work with device names
  containing multiple numbers (bsc#1196101)</changelog>
</package>
<package pkgid="0d7e1993e020c3dcfcb6459f9607b1580b4e1b86a3ec25c116a8e0daf5c63f4583298198e42e1047e911ad0b38b7aba044f7de9567696b0387b3ab8eaa783e3e" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.12" rel="160000.6.1"/>
  <changelog author="snwint@suse.com" date="1758628800">- turn off page flipping for i386-pc using VBE video backend (bsc#1245636)
  * grub2-i386-pc-no-pageflipping.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356800">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356801">- Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="glin@suse.com" date="1768910400">- Optimize PBKDF2 to reduce the decryption time (bsc#1248516)
  * 0001-lib-crypto-Introduce-new-HMAC-functions-to-reuse-buf.patch
  * 0002-lib-pbkdf2-Optimize-PBKDF2-by-reusing-HMAC-handle.patch
  * 0001-kern-misc-Implement-faster-grub_memcpy-for-aligned-b.patch</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="c95c9e49911b3b2a812eaacac6be58ddc511224a7ff51bcdad2aa1db36079f5623eb9579b077c71e8236426d982f0a7302cb3fefd0cdc33712363da4b51e80ca" name="grub2-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="16.0.20240405" rel="160000.1.141"/>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563192000">- Bump to 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1580731200">- Sync with Tumbleweed</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1610452800">- Sync with Tumbleweed
- Bump to 15.3</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1647950400">- Bump to 15.4</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1650542400">- Skip *.tr files in /etc/bootsplash/themes/openSUSE/bootloader</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1662984000">- Bump to 15.5
- Supply new Wallpaper Issue#132</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1663156800">- use path-&gt;union for fonts in logo boo#1203394</changelog>
  <changelog author="Yuchen Lin &lt;mlin+factory@suse.de&gt;" date="1668427200">- Remove systemd-icon-branding since it has been replaced by
  distribution-logos-openSUSE-icon, bsc#1204657</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1712318400">- Bump to 16.0 and se png for wallpapers
  * SLES seems to be using png
  * Using a compat symlink wallpapers/openSUSEdefault-&gt; wallpapers/SLEdefault
  allows running certain apps without rebuild. Such as cockpit.
  * Use optipng -o5 to compress files (has to be reflected in spec)
  * Bump date</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1712318401">* Drop hicolor symlinks from Makefile which are no longer present in TW
  exactly these are raising unpackaged errors on Leap 16.0 build.
  * Plasma 6 drops support for metadata.desktop</changelog>
</package>
<package pkgid="b3b9c84c969008587df18f3dd8828240ac38f1eb2c43a9fa8fd27d49fbb2c83a02234718ff088dbb1326451a247430dd68173ac0aee3c053003849cf5aacf124" name="grub2-common" arch="x86_64">
  <version epoch="0" ver="2.12" rel="160000.6.1"/>
  <changelog author="snwint@suse.com" date="1758628800">- turn off page flipping for i386-pc using VBE video backend (bsc#1245636)
  * grub2-i386-pc-no-pageflipping.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356800">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356801">- Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="glin@suse.com" date="1768910400">- Optimize PBKDF2 to reduce the decryption time (bsc#1248516)
  * 0001-lib-crypto-Introduce-new-HMAC-functions-to-reuse-buf.patch
  * 0002-lib-pbkdf2-Optimize-PBKDF2-by-reusing-HMAC-handle.patch
  * 0001-kern-misc-Implement-faster-grub_memcpy-for-aligned-b.patch</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="bbe79fa990d5fc0bbaf1cc040cf4dbdd1071f4e100e399dfadc96972d9e5c8c3d7e305e316c2a5aa8d9d764e585ead5993315ce39a0d3cc0873d7e407d8b0b88" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.12" rel="160000.6.1"/>
  <changelog author="snwint@suse.com" date="1758628800">- turn off page flipping for i386-pc using VBE video backend (bsc#1245636)
  * grub2-i386-pc-no-pageflipping.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356800">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356801">- Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="glin@suse.com" date="1768910400">- Optimize PBKDF2 to reduce the decryption time (bsc#1248516)
  * 0001-lib-crypto-Introduce-new-HMAC-functions-to-reuse-buf.patch
  * 0002-lib-pbkdf2-Optimize-PBKDF2-by-reusing-HMAC-handle.patch
  * 0001-kern-misc-Implement-faster-grub_memcpy-for-aligned-b.patch</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="0610a902ad960260a90645a142c0e3ffe735d44c708c75484e7390c35ed67dc5abd38657602a4501e8bd54082f599bb2bcbeafb73e5a79615a4219316406b118" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="160000.6.1"/>
  <changelog author="snwint@suse.com" date="1758628800">- turn off page flipping for i386-pc using VBE video backend (bsc#1245636)
  * grub2-i386-pc-no-pageflipping.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356800">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356801">- Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="glin@suse.com" date="1768910400">- Optimize PBKDF2 to reduce the decryption time (bsc#1248516)
  * 0001-lib-crypto-Introduce-new-HMAC-functions-to-reuse-buf.patch
  * 0002-lib-pbkdf2-Optimize-PBKDF2-by-reusing-HMAC-handle.patch
  * 0001-kern-misc-Implement-faster-grub_memcpy-for-aligned-b.patch</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="b68fd01756a7596a91ee0c0ab6dc3ebe608cca1e642f8992aadccfe19380c68b3a526735fe049c19d243c09d2f2a9e197f7528b042f93c8f78240cf65ed2d34f" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.12" rel="160000.6.1"/>
  <changelog author="snwint@suse.com" date="1758628800">- turn off page flipping for i386-pc using VBE video backend (bsc#1245636)
  * grub2-i386-pc-no-pageflipping.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356800">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356801">- Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="glin@suse.com" date="1768910400">- Optimize PBKDF2 to reduce the decryption time (bsc#1248516)
  * 0001-lib-crypto-Introduce-new-HMAC-functions-to-reuse-buf.patch
  * 0002-lib-pbkdf2-Optimize-PBKDF2-by-reusing-HMAC-handle.patch
  * 0001-kern-misc-Implement-faster-grub_memcpy-for-aligned-b.patch</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="c719537ff50cbc643bdc383e4ad5dde836e00b9ebbf3b20df53b4745355aeb5600b8e78f55d57590a3e7ccfa221f1a54d61e706309be313f1d90f484a01efeaf" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.12" rel="160000.6.1"/>
  <changelog author="snwint@suse.com" date="1758628800">- turn off page flipping for i386-pc using VBE video backend (bsc#1245636)
  * grub2-i386-pc-no-pageflipping.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356800">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1760356801">- Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="glin@suse.com" date="1768910400">- Optimize PBKDF2 to reduce the decryption time (bsc#1248516)
  * 0001-lib-crypto-Introduce-new-HMAC-functions-to-reuse-buf.patch
  * 0002-lib-pbkdf2-Optimize-PBKDF2-by-reusing-HMAC-handle.patch
  * 0001-kern-misc-Implement-faster-grub_memcpy-for-aligned-b.patch</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="79e64b2109638ee0ebc9d900ecffb23b9e170dbc48b1818b00d87dad7740347870717f4a67509a6385725baa6b868f54d7f2de0c0f977918ebe4d9431eaa3b24" name="gsettings-desktop-schemas" arch="x86_64">
  <version epoch="0" ver="48.0" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Move en_US and en_GB 'translations' to the main package. Do not
  force the -lang package on all users.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721044800">- Update to version 46.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724587200">- Update to version 47.beta:
  + Add break-reminder schema
  + Provide a new pressure range for styli
  + Add SwitchMonitor and Keybinding to the tablet stylus actions
  + Switch back to Cantarell font
  + Updated translations.
- Changes from version 47.alpha:
  + Add key to tweak font rendering
  + Include Settings in sort order
  + Add key to pick accent color
  + Updated translations.
- Rebase patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725883200">- Update to version 47.rc:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726401600">- Update to version 47.1:
  + meson: Fix project version
- Changes from version 47.0:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736683200">- Update to version 48.alpha:
  + Add screen limits schema
  + Fix gendered language in key descriptions
- Add check section where we test that the schemas compile.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738670400">- Update to version 48.beta:
  + Switch to Adwaita Fonts
  + Split data recording and limits in time limits schema
  + Set more useful defaults on stylus buttons
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738756800">- Replace cantarell-fonts Recommends with adwaita-fonts: follow
  upstreams change from 48.beta.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740916800">- Update to version 48.rc:
  + Switch to JPEG for background image.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1742212800">- Update to version 48.0:
  + Updated translations.</changelog>
</package>
<package pkgid="77ccad3761b8e2cf088e8d9ab201b263aa695f665e2d5a798ad0ae6973e09de0233b0e3a61d41b6f62f9117faac9e984f8abe9c9fb70533de3da885e145758f9" name="gstreamer" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1736251200">- Update to version 1.24.11:
  + Highlighted bugfixes:
  - playback: Fix SSA/ASS subtitles with embedded fonts
  - decklink: add missing video modes and fix 8K video modes
  - matroskamux: spec compliance fixes for audio-only files
  - onnx: disable onnxruntime telemetry
  - qtdemux: Fix base offset update when doing segment seeks
  - srtpdec: Fix a use-after-free issue
  - (uri)decodebin3: Fix stream change scenarios, possible
    deadlock on shutdown
  - video: fix missing alpha flag in AV12 format description
  - avcodecmap: Add some more channel position mappings
  - cerbero bootstrap fixes for Windows 11
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - No changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 1.24.12:
  + Highlighted bugfixes:
  - d3d12: Fix shaders failing to compile with newer dxc versions
  - decklinkvideosink: Fix handling of caps framerate in auto
    mode; also a decklinkaudiosink fix
  - devicemonitor: Fix potential crash macOS when a device is
    unplugged
  - gst-libav: Fix crash in audio encoders like avenc_ac3 if
    input data has insufficient alignment
  - gst-libav: Fix build against FFmpeg 4.2 as in Ubuntu 20.04
  - gst-editing-services: Fix Python library name fetching on
    Windows
  - netclientclock: Don't store failed internal clocks in the
    cache, so applications can re-try later
  - oggdemux: Seeking and duration fixes
  - osxaudiosrc: Fixes for failing init/no output on recent iOS
    versions
  - qtdemux: Use mvhd transform matrix and support for flipping
  - rtpvp9pay: Fix profile parsing
  - splitmuxsrc: Fix use with decodebin3 which would occasionally
    fail with an assertion when seeking
  - tsdemux: Fix backwards PTS wraparound detection with
    ignore-pcr=true
  - video-overlay-composition: Declare the video/size/orientation
    tags for the meta and implement scale transformations
  - vtdec: Fix seeks occasionally hanging on macOS due to a race
    condition when draining
  - webrtc: Fix duplicate payload types with RTX and multiple
    video codecs
  - win32-pluginoader: Make sure not to create any windows when
    inspecting plugins
  - wpe: Various fixes for re-negotiation, latency reporting,
    progress messages on startup
  - x264enc: Add missing data to AvcDecoderConfigurationRecord in
    codec_data for high profile variants
  - cerbero: Support using ccache with cmake if enabled
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - device: Fix racy nullptr deref on macOS when a device is
    unplugged
  - iterator: Added error handling to filtered iterators
  - netclientclock: Don't ever store failed internal clocks in
    the cache
  - netclock-replay: use gst_c_args when building, fixing build
    failure on Solaris
  - pluginloader-win32: create no window
  - pluginloader-win32: fix use after free in
    find_helper_bin_location
  - sparsefile: ensure error is set when read_buffer() returns 0
  - basetransform: fix incorrect logging inside
    gst_base_transform_query_caps</changelog>
  <changelog author="alarrosa@suse.com" date="1741780800">- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    &amp; PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + Possibly Breaking Changes
  - qroverlay: the "pixel-size" property has been removed in
    favour of a new "size" property with slightly different
    semantics, where the size of the square is expressed in
    percent of the smallest of width and height.
  - svtav1enc: The SVT-AV1 3.0.0 API exposes a different
    mechanism to configure the level of parallelism when
    encoding, which has been exposed as a new
    "level-of-parallelism" property. The old "logical-processors"
    property is no longer functional if the plugin has been
    compiled against the new API, which might affect encoder
    performance if application code setting it is not updated.
  - udpsrc: now disables allocated port reuse for unicast to
    avoid unexpected side-effects of SO_REUSEADDR where the
    kernel allocates the same listening port for multiple udpsrc.
  - uridecodebin3 remove non-functional "source" property that
    doesn't make sense and always returned NULL anyway.
  + Known Issues
  - GstBuffer now uses C11 atomics for 64 bit atomic operations
    if available, which may require linking to libatomic on some
    systems, but this is not done automatically yet, see issue
    glfo#gstreamer/gstreamer#4177.
  + For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.26/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1746014400">- Update to version 1.26.1:
  + Highlighted bugfixes:
  - awstranslate and speechmatics plugin improvements
  - decodebin3 fixes and urisourcebin/playbin3 stability
    improvements
  - Closed captions: CEA-708 generation and muxing fixes, and
    H.264/H.265 caption extractor fixes
  - dav1d AV1 decoder: RGB support, plus colorimetry,
    renegotiation and buffer pool handling fixes
  - Fix regression when rendering VP9 with alpha
  - H.265 decoder base class and caption inserter SPS/PPS
    handling fixes
  - hlssink3 and hlsmultivariantsink feature enhancements
  - Matroska v4 support in muxer, seeking fixes in demuxer
  - macOS: framerate guessing for cameras or capture devices
    where the OS reports silly framerates
  - MP4 demuxer uncompressed video handling improvements and
    sample table handling fixes
  - oggdemux: seeking improvements in streaming mode
  - unixfdsrc: fix gst_memory_resize warnings
  - Plugin loader fixes, especially for Windows
  - QML6 GL source renegotiation fixes
  - RTP and RTSP stability fixes
  - Thread-safety improvements for the Media Source Extension
    (MSE) library
  - v4l2videodec: fix A/V sync issues after decoding errors
  - Various improvements and fixes for the fragmented and
    non-fragmented MP4 muxers
  - Video encoder base class segment and buffer timestamp
    handling fixes
  - Video time code support for 119.88 fps and
    drop-frames-related conversion fixes
  - WebRTC: Retransmission entry creation fixes and better audio
    level header extension compatibility
  - YUV4MPEG encoder improvments
  - dots-viewer: make work locally without network access
  - gst-python: fix compatibility with PyGObject &gt;= 3.52.0
  - Cerbero: recipe updates, compatibility fixes for Python &lt;
    3.10; Windows Android cross-build improvements
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - Correctly handle whitespace paths when executing
    gst-plugin-scanner
  - Ensure properties are freed before (re)setting with
    g_value_dup_string() and during cleanup
  - cmake: Fix PKG_CONFIG_PATH formatting for Windows
    cross-builds
  - macos: Move macos function documentation to the .h so the
    introspection has the information
  - meson.build: test for and link against libatomic if it exists
  - pluginloader-win32: Fix helper executable path under devenv
  - pluginloader: fix pending_plugins Glist use-after-free issue
  - unixfdsrc: Complains about resize of memory area
  - tracers: dots: fix debug log</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748692800">- Update to version 1.26.2:
  + Highlighted bugfixes:
  - Various security fixes and playback fixes
  - aggregator base class fixes to not produce buffers too early
    in live mode
  - AWS translate element improvements
  - D3D12 video decoder workarounds for crashes on NVIDIA cards
    on resolution changes
  - dav1d AV1-decoder performance improvements
  - fmp4mux: tfdt and composition time offset fixes, plus AC-3 /
    EAC-3 audio support
  - GStreamer editing services fixes for sources with non-1:1
    aspect ratios
  - MIDI parser improvements for tempo changes
  - MP4 demuxer atom parsing improvements and security fixes
  - New skia-based video compositor element
  - Subtitle parser security fixes
  - Subtitle rendering and seeking fixes
  - Playbin3 and uridecodebin3 stability fixes
  - GstPlay stream selection improvements
  - WAV playback regression fix
  - GTK4 paintable sink colorimetry support and other
    improvements
  - WebRTC: allow webrtcsrc to wait for a webrtcsink producer to
    initiate the connection
  - WebRTC: new Janus Video Room WebRTC source element
  - vah264enc profile decision making logic fixes
  - Python bindings gained support for handling mini object
    writability (buffers, caps, etc.)
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - aggregator: Various state related fixes
  - element: ref-sink the correct pad template when replacing an
    existing one
  - pipeline: Store the actual latency even if no static latency
    was configured
  - structure: Add gst_structure_is_writable() API to allow
    python bindings to be able to handle writability of
    MiniObjects
  - tracerutils: Do not warn on empty string as tracername
  - tracerutils: Fix leak in gst_tracer_utils_create_tracer()
  - Ensure properties are freed before (re)setting with
    g_value_dup_object() or g_value_dup_boxed() and during
    cleanup
  - Fix new warnings on Fedora 42, various meson warnings, and
    other small meson build/wrap fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751371200">- Update to version 1.26.3:
  + Highlighted bugfixes in 1.26.3:
  - Security fix for the H.266 video parser
  - Fix regression for WAV files with acid chunks
  - Fix high memory consumption caused by a text handling
    regression in uridecodebin3 and playbin3
  - Fix panic on late GOP in fragmented MP4 muxer
  - Closed caption conversion, rendering and muxing improvements
  - Decklink video sink preroll frame rendering and clock drift
    handling fixes
  - MPEG-TS demuxing and muxing fixes
  - MP4 muxer fixes for creating very large files with faststart
    support
  - New thread-sharing 1:N inter source and sink elements, and a
    ts-rtpdtmfsrc
  - New speech synthesis element around ElevenLabs API
  - RTP H.265 depayloader fixes and improvements, as well as TWCC
    and GCC congestion control fixes
  - Seeking improvements in DASH client for streams with gaps
  - WebRTC sink and source fixes and enhancements, including to
    LiveKit and WHIP signallers
  - The macOS osxvideosink now posts navigation messages
  - QtQML6GL video sink input event handling improvements
  - Overhaul detection of hardware-accelerated video codecs on
    Android
  - Video4Linux capture source fixes and support for BT.2100 PQ
    and 1:4:5:3 colorimetry
  - Vulkan buffer upload and memory handling regression fixes
  - gst-python: fix various regressions introduced in 1.26.2
  - cerbero: fix text relocation issues on 32-bit Android and fix
    broken VisualStudio VC templates
  - packages: ship pbtypes plugin and update openssl to 3.5.0 LTS
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - aggregator: Do not set event seqnum to INVALID
  - baseparse: test: Fix race on test start
  - pad: Only remove TAG events on STREAM_START if the stream-id
    actually changes
  - utils: Mark times array as static to avoid symbol conflict
    with the POSIX function
  - vecdeque: Use correct index type gst_vec_deque_drop_struct()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753358400">- Update to version 1.26.4:
  + Highlighted bugfixes in 1.26.4:
  - adaptivedemux2: Fixed reverse playback
  - d3d12screencapture: Add support for monitor add/remove in
    device provider
  - rtmp2src: various fixes to make it play back AWS medialive
    streams
  - rtph265pay: add profile-id, tier-flag, and level-id to output
    rtp caps
  - vp9parse: Fix handling of spatial SVC decoding
  - vtenc: Fix negotiation failure with profile=main-422-10
  - gtk4paintablesink: Add YCbCr memory texture formats and other
    improvements
  - livekit: add room-timeout
  - mp4mux: add TAI timestamp muxing support
  - rtpbin2: fix various race conditions, plus other bug fixes
    and performance improvements
  - threadshare: add a ts-rtpdtmfsrc element, implement run-time
    input switching in ts-intersrc
  - webrtcsink: fix deadlock on error setting remote description
    and other fixes.
  - cerbero: WiX installer: fix missing props files in the MSI
    packages
  - smaller macOS/iOS package sizes
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - tracers: Fix deadlock in latency tracer
  - Fix various valgrind/test errors when GST_DEBUG is enabled
  - More valgrind and test fixes
  - Various ASAN fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755000000">- Update to version 1.26.5:
  + Highlighted bugfixes:
  - audioconvert: Fix caps negotiation regression when using a
    mix matrix
  - cea608overlay, cea708overlay: Accept GPU memory buffers if
    downstream supports the overlay composition meta
  - d3d12screencapture source element and device provider fixes
  - decodebin3: Don't error on an incoming ONVIF metadata stream
  - uridecodebin3: Fix potential crash when adding URIs to
    messages, e.g. if no decoder is available
  - v4l2: Fix memory leak for dynamic resolution change
  - VA encoder fixes
  - videorate, imagefreeze: Add support for JPEG XS
  - Vulkan integration fixes
  - wasapi2 audio device monitor improvements
  - threadshare: Many improvements and fixes to the generic
    threadshare and RTP threadshare elements
  - rtpbin2 improvements and fixes
  - gst-device-monitor-1.0 command line tool improvements
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - aggregator: add sub_latency_min to pad queue size
  - build: Disable C5287 warning on MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757937600">- Update to version 1.26.6:
  + Highlighted bugfixes in 1.26.6:
  - analytics GstTensorMeta handling changes (see note below)
  - closed caption combiner and transcriberbin stability fixes
  - decklinkvideosrc: fix unrecoverable state after failing to
    start streaming because device is busy
  - decodebin3 tag handling improvements
  - fallbacksrc: Fix sources only being restarted once, as well
    as some deadlocks and race conditions on shutdown
  - gtk4paintablesink: Try importing dmabufs withouth DMA_DRM
    caps
  - hlsdemux2: Fix parsing of byterange and init map directives
  - rtpmp4gdepay2: allow only constantduration with neither
    constantsize nor sizelength set
  - spotifysrc: update to librespot 0.7 to make work after recent
    Spotify changes
  - threadshare: new blocking adapter element for use in front of
    block elements such as sinks that sync to the clock
  - threadshare: various other threadshare element fixes and
    improvements
  - v4l2: Add support for WVC1 and WMV3
  - videorate: possible performance improvements when operating
    in drop-only mode
  - GstBaseParse fixes
  - Vulkan video decoder fixes
  - Fix gst-device-monitor-1.0 tool device-path regression on
    Windows
  - Monorepo development environment builds fewer plugins using
    subprojects by default, those require explicit enablement now
  - Python bindings: Handle buffer PTS, DTS, duration, offset,
    and offset-end as unsigned long long (regression fix)
  - Cerbero: Reduce recipe parallelism in various cases and dump
    cerbero and recipe versions into datadir during packaging
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + Possibly breaking behavioural changes:
  - Previously it was guaranteed that there is only ever up to
    one GstTensorMeta per buffer. This is no longer true and code
    working with GstTensorMeta must be able to handle multiple
    GstTensorMeta now.
  + gstreamer:
  - baseparse: Try harder to fixate caps based on upstream in
    default negotiation
  - gst-discoverer reports 1x1 dimensions for "valid" MP4 files
  - baseparse: don't clear most sticky events after a FLUSH_STOP
    event
  - gstreamer: Disable miniobject inline functions for
    gobject-introspection for non-subprojects too
  - gstreamer: Make sure to zero-initialize the GValue before
    G_VALUE_COLLECT_INIT
  - ptp: Fix a new Rust 1.89 compiler warning on Windows
  - ptp: Fix new compiler warning with Rust 1.89
  - Segmentation fault when compiled with
    "-ftrivial-auto-var-init=pattern". Use of unitialized GValue</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760616000">- Update to version 1.26.7:
  + Highlighted bugfixes in 1.26.7:
  - cea608overlay: improve handling of non-system memory
  - cuda: Fix runtime kernel compile with CUDA 13.0
  - d3d12: Fix crop meta support in converter and passthrough
    handling in deinterlacer
  - fallbacksrc: source handling improvements; no-more-pads
    signal for streams-unaware parents
  - inter: add properties to fine tune the inner elements
  - qtdemux: surround sound channel layout handling fixes and
    performance improvements for GoPro videos
  - rtp: Add linear audio (L8, L16, L24) RTP payloaders /
    depayloaders
  - rtspsrc: Send RTSP keepalives in TCP/interleaved modes
  - rtpamrpay2: frame quality indicator flag related fixes
  - rtpbasepay2: reuse last PTS when possible, to work around
    problems with NVIDIA Jetson AV1 encoder
  - mpegtsmux, tsdemux: Opus audio handling fixes
  - threadshare: latency related improvements and many other
    fixes
  - matroskamux, tsmux, flvmux, cea608mux: Best pad determination
    fixes at EOS
  - unixfd: support buffers with a big payload
  - videorate unknown buffer duration assertion failure with
    variable framerates
  - editing services: Make GESTimeline respect
    SELECT_ELEMENT_TRACK signal discard decision; memory leak
    fixes
  - gobject-introspection annotation fixes
  - cerbero: Update meson to 1.9.0 to enable Xcode 26
    compatibility
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - controller: Fix get_all() return type annotation
  - gst-launch: Do not assume error messages have a src element
  - multiqueue: Fix object reference handling in signal callbacks
  - netclientclock: Fix memory leak in error paths</changelog>
</package>
<package pkgid="d9471a1108d3d99294ce8b5cf37cd87f8d4013a0d612fbfbfefe88bd9381929a9b762ee528f2f22560c77f0e1ea238ad2075692710371841680260a3ba2e8fd9" name="gstreamer-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 1.24.12:
  + oggdemux: fixes seeking in some cases by not overwriting a
    valid duration with CLOCK_TIME_NONE
  + video-overlay-composition: Declare the video/size/orientation
    tags for the meta &amp; implement scale transformation
  + Various fixes found from adding extra warning flags</changelog>
  <changelog author="alarrosa@suse.com" date="1741780800">- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    &amp; PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + Some other changes include:
  - New AV1 caps utility functions for AV1 Codec Configuration
    Record codec_data handling
  - The GstEncodingProfile (de)serialization functions are now
    public
  - GstEncodingProfile gained a way to specify a factory-name
    when specifying caps. In some cases you want to ensure that
    a specific element factory is used while requiring some
    specific caps, but this was not possible so far. You can now
    do e.g. qtmux:video/x-prores,variant=standard|factory-name=avenc_prores_ks
    to ensure that the avenc_prores_ks factory is used to produce
    the variant of prores video stream.
  + For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.26/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1746014400">- Update to version 1.26.1:
  + Ensure properties are freed before (re)setting with
    g_value_dup_string() and during cleanup
  + alsadeviceprovider: Fix leak of Alsa longname
  + audioaggregator: fix error added in !8416 when chaining up
  + audiobasesink: Fix custom slaving driftsamples calculation and
    add custom audio clock slaving callback example
  + decodebin3:
  - Don't avoid parsebin even if we have a matching decoder
  - Doesn't plug parsebin for AAC from tsdemux
  + gl: eglimage: warn the reason of export failure
  + glcolorconvert:
  - Fix YUVA&lt;-&gt;RGBA conversions
  - Regression when rendering alpha vp9
  + gldownload: Unref glcontext after usage
  + meson.build: test for and link against libatomic if it exists
  + oggdemux: Don't push new packets if there is a pending seek
  + urisourcebin:
  - Make parsebin activation more reliable
  - Deadlock between parsebin and typefind
  + videoencoder: Use the correct segment and buffer timestamp in
    the chain function
  + videotimecode: Fix conversion of timecode to datetime with
    drop-frame timecodes and handle 119.88 fps correctly in all
    places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748779200">- Update to version 1.26.2:
  + alsa: Avoid infinite loop in DSD rate detection
  + gl: Implement basetransform meta transform function
  + glshader: free shader on stop
  + glupload: Only add texture-target field to GL caps
  + gstaudioutilsprivate: Fix gcc 15 compiler error with function
    pointer
  + mikey: Avoid infinite loop while parsing MIKEY payload with
    unhandled payload types
  + properties: add G_PARAM_STATIC_STRINGS where missing
  + riff-media: fix MS and DVI ADPCM av_bps calculations
  + subtitleoverlay: Remove 0.10 hardware caps handling
  + subtitleoverlay: Missing support for DMABuf(?)
  + tests: opus: Update channel support and add to meson
  + textoverlay: fix shading for RGBx / RGBA pixel format variants
  + textoverlay background is wrong while cropping
  + uridecodebin3: Don't hold play items lock while releasing pads
  + uridecodebin3: deadlock on PLAY_ITEMS_LOCK
  + Fix new warnings on Fedora 42, various meson warnings, and
    other small meson build/wrap fixes
  + Fix Qt detection in various places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751371200">- Update to version 1.26.3:
  + GstAudioAggregator: fix structure unref in peek_next_sample()
  + audioconvert: Fix setting mix-matrix when input caps changes
  + encodebasebin: Duplicate encoding profile in property setter
  + gl: simplify private
    gst_gl_gst_meta_api_type_tags_contain_only()
  + osxvideosink: Use gst_pad_push_event() and post navigation
    messages
  + playsink: Fix race condition in stream synchronizer pad cleanup
    during state changes
  + python: Fix pulling events from appsink
  + streamsynchronizer: Consider streams having received
    stream-start as waiting
  + urisourcebin: Text tracks are no longer set as sparse stream in
    urisourcebin's multiqueue</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753358400">- Update to version 1.26.4:
  + Revert "streamsynchronizer: Consider streams having received
    stream-start as waiting"
  + alsa: free conf cache under valgrind
  + gst-device-monitor: Fix caps filter splitting
  + Fix various valgrind/test errors when GST_DEBUG is enabled
  + More valgrind and test fixes
  + Various ASAN fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755000000">- Update to version 1.26.5:
  + audioconvert: mix-matrix causes caps negotiation failure
  + decodebin3: Don't error on an incoming ONVIF metadata stream
  + gloverlay: Recompute geometry when caps change, and load
    texture after stopping and starting again
  + uridecodebin3: Add missing locking and NULL checks when adding
    URIs to messages
  + uridecodebin3: segfault in update_message_with_uri() if no
    decoder available
  + videorate, imagefreeze: add support for JPEG XS
  + gst-device-monitor-1.0: Add shell quoting for launch lines
  + gst-device-monitor-1.0: Fix criticals, and also accept utf8 in
    launch lines
  + gst-device-monitor-1.0: Use gst_print instead of g_print</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757937600">- Update to version 1.26.6:
  + decodebin3: Update stream tags
  + rtpbasedepayload: Avoid potential use-after free
  + rtspconnection: Add get_url and get_ip return value annotation
  + gst_rtsp_connection_get_url return value transfer annotation
    missing
  + videometa: Fix valgrind warning when deserializing video meta
  + videorate: don't hold the reference to the buffer in drop-only
    mode
  + gst-device-monitor-1.0: Fix device-path regression on Windows
  + gst-device-monitor-1.0: Add quoting for powershell and cmd
  + Monorepo: opengl, vorbis, plugins require explicit enablement
    now for a build using the Meson subproject fallback</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760616000">- Update to version 1.26.7:
  + discoverer: Mark gst_discoverer_stream_info_list_free() as
    transfer full
  + riff: Add channel reorder maps for 3 and 7 channel audio
  + sdp: proper usage of gst_buffer_append
  + videorate: fix assert fail due to invalid buffer duration
  + Fix build error with glib &lt; 2.68</changelog>
</package>
<package pkgid="c3d828635191d5f84ab8b02651947c4cf1edd16c7791effefbc97925f9f9631e7aa9dbdfcdf8a322064fb3fae1912fcd62cdafbd9f4d611fd094b0ac6e5a96be" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.24.49+14" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1705579200">- Update to version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Update to version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Update to version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1720699200">- Update to version 3.24.43:
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729166400">- Eliminate usage of update-alternatives: GTK2 no longer provides
  gtk-update-icon-cache, thus eliminating the need for this extra
  complexity.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1737806400">- Update to version 3.24.48:
  + GtkFileChooser: Stop replacing : (colon) with U+2236 (ratio)
  + GtkEmojiChooser: Update to Unicode 16 / CLDR 46
  + GtkSpinButton:
  - Use semantically appropriate icon names
  - Make numeric spin buttons always LTR
  + GtkEntry:
  - Stop guessing text direction from keyboard layout
  - Add a shortcut and context menu item to change text direction
  + GtkEventControllerMotion: Make enter and leave signals work
  + Accessibility: Use message dialog titles as names
  + GDK: Fix portal handling of gvfs files
  + Wayland:
  - Support the xdg_foreign_v2 protocol
  - Try to fix monitor geometry on sway
  - Improve font setting fallback
  - Use a better default cursor size
  - Fix a crash during DND
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738584000">- Fix %filetriggerpostun for icon cache: ensure the icons that have
  just been removed are also cleared from the cache. We can't
  shortcut on upgrades, even though this would be nice. In context
  of RPM 4.20 this started breaking (boo#1236740).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 3.24.49:
  + Fix a crash in GtkIMContext
  + Fix crashes in DND with GtkPlug/GtkSocket
  + Wayland:
  - Fix erroneous crossing events, causing menus to malfunction
  - Support the cursor-shape protocol
  + X11: Enforce size limits on windows, preventing lockups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1743422400">- Update to version 3.24.49+14:
  + widget: Explicitly annotate visible's getter.</changelog>
</package>
<package pkgid="f703842ed9e13ac7903f5c9de627762bb5fc27890e1377a0acd4f67e84fe10df18faa8bc59afd851c8ef3d40014c5baae5036580b326d4fc022cdacd4c92e424" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.24.49+14" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1705579200">- Update to version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Update to version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Update to version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1720699200">- Update to version 3.24.43:
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729166400">- Eliminate usage of update-alternatives: GTK2 no longer provides
  gtk-update-icon-cache, thus eliminating the need for this extra
  complexity.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1737806400">- Update to version 3.24.48:
  + GtkFileChooser: Stop replacing : (colon) with U+2236 (ratio)
  + GtkEmojiChooser: Update to Unicode 16 / CLDR 46
  + GtkSpinButton:
  - Use semantically appropriate icon names
  - Make numeric spin buttons always LTR
  + GtkEntry:
  - Stop guessing text direction from keyboard layout
  - Add a shortcut and context menu item to change text direction
  + GtkEventControllerMotion: Make enter and leave signals work
  + Accessibility: Use message dialog titles as names
  + GDK: Fix portal handling of gvfs files
  + Wayland:
  - Support the xdg_foreign_v2 protocol
  - Try to fix monitor geometry on sway
  - Improve font setting fallback
  - Use a better default cursor size
  - Fix a crash during DND
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738584000">- Fix %filetriggerpostun for icon cache: ensure the icons that have
  just been removed are also cleared from the cache. We can't
  shortcut on upgrades, even though this would be nice. In context
  of RPM 4.20 this started breaking (boo#1236740).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 3.24.49:
  + Fix a crash in GtkIMContext
  + Fix crashes in DND with GtkPlug/GtkSocket
  + Wayland:
  - Fix erroneous crossing events, causing menus to malfunction
  - Support the cursor-shape protocol
  + X11: Enforce size limits on windows, preventing lockups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1743422400">- Update to version 3.24.49+14:
  + widget: Explicitly annotate visible's getter.</changelog>
</package>
<package pkgid="05197872b91d3e894ed9ea6fd1d71e65bb1649c64c65a6cb191c3b0de47b0553ab91dc08497e571dd0f8a43b3ad45ce71a44ce4e7cc4341d41bcd82096756b3e" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.24.49+14" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1705579200">- Update to version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Update to version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Update to version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1720699200">- Update to version 3.24.43:
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729166400">- Eliminate usage of update-alternatives: GTK2 no longer provides
  gtk-update-icon-cache, thus eliminating the need for this extra
  complexity.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1737806400">- Update to version 3.24.48:
  + GtkFileChooser: Stop replacing : (colon) with U+2236 (ratio)
  + GtkEmojiChooser: Update to Unicode 16 / CLDR 46
  + GtkSpinButton:
  - Use semantically appropriate icon names
  - Make numeric spin buttons always LTR
  + GtkEntry:
  - Stop guessing text direction from keyboard layout
  - Add a shortcut and context menu item to change text direction
  + GtkEventControllerMotion: Make enter and leave signals work
  + Accessibility: Use message dialog titles as names
  + GDK: Fix portal handling of gvfs files
  + Wayland:
  - Support the xdg_foreign_v2 protocol
  - Try to fix monitor geometry on sway
  - Improve font setting fallback
  - Use a better default cursor size
  - Fix a crash during DND
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738584000">- Fix %filetriggerpostun for icon cache: ensure the icons that have
  just been removed are also cleared from the cache. We can't
  shortcut on upgrades, even though this would be nice. In context
  of RPM 4.20 this started breaking (boo#1236740).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 3.24.49:
  + Fix a crash in GtkIMContext
  + Fix crashes in DND with GtkPlug/GtkSocket
  + Wayland:
  - Fix erroneous crossing events, causing menus to malfunction
  - Support the cursor-shape protocol
  + X11: Enforce size limits on windows, preventing lockups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1743422400">- Update to version 3.24.49+14:
  + widget: Explicitly annotate visible's getter.</changelog>
</package>
<package pkgid="bde09b78b9e168c91c79ca0b9e563e84594599f2eccc94d745be9ab862ef4ac1b07eab14ee27bc79aad8963e1ebf81002ba65ec4e92f5c20e0943ed22db362b9" name="guestfs-tools" arch="x86_64">
  <version epoch="0" ver="1.54.0" rel="160000.2.2"/>
  <changelog author="carnold@suse.com" date="1722945600">- Update to version 1.53.2 (jsc#PED-6305)
  * Implement --inject-blnsvr operation
  * mlcustomize: firstboot: Use Linux path for Powershell script path
  * mlcustomize: firstboot: Use powershell.exe instead of path
  * mlcustomize: firstboot: Use Powershell -NoProfile flag
  * mlcustomize: Revert delay installation of qemu-ga MSI
  * mldrivers/linux_kernels.ml: Prefix general information with ^info:
  * mlcustomize: Use Start-Process -Wait to run qemu-ga installer
  * mlcustomize: Add Firstboot.firstboot_dir function
  * mlcustomize: Place powershell scripts into &lt;firstboot_dir&gt;\Temp
  * mlcustomize: Inject qemu-ga &amp; blnsvr into &lt;firstboot_dir&gt;/Temp
  * mlcustomize: Write qemu-ga log file name to log.txt</changelog>
  <changelog author="carnold@suse.com" date="1724932800">- Update to version 1.53.3 (jsc#PED-8910)
  * Update common submodule
    Further refinements to Windows firstboot code.
    mlcustomize: Add some comments to firstboot batch file
    mlcustomize: Reboot Windows between each firstboot script
    mlcustomize: Move virt-customize modules to mlcustomize/</changelog>
  <changelog author="carnold@suse.com" date="1730203200">- Update to version 1.53.4 (jsc#PED-8910)
  * mlcustomize: Update generated options for virt-v2v
  * Various build fixes and dependency changes</changelog>
  <changelog author="carnold@suse.com" date="1731412800">- virt-builder ships with out-of-date openSUSE signing key
  resulting in a GPG failure
  builder-update-openSUSE.gpg-key.patch</changelog>
  <changelog author="carnold@suse.com" date="1735905600">- Update to version 1.53.5 (jsc#PED-8910)
  * builder: Update opensuse.gpg key
  * mlcustomize/customize_run.ml: Move 'in' to new line
  * mlstdutils/guestfs_config: Define host_os
  * mlcustomize, mltools: Check guest OS is compatible before
    allowing --run
  * Remove mlv2v/ subdirectory
  * resize: Update xpath command
- Drop builder-update-openSUSE.gpg-key.patch</changelog>
  <changelog author="carnold@suse.com" date="1739361600">- Update to version 1.53.6 (jsc#PED-8910)
  * build: Move baseline OCaml to 4.08
  * builder: add various templates for rhel and fedora
  * po-docs: A couple adjustments and updates</changelog>
  <changelog author="carnold@suse.com" date="1739880000">- Update to version 1.53.7 (jsc#PED-8910)
  * mlcustomize, mltools: Replace $TEST_FUNCTIONS
  * mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
  * resize: Use stderr consistently for debug messages
  * resize/test-virt-resize.pl: Various fixes and adjustments</changelog>
  <changelog author="carnold@suse.com" date="1741780800">- Update to version 1.53.8 (jsc#PED-8910)
  * mlstdutils: Reimplement String.find, add String.find_from
  * mlstdutils: Reimplement String.nsplit tail recursively
  * mldrivers: Handle large output from 'rpm -ql' command
  * drivers: Handle large output from 'rpm -ql' command
    This requires the new guestfs_sh_out API from libguestfs 1.55.6
  * Add a 'git-publish' profile
  * builder: Link to the actually existing virt-builder templates dir
  * mlcustomize: Drop old virtio-win dir name scraping
  * mlcustomize: Remove dnf --verbose option</changelog>
  <changelog author="carnold@suse.com" date="1743681600">- Update to version 1.53.9 (jsc#PED-8910)
  * Various build improvements
  * mlcustomize: ignore sriov vioprot.* files too
  * mlcustomize: don't inject .pdb files
  * mlcustomize: Only use osinfo id for virtio-win path matching
  * mlcustomize: virtio-win: clarify virtio-1.0 support
  * mlcustomize: make windows q35 check independent of virtio drivers
  * mlcustomize: virtio-win: stop checking osinfo for virtio drivers
  * mltools: Strip out all libosinfo driver plumbing
  * mlutils: Remove need for OCaml OUnit2
  * mltools: Remove need for OCaml OUnit2
  * mlstdutils: Remove need for OCaml OUnit2
  * mltools: Fix de-oUnit-ized tests</changelog>
  <changelog author="carnold@suse.com" date="1747742400">- Update to version 1.54.0 (jsc#PED-12706)
  * bash: Replace 'cp -d' command with POSIX 'cp -P'
  * ocaml-link.sh.in: Remove redundant use of getopt
  * mltools: decouple and simplify osinfo device support checks
  * mlcustomize: disable `--inject-virtio-win osinfo`
  * mltools: Unreference various objects
  * Revert "mltools: Unreference various objects"
  * mltools: Fix memory leak in OCaml binding of libosinfo
  * mlstdutils: Implement String.implode
  * mlstdutils: Add List.make function
  * mltools: Fix spelling mistake
  * mlstdutils: Add List.same function
  * mlstdutils: Modify List.take, List.drop to match OCaml 5.3
  * mlstdutils: Rename List.dropwhile -&gt; drop_while, takewhile -&gt; take_while
  * mlstdutils: Add List.last function
  * mlstdutils: Move List module first
  * mlstdutils: Add String.common_prefix, longest_common_prefix
  * mlstdutils: Remove Std_utils.identity
  * mlstdutils: Remove Std_utils.protect
  * mlstdutils: Remove List.filter_map
  * mlstdutils: Fix comment that still referred to the old function names
  * mldrivers: Link to gettext-stub if ocaml-gettext is enabled
  * mlstdutils: Rename String.is_prefix -&gt; starts_with, is_suffix -&gt; ends_with</changelog>
</package>
<package pkgid="a9ca086435086a371789d371e3d9b5eb55e5946c71927e244d74c74af7b7fc9262047429909f10afd7853be1c596d3f243e0b06413501ad07c65adf1b8bbb156" name="gzip" arch="x86_64">
  <version epoch="0" ver="1.13" rel="160000.2.2"/>
  <changelog author="fbui@suse.com" date="1624449600">- Avoid text relocation on i386 (bsc#1143125)
  Text relocation doesn't cope well with some security hardening which
  consists in prohibiting attempts to change memory mappings to become
  executable.
  Hence disable the use of assembler code and get rid of text
  relocations especially since the assembler code is slower than the
  code generated by gcc according to Fedora. According to Debian this
  also fixes gzip generating different results on ia64.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631188800">- Update to 1.11:
  * Performance improvements
  * Added hardware acceleration for IBM Z
- Refresh patches:
  * manpage-no-date.patch
  * xz_lzma.patch
- Remove upstreamed patches:
  * gzip-1.10-fix-DFLTCC-segfault.patch
  * gzip-1.10-fix_count_of_lines_to_skip.patch
  * gzip-1.10-ibm_dfltcc_support.patch</changelog>
  <changelog author="dmueller@suse.com" date="1643544000">- add conflicts/provides for alternative(gzip)
- modernize spec file</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 1.12 (CVE-2022-1271,bsc#1198062):
  * 'gzip -l' no longer misreports file lengths 4 GiB and larger.
    Previously, 'gzip -l' output the 32-bit value stored in the gzip
    header even though that is the uncompressed length modulo 2**32.
    Now, 'gzip -l' calculates the uncompressed length by decompressing
    the data and counting the resulting bytes.  Although this can take
    much more time, nowadays the correctness pros seem to outweigh the
    performance cons.
  * 'zless' is no longer installed on platforms lacking 'less'.
  * zgrep applied to a crafted file name with two or more newlines
    can no longer overwrite an arbitrary, attacker-selected file.
    [bug introduced in gzip-1.3.10]
  * zgrep now names input file on error instead of mislabeling it as
    "(standard input)", if grep supports the GNU -H and --label options.
  * 'zdiff -C 5' no longer misbehaves by treating '5' as a file name.
  * Configure-time options like --program-prefix now work.
- refresh zdiff.diff, zgrep.diff, zmore.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Rename xz_lzma.patch xz_lzma_zstd.patch and expand the patch to
  supprt zstd compression (boo#1198922).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1692187200">- export CONFIG_SHELL=/bin/sh before running configure: results in
  the shell script (zcat/zgrep/…) to receive a /bin/sh shebang
  instead of requiring bash (the local shell used to build).
- Use for i in $(seq 1 9) instead of bashism for in in {1..9}, and
  drop buildshell definition to require bash.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1693396800">- Update to 1.13:
  * zless now diagnoses gzip failures, if using less 623 or later.
  * When SIGPIPE is ignored, gzip now exits with status 2 (warning)
  instead of status 1 (error) when writing to a broken pipe.  This is
  more useful with programs like 'less' that treat gzip exit status 2
  as a non-failure.
  * 'gzip -d' no longer fails to report invalid compressed data
  that uses a dictionary distance outside the input window.
  [bug present since the beginning]
  * Port to C23, which does not allow K&amp;R-style function definitions
  with parameters, and which does not define __alignas_is_defined.
- Refreshed manpage-no-date.patch</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1698148800">- Fix s390x build with 'gcc -Dalignas=_Alignas' bug#66709</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="3f5ffb803b5dddcad0dc9099ee7d34dedb8370f3423db7985ee0d8d8a3fcdb19cb27690a4cf2cb63f77d711042395243c5e521fb7b186c4d057f0b408eff68cf" name="haproxy" arch="x86_64">
  <version epoch="0" ver="3.2.15+git64.0fc44b458" rel="160000.2.1"/>
  <changelog author="georg.pfuetzenreuter@suse.com" date="1742904000">- Build with QUIC on Tumbleweed</changelog>
  <changelog author="mrueckert@suse.de" date="1744977600">- Update to version 3.1.7+git0.c3f408945:
  * [RELEASE] Released version 3.1.7
  * BUG/MINOR: rhttp: ensure GOAWAY can be emitted after reversal
  * BUG/MINOR: rhttp: fix reconnect if timeout connect unset
  * BUG/MINOR: mux-h2: prevent past scheduling with idle connections
  * MINOR: compiler: rely on builtin detection for __builtin_unreachable()
  * MINOR: debug: make ha_stuck_warning() print the whole message at once
  * MINOR: debug: make ha_stuck_warning() only work for the current thread
  * MEDIUM: wdt: always make the faulty thread report its own warnings
  * MINOR: pass a valid buffer pointer to ha_thread_dump_one()
  * MINOR: debug: remove unused case of thr!=tid in ha_thread_dump_one()
  * MINOR: debug: always reset the dump pointer when done
  * MINOR: tinfo: keep a copy of the pointer to the thread dump buffer
  * MINOR: debug: protect ha_dump_backtrace() against risks of re-entrance
  * MINOR: tools: protect dladdr() against reentrant calls from the debug handler
  * MINOR: tools: also protect the library name resolution against concurrent accesses
  * BUG/MINOR: debug: detect and prevent re-entrance in ha_thread_dump_fill()
  * BUG/MINOR: wdt/debug: avoid signal re-entrance between debugger and watchdog
  * BUG/MINOR debug: fix !USE_THREAD_DUMP in ha_thread_dump_fill()
  * BUG/MINOR: threads: set threads_idle and threads_harmless even with no threads
  * BUILD: makefile: enable backtrace by default on musl
  * MINOR: compiler: add ASSUME_NONNULL() to tell the compiler a pointer is valid
  * MINOR: compiler: also enable __builtin_assume() for ASSUME()
  * MINOR: compiler: add a new "ASSUME" macro to help the compiler
  * MINOR: compiler: add a __has_builtin() macro to detect features more easily
  * BUG/MEDIUM: hlua: fix hlua_applet_{http,tcp}_fct() yield regression (lost data)
  * BUG/MINOR: h3: reject request URI with invalid characters
  * BUG/MINOR: h3: reject invalid :path in request
  * BUG/MINOR: h3: filter upgrade connection header
  * BUG/MEDIUM: h3: trim whitespaces in header value prior to QPACK encoding
  * BUG/MEDIUM: h3: trim whitespaces when parsing headers value
  * MINOR: debug: detect call instructions and show the branch target in backtraces
  * MINOR: debug: in call traces, dump the 8 bytes before the return address, not after
  * MINOR: tools: let dump_addr_and_bytes() support dumping before the offset
  * BUILD: quic: fix overflow in global tune
  * MINOR: quic: define quic_tune
  * MINOR: quic: transform pacing settings into a global option
  * MINOR: quic: allow BBR testing without pacing
  * MINOR: quic: remove references to burst in quic-cc-algo parsing
  * BUG/MEDIUM: http-ana: Report 502 from req analyzer only during rsp forwarding
  * BUG/MINOR: http-ana: Properly detect client abort when forwarding the response
  * DOC: config: add the missing "force-cfg-parser-pause" to the global kw index
  * DOC: config: add the missing "profiling.memory" to the global kw index
  * BUG/MINOR: debug: remove the trailing \n from BUG_ON() statements
  * BUG/MINOR: hlua: fix invalid errmsg use in hlua_init()
  * BUG/MINOR: backend: do not use the source port when hashing clientip
  * BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs
  * BUG/MINOR: log: fix CBOR encoding with LOG_VARTEXT_START() + lf_encode_chunk()
  * CLEANUP: log: adjust _lf_cbor_encode_byte() comment
  * BUG/MINOR: hlua_fcn: fix potential UAF with Queue:pop_wait()
  * MINOR: task: add thread safe notification_new and notification_wake variants
  * TESTS: Fix build for filltab25.c
  * BUG/MEDIUM: stream: Fix a possible freeze during a forced shut on a stream
  * DOC: update INSTALL to reflect the minimum compiler version
  * BUILD: quic_sock: address a strict-aliasing build warning with gcc 5 and 6
  * BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port
  * BUG/MINOR: backend: do not overwrite srv dst address on reuse
  * BUG/MINOR: rhttp: fix incorrect dst/dst_port values
  * BUILD: compiler: undefine the CONCAT() macro if already defined
  * DOC: config: fix two missing "content" in "tcp-request" examples
  * BUG/MINOR: config: silence .notice/.warning/.alert in discovery mode
  * BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays
  * BUG/MINOR: mux-quic: remove extra BUG_ON() in _qcc_send_stream()
  * BUG/MEDIUM: mux-quic: fix crash on RS/SS emission if already close local
  * BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node
  * BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks
  * MINOR: log: support "raw" logformat node typecast</changelog>
  <changelog author="mrueckert@suse.de" date="1748433600">- Update to version 3.2.0+git0.e134140d2:
  https://www.haproxy.com/blog/announcing-haproxy-3-2
  https://www.mail-archive.com/haproxy@formilux.org/msg45917.html
  VUL-0: CVE-2025-32464: haproxy: HAProxy 2.2 through 3.1.6, in certain
  uncommon configurations, has a sample_conv_regsub heap-based buffer
  overflow because of mishandling of the replacement of multiple short
  patterns with a longer one. (bsc#1240971)</changelog>
  <changelog author="mrueckert@suse.de" date="1748433601">- Update apparmor profile to allow new cpu binding handling</changelog>
  <changelog author="varkoly@suse.com" date="1764331200">- VUL-0: CVE-2025-11230: haproxy: issue in the mjson JSON decoder leads
  to excessive resource consumption when processing numbers with large exponents
  (bsc#1250983)  Add upstream patch:
  0001-BUG-CRITICAL-mjson-fix-possible-DoS-when-parsing-num.patch</changelog>
  <changelog author="varkoly@suse.com" date="1769774400">- haproxy bad test for for legacy applets (bsc#1257521)
  BUG/MEDIUM: applet: Fix test on shut flags for legacy applets
  BUG/MAJOR: applet: Don't call I/O handler if the applet was shut
  Apply upstream patch:
  0001-BUG-MEDIUM-applet-Fix-test-on-shut-flags-for-legacy.patch</changelog>
  <changelog author="varkoly@suse.com" date="1770897600">- (bsc#1257976)VUL-0: CVE-2026-26081, CVE-2026-26080: haproxy: vulnerabilities on QUIC
  Apply upstream patches:
  0001-fix-parsing-frame-type.patch
  0001-reject-invalid-token.patch</changelog>
  <changelog author="varkoly@suse.com" date="1772107200">- Update to version 3.2.12+git0.6011f448e:
  * [RELEASE] Released version 3.2.12
  * BUG/MAJOR: quic: fix parsing frame type
  * BUG/MAJOR: quic: reject invalid token
  * BUG/MINOR: startup: handle a possible strdup() failure
  * BUG/MINOR: startup: fix allocation error message of progname string
  * BUG/MINOR: config: Fix setting of alt_proto
  * DOC: config: mention the limitation on server id range for consistent hash
  * BUG/MEDIUM: lb-chash: always properly initialize lb_nodes with dynamic servers
  * BUG/MINOR: cpu-topo: count cores not cpus to distinguish core types
  * CLEANUP: haproxy: fix bad line wrapping in run_poll_loop()
  * BUG/MEDIUM: threads: Atomically set TH_FL_SLEEPING and clr FL_NOTIFIED
  * DOC: internals: cleanup few typos in master-worker documentation
  * BUG/MEDIUM: applet: Fix test on shut flags for legacy applets
  * BUG/MAJOR: applet: Don't call I/O handler if the applet was shut
  * MEDIUM: ssl: don't always process pending handshakes on closed connections
  * MINOR: rawsock: introduce CO_RFL_TRY_HARDER to detect closures on complete reads
  * [RELEASE] Released version 3.2.11
  * BUG/MEDIUM: debug: only dump Lua state when panicking
  * BUG/MINOR: config: check capture pool creations for failures
  * DOC: reg-tests: update VTest upstream link in the starting guide
  * MINOR: hlua: Add support for lua 5.5
  * BUG/MEDIUM: mux-h2: synchronize all conditions to create a new backend stream
  * BUG/MINOR: mworker/cli: fix show proc pagination using reload counter
  * BUG/MINOR: mworker/cli: 'show proc' is limited by buffer size
  * CLEANUP: mworker/cli: remove useless variable
  * BUG/MINOR: ssl: fix error message of tune.ssl.certificate-compression
  * MINOR: ssl: allow to disable certificate compression
  * BUG/MEDIUM: mux-h1: Skip UNUSED htx block when formating the start line
  * BUG/MINOR: promex: Detach promex from the server on error dump its metrics dump
  * BUG/MINOR: hlua: consume error object if ignored after a failing lua_pcall()
  * BUG/MEDIUM: hlua: fix invalid lua_pcall() usage in hlua_traceback()
  * BUG/MINOR: proxy: fix deinit crash on defaults with duplicate name
  * REGTESTS: ssl: fix generate-certificates w/ LibreSSL
  * BUG/MEDIUM: mux-quic: prevent BUG_ON() on aborted uni stream close
  * BUG/MEDIUM: ssl: fix generate-certificates option when SNI greater than 64bytes
  * BUG/MEDIUM: ssl: fix error path on generate-certificates
  * BUG/MEDIUM: log: parsing log-forward options may result in segfault
  * BUG/MEDIUM: promex: server iteration may rely on stale server
  * BUG/MINOR: cfgparse: fix "default" prefix parsing
  * BUG/MINOR: proxy: free persist_rules
  * BUG/MINOR: http_act: fix deinit performed on uninitialized lf_expr in release_http_map()
  * BUG/MEDIUM: quic: fix ACK ECN frame parsing
  * BUG/MINOR: hlua_fcn: ensure Patref:add_bulk() is given a table object before using it
  * BUG/MINOR: hlua_fcn: fix broken yield for Patref:add_bulk()
  * MINOR: cfgparse: remove duplicate "force-persist" in common kw list
  * REGTESTS: ssl: Fix reg-tests curve check
  * BUG/MINOR: cli/stick-tables: argument to "show table" is optional
  * BUILD: sockpair: fix build issue on macOS related to variable-length arrays
  * BUG/MINOR: cfgparse: wrong section name upon error
  * BUILD: tools: memchr definition changed in C23
  * BUILD: ssl: strchr definition changed in C23
  * BUG/MEDIUM: mworker: can't use signals after a failed reload
  * DOC: config: fix the length attribute name for stick tables of type binary / string
  * BUG/MINOR: backend: inspect request not response buffer to check for TFO
  * BUG/MINOR: backend: fix the conn_retries check for TFO
  * BUG/MEDIUM: ssl: Don't resume session for check connections
  * MINOR: connections: Add a new CO_FL_SSL_NO_CACHED_INFO flag
  * MEDIUM: ssl/server: No longer store the SNI of cached TLS sessions
  * BUG/MEDIUM: ssl: Don't reuse TLS session if the connection's SNI differs
  * MEDIUM: tcpcheck/backend: Get the connection SNI before initializing SSL ctx
  * MINOR: connection/ssl: Store the SNI hash value in the connection itself
  * MINOR: ssl: Compare hashes instead of SNIs when a session is cached
  * MINOR: ssl: Store hash of the SNI for cached TLS sessions
  * MINOR: ssl: Add a function to hash SNIs
  * BUG/MINOR: sock-inet: ignore conntrack for transparent sockets on Linux
  * BUG/MEDIUM: stconn: Don't report abort from SC if read0 was already received
  * BUG/MEDIUM: http-ana: Properly detect client abort when forwarding response (v2)
  * [RELEASE] Released version 3.2.10
  * BUG/MEDIUM: quic: Don't try to use hystart if not implemented
  * BUG/MEDIUM: quic: handle collision on CID generation
  * MINOR: quic: split CID alloc/generation function
  * MINOR: quic: adjust CID conn tree alloc in qc_new_conn()
  * BUG/MINOR: check: only try connection reuse for http-check rulesets
  * MINOR: cfgdiag: adjust diag on servers
  * BUG/MINOR: mux-h2: send the preface along with the first request if needed
  * MINOR: mux-h2: extract the code to send preface+settings into its own function
  * MEDIUM: mux-h2: do not needlessly refrain from sending data early
  * MEDIUM: h1: Immediately try to read data for frontend
  * BUG/MINOR: cfgparse-listen: update err_code for fatal error on proxy directive
  * BUG/MEDIUM: quic: support some ciphersuites and curves related options
  * MINOR: hlua: emit a log instead of an alert for aborted actions due to unavailable yield
  * MINOR: h2/trace: emit a trace of the received RST_STREAM type
  * DOC: config: Improve spop mode documentation
  * DOC: config: Fix description of the spop mode
  * BUG/MEDIUM: http-ana: Don't close server connection on read0 in TUNNEL mode
  * BUG/MINOR: ssl: Don't allow to set NULL sni
  * MINOR: quic: Add useful debugging traces in qc_idle_timer_do_rearm()
  * BUG/MINOR: quic/ssl: crash in ClientHello callback ssl traces
  * DOC: config: reorder the cache section's keywords
  * DOC: config: mention clearer that the cache's total-max-size is mandatory
  * BUG/MEDIUM: connection: fix "bc_settings_streams_limit" typo
  * BUG/MINOR: jwt: Missing "case" in switch statement
  * BUG/MINOR: acme: fix ha_alert() call
  * BUG/MINOR: acme: warning ‘ctx’ may be used uninitialized
  * BUG/MINOR: acme: better challenge_ready processing
  * BUG/MINOR: acme: prevent creating map entries with dns-01
  * BUG/MINOR: acme: handle multiple auth with the same name
  * BUG/MEDIUM: cli: State the cli have no more data to deliver if it yields
  * BUG/MEDIUM: applet: Fix conditions to detect spinning loop with the new API
  * BUG/MINOR: http-ana: Reset analyse_exp date after 'wait-for-body' action
  * BUG/MEDIUM: h1-htx: Don't set HTX_FL_EOM flag on 1xx informational messages
  * BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards
  * [RELEASE] Released version 3.2.9
  * DOC: http: document 413 response code
  * ADMIN: dump-certs: let dry-run compare certificates
  * ADMIN: dump-certs: use same error format as haproxy
  * ADMIN: dump-certs: fix lack of / in -p
  * ADMIN: dump-certs: create files in a tmpdir
  * ADMIN: dump-certs: don't update the file if it's up to date
  * ADMIN: haproxy-dump-certs: implement a certificate dumper
  * BUG/MEDIUM: proxy: do not align proxy_per_tgroup beyond allocator's capabilities
  * BUG/MEDIUM: config: Use the mux protocol ALPN by default for listeners if forced
  * MINOR: config: Do proto detection for listeners before checks about ALPN
  * MINOR: muxes: Support an optional ALPN string when defining mux protocols
  * BUG/MEDIUM: queues: Don't forget to unlock the queue before exiting
  * DOC: acme: configuring acme needs a crt file
  * DOC: acme: explain how to dump the certificates
  * DOC: acme: add details about the DNS-01 support
  * BUG/MINOR: acme: alert when the map doesn't exist at startup
  * BUG/MINOR: ssl: remove dead code in ssl_sock_from_buf()
  * BUG/MINOR: mworker: wrong signals during startup
  * BUG/MEDIUM: mworker: signals inconsistencies during startup and reload
  * BUG/MINOR: quic-be: backend SSL session reuse fix (OpenSSL 3.5)
  * BUG/MEDIUM: h1: prevent a crash on HTTP/2 upgrade
  * MINOR: h1: h1_release() should return if it destroyed the connection
  * BUG/MINOR: stick-tables: Fix return value for __stksess_kill()
  * BUG/MEDIUM: stick-tables: Always return the good stksess from stktable_set_entry
  * DOC: configuration: add missing openssl_version predicates
  * DOC: configuration: add missing ssllib_name_startswith()
  * BUG/MINOR: check: fix reuse-pool if MUX inherited from server
  * BUG/MINOR: acme: can't override the default resolver
  * BUG/MEDIUM: acme: move from mt_list to a rwlock + ebmbtree
  * BUG/MINOR: acme: more explicit error when BIO_new_file()
  * BUG/MINOR: quic: close connection on CID alloc failure
  * BUG/MEDIUM: stick-tables: Make sure updates are seen as local
  * BUG/MINOR: config: Limit "tune.maxpollevents" parameter to 1000000
  * BUG/MEDIUM: connection/ssl: also fix the ssl_sock_io_cb() regarding idle list
  * BUG/MEDIUM: connection: do not reinsert a purgeable conn in idle list
  * Revert "BUG/MEDIUM: connections: permit to permanently remove an idle conn"
  * MINOR: ssl/sample: expose ssl_*c_curve for AWS-LC
  * [RELEASE] Released version 3.2.8
  * BUG/MINOR: acme: wrong dns-01 challenge in the log
  * BUG/MEDIUM: server: close a race around ready_srv when deleting a server
  * BUG/MEDIUM: connections: permit to permanently remove an idle conn
  * BUG/MEDIUM: mux-h2: make sure not to move a dead connection to idle
  * BUG/MEDIUM: mux-h1: fix 414 / 431 status code reporting
  * SCRIPTS: build-ssl: fix rpath in AWS-LC install for openssl and bssl bin
  * OPTIM: backend: skip conn reuse for incompatible proxies
  * BUG/MINOR: resolvers: ensure fair round robin iteration
  * BUG/MINOR: ssl: returns when SSL_CTX_new failed during init
  * BUG/MINOR: resolvers: Apply dns-accept-family setting on additional records
  * BUG/MINOR: init: Do not close previously created fd in stdio_quiet
  * MINOR: http: fix 405,431,501 default errorfile
  * MINOR: ssl-sample: add ssl_fc_early_rcvd() to detect use of early data
  * DOC: config: slightly clarify the ssl_fc_has_early() behavior
  * BUG/MEDIUM: ssl: Crash because of dangling ckch_store reference in a ckch instance
  * MINOR: backend: srv_is_up converter
  * MINOR: backend: srv_queue helper
  * BUG/MEDIUM: cli: do not return ACKs one char at a time
  * MINOR: cli: create cli_raw_rcv_buf() from the generic applet_raw_rcv_buf()
  * MINOR: applet: do not put SE_FL_WANT_ROOM on rcv_buf() if the channel is empty
  * BUG/MEDIUM: mt_list: Use atomic operations to prevent compiler optims
  * BUG/MINOR: stick-tables: properly index string-type keys
  * BUG/MEDIUM: applet: Improve again spinning loops detection with the new API
  * BUG/MEDIUM: mt_lists: Avoid el-&gt;prev = el-&gt;next = el
  * [RELEASE] Released version 3.2.7
  * MINOR: acme: display the complete challenge_ready command in the logs
  * MINOR: acme: add the dns-01-record field to the sink
  * BUG/MINOR: acme: memory leak from the config parser
  * MEDIUM: acme: don't insert acme account key in ckchs_tree
  * MINOR: acme: implement "reuse-key" option
  * BUILD: acme: fix false positive null pointer dereference
  * MINOR: acme: provider-name for dpapi sink
  * CLEANUP: acme: acme_will_expire() uses acme_schedule_date()
  * MINOR: acme: check acme-vars allocation during escaping
  * MINOR: acme: acme-vars allow to pass data to the dpapi sink
  * BUG/MEDIUM: build: limit excessive and counter-productive gcc-15 vectorization
  * BUG/MAJOR: quic: use ncbmbuf for CRYPTO handling
  * MINOR: ncbmbuf: add tests as standalone mode
  * MINOR: ncbmbuf: implement advance operation
  * MINOR: ncbmbuf: implement ncbmb_data()
  * MINOR: ncbmbuf: implement iterator bitmap utilities functions
  * MINOR: ncbmbuf: implement add
  * MINOR: ncbmbuf: define new ncbmbuf type
  * MINOR: ncbuf: extract common types
  * BUG/MEDIUM: h3: properly encode response after interim one in same buf
  * BUG/MAJOR: quic: uninitialized quic_conn_closed struct members
  * BUG/MINOR: quic: SSL counters not handled
  * BUG/MEDIUM: cli: also free the trash chunk on the error path
  * BUG/MEDIUM: mt_list: Make sure not to unlock the element twice
  * BUG/MEDIUM: threads/config: drop absent threads from thread groups
  * DOC: clarify the experimental status for certain features
  * BUG/MINOR: quic: check applet_putchk() for 'show quic' first line
  * BUG/MEDIUM: stick-tables: Don't forget to dec count on failure.
  * MINOR: quic: restore QUIC_HP_SAMPLE_LEN constant
  * BUG/MINOR: quic: too short PADDING frame for too short packets
  * BUILD: ssl: can't build when using -DLISTEN_DEFAULT_CIPHERS
  * BUG/MAJOR: lb-chash: fix key calculation when using default hash-key id
  * BUG/MINOR: pools: don't report "limited to the first X entries" by default
  * BUG/MEDIUM: pools: fix crash on filtered "show pools" output
  * TESTS: quic: useless param for b_quic_dec_int()
  * BUG/MINOR: ssl: Potential NULL deref in trace macro
  * BUG/MINOR: ssl: Free key_base from global_ssl structure during deinit
  * BUG/MINOR: ssl: Free global_ssl structure contents during deinit
  * MINOR: debug: add distro name and version in postmortem
  * BUG/MINOR: sink: retry attempt for sft server may never occur
  * BUG/MEDIUM: apppet: Improve spinning loop detection with the new API
  * BUILD: makefile: disable tail calls optimizations with memory profiling
  * BUG/MINOR: ssl: leak crtlist_name in ssl-f-use
  * BUG/MINOR: ssl: leak in ssl-f-use
  * BUG/MINOR: ssl: always clear the remains of the first hello for the second one
  * BUG/MEDIUM: ssl: take care of second client hello
  * BUG/MINOr: hlua: Fix receive from HTTP applet by properly accounting data
  * BUG/MINOR: acme: avoid overflow when diff &gt; notAfter
  * [RELEASE] Released version 3.2.6
  * BUG/MEDIUM: resolvers: break an infinite loop in resolv_get_ip_from_response()
  * BUG/MINOR: h3: forbid 'Z' as well in header field names checks
  * BUG/MINOR: h2: forbid 'Z' as well in header field names checks
  * BUG/CRITICAL: mjson: fix possible DoS when parsing numbers
  * DOC: config: clarify some known limitations of the json_query() converter
  * BUG/MEDIUM: fwlc: Handle memory allocation failures.
  * MEDIUM: fwlc: Make it so fwlc_srv_reposition works with unqueued srv
  * MEDIUM: servers: Schedule the server requeue target on creation
  * BUG/MEDIUM: stick-tables: Make sure not to free a pending entry
  * MINOR: mt_list: Implement MT_LIST_POP_LOCKED()
  * BUG/MEDIUM: ssl: ca-file directory mode must read every certificates of a file
  * BUG/MINOR: pattern: Fix pattern lookup for map with opt@ prefix
  * BUG/MINOR: acme: possible overflow in acme_will_expire()
  * BUG/MINOR: acme: possible overflow on scheduling computation
  * BUG/MINOR: pattern: Properly flag virtual maps as using samples
  * BUG/MINOR: compression: Test payload size only if content-length is specified
  * MINOR: ssl: add the ssl_bc_sni sample fetch function to retrieve backend SNI
  * BUG/MEDIUM: wdt: improve stuck task detection accuracy
  * MINOR: sched: pass the thread number to is_sched_alive()
  * MINOR: sched: let's permit to share the local ctx between threads
  * BUG/MEDIUM: acme: free() of i2d_X509_REQ() with AWS-LC
  * BUG/MEDIUM: acme: cfg_postsection_acme() don't init correctly acme sections
  * BUG/MINOR: acme: don't unlink from acme_ctx_destroy()
  * CI: github: build halog on the vtest job
  * BUILD: halog: misleading indentation in halog.c
  * BUG/MINOR: pools: Fix the dump of pools info to deal with buffers limitations
  * BUG/MEDIUM: stick-tables: Don't let table_process_entry() handle refcnt
  * BUG/MINOR: acme/cli: wrong description for "acme challenge_ready"
  * MEDIUM: resolvers: make the process_resolvers() task single-threaded
  * MEDIUM: dns: bind the nameserver sockets to the initiating thread
  * OPTIM: sink: reduce contention on sink_announce_dropped()
  * BUG/MEDIUM: resolvers: Wake resolver task up whne unlinking a stream requester
  * BUG/MEDIUM: resolvers: Accept to create resolution without hostname
  * BUG/MEDIUM: resolvers: Make resolution owns its hostname_dn value
  * BUG/MEDIUM: resolvers: Test for empty tree when getting a record from DNS answer
  * BUG/MINOR: resolvers: Restore round-robin selection on records in DNS answers
  * BUG/MEDIUM: resolvers: Properly cache do-resolv resolution
  * MINOR: tools: don't emit "+0" for symbol names which exactly match known ones
  * MINOR: activity: indicate the number of calls on "show tasks"
  * MEDIUM: peers: move process_peer_sync() to a single thread
  * MEDIUM: stick-table: move process_table_expire() to a single thread
  * MEDIUM: peers: don't even try to process updates under contention
  * MEDIUM: stick-tables: don't wait indefinitely in stktable_add_pend_updates()
  * MEDIUM: stick-tables: give up on lock contention in process_table_expire()
  * MEDIUM: stick-tables: relax stktable_trash_oldest() to only purge what is needed
  * MINOR: stick-table: permit stksess_new() to temporarily allocate more entries
  * DEBUG: peers: export functions that use locks
  * MINOR: debug: report the time since last wakeup and call
  * MINOR: debug: report the number of loops and ctxsw for each thread
  * DEBUG: stream: count the number of passes in the connect loop
  * MINOR: debug: report the process id in warnings and panics
  * BUG/MINOR: tcpcheck: Don't use sni as pool-conn-name for non-SSL connections
  * BUG/MINOR: server: Update healthcheck when server settings are changed via CLI
  * BUG/MEDIUM: server: Use sni as pool connection name for SSL server only
  * MINOR: server: Parse sni and pool-conn-name expressions in a dedicated function
  * OPTIM: stick-tables: exit expiry faster when the update lock is held
  * MINOR: stick-tables: limit the number of visited nodes during expiration
  * [RELEASE] Released version 3.2.5
  * BUG/MEDIUM: pattern: fix possible infinite loops on deletion (try 2)
  * DEBUG: stick-tables: export stktable_add_pend_updates() for better reporting
  * BUG/MEDIUM: ring: invert the length check to avoid an int overflow
  * BUG/MINOR: resolvers: always normalize FQDN from response
  * BUG/MINOR: ocsp: Crash when updating CA during ocsp updates
  * BUG/MEDIUM: http_ana: fix potential NULL deref in http_process_req_common()
  * BUG/MINOR: ocsp: prototype inconsistency
  * BUG/MINOR: ssl: Fix potential NULL deref in trace callback
  * BUG/MINOR: ssl: Potential NULL deref in trace macro
  * BUG/MEDIUM: jws: return size_t in JWS functions
  * BUG/MINOR: acme: null pointer dereference upon allocation failure
  * BUG/MAJOR: stream: Force channel analysis on successful synchronous send
  * BUG/MAJOR: stream: Remove READ/WRITE events on channels after analysers eval
  * BUG/MINOR: stick-table: make sure never to miss a process_table_expire update
  * BUG/MEDIUM: stick-tables: don't loop on non-expirable entries
  * BUG/MINOR: activity: fix reporting of task latency
  * BUG/MEDIUM: ssl: create the mux immediately on early data
  * BUG/MEDIUM: h1: Allow reception if we have early data
  * BUG/MEDIUM: checks: fix ALPN inheritance from server
  * OPTIM: check: do not delay MUX for ALPN if SSL not active
  * BUG/MEDIUM: mux-h2: Reinforce conditions to report an error to app-layer stream
  * BUG/MEDIUM: mux-h2: Report RST/error to app-layer stream during 0-copy fwding
  * BUG/MINOR: mux-h2: Remove H2_CF_DEM_DFULL flags when the demux buffer is reset
  * BUG/MEDIUM: mux-h2: Restart reading when mbuf ring is no longer full
  * BUG/MEDIUM: mux-h2; Don't block reveives in H2_CS_ERROR and H2_CS_ERROR2 states
  * BUG/MEDIUM: mux-h2: Reset MUX blocking flags when a send error is caught
  * CLEANUP: quic: fix typo in quic_tx trace
  * BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET()
  * BUILD: trace: silence a bogus build warning at -Og
  * BUG/MINOR: log: fix potential memory leak upon error in add_to_logformat_list()
  * BUG/MINOR: connection: streamline conn detach from lists
  * BUG/MEDIUM: conn: fix UAF on connection after reversal on edge
  * REGTESTS: explicitly use "balance roundrobin" where RR is needed
  * BUG/MINOR: check: fix dst address when reusing a connection
  * BUG/MINOR: check: ensure check-reuse is compatible with SSL
  * BUG/MEDIUM: peers: don't fail twice to grab the update lock
  * BUG/MINOR: stick-tables: never leave used entries without expiration
  * BUG/MEDIUM: stick-tables: don't leave the expire loop with elements deleted
  * MINOR: quic: Add more information about RX packets
  * BUILD: acl: silence a possible null deref warning in parse_acl_expr()
  * BUG/MINOR: haproxy: be sure not to quit too early on soft stop
  * BUG/MINOR: quic: fix padding issue on INITIAL retransmit
  * BUG/MINOR: quic: fix room check if padding requested
  * BUG/MINOR: quic: ignore AGAIN ncbuf err when parsing CRYPTO frames
  * BUG/MINOR: tools: Add OOM check for malloc() in indent_msg()
  * BUG/MINOR: compression: Add OOM check for calloc() in parse_compression_options()
  * BUG/MINOR: cfgparse: Add OOM check for calloc() in cfg_parse_listen()
  * BUG/MINOR: acl: Add OOM check for calloc() in smp_fetch_acl_parse()
  * BUG/MINOR: log: Add OOM checks for calloc() and malloc() in logformat parser and dup_logger()
  * BUG/MINOR: halog: Add OOM checks for calloc() in filter_count_srv_status() and filter_count_url()
  * BUG/MEDIUM: server: Duplicate healthcheck's alpn inherited from default server
  * REG-TESTS: map_redirect: Don't use hdr_dom in ACLs with "-m end" matching method
  * BUG/MAJOR: mux-quic: fix crash on reload during emission
  * BUG/MEDIUM: quic: CRYPTO frame freeing without eb_delete()
  * CLEANUP: quic: remove a useless CRYPTO frame variable assignment
  * MINOR: doc: add missing statistics column
  * MINOR: doc: add missing statistics column
  * DOC: configuration: confuse "strict-mode" with "zero-warning"
  * DOC: unreliable sockpair@ on macOS
  * BUILD: mworker: fix ignoring return value of ‘read’
  * BUG/MINOR: server: decrement session idle_conns on del server
  * BUG/MINOR: connection: remove extra session_unown_conn() on reverse
  * BUG/MINOR: connection: rearrange union list members
  * BUG/MEDIUM: mworker: fix startup and reload on macOS
  * BUG/MINOR: acl: set arg_list-&gt;kw to aclkw-&gt;kw string literal if aclkw is found
  * BUG/MINOR: mux-quic: trace with non initialized qcc
  * MINOR: quic: remove -&gt;offset qf_crypto struct field
  * DOC: configuration: clarify 'default-crt' and implicit default certificates
  * MINOR: ssl: diagnostic warning when both 'default-crt' and 'strict-sni' are used
  * BUG/MINOR: quic: reorder fragmented RX CRYPTO frames by their offsets
  * MINOR: sample: Add base2 converter
  * MINOR: sample: Add le2dec (little endian to decimal) sample fetch
  * BUG/MEDIUM: spoe: Improve error detection in SPOE applet on client abort
  * BUG/MEDIUM: http_ana: handle yield for "stats http-request" evaluation
  * BUG/MEDIUM: mux-spop: Reject connection attempts from a non-spop frontend
  * MINOR: http_ana: fix typo in http_res_get_intercept_rule
  * MINOR: quic: centralize padding for HP sampling on packet building
  * BUG/MINOR: quic: don't coalesce probing and ACK packet of same type
  * BUG/MAJOR: quic: fix INITIAL padding with probing packet only
  * BUG/MINOR: quic: do not emit probe data if CONNECTION_CLOSE requested
  * BUG/MEDIUM: quic: reset padding when building GSO datagrams
  * MINOR: dns: dns_connect_nameserver: fix fd leak at error path
  * BUG/MEDIUM: ssl: apply ssl-f-use on every "ssl" bind
  * BUG/MEDIUM: mux-h2: fix crash on idle-ping due to unwanted ABORT_NOW
  * BUG/MEDIUM: mworker: more verbose error upon loading failure
  * BUG/MEDIUM: cli: Report inbuf is no longer full when a line is consumed
  * BUG/MINOR: spoe: Properly detect and skip empty NOTIFY frames
  * MEDIUM: dns: don't call connect to dest socket for AF_INET*
  * BUG/MINOR: mux-h1: fix wrong lock label
  * BUG/MEDIUM: quic: listener connection stuck during handshakes (OpenSSL 3.5)
  * MINOR: quic: implement qc_ssl_do_hanshake()
  * BUG/MEDIUM: Remove sync sends from streams to applets
  * BUG/MEDIUM: stconn: Fix conditions to know an applet can get data from stream
  * [RELEASE] Released version 3.2.4
  * BUG/MEDIUM: http-client: Test HTX_FL_EOM flag before commiting the HTX buffer
  * BUG/MEDIUM: mux-quic: adjust wakeup behavior
  * DOC: config: recommend single quoting passwords
  * DOC: management: fix typo in commit f4f93c56
  * BUG/MINOR: init: Initialize random seed earlier in the init process
  * BUG/MEDIUM: ssl: fix build with AWS-LC
  * BUG/MEDIUM: ssl: Fix 0rtt to the server
  * MINOR: sock: update broken accept4 detection for older hardwares.
  * BUG/MINOR: stick-table: cap sticky counter idx with tune.nb_stk_ctr instead of MAX_SESS_STKCTR
  * BUILD: compat: always set _POSIX_VERSION to ease comparisons
  * BUILD: compat: provide relaxed versions of the MIN/MAX macros
  * DOC: list missing global QUIC settings
  * CLEANUP: http-client: Remove useless indentation when sending request body
  * BUG/MINOR: mux-quic: ensure close-spread-time is properly applied
  * BUG/MINOR mux-quic: apply correctly timeout on output pending data
  * BUG/MINOR: hq-interop: fix FIN transmission
  * BUG/MINOR: logs: fix log-steps extra log origins selection
  * BUG/MEDIUM: threads: Disable the workaround to load libgcc_s on macOS
  * BUG/MINOR: halog: exit with error when some output filters are set simultaneosly
  * BUG/MINOR: applet: Don't trigger BUG_ON if the tid is not on appctx init
  * MINOR: h3: remove unused outbuf in h3_resp_headers_send()
  * BUG/MINOR: quic: Wrong source address use on FreeBSD
  * BUG/MEDIUM: h3: handle interim response properly on FE side
  * MINOR: qmux: change API for snd_buf FIN transmission
  * BUG/MINOR: h3: ensure that invalid status code are not encoded (FE side)
  * BUG/MINOR: h3: properly realloc buffer after interim response encoding
  * BUG/MEDIUM: h3: do not overwrite interim with final response
  * BUG/MINOR: h1-htx: Don't forget to init flags in h1_format_htx_msg function
  * BUG/MINOR: mux-h1: Use configured error files if possible for early H1 errors
  * MINOR: h1-htx: Add function to format an HTX message in its H1 representation
  * BUG/MEDIUM: http-client: Notify applet has more data to deliver until the EOM
  * BUG/MEDIUM: http-client: Drain the request if an early response is received
  * BUG/MINOR: http-client: Reject any 101-switching-protocols response
  * BUG/MINOR: http-client: Ignore 1XX interim responses in non-HTX mode
  * BUG/MEDIUM: http-client: Ask for more room when request data cannot be xferred
  * BUG/MEDIUM: http-client: Properly inc input data when HTX blocks are xferred
  * BUG/MEDIUM: http-client: Don't wake http-client applet if nothing was xferred
  * BUG/MEDIUM: quic: Crash after QUIC server callbacks restoration (OpenSSL 3.5)
  * MINOR: quic: Prevent QUIC build with OpenSSL 3.5 new QUIC API version &lt; 3.5.1
  * BUG/MINOR: listener: really assign distinct IDs to shards
  * MEDIUM: ssl/cli: relax crt insertion in crt-list of type directory
  * DOC: management: clarify usage of -V with -c
  * MEDIUM: acme: use lowercase for challenge names in configuration
  * BUG/MINOR: acme: possible integer underflow in acme_txt_record()
  * MINOR: acme: update the log for DNS-01
  * MEDIUM: acme: allow to wait and restart the task for DNS-01
  * MINOR: acme: emit the DNS-01 challenge details on the dpapi sink
  * MINOR: acme: emit a log for DNS-01 challenge response
  * BUG/MEDIUM: hlua_fcn: ensure systematic watcher cleanup for server list iterator
  * BUILD: acme: avoid declaring TRACE_SOURCE in acme-t.h
  * CLEANUP: ssl: Rename ssl_trace-t.h to ssl_trace.h
  * BUG/MEDIUM: mux-quic: ensure Early-data header is set
  * BUG/MINOR: hlua: take default-path into account with lua-load-per-thread
  * BUG/MEDIUM: logs: fix sess_build_logline_orig() recursion with options
  * BUG/MEDIUM: dns: Reset reconnect tempo when connection is finally established
  * BUG/MEDIUM: hlua: Report to SC when output data are blocked on a lua socket
  * BUG/MEDIUM: hlua: Report to SC when data were consumed on a lua socket
  * BUG/MINOR: hlua: Skip headers when a receive is performed on an HTTP applet
  * MINOR: acme: implement traces
  * MINOR: acme: add ACME to the haproxy -vv feature list
  * CLEANUP: acme: fix wrong spelling of "resources"
  * BUG/MINOR: acme: allow "processing" in challenge requests
  * MINOR: acme: remove acme_req_auth() and use acme_post_as_get() instead
  * BUG/MEDIUM: acme: use POST-as-GET instead of GET for resources
  * BUG/MEDIUM: ssl/clienthello: ECDSA with ssl-max-ver TLSv1.2 and no ECDSA ciphers
  * DOC: deviceatlas build clarifications
  * [RELEASE] Released version 3.2.3
  * BUILD/MEDIUM: deviceatlas: fix when installed in custom locations.
  * BUG/MINOR: http-act: Fix parsing of the expression argument for pause action
  * BUG/MINOR: ssl: crash in ssl_sock_io_cb() with SSL traces and idle connections
  * BUG/MINOR: ssl/ocsp: fix definition discrepancies with ocsp_update_init()
  * BUG/MINOR: quic: Missing TLS 1.3 QUIC cipher suites and groups inits (OpenSSL 3.5 QUIC API)
  * CI: github: update to OpenSSL 3.5.1
  * BUG/MEDIUM: quic: SSL/TCP handshake failures with OpenSSL 3.5
  * BUILD: quic: QUIC build against OpenSSL 3.5 broken
  * CI: github: update the stable CI to ubuntu-24.04
  * CI: github: add an OpenSSL 3.5.0 job
  * CI: enable USE_QUIC=1 for OpenSSL versions &gt;= 3.5.0
  * [RELEASE] Released version 3.2.2
  * BUILD: dev/phash: remove the accidentally committed a.out file
  * BUG/MINOR: httpclient: wrongly named httpproxy flag
  * DOC: Fix 'jwt_verify' converter doc
  * BUG/MINOR: jwt: Copy input and parameters in dedicated buffers in jwt_verify converter
  * BUG/MEDIUM: mux-h2: Properly handle connection error during preface sending
  * BUG/MEDIUM: hlua: Forbid any L6/L7 sample fetche functions from lua services
  * MINOR: ssl: check TLS1.3 ciphersuites again in clienthello with recent AWS-LC
  * BUG/MINOR: tools: use my_unsetenv instead of unsetenv
  * SCRIPTS: drop the HTML generation from announce-release
  * DOC: config: crt-list clarify default cert + cert-bundle
  * MINOR: quic: Useless TX buffer size reduction in closing state
  * BUG/MINOR: quic: wrong QUIC_FT_CONNECTION_CLOSE(0x1c) frame encoding
  * DOC: configuration: add details on prefer-client-ciphers
  * BUG/MINOR: log: Be able to use %ID alias at anytime of the stream's evaluation
  * BUG/MINOR: stream: Avoid recursive evaluation for unique-id based on itself
  * BUG/MINOR: tools: only reset argument start upon new argument
  * MINOR: fwlc: Factorize code.
  * BUG/MAJOR: fwlc: Count an avoided server as unusable.
  * BUG/MINOR: mux-quic/h3: properly handle too low peer fctl initial stream
  * DOC: config: prefer-last-server: add notes for non-deterministic algorithms
  * BUG/MEDIUM: check: Set SOCKERR by default when a connection error is reported
  * MINOR: cli: handle EOS/ERROR first
  * BUG/MEDIUM: cli: Don't consume data if outbuf is full or not available
  * BUG/MINOR: quic: Fix OSSL_FUNC_SSL_QUIC_TLS_got_transport_params_fn callback (OpenSSL3.5)
  * BUG/MINOR: http-ana: Properly handle keep-query redirect option if no QS
  * BUG/MINOR: config/server: reject QUIC addresses
  * [RELEASE] Released version 3.2.1
  * BUG/MINIR: h1: Fix doc of 'accept-unsafe-...-request' about URI parsing
  * BUG/MEDIUM: fd: Use the provided tgid in fd_insert() to get tgroup_info
  * BUG/MINOR: quic: Missing SSL session object freeing
  * BUG/MINOR: config: fix arg number reported on empty arg warning
  * BUG/MINOR: config: emit warning for empty args only in discovery mode
  * BUG/MEDIUM: cli: Properly parse empty lines and avoid crashed
  * BUG/MINOR: mux-spop: Fix null-pointer deref on SPOP stream allocation failure
  * BUG/MEDIUM: check: Requeue healthchecks on I/O events to handle check timeout
  * BUG/MAJOR: leastconn: Protect tree_elt with the lbprm lock
  * DOC: config: Fix a typo in 2.7 (Name format for maps and ACLs)
  * BUILD: tools: properly define ha_dump_backtrace() to avoid a build warning
  Remove patches applied by update:
    0001-BUG-CRITICAL-mjson-fix-possible-DoS-when-parsing-num.patch
    0001-BUG-MEDIUM-applet-Fix-test-on-shut-flags-for-legacy.patch
    0001-fix-parsing-frame-type.patch
    0001-reject-invalid-token.patch</changelog>
  <changelog author="varkoly@suse.com" date="1773144000">- Update to version 3.2.14+git0.951507193:
  * [RELEASE] Released version 3.2.14
  * SCRIPTS: git-show-backports: add a restart-from-last option
  * SCRIPTS: git-show-backports: hide the common ancestor warning in quiet mode
  * BUG/MINOR: backend: Don't get proto to use for webscoket if there is no server
  * BUG/MINOR: ssl-sample: Fix sample_conv_sha2() by checking EVP_Digest* failures
  * BUG/MEDIUM: mux-fcgi: Use a safe loop to resume each stream eligible for sending
  * BUG/MAJOR: resolvers: Properly lowered the names found in DNS response
  * BUG/MAJOR: fcgi: Fix param decoding by properly checking its size
  * MINOR: filters: Set last_entity when a filter fails on stream_start callback
  * DEBUG: stream: Display the currently running rule in stream dump
  * BUG/MINOR: h1-htx: Be sure that H1 response version starts by "HTTP/"
  * BUG/MEDIUM: qpack: correctly deal with too large decoded numbers
  * BUG/MINOR: qpack: fix 1-byte OOB read in qpack_decode_fs_pfx()
  * BUG/MAJOR: qpack: unchecked length passed to huffman decoder
  * BUG/MEDIUM: hpack: correctly deal with too large decoded numbers
  * BUG/MEDIUM: stream: Handle TASK_WOKEN_RES as a stream event
  * BUG/MINOR: promex: fix server iteration when last server is deleted
  * BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream
  * MINOR: mux-h2: add a new setting, "tune.h2.log-errors" to tweak error logging
  * MINOR: mux-h2: also count glitches on invalid trailers
  * [RELEASE] Released version 3.2.13
  * CLEANUP: mux-h1: Remove unneeded null check
  * CI: github: disable windows.yml by default on unofficials repo
  * CI: vtest: move the vtest2 URL to vinyl-cache.org
  * MINOR: stconn: Add missing SC_FL_NO_FASTFWD flag in sc_show_flags
  * BUG/MINOR: http-ana: Stop to wait for body on client error/abort
  * CLEANUP: compression: Remove unused static buffers
  * BUG/MINOR: flt-trace: Properly compute length of the first DATA block
  * DEV: term-events: Fix hanshake events decoding
  * BUG/MEDIUM: applet: Fix test on shut flags for legacy applets (v2)
  * BUG/MEDIUM: mux-h1: Stop sending vi fast-forward for unexpected states
  * BUG/MEDIUM: mux-h2/quic: Stop sending via fast-forward if stream is closed
  * BUG/MEDIUM: h3: reject frontend CONNECT as currently not implemented
  * BUG/MAJOR: Revert "MEDIUM: mux-quic: add BUG_ON if sending on locally closed QCS"
  * BUG/MINOR: ssl: error with ssl-f-use when no "crt"
  * BUG/MINOR: ssl: clarify ssl-f-use errors in post-section parsing
  * BUG/MINOR: ssl: fix leak in ssl-f-use parser upon error
  * BUG/MINOR: ssl: double-free on error path w/ ssl-f-use parser
  * BUG/MINOR: ssl: lack crtlist_dup_ssl_conf() declaration
  * BUG/MINOR: deviceatlas: set cache_size on hot-reloaded atlas instance
  * BUG/MINOR: deviceatlas: fix deinit to only finalize when initialized
  * BUG/MINOR: deviceatlas: fix resource leak on hot-reload compile failure
  * BUG/MINOR: deviceatlas: fix double-checked locking race in checkinst
  * BUG/MINOR: deviceatlas: fix cookie vlen using wrong length after extraction
  * BUG/MINOR: deviceatlas: fix off-by-one in da_haproxy_conv()
  * BUG/MEDIUM: deviceatlas: fix resource leaks on init error paths
  * BUG/MINOR: deviceatlas: add NULL checks on strdup() results in config parsers
  * BUG/MINOR: deviceatlas: add missing return on error in config parsers
  * DOC: proxy-proto: underline the packed attribute for struct pp2_tlv_ssl
  * DOC: internals: addd mworker V3 internals</changelog>
  <changelog author="varkoly@suse.com" date="1776686400">- Update to version 3.2.15+git64.0fc44b458:
  * BUG/MINOR: hlua: fix use-after-free of HTTP reason string
  * BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize
  * BUG/MINOR: sample: fix info leak in regsub when exp_replace fails
  * BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples
  * BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer()
  * BUG/MINOR: resolvers: fix memory leak on AAAA additional records
  * BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals
    (bsc#1261626) VUL-0: haproxy: bug in SLZ compression
  * BUG/MINOR: peers: fix OOB heap write in dictionary cache update
  * BUG/MINOR: hlua: fix format-string vulnerability in Patref error path
  * BUG/MINOR: hlua: fix stack overflow in httpclient headers conversion
  * BUG: hlua: fix stack overflow in httpclient headers conversion
  * BUG/MEDIUM: jwt: fix heap overflow in ECDSA signature DER conversion
  * BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni
  * BUG/MINOR: http-act: fix a typo in the "pause" action error message
  * BUG/MEDIUM: mux-h1: Disable 0-copy forwarding when draining the request
  * DOC: config: fix ambiguous info in log-steps directive description
  * BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature"
  * BUG/MINOR: cfgcond: always set the error string on openssl_version checks
  * BUG/MINOR: cfgcond: properly set the error pointer on evaluation error
  * BUG/MINOR: quic: fix documentation for transport params decoding
  * BUG/MINOR: tcpcheck: Use tcpcheck context for expressions parsing
  * BUG/MINOR: tcpcheck: Don't enable http_needed when parsing HTTP samples
  * BUG/MINOR: tcpcheck: Remove unexpected flag on tcpcheck rules for httchck option
  * BUG/MEDIUM: mux-h1: Don't set MSG_MORE on bodyless responses forwarded to client
  * BUG/MEDIUM: map/cli: map/acl commands warn when accessed without admin level
  * BUG/MEDIUM: ssl/ocsp: ocsp commands warn when accessed without admin level
  * BUG/MEDIUM: ssl/cli: tls-keys commands warn when accessed without admin level
  * SCRIPTS: git-show-backports: list new commits and how to review them with -L
  * MINOR: mux-h2: report glitches on early RST_STREAM
  * MINOR: stconn: flag the stream endpoint descriptor when the app has started
  * BUG/MINOR: stconn: Always declare the SC created from healthchecks as a back SC
  * BUG/MINOR: quic: close conn on packet reception with incompatible frame
  * CI: github: fix tag listing by implementing proper API pagination
  * BUG/MINOR: acme: fix task allocation leaked upon error
  * BUG/MEDIUM: acme: skip doing challenge if it is already valid
  * BUG/MINOR: http-ana: Only consider client abort for abortonclose
  * BUG/MINOR: config: Properly test warnif_misplaced_* return values
  * BUG/MINOR: acme: permission checks on the CLI
  * BUILD: tools: potential null pointer dereference in dl_collect_libs_cb
  * BUG/MINOR: acme/cli: fix argument check and error in 'acme challenge_ready'
  * BUG/MINOR: acme: replace atol with len-bounded __strl2uic() for retry-after
  * BUG/MINOR: acme: free() DER buffer on a2base64url error path
  * MINOR: ncbmbuf: improve itbmap_next() code
  * BUG/MEDIUM: spoe: Acquire context buffer in applet before consuming a frame
  * BUG/MINOR: acme: fix incorrect number of arguments allowed in config
  * BUG/MINOR: acme: wrong labels logic always memprintf errmsg
  * BUG/MINOR: acme: acme_ctx_destroy() leaks auth-&gt;dns
  * DOC: config: Reorder params for 'tcp-check expect' directive
  * DOC: config: Add missing 'status-code' param for 'http-check expect' directive
  * Revert "BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream"
  * BUG/MINOR: acme/cli: wrong argument check in 'acme renew'
  * BUG/MINOR: acme: wrong error when checking for duplicate section
  * BUG/MINOR: acme: leak of ext_san upon insertion error
  * BUG/MEDIUM: acme: fix multiple resource leaks in acme_x509_req()
  * BUILD: sched: fix leftover of debugging test in single-run changes
  * MINOR: mux-h2: assign a limited frames processing budget
  * MEDIUM: sched: change scheduler budgets to lower TL_BULK
  * MEDIUM: sched: do not punish self-waking tasklets if TASK_WOKEN_ANY
  * MINOR: sched: do not punish self-waking tasklets anymore
  * MINOR: sched: do not requeue a tasklet into the current queue
  * MEDIUM: sched: do not run a same task multiple times in series
  * BUG/MINOR: qpack: fix 62-bit overflow and 1-byte OOB reads in decoding
  * BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM
  * BUG/MINOR: mworker: fix sort order of mworker_proc in 'show proc'
  * [RELEASE] Released version 3.2.15
  * CI: github: treat vX.Y.Z release tags as stable like haproxy-* branches
  * BUG/MINOR: mworker/cli: fix show proc pagination losing entries on resume
  * MINOR: mworker/cli: extract worker "show proc" row printer
  * BUG/MEDIUM: h3: reject unaligned frames except DATA
  * BUG/MAJOR: h3: check body size with content-length on empty FIN
    (bsc#1262103) VUL-0: CVE-2026-33555: haproxy: Request smuggling via HTTP/3 parser desynchronization
  * BUG/MINOR: mux-h2: properly ignore R bit in WINDOW_UPDATE increments
  * BUG/MINOR: mux-h2: properly ignore R bit in GOAWAY stream ID
  * BUG/MEDIUM: peers: enforce check on incoming table key type
  * BUG/MINOR: mworker: don't try to access an initializing process
  * MINOR: debug: opportunistically load libthread_db.so.1 with set-dumpable=libs
  * MINOR: debug: copy debug symbols from /usr/lib/debug when present
  * DEV: gdb: add a new utility to extract libs from a core dump: libs-from-core
  * MINOR: debug: read all libs in memory when set-dumpable=libs
  * MINOR: config: support explicit "on" and "off" for "set-dumpable"
  * MINOR: tools: add a function to load a file into a tar archive
  * MINOR: tools: add a function to create a tar file header
  * DEV: gdb: add a utility to find the post-mortem address from a core
  * BUILD: spoe: Remove unsused variable
  * BUG/MINOR: spoe: Fix condition to abort processing on client abort
  * BUG/MINOR: mjson: make mystrtod() length-aware to prevent out-of-bounds reads
  * BUG/MINOR: stream: Fix crash in stream dump if the current rule has no keyword
  * BUG/MINOR: proxy: do not forget to validate quic-initial rules
  * BUG/MINOR: http-ana: Swap L7 buffer with request buffer by hand
  * BUG/MINOR: h2/h3: Never insert partial headers/trailers in an HTX message
  * MINOR: htx: Add function to truncate all blocks after a specific block
  * BUG/MINOR: h2/h3: Only test number of trailers inserted in HTX message
  * BUG/MEDIUM: spoe: Properly abort processing on client abort
  * BUG/MINOR: spoe: Properly switch SPOE filter to WAITING_ACK state
  * BUG/MINOR: sockpair: set FD_CLOEXEC on fd received via SCM_RIGHTS
  * BUG/MINOR: mworker: avoid passing NULL version in proc list serialization
  * BUG/MINOR: mworker: set a timeout on the worker socketpair read at startup
  * BUG/MINOR: mworker: fix typo &amp;= instead of &amp; in proc list serialization
  * BUG/MINOR: mworker: only match worker processes when looking for unspawned proc
  * MINOR: memprof: attempt different retry slots for different hashes on collision
  * MINOR: tools: extend the pointer hashing code to ease manipulations
  * BUG/MINOR: memprof: avoid a small memory leak in "show profiling"
  * BUG/MINOR: mworker: always stop the receiving listener
  * DOC/CLEANUP: config: update mentions of the old "Global parameters" section
  * DOC: configuration: http-check expect example typo
  * BUG/MINOR: jws: fix memory leak in jws_b64_signature
  * BUG/MINOR: tcpcheck: Fix typo in error error message for `http-check expect`
  * BUG/MINOR: mworker: don't set the PROC_O_LEAVING flag on master process</changelog>
</package>
<package pkgid="eee1af46a6b06b158ad1c009dacea11c2e1cef1649ead05d840c4a3d53c262bca807bc8493b64989285c4da08ebbdf521b3e184be95875d1f5aa06196aa46302" name="hdparm" arch="x86_64">
  <version epoch="0" ver="9.65" rel="160000.3.2"/>
  <changelog author="lnussel@suse.de" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 9.60:
  - support for ioSafe Solo with jMicron bridge, courtesy Matthias-Christian Ott.
  - decode more bits from id[69], courtesy Adrián Kálazi.
  - allow passing of custom LDFLAGS from the environment.
  - add new "static" target.
  - fix --dco-identify max sectors, courtesy of Paul Sultana.
  - get rid of leftover "unknown" variables from identify.c
  - fixed return values from get_log_page_data().</changelog>
  <changelog author="info@paolostivanin.com" date="1619524800">- update to 9.61:
  - fixes for --set-sector-size and reporting of physical/logical sector sizes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620648000">- update to 9.62:
  * work around unexpected sign-extending of left-shifted unsigned
    values by gcc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1641902400">- Update to 9.63:
  * new --sanitize-overwrite-passes flag, courtesy Michal Grzedzicki.
  * "Plurals patch" from Martin Guy.</changelog>
  <changelog author="dmueller@suse.com" date="1658577600">- update to 9.64:
  * fix truncated output buf with --Istdin</changelog>
  <changelog author="dmueller@suse.com" date="1660046400">- add avoid-linux-includes.patch (bsc#1202212)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to 9.65:
  * Fixed "hdparm --Istdin" to not attempt reading LOG data from a non-existent drive.
- Refresh avoid-linux-includes.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="091668e73395b967cbeea8e93f6e7cf15d80aa697e1e8ee76fec829b8e8ab6a598b3412f0f8d781091ba4d7631c955882e13a705298469fee46bc27a1054f3d4" name="health-checker" arch="noarch">
  <version epoch="0" ver="1.12+git20241105.2e2832f15742" rel="160000.3.2"/>
  <changelog author="iforster@suse.com" date="1636718400">- Update to version 1.6
  * Adapt rd.retry to also trigger initqueue timeout tasks
    [gh#kubic-project/health-checker#11]
  * Reboot system and let the GRUB health-checker part try to find
    a working initrd if root file system could not be mounted -
    instead of ending up in an emergency shell
  * Correctly declare Bash scripts as such</changelog>
  <changelog author="iforster@suse.com" date="1662465600">- Update to version 1.7
  * Before rollback make sure /.snapshots is mounted rw
  * Fix typos and spelling errors. Note: in case an application is
    parsing the output it will need to adopt to the new strings.</changelog>
  <changelog author="iforster@suse.com" date="1683547200">- Update to version 1.8
  * Don't rely on t-u's good states in GRUB
    With the introduction of the "apply" command in
    transactional-update the snapshots don't require a reboot any
    more to be registered as a "good" snapshot. Due to
    [boo#1048088] the GRUB part of health-checker was using the t-u
    file as a workaround which cannot be done any more now, so
    store the last good snapshot path from a health-checker
    perspective independently now.</changelog>
  <changelog author="iforster@suse.com" date="1687435200">- Update to version 1.9
  * Fix failing subvolume mount checks with certain characters in
    mount point [gh#openSUSE/health-checker#14].</changelog>
  <changelog author="iforster@suse.com" date="1694779200">- Update to version 1.10
  * Fix Btrfs subvolume check if subvol starts with '-'
    [boo#1215368].</changelog>
  <changelog author="kukuk@suse.com" date="1704974400">- Update to version 1.10+git20240111.cb84209:
  * Add missing rule for health-checker.service.8
  * Don't generate html documentation
  * Fixing some typo's and improving the UX of the health-checker output
  * Fix a typo in README.md</changelog>
  <changelog author="kukuk@suse.com" date="1718884800">- Remove rchealth-checker symlink [jsc#PED-264]</changelog>
  <changelog author="iforster@suse.com" date="1722340800">- Update to version 1.11+git20240730.5dafd6a:
  * Add rpm db consistency plugin</changelog>
  <changelog author="iforster@suse.com" date="1727265600">- Update to version 1.12+git20240925.08fb1bc:
  * Release version 1.12
  * Fix typos: replaced `health-checker.state` occurances with
    `health-check.state` (#23)
  * Improve rpmdb consistency check (#21)
  * Drop crio, etcd and kubelet
  * Implement missing stop argument
- Remove plugins-kubic and plugins-caasp packages - the tests were
  removed upstream because the products were EOL</changelog>
  <changelog author="fvogt@suse.com" date="1730808000">- Update to version 1.12+git20241105.2e2832f15742:
  * Set RemainAfterExit=yes
  * Fix header of NEWS file
- Switch _service over to obs_scm and type="manual"</changelog>
</package>
<package pkgid="a355f37f5d71e5962bf27f7ba9e0991f505648ce92b213f9c8a5b6185521ac6a2f7e71940c146c7ab1199204c0a3ba55a961c7d1a79b875f6cb9761798d556f7" name="health-checker-plugins-MicroOS" arch="noarch">
  <version epoch="0" ver="1.12+git20241105.2e2832f15742" rel="160000.3.2"/>
  <changelog author="iforster@suse.com" date="1636718400">- Update to version 1.6
  * Adapt rd.retry to also trigger initqueue timeout tasks
    [gh#kubic-project/health-checker#11]
  * Reboot system and let the GRUB health-checker part try to find
    a working initrd if root file system could not be mounted -
    instead of ending up in an emergency shell
  * Correctly declare Bash scripts as such</changelog>
  <changelog author="iforster@suse.com" date="1662465600">- Update to version 1.7
  * Before rollback make sure /.snapshots is mounted rw
  * Fix typos and spelling errors. Note: in case an application is
    parsing the output it will need to adopt to the new strings.</changelog>
  <changelog author="iforster@suse.com" date="1683547200">- Update to version 1.8
  * Don't rely on t-u's good states in GRUB
    With the introduction of the "apply" command in
    transactional-update the snapshots don't require a reboot any
    more to be registered as a "good" snapshot. Due to
    [boo#1048088] the GRUB part of health-checker was using the t-u
    file as a workaround which cannot be done any more now, so
    store the last good snapshot path from a health-checker
    perspective independently now.</changelog>
  <changelog author="iforster@suse.com" date="1687435200">- Update to version 1.9
  * Fix failing subvolume mount checks with certain characters in
    mount point [gh#openSUSE/health-checker#14].</changelog>
  <changelog author="iforster@suse.com" date="1694779200">- Update to version 1.10
  * Fix Btrfs subvolume check if subvol starts with '-'
    [boo#1215368].</changelog>
  <changelog author="kukuk@suse.com" date="1704974400">- Update to version 1.10+git20240111.cb84209:
  * Add missing rule for health-checker.service.8
  * Don't generate html documentation
  * Fixing some typo's and improving the UX of the health-checker output
  * Fix a typo in README.md</changelog>
  <changelog author="kukuk@suse.com" date="1718884800">- Remove rchealth-checker symlink [jsc#PED-264]</changelog>
  <changelog author="iforster@suse.com" date="1722340800">- Update to version 1.11+git20240730.5dafd6a:
  * Add rpm db consistency plugin</changelog>
  <changelog author="iforster@suse.com" date="1727265600">- Update to version 1.12+git20240925.08fb1bc:
  * Release version 1.12
  * Fix typos: replaced `health-checker.state` occurances with
    `health-check.state` (#23)
  * Improve rpmdb consistency check (#21)
  * Drop crio, etcd and kubelet
  * Implement missing stop argument
- Remove plugins-kubic and plugins-caasp packages - the tests were
  removed upstream because the products were EOL</changelog>
  <changelog author="fvogt@suse.com" date="1730808000">- Update to version 1.12+git20241105.2e2832f15742:
  * Set RemainAfterExit=yes
  * Fix header of NEWS file
- Switch _service over to obs_scm and type="manual"</changelog>
</package>
<package pkgid="b06169a25230138b6ffb89d0e5beb8044a02831ca5009171e4db344cc19b0048049de796cbd7e3b2c9c5b27a75516183009bfe3f60f96483c72dceb8ccb32d47" name="hicolor-icon-theme" arch="noarch">
  <version epoch="0" ver="0.18" rel="160000.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1418731200">- Update to version 0.14:
  + Use automake to generate VPATH-compatible makefiles.</changelog>
  <changelog author="zaitor@opensuse.org" date="1427198400">- Update to version 0.15:
  + Add symbolic/apps directory for symbolic app icons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445860800">- Drop hicolor-scalable-sizes.patch: It breaks builder icons, and
  default icons on desktops like MATE. It has never been taken
  upstream, nor is any other distro using it, so lets align with
  everyone else.</changelog>
  <changelog author="tchvatal@suse.com" date="1464264000">- Update url to point to some existing location.
- Run over with spec-cleaner: Update macros and remove obsolete
  clean section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498564800">- Migrate %icon_theme_cache_post/postun macro from
  hicolor-icon-theme to gtk2-tools and gtk3-tools file triggers.
  The macros are defined to be nop, in order to not break all spec
  files for now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 0.17:
  + Fix 256x256@2/animations name in index.theme.
- Changes from version 0.16:
  + Add hidpi icon directories (e.g. 48x48@2) with scale=2.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="fpesari@tuxfamily.org" date="1669032000">- Add 1024x1024 directory for package ownership</changelog>
  <changelog author="gmbr3@opensuse.org" date="1737374400">- Update to version 0.18:
  * Provide a pkgconfig file
  * Create HiDPI directories
  * Port build system to Meson
- Create devel subpackage for pkgconfig file
- Create all directories under symbolic
  (needed by budgie-desktop)
- Create 1024x1024 HiDPI directories</changelog>
</package>
<package pkgid="9a3cce1875db2cda75135afee2ba758b731e7767f2999e264ae2a0712e6b0b60454eb4aebb7b43fd687237d5a8e1b5e88afd1d3797447c68a4de0e5e3be47a4d" name="hostname" arch="x86_64">
  <version epoch="0" ver="3.23" rel="160000.2.2"/>
  <changelog author="kukuk@suse.de" date="1459425600">- Add ypdomainname and nisdomainname, too. Were removed from yp-tools.</changelog>
  <changelog author="kukuk@suse.de" date="1502798400">- Add build require libnsl-devel in preparation of libnsl removal
  from glibc.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to 3.20
  * debian-specific change only
- includes 3.19
  * Fix lintian warnings.
- includes 3.18
  * Make sure memory is initialized to zero before attempting to
    read hostname.
- includes 3.17
  * Use _GNU_SOURCE feature test macro, instead of glibc internal
    __USE_GNU.
  * Use getdomainname instead of yp_get_default_domain because it
    is more widely available and avoids the -lnsl dependency.
  * localnisdomain is kept, even though it should be the same as
    localdomain, so the behaviour is not changed in case of an error.
  * Replace 'dh-clean -k' with 'dh-prep'
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 3.21:
  * Minor fixes to the manpage</changelog>
  <changelog author="ngompa13@gmail.com" date="1586692800">- Add nis-domainname.service for FreeIPA</changelog>
  <changelog author="ngompa13@gmail.com" date="1589544000">- Fix LIBEXECDIR substitution for systemd service</changelog>
  <changelog author="dmueller@suse.com" date="1598443200">- update to 3.23:
  * Increase buffer size for all FQDNs to NI_MAXHOST as suggested by manpage.
  (Closes: #942311)
  * Use the same size for getdomainname().
  * Bumped Standards-Version, no changes needed.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="5b2535718d7a52b4f005d495b943579a62b4fc53a2ab55c3fbcf8d77bf5014705e4208276dedc15a117942048a516732e51d5830da47fd5be256e670ff46aea9" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.394" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1709640000">- update to 0.380:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1715774400">- update to 0.382:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1718625600">- update to 0.383:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1724673600">- update to 0.385:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1730980800">update to 0.389:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1733313600">- update to 0.390:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1736337600">- Update to version 0.391:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1739880000">- Update to version 0.392:
  * Update pci and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1742644800">- Update to version 0.393:
  * Update pci, usb and vendor ids
  * Fix usb.ids encoding and a couple of typos
  * Fix configure to honor --prefix</changelog>
  <changelog author="mpluskal@suse.com" date="1745928000">- Update to version 0.394:
  * Update pci and vendor ids</changelog>
</package>
<package pkgid="fa30a5c76e02ee42170bef4ce1ec6769b1ae1d34eb935a88afac355fcbc6efd3edcb1e99e1f91c6529e30fc71794f5396c77fa727ddd03b976585a7ab6a57789" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="25.1" rel="160000.1.1"/>
  <changelog author="wfeldt@opensuse.org" date="1744804800">- merge gh#openSUSE/hwinfo#158
- capture more x86 fields from /proc/cpuinfo (bsc#1241295)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744804801">- merge gh#openSUSE/hwinfo#159
- update pci, usb, and sdio data  (bsc#1241295)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744804802">- merge gh#openSUSE/hwinfo#160
- add touchpad class (bsc#1241295)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744804803">- merge gh#openSUSE/hwinfo#161
- fix aarch64 cpu detection (bsc#1241295)
- 24.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1751889600">- merge gh#openSUSE/hwinfo#167
- fix usb network card detection (bsc#1245950)
- 24.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1752494400">- merge gh#openSUSE/hwinfo#169
- add nvmeof and iscsi info (jsc#PED-13261, jsc#PED-13209)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1752494401">- merge gh#openSUSE/hwinfo#164
- feat: capture usb alternate setting
- feat: capture usb interface association
- feat: use interface association descriptor first when classifying
  usb devices
- USB improvements</changelog>
  <changelog author="wfeldt@opensuse.org" date="1752494402">- merge gh#openSUSE/hwinfo#165
- Fix memory leaks in block device name handling</changelog>
  <changelog author="wfeldt@opensuse.org" date="1752494403">- merge gh#openSUSE/hwinfo#170
- Makefile: fix build for ARCH=i686
- 25.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1769428800">- merge gh#openSUSE/hwinfo#175
- include package spec file in git repo
- adjust spec file for immutable mode: switch to using
  systemd-tmpfiles (jsc#PED-14832)
- update git2log script
- 25.1</changelog>
</package>
<package pkgid="040bc54bb8b980bfa9dbccb254f29ffe8abde3028644aaf0f7aa69114b54e6cbaacf9c7282ee082e44bc52cf966a0109a772e812cea6c266f11f6862bd953746" name="hyper-v" arch="x86_64">
  <version epoch="0" ver="9" rel="160000.3.1"/>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1713873600">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="ohering@suse.de" date="1729598400">- Add memory allocation check in hv_fcopy_start (94e86b17)
- suppress the invalid warning for packed member alignment (207e03b0)
- Add new fcopy application based on uio driver (82b0945c)
- Add vmbus_bufring (45bab4d7)
- kvp: Handle IPv4 and Ipv6 combination for keyfile format (f971f6dd)
- kvp: Some small fixes for handling NM keyfiles (c3803203)
- kvp: Support for keyfile based connection profile (42999c90)
- kvp: remove unnecessary (void*) conversions (22589542)
- Remove an extraneous "the" (f15f39fa)
- change http to https in hv_kvp_daemon.c (fa52a4b2)
- replace the copy of include/linux/hyperv.h with include/uapi/linux/hyperv.h (6de74d10)
- merge individual udev rules files into a single rules file
- package only files, not directories already owned by filesystem.rpm
- remove braces from rpm spec macros
- remove obsolete Group tag
- replace RPM_BUILD_ROOT with buildroot
- use a meaningful name for the UAPI include file
- use a meaningful variable name for ifcfg in hv_set_ifconfig.sh</changelog>
  <changelog author="ohering@suse.de" date="1735732800">- update route parsing in kvp daemon (9bbb8a07)
- reduce resource usage in hv_kvp_daemon (175c71c2)
- reduce resouce usage in hv_get_dns_info helper (a4d024fe)
- hv_kvp_daemon: Pass NIC name to hv_get_dns_info as well (07dfa6e8)
- terminate fcopy daemon if read from uio fails (a9640fcd)
- change permissions of NetworkManager configuration file (91ae69c7)
- Fix a complier warning in the fcopy uio daemon (cb1b78f1)
- remove obsolete kvptest.ps1.txt which failed since a decade
- remove obsolete rpm postinstall code for SLE11SP2</changelog>
  <changelog author="ohering@suse.de" date="1749211200">- Enable debug logs for hv_kvp_daemon (a9c0b33e) (bsc#1244154)</changelog>
  <changelog author="ohering@suse.de" date="1753012800">- fcopy: Fix irregularities with size of ring buffer (a4131a50)
- fcopy: Fix incorrect file path conversion (0d86a8d6)</changelog>
</package>
<package pkgid="617a3dcabb723de3300e847c04fb3e7eb8eee7bec26836b004d9483decb12c27d533e9a26f1e6c9023268b5e06aaf029c41898d379478d5525d6d6eb2d565ba0" name="ignition" arch="x86_64">
  <version epoch="0" ver="2.21.0" rel="160000.3.1"/>
  <changelog author="fvogt@suse.com" date="1709294400">- module-setup.sh: Use $dracutsysrootdir</changelog>
  <changelog author="iforster@suse.com" date="1709899200">- Update to version 2.18.0:
  * NEWS: update 2.18.0
  * azure: retry HTTP requests on codes 404, 410, and 429
  * docs: add missing scaleway link
  * providers: add scaleway
  * resource/url: customize local address (port)
  * stages/files: filter out non-existent paths before relabeling
  * docs/release-notes: tweak dracut module change
  * Bump minimum Go version to 1.20
  * dracut: Don't include the ignition module by default
  * ci: cancel previous build on PR update
  * Sync repo templates ⚙
  * Update build(deps)
- Remove because included in upstream now:
  0005-dracut-Don-t-include-the-ignition-module-by-default.patch
- Increased required Go version</changelog>
  <changelog author="iforster@suse.com" date="1718020800">- Update to version 2.19.0:
  * Support LUKS encryption using IBM CEX secure keys on s390x
  * providers: add "akamai" provider
- Adding %check section
- Build scripts are executable by themselves now, remove explicit
  Bash call</changelog>
  <changelog author="iforster@suse.com" date="1721908800">- Apply (temporary) upstream patch from fedora-coreos-config for
  compatibility with systemd 256.</changelog>
  <changelog author="iforster@suse.com" date="1722254400">- Fix order of previous change - *first* remount rw, *then* create
  directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1725019200">- Drop "go clean" from the upstream build script: since we build in
  clean environments, we don't have caches. Additionally, the way
  it is used does not even work and reports:
    go: clean -cache cannot be used with package arguments
  The error was masked until GO 1.23, as the test wether go
  supported caching was checking for go 1.23 formatted output.</changelog>
  <changelog author="iforster@suse.com" date="1730980800">- Update to version 2.20.0:
  * Features
  * Support partitioning disk with mounted partitions
  * Support Proxmox VE
  * Support gzipped Akamai user_data
  * Changes
  * The Dracut module now installs partx
  * Mark the 3.5.0 config spec as stable
  * No longer accept configs with version 3.5.0-experimental
  * Create new 3.6.0-experimental config spec from 3.5.0
  * Bug fixes
  * Fix network race when phoning home on Equinix Metal
  * Fix Akamai Ignition base64 decoding on padded payloads
  * Fix Makefile GOARCH for loongarch64 (#1942)
- Drop go build bugfix again, fixed upstream
- Adapting 0002-allow-multiple-mounts-of-same-device.patch to new
  3.6.0 spec</changelog>
  <changelog author="iforster@suse.com" date="1743508800">- Update to version 2.21.0:
  * Features
  * Add Azure blob support for fetching ignition configs
  * Add a check for ignition config in vendor-data (proxmoxve)
  * Bug fixes
  * Add pkey_cca kernel module to detect CEX domain for LUKS encryption
- Add support for nested /etc subvolume (t-u 5.0.0)</changelog>
  <changelog author="iforster@suse.com" date="1751284800">- ignition-suse-generator: Only use Ignition platform ID when
  the corresponding kernel modules are found
  [bsc#1234315] [boo#1230668] [gh#coreos/ignition#1984]</changelog>
  <changelog author="iforster@suse.com" date="1774958400">- Add CVE-2026-33186.patch
  * Fixes [bsc#1260251]</changelog>
</package>
<package pkgid="0e828960d2418b786f6c4e0ab3c0fc555ad9fac6ebd0de664a1c9fdee31c53b55c3257c9d188bb1160e2487a6375c8410a8496ea0430b76c44c14b79cb171780" name="info" arch="x86_64">
  <version epoch="0" ver="7.1" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1659096000">- Do lua scripting only once for execute() function</changelog>
  <changelog author="werner@suse.de" date="1659528000">- In case of an update of package info: do never remove existing
  info page from dir file (boo#1201852)</changelog>
  <changelog author="werner@suse.de" date="1668513600">- Update to version 7.0 (7 November 2022)
  * texi2any
  * LaTeX added as an output format, selected with --latex
  * EPUB 3 added as an output format, selected with --epub3
  * reform throughout the code in general
  * thorough review of character encoding issues
  * new customization variables involved with character encoding:
    INPUT_FILE_NAME_ENCODING, OUTPUT_FILE_NAME_ENCODING,
    DOC_ENCODING_FOR_INPUT_FILE_NAME, DOC_ENCODING_FOR_OUTPUT_FILE_NAME,
    MESSAGE_ENCODING and COMMAND_LINE_ENCODING
  * warn if full-text commands (@ref, @footnote, @anchor) appear in @w
  * new variable NO_TOP_NODE_OUTPUT
  * IGNORE_BEFORE_SETFILENAME variable removed.  former effect
    is now always on.
  * HTML output:
  * use manual_name_html as output directory for split HTML instead of
    manual_name or manual_name.html
  * default DOCTYPE declaration changed to plain HTML5 style rather than
    HTML4 DTD reference
  * output only the CSS rules that are needed in an output file
    . remove CSS_LINES variable and add SHOW_BUILTIN_CSS_RULES
  * (custom CSS can still be output using EXTRA_HEAD)
  * use &lt;code&gt; tag for the output of @t and @verb instead of &lt;tt&gt;
  * use &lt;abbr&gt; for @acronym instead of &lt;acronym&gt;
  * link to table of contents from short table of contents only if a
    table of contents is actually output
  * prefix classes from @example arguments with `user-'
  * percent encode URL in @url/@uref, @email, @image and external
    manual file
  * new USE_XML_SYNTAX, HTML_ROOT_ELEMENT_ATTRIBUTES and
    NO_CUSTOM_HTML_ATTRIBUTE variables can be used to output
    valid XHTML
  * systematic addition of classes attribute in HTML elements based on the
    Texinfo @-command names.  renaming of class attributes to avoid
    confusion with @-commands formatting and describe the role in the
    document rather than the formatting style.
  * COPIABLE_ANCHORS renamed to COPIABLE_LINKS
  * do not add a title by default; SHOW_TITLE or NO_TOP_NODE_OUTPUT has
    to be set
  * USE_TITLEPAGE_FOR_TITLE is now true by default
  * L2H variable removed, replaced by HTML_MATH set to `l2h'
  * rename OVERVIEW_LINK_TO_TOC to SHORT_TOC_LINK_TO_TOC
  * rename BEFORE_OVERVIEW to BEFORE_SHORT_TOC_LINE
  * rename AFTER_OVERVIEW to AFTER_SHORT_TOC_LINES
  * remove PRE_ABOUT, AFTER_ABOUT, and add PROGRAM_NAME_IN_ABOUT
  * remove KEEP_TOP_EXTERNAL_REF
  * new variables IGNORE_REF_TO_TOP_NODE_UP, CONVERT_TO_LATEX_IN_MATH,
    HTMLXREF_MODE and HTMLXREF_FILE
  * DocBook output:
  * do not output Top node or text before the first @node or sectioning
    @-command.  NO_TOP_NODE_OUTPUT can be set to false to output Top node
    for now.
  * replace @definfocenlose defined @-commands by the argument as-is
    to be more consistent with printed output
  * HTML/DocBook output:
  * USE_NUMERIC_ENTITY changed to mean to use numeric entities instead
    of named entities.  former effect is now always on.
  * ENABLE_ENCODING_USE_ENTITY variable removed.  former effect is now
    always off.
  * Info output
  * quote problematic node names (with :, comma...) by default
  * new customization variable ASCII_PUNCTUATION to use plain ASCII
    characters for quotation marks and a few other symbols
  * texinfo.tex
  * `@microtype on' uses microtypography in formatting for pdfTeX and LuaTeX
  * do not ignore @part page immediately following Top node
  * do `@set txicodevaristt' to get slanted typewriter for @var in code,
    `@clear txicodevaristt' to use slanted, variable-width roman font for
    @var everywhere.  flag is @set by default, but we may turn this off
    in the future.
  * new file doc/texinfo-zh.tex for Texinfo documents in Chinese.
    new support file doc/txi-zh.tex for Chinese.  doc/short-sample-zh.texi is
    a sample document.
  * info
  * better support for index entries containing parentheses
  * better support for getting bold text etc. when displaying manpages
  * bug fixed where the first index entry in a file could be ignored
  * M-C-f closes as well as opens footnotes window
  * do not crash if run in Brazilian Portuguese locale
  * Language
  * @deftype* commands use typewriter font in argument list
  * new commands @latex, @iflatex, @ifnotlatex for new LaTeX output format
  * do `@set txidefnamenospace' to omit space after a definition name
  * Other
  * build fixed for glibc 2.34
- Delete patch 13a8894fe2.patch as now part of upstream tar ball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670155200">- texinfo 7.0.1:
  * texi2any: avoid multiple crashes on empty @image argument and
    other conditions
  * avoid hang on @ref command inside section command
  * info: fix recoding of UTF-8 files to ASCII when run in C
    locale
  * js: index search fixed for new HTML output</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1675512000">- texinfo 7.0.2:
  * texi2any: do not distribute architecture-dependent files
  * info: further fix of recoding of UTF-8 files to ASCII
  * install-info: build fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679832000">- texinfo 7.0.3:
  * texi2any: fix performance regression when Perl binary
    extension (XS) modules are not being used (e.g. with
    TEXINFO_XS=omit)
  * info: further fix of recoding of UTF-8 files to ASCII to avoid
    text disappearing from nodes
  * info: avoid possible freeze at start of a file with
    `-v nodeline=pointers'</changelog>
  <changelog author="werner@suse.de" date="1706875200">- Update to version 7.1 (18 October 2023)
  * Language
  . new generic definition commands, @defblock, @defline and @deftypeline,
    for definitions without automatic index entries
  . new @linemacro facility eases use of generic definition commands
  . new command @link creates plain links (supported output formats only)
  . @cartouche takes an argument to specify the cartouche title
  . you can use the new commands @nodedescription and @nodedescriptionblock
    to give text to be used in menu descriptions in Info and HTML output
  * texi2any
  . @itemx at the beginning of a @table is now an error, not a warning
  . better validity checking of deeply nested commands
  . check that @set and @clear only appear at the start of a line
  . warn about missing menu entries even if CHECK_NORMAL_MENU_STRUCTURE is
    not set.  you can turn this off by setting CHECK_MISSING_MENU_ENTRY to 0.
  . no longer use --enable-encoding and --disable-encoding to determine
    whether to output encoded characters (instead of entities or commands)
    for HTML, XML, DocBook and LaTeX; instead, use the value of the
    OUTPUT_CHARACTERS customization variable.
  . stricter checks on input encoding, in particular more warnings and
    errors with malformed UTF-8
  . support any input file encoding if support exists in the operating
    system, not just a selected list of encodings
  . resolve an alias referring to another alias at definition time
  . internally, use "source marks" to keep all Texinfo source information that
    is not in the final tree (location of macros, values and included files
    expansion, @if* blocks, DEL comment, and @ protecting end of line on @def*
    lines)
  . HTML output:
    . format @subentry and index entries with @seealso or @seeentry in a more
    similar way to printed output
    . output @shortcontents before @contents by default
    . omit colons after index entries by default.  this can still be
    configured with INDEX_ENTRY_COLON.
    . add @example syntax highlighting as a texi2any extension
    . no more capitalization of @sc argument in HTML Cross-references
    . change @point expansion to U+22C6 in HTML Cross-references
    . if a @node is not associated with a sectioning command but is
    followed by a heading command not usually associated to nodes
    such as @heading and this command appears before other formatted
    content, the heading command is assumed to supply the node heading.
    you can customize this with USE_NEXT_HEADING_FOR_LONE_NODE.
  . Info output:
    . new variable ASCII_DASHES_AND_QUOTES, on by default,
    outputs ASCII characters for literal quote or hyphen characters
    in source, rather than UTF-8.  this makes it easier to search
    Info files.
    . new ASCII_GLYPH variable for using ASCII renditions for glyph
    commands (like @bullet)
    . ASCII_PUNCTUATION still includes the effect of these new variables.
    . new variables AUTO_MENU_DESCRIPTION_ALIGN_COLUMN and AUTO_MENU_MAX_WIDTH
    control the format of descriptions in generated menus
  . XML output:
    . place menu leading text and menu separators in elements instead
    of attributes
  * texi2dvi
  . macro expansion with texi2any requires at least version 5.0 (only
    happens with --expand option or with very old texinfo.tex)
  * texinfo.tex
  . in @code, ` and ' output by default with backtick and undirected
    single quote glyphs in the typewriter font.  you can still configure
    this using the @codequoteundirected/@codequotebacktick commands.
  . do not insert a space for @ def line continuation, matching the behavior
    of texi2any
  . align section titles in table of contents when more than 10 sections
  . microtype is off by default, for speed
  . page headings generation is no longer linked to the @titlepage command
  * info
  . when going Up, position cursor on menu entry for current node
  . allow mouse scrolling support regardless of termcap entries.  this
    supports some more xterm configurations.
  . do not use "/index" as a possible file extension for Info files
  * texi2any
    . fix performance regression when Perl binary extension (XS) modules
    are not being used (e.g. with TEXINFO_XS=omit)
  * info
    . further fix of recoding of UTF-8 files to ASCII to avoid text
    disappearing from nodes
    . avoid possible freeze at start of a file with `-v nodeline=pointers'
  * texi2any
    . do not distribute architecture-dependent files
    . build fixed on OpenIndiana 11
  * info
    . further fix of recoding of UTF-8 files to ASCII
    . fix check for presence of man pages on Solaris
  * install-info
    . fix build by avoiding function name clash on some platforms
    . compiler warning re strncat silenced
  * texi2any
    . avoid crashes on empty @image argument and other potential crashes
    (with "Can't use an undefined value as an ARRAY reference" message)
    . avoid hang on @ref command inside section command
  * info
    . fix recoding of UTF-8 files to ASCII when run in C locale
  * js
    . index search fixed for new HTML output
    . some obsolete files removed from distribution
- Port patch texinfo-zlib.patch
- Use libzio 1.09 to support compressed 'dir' data base files</changelog>
  <changelog author="hsk17@mail.de" date="1743768000">- add -std=gnu17 to CFLAGS to fix gcc15 compile time error
  (flag can be dropped w/ release 7.2)</changelog>
  <changelog author="dimstar@opensuse.org" date="1752494400">- Add texinfo-perl-5.42.patch: Fix syntax to be unambiguous
  if (! $str eq '') is not really clear; is it
    (!$str) eq ''
  or
    !($str eq '')
  Perl 5.42 rightly flagges this syntax with:
    Possible precedence problem between ! and string eq
  Assuming !($str eq '') was meant, we can rewrite this as
  $str ne '', which happens to also be used in multiple places
  already (sometimes just a few lines further down in the same
  files)</changelog>
</package>
<package pkgid="92506fa818f5ccfa416de0056ba77ac85846c6442caf7cb431c9e48fe06549c6b97701ec20ac1453ff1cd76af8030381b5ea36bb670e1be3fc74a719b7d99764" name="ipmitool" arch="x86_64">
  <version epoch="0" ver="1.8.19.13.gbe11d94" rel="160000.2.2"/>
  <changelog author="trenn@suse.de" date="1612353600">- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
  <changelog author="trenn@suse.de" date="1619611200">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.</changelog>
  <changelog author="trenn@suse.de" date="1621944000">- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Update to version 1.8.18+git20210622.11c7605:
  * Fix codefactor-io / CodeFactor warnings
  * Use /run instead of /var/run
  * oem: Update product IDs for YADRO
  * lan: Add processing of get/set specific CCs
  * lan: Refactor pointer style
  * doc: update lanplus doc to reflect default cipher suite change
  * ekanalyzer: Fix internal use area off-by-one bug
  * ekanalyzer frushow: Fix internal area size calc
  * sel: Fix "power supply inactive" flag offset
  * free: Fix implicit function declarations
  * Convert line endings to LF
- Update source file:
  M    enterprise-numbers
- Adopt to latest sources:
  M    0003-Cleanup-and-compiler-issues-only-no-functional-chang.patch
- Remove mainline patches:
  D    0007-bsc#1175328-check-for-correct-fd.patch
  D    0008-bsc#1181063-dont-parametrize-pidfile-name.patch
  D    Use-run-instead-of-var-run.patch
  D    lanplus-don-t-retry-pre-session-Get-cipher-suites.patch
- Config file in /etc must not be executable
  /etc/bmc-snmp-proxy
- Enhance _service file to always get latest sources and get the
  version correctly parsed</changelog>
  <changelog author="trenn@suse.de" date="1628683200">- Update to version 1.8.18.238.gb7adc1d:
  * ipmi_mc: Fix the IPM_DEV_FWREV1_MAJOR_MASK
- Use %{?systemd_ordering} instead of %{?systemd_requires}</changelog>
  <changelog author="moritz.kodytek@suse.com" date="1652184000">- Update to version 1.8.18.249.g4d25a93:
  * man: Update the text for -C option
  * chassis restart_cause: Add new causes
  * sel: Remove redundant "Reserve SEL"
  * sdr: Fix modifier unit
  * Refactor bridging level detection to dedicated function
  * Fix double bridge detection in get_max_(req|rsp)_data_size()</changelog>
  <changelog author="trenn@suse.de" date="1662552000">- Update to version 1.8.19.0.g19d7878:
  * Release Version 1.8.19
  * Cast type before the left shift
  * sel: Fix the deasserted thresholds inequality</changelog>
  <changelog author="trenn@suse.de" date="1690200000">- Fix: ipmitool duplicates the timestamp (bsc#1213390)
  A    Fix-time-format-for-sel-list-v.patch
- Remove: Make-IANA-PEN-download-configurable (is mainline)
  D 0006-Make-IANA-PEN-download-configurable-fix-uninitalized.patch
- Update to version 1.8.19.13.gbe11d94:
  * configure.ac: allow disabling registry downloads
  * lan: channel: Fix set alert on/off
  * make: use correct docdir variable provided by autotools
  * Do not require the IANA PEN registry file
  * configure.ac: fix readline static build
  * Update github actions for modern OSes
  * Update macos target name in github actions
  * delloem: Fix the unalign bug in arm64
  * lanplus: Realloc the msg if the payload_length gets updated
  * fru print: Add area checksum verification
  * fru: Add decoder for multirec system mgmt records
  * Fix enterprise-numbers URL
  * Update issue templates</changelog>
  <changelog author="trenn@suse.de" date="1698753600">- bsc#1216556 L3: ipmitool: Unsupported LAN Parameter
    lookup error SLE15 SP4+
  Fix regression introduced by 351dad24a26f56580ba6
  lan: Add processing of get/set specific CCs:
  https://github.com/ipmitool/ipmitool/pull/388
  https://github.com/ipmitool/ipmitool/pull/389
  Be aware: Even the pullrequest is open for a while, this patch is not
  integrated in latest mainstream master branch.
  A    lanp-Fix-error-response-from-Unsupported-Parameter-lookup.patch.txt
  M    enterprise-numbers</changelog>
  <changelog author="mjambor@suse.com" date="1720612800">- Added ipmitool-fix_init_from_incompat_ptr_type.patch fixing a type
  which led to assignment from incompatible pointer type which is an
  error in GCC 14 [boo#1225992]</changelog>
</package>
<package pkgid="5a70bc7c88658e6416862ec463bea0694d6da9472c31551d4931394efe0fe42900dd0a2e568b58fea8ae0bf156d6c86ab825ecc31a4494c8b0ad4919366458cd" name="iproute2" arch="x86_64">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1660132800">- update to 5.19:
  * ip/iplink_virt_wifi: add support for virt_wifi
  * Update kernel headers
  * libnetlink: Add filtering to rtnl_statsdump_req_filter()
  * ipstats: Add a "set" command
  * ipstats: Add a group "link"
  * libbpf: Use bpf_object__load instead of bpf_object__load_xattr
  * uapi: change name for zerocopy sendfile in tls
  * bridge: vxlan device vnifilter support
  * f_flower: Add num of vlans parameter</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665230400">- update to 6.0:
  * ipstats: Add param.h for musl
  * Update kernel headers
  * libbpf: add xdp program name support
  * iplink: bond_slave: add per port prio support
  * seg6: add support for SRv6 Headend Reduced Encapsulation
  * lib: Introduce ppp protocols
  * f_flower: Introduce PPPoE support</changelog>
  <changelog author="jengelh@inai.de" date="1669118400">- Replace routel program by a non-python version [boo#1205632]</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 6.1:
  * man: ss.8: fix a typo
  * testsuite: fix build failure
  * genl: remove unused vars in Makefile
  * json: do not escape single quotes
  * ip-monitor: Do not error out when RTNLGRP_STATS is not available
  * ip-link: man: Document existence of netns argument in add command
  * macsec: add Extended Packet Number support
  * macsec: add user manual description for extended packet number feature
  * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces
  * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes
  * ip: add NLM_F_ECHO support
  * libnetlink: add offset for nl_dump_ext_ack_done
  * tc/tc_monitor: print netlink extack message
  * rtnetlink: add new function rtnl_echo_talk()
  * ip: fix return value for rtnl_talk failures
  * iplink_bridge: Add no_linklocal_learn option support
  * devlink: use dl_no_arg instead of checking dl_argc == 0
  * devlink: remove dl_argv_parse_put
  * mnlg: remove unnused mnlg_socket structure
  * utils: extract CTRL_ATTR_MAXATTR and save it
  * devlink: expose nested devlink for a line card object
  * devlink: load port-ifname map on demand
  * devlink: fix parallel flash notifications processing
  * devlink: move use_iec into struct dl
  * devlink: fix typo in variable name in ifname_map_cb()
  * devlink: load ifname map on demand from ifname_map_rev_lookup() as well
  * dcb: unblock mnl_socket_recvfrom if not message received
  * libnetlink: Fix memory leak in __rtnl_talk_iov()
  * tc_util: Fix no error return when large parent id used
  * tc_util: Change datatype for maj to avoid overflow issue
  * ss: man: add missing entries for MPTCP
  * ss: man: add missing entries for TIPC
  * ss: usage: add missing parameters
  * ss: re-add TIPC query support
  * devlink: Fix setting parent for 'rate add'
  * link: display 'allmulti' counter
  * seg6: add support for flavors in SRv6 End* behaviors
  * tc: ct: Fix invalid pointer dereference
  * uapi: update from 6.1 pre rc1
  * u32: fix json formatting of flowid
  * tc_stab: remove dead code
  * uapi: update for in.h and ip.h
  * remove #if 0 code
  * tc: add json support to size table
  * tc: put size table options in json object
  * tc/basic: fix json output filter
  * iplink: support JSON in MPLS output
  * tc: print errors on stderr
  * ip: print mpls errors on stderr
  * tc: make prefix const
  * man: add missing tc class show
  * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays
  * ip link: add sub-command to view and change DSA conduit interface</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="jengelh@inai.de" date="1678190400">- Update to release 6.2
  * f_flower: Introduce L2TPv3 support
  * bridge: fdb: Add support for locked FDB entries
  * bridge: link: Add MAC Authentication Bypass (MAB) support
  * ip: Support --json on `ip neigh get`
  * tc: Add JSON output to tc-class</changelog>
  <changelog author="jengelh@inai.de" date="1679313600">- Delete xfrm-support-displaying-transformations-used-for-Mob.patch
  (mip6d-ng is abandoned too)</changelog>
  <changelog author="info@paolostivanin.com" date="1683201600">- Update to release 6.3:
  * New release of iproute2 corresponding to the 6.3 kernel.
    No large feature improvements only incremental improvements to
    the bridge mdb support, mostly just bug fixes.
- Rebase patches.</changelog>
  <changelog author="mkubecek@suse.cz" date="1744804800">- update to upstream version 6.12 (jsc#PED-11361)
  * for detailed list of changes between 6.3 and 6.12 see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * refresh non-upstream patches
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch
- adapt the package for git based patch tracking
  * move patches into patches.tar.xz
  * add helper scripts apply-patches and guards
  * add series.conf file listing patches
  * update iproute2.spec to apply patches from patches.tar.xz</changelog>
  <changelog author="mkubecek@suse.cz" date="1744804801">- add post-6.12 upstream fixes (bsc#1241316)
  * ip-fix-memory-leak-in-do_show.patch
  * devlink-do-dry-parse-for-extended-handle-with-select.patch
  * devlink-use-the-correct-handle-flag-for-port-param-s.patch</changelog>
</package>
<package pkgid="49ae2623c954af9f39bf08e07bea2ffbba4c391d747a141c43e943e2cfede1840275b7fa589fde5f85394c752f5ad3b9704e6af8f69f47631fe54d4db4a177a5" name="iptables" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="63bc5b5b3f0fbf2962ffa39766262e77b4674051633904e906c9a14833bfa9d463823acd0922b26ddee03ff146785b449a50ba18fe35b56b6fb3d5d65a428add" name="iputils" arch="x86_64">
  <version epoch="0" ver="20240905" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1703246400">- Update to version 20231222
  https://github.com/iputils/iputils/releases/tag/20231222
- Use tar.xz instead of tar.gz
- Update source URL</changelog>
  <changelog author="pvorel@suse.cz" date="1705492800">- Update to version 20240117 (ping bugfix release)
  https://github.com/iputils/iputils/releases/tag/20240117</changelog>
  <changelog author="pvorel@suse.cz" date="1725537600">- Update to version 20240905 (mostly ping fixes release)
  https://github.com/iputils/iputils/releases/tag/20240905
- Fix tarball url</changelog>
  <changelog author="angel.yankov@suse.com" date="1747137600">- Security fix [bsc#1242300, CVE-2025-47268]
  * integer overflow in RTT calculation can lead to undefined behavior
  * Add iputils-CVE-2025-47268.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1747396800">- Fix bsc#1243284 - ping on s390x prints invalid ttl
  * Add iputils-invalid-ttl-s390x.patch
  * Fix ipv4 ttl value when using SOCK_DGRAM on big endian systems
- Enable test suite</changelog>
  <changelog author="angel.yankov@suse.com" date="1749556800">- Security fix [bsc#1243772, CVE-2025-48964]
  * Fix  integer overflow in ping statistics via zero timestamp
  * Add iputils-CVE-2025-48964_01.patch
  * Add iputils-CVE-2025-48964_02.patch
  * Add iputils-CVE-2025-48964_03.patch
  * Add iputils-CVE-2025-48964_regression.patch</changelog>
</package>
<package pkgid="a4e8f2872b0daf44f97f8c56c8546eb6df1e2b7472d7e002847dc49677fb1a2eaac37372c25d8c500970f4dd5aa0b6a11d776af2d8f54a7131add6e551b000da" name="ipw-firmware" arch="noarch">
  <version epoch="0" ver="9" rel="160000.4.1"/>
  <changelog author="jg@suse.de" date="1170417600">- reload modules after installation only when necessary
  (bug 210964)
- updated ipw3945 ucode to version 1.14.2, changes:
  * Fixed a fairly significant problem with some tuners not being
    able to lock properly onto a channel's frequency on B/G band.
  * Fixed a problem regarding power management.
  * Fxied lame scan results problem on Bugzilla #1085.</changelog>
  <changelog author="jg@suse.de" date="1174046400">- removed /lib/firmware from filelist</changelog>
  <changelog author="hschaa@suse.de" date="1205236800">- Remove ipw3945-firmware as ipw3945-kmp is not shipped anymore
  with 11.0 due to its successor iwl3945</changelog>
  <changelog author="seife@opensuse.org" date="1260360000">- upgrade ipw2200 firmware to version 3.1</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359806400">- PreReq modutils instead of module-init-tools otherwise
  we cannot switch to kmod cleanly</changelog>
  <changelog author="jengelh@inai.de" date="1602590400">- Replace old specfile constructs.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="msuchanek@suse.com" date="1616328000">- Fix build on Leap which does not have %_firmwaredir</changelog>
  <changelog author="pgajdos@suse.com" date="1762430400">- mark LICENSE.ipw2x00 as %license [bsc#1252153]</changelog>
</package>
<package pkgid="028bac8eb363f5f138cc1663901065e563c36d8766578a8f3d653e3c4be7a8d48fe91b9e4ac5cb83acd6d3ceebb06a916cc78dd95b3c426dc9288a3454778910" name="irqbalance" arch="x86_64">
  <version epoch="0" ver="1.9.4.0.git+f8b8cdd" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1666699200">- run tests
- add Avoid-double-free-on-deinit_thermal.patch (bsc#1204607)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- update to 1.9.2:
  * avoid coredump on build_one_dev_entry()
  * avoid double free on deinit_thermal()
  * change the log level in thermal.c
  * fix a minor typo
- drop Avoid-double-free-on-deinit_thermal.patch, uninitialized.patch: (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1668168000">- add irqbalance-systemd-netlink.patch (related to bsc#1205308)</changelog>
  <changelog author="dmueller@suse.com" date="1671192000">- build for x86_64 subarchs the same way like for baseline</changelog>
  <changelog author="trenn@suse.de" date="1687780800">- Resurrect _service file and old git patch no versioning
  A _service
  A _servicedata
  A irqbalance.obsinfo
- Update to version 1.9.2.24.git+184c950:
  * procinterrupts: fix initialisation of regex_t struct
  * Fix it so we actually stop when we hit an interrupt condition
  * Fix signedness of error handling
  * Revert "Fix CPU number condition in service file"
  * Issue 259: select NL_SKIP / NL_STOP based on error
  * fix CPU number condition in service file
- Already included upstream:
  D irqbalance-systemd-netlink.patch</changelog>
  <changelog author="trenn@suse.de" date="1692619200">- Update to version 1.9.2.34.git+5069982:
  * activate_mapping: avoid logging error when there is none
  * activate_mapping: only blacklist irq if error is considered permanent
  * activate_mapping: report error reason
  * activate_mapping: make sure to catch all errors
  * activate_mapping: avoid use-after-free when affinity cannot be set
  * Revert "activate_mapping: fflush the buffered data to smp_affinity"
  * activate_mapping: fflush the buffered data to smp_affinity</changelog>
  <changelog author="trenn@suse.de" date="1700568000">- Update to version 1.9.3.8.git+c963f48:
  * Enable systemd feature support by default when building with meson
  * Add support for linking against libnl when building with meson
  * Turn NUMA support into an enabled feature, when building with meson
  * Set project version of meson build to 1.9.3
  * Install man pages when building with meson
  * When building with meson, make sure to link against numa
  * Updating to version 1.9.3
  * Automatically use systemd journal and run in foreground when under systemd</changelog>
  <changelog author="aschnell@suse.com" date="1701864000">- Update to version 1.9.3.10.git+1a7d461:
  * filter console only output when using journal mode
- build with libsystemd for logging (bsc#1217754)</changelog>
  <changelog author="trenn@suse.de" date="1710849600">- Update to version 1.9.4.0.git+f8b8cdd:
  * update configure to version 1.9.4
  * Flush file before closing
  * Fix socket API being blocked for 10s
  * Set additional systemd options for service
  * activate_mapping: set errsave before first jump to the error label
  * Avoid repeated affinity checks when no change is necessary
  * Slience "... rebalancing" messages for unmigratable IRQs
- Use manual instead of local service for updating
- Adopt to mainline:
  M Set-fd-limit.patch</changelog>
  <changelog author="pujos.michael@gmail.com" date="1720699200">- removed ProtectKernelTunables=yes from irqbalance.service to
  fix "Cannot change IRQ %d affinity: Read-only file system" errors.
  See https://github.com/Irqbalance/irqbalance/issues/308</changelog>
</package>
<package pkgid="4a648052304d010cbd597c81661014b1dc88175a3f9993673687620e47483175f3863efaf4292227b2c13941dde1c1c55e2bdac3e8b3ba020efbf60c11399f44" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.8" rel="160000.2.2"/>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1703073600">- Updated to latest upstream: two small changes, with no known
  functional changes:
  * Incorrect documentation for `iscsiadm -m session` print level
    (upstream issue #432)
  * Stop using deprecated inet_aton and inet_ntoa (upstream issue
    [#435])
- Also, stopped using pre-prepared tarballs for the build, instead
  now using a service file to get latest SUSE srouces directly.
  This removed these two files:
  * open-iscsi-2.1.9-suse.tar.bz2, and
  * open-iscsi-SUSE-latest.diff.bz2
  whcih were both created by a shell script, and added a service-
  file-generated file of the form:
  * open-iscsi-2.1.9.suse+TAG_OFFSET.tar.xz
  where TAG_OFFSET is of the form "COMMIT_COUNT.HASH", where
  COMMIT_COUNT is the count of commits since 2.1.9-suse (in this
  case), and HASH is the git commit hash being used.</changelog>
  <changelog author="lduncan@suse.com" date="1727697600">- Update to version 2.1.10.suse+51.fea0fde82ed1:
  * Incudes upstream version 2.1.10 plus some fixes
  * Fix firmware targets startup to always be "onboot" (#482)
    (bsc#1228084)
  * Change a discovery function to void return type (#481)
  * Fix gcc issues (#480)
  * Bugfix read specific sysfs value "off" of session attribute (#466)
  * Fix bug where abort_tmo read failures were ignored. (#467)
  * grammar nitpicks (#464)
  * Fix memory leak in iscsi_check_session_use_count (#465)
  * improve the comments in idbm_lock() (#458)
  * Make it visible when memory allocation failure (#457)
  * Better handle multiple iscsiadm commands (#453)
  * iscsiadm: allow hostnames in node-mode commands (#451)
  * Modify how workqueue priority is set (#445)
  * Fix authmethod check by printing a warning message when CHAP used and authmethod=None (#443)
  * iscsid: Rescan devices on relogin (#444)
  * Adds missing characters in README. (#440)
  * Turn off iSCSI NOP-Outs, by default.
  * fix: add usr/iscsid_req.h missinig underline (#431) (#436)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="lduncan@suse.com" date="1744027200">- Update to version 2.1.11.suse+65.65365e1cdedb:
  * doc: fixup iscsiadm man page option for -r (#501)
  * Modify log function to print session id (#498)
  * Fix minor typo ("authenticaton") (#500)
  * Preparing for version 2.1.11 (#499)
  * iscsid: Rate limit session reopen log messages (#492)
  * IPv6 support for iBFT iSCSI boot (#493)
  * Improve iscsiadm command line parsing messages (#494)
  * More testing cleanup, and fix dprint test usage (#491)
  * Fix a typo in test/README (#486)
  * iscsid: Fix hang during login with scan=manual (#485)
  * fix 4 issues which are finded when building with clang 17 (#478)</changelog>
  <changelog author="lduncan@suse.com" date="1744027201">- Change SPEC file so that open-iscsi lock files always go
  in /run/lock/iscsi (bsc#1239107)</changelog>
  <changelog author="lduncan@suse.com" date="1744804800">- Update to version 2.1.11.suse+66.13c070123738:
  * Fix iscsid.conf NOP configuration (bsc#1240541)</changelog>
  <changelog author="lduncan@suse.com" date="1752408000">- Update to version 2.1.11.suse+73.1723affc61eb:
  * README for rpm build directory
  * Fix issue with IPv6 adapter interfaces (#508, bsc#1240969)
  * fwparam_ppc.c: Fix the calloc-transposed-args issue (#504)
  * Makefile: fix "No rule to make target 'iscsiuio/Makefile.in" issue (#506)
  * Fix typo in initiator.c (#507)
- Fixed some issues in this changes file
  * One date had incorrect format from 2014
  * Two separator lines were formatted incrrectly</changelog>
</package>
<package pkgid="ae311aaf44f2c4e2740e92919bce9c0f3a4f2d1e2e7e0e538a57cfb6e3b5d17a49afe91d628c729d1ab67d93310f089272502fcccefe39a88aed11cc3189a4e6" name="issue-generator" arch="noarch">
  <version epoch="0" ver="1.13" rel="160000.3.2"/>
  <changelog author="kukuk@suse.de" date="1528113600">- Update to version 1.6
  - Fix permission of /run/issue [bsc#1095697]</changelog>
  <changelog author="kukuk@suse.de" date="1547208000">- Update to version 1.7
  - automatically generate issue file [bsc#1116825]</changelog>
  <changelog author="kukuk@suse.com" date="1581508800">- Update to version 1.8
  - Handle network interface renames</changelog>
  <changelog author="kukuk@suse.com" date="1588248000">- Update to version 1.9
  - Fix path for systemd files</changelog>
  <changelog author="kukuk@suse.com" date="1594123200">- Update to version 1.10
  - Display wlan interfaces [bsc#1169070]</changelog>
  <changelog author="fvogt@suse.com" date="1601985600">- Handle the .path unit in scriptlets as well</changelog>
  <changelog author="kukuk@suse.com" date="1603108800">- Update to version 1.11
  - Don't display issue.d/*.issue files, agetty will do that [bsc#1177891]
  - Ignore /run/issue.d in issue-generator.path, else issue-generator will
    be called too fast too often [bsc#1177865]
  - Ignore *.bak, *~ and *.rpm* files [bsc#1118862]</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Update to version 1.12
  - Update manual page
  - Use python3 instead of python 2.x</changelog>
  <changelog author="kukuk@suse.com" date="1622116800">- Update to version 1.13
  - SELinux: Do not call agetty --reload [bsc#1186178]</changelog>
  <changelog author="kukuk@suse.com" date="1718712000">- Remove rc* symlinks [jsc#PED-266]</changelog>
</package>
<package pkgid="92adf8ba85dab4d4d90f4e4006a414a828eae8a02f07c88d4dddb525c807b726ca8d8cf000f4742ed9f899b38875d8dd0b7f6e81bc44fe12e95de1e9f8ce8ed2" name="jeos-firstboot" arch="noarch">
  <version epoch="0" ver="1.5.8" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1713355200">- Update to version 1.4.1:
  * Add ssh_enroll module</changelog>
  <changelog author="fvogt@suse.com" date="1714392000">- Make ssh-pairing a required dep on new distros</changelog>
  <changelog author="fvogt@suse.com" date="1714996800">- Update to version 1.4.2:
  * Resolve cycle w.r.t. wicked (bsc#1223391)</changelog>
  <changelog author="fvogt@suse.com" date="1716552000">- Update to version 1.4.3:
  * Use UTC as default TZ if there was no locale selection dialog (boo#1224212)</changelog>
  <changelog author="fvogt@suse.com" date="1723032000">- Update to version 1.5.0:
  * Add module for TOTP setup (jsc#CPT-84)
  * Add module for user creation
  * Set LC_COLLATE=C.UTF-8
  * Document module API in README.md
  * Let modules specify title, description and priority
  * jeos-firstboot-functions: Simplify _find_modules
  * Use tabs for indentation everywhere
  * Drop stale README file</changelog>
  <changelog author="jeos-internal@suse.de" date="1726660800">- Update to version 1.5.2:
  * otp: Use the system nodename as issuer in the QR code
  * otp: Use more obvious dd | base32 instead of tr | head</changelog>
  <changelog author="fvogt@suse.com" date="1727179200">- Add dependency on cracklib for cracklib-check</changelog>
  <changelog author="fvogt@suse.com" date="1727784000">- Update to version 1.5.3:
  * otp: Show the QR code in a separate window if necessary (bsc#1231177)</changelog>
  <changelog author="fvogt@suse.com" date="1744718400">- Update to version 1.5.5:
  * user: Add field to add the user to specified groups (bsc#1241215)
  * Add title and description to remaining modules
- Remove changesauthor from _service</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Update to version 1.5.8:
  * Update files/usr/share/jeos-firstboot/jeos-firstboot-functions
  * Use SUSE_PRETTY_NAME as product name to display if it exists (bsc#1245364)
  * Use xterm-256color on WSL based hosts boo#1237756</changelog>
</package>
<package pkgid="da6329146b569be689be99e9614e87b9c79e82a1feb6a537a3218420cc2e775659d1e4811e077cabb76e5f7dd3f622a4f990d128d12a34bc5e02167218f98058" name="jfsutils" arch="x86_64">
  <version epoch="0" ver="1.1.15" rel="160000.3.2"/>
  <changelog author="per@opensuse.org" date="1308484800">- update to version 1.1.15
  * Several fixes for large filesystems where 64-bit variables are needed
  * Fix incorrect size check on directories
  * Make the timestamp format consistent
- spec: add sed-script to fix warnings wrt formatting of man-pages</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags</changelog>
  <changelog author="aj@suse.de" date="1353067200">- Fix missing include (patch jfs-headers.patch).</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Cleanup spec file with spec-cleaner
- Use url for source</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="mliska@suse.cz" date="1587988800">- Enable -fcommon in order to fix boo#1160272.</changelog>
  <changelog author="mliska@suse.cz" date="1588161600">- Added patch: libfs-Fixing-issue-with-variable-name-collision.patch
- Remove not needed -fcommon.</changelog>
  <changelog author="ddiss@suse.com" date="1633953600">- UsrMerge: don't override _sbindir (bsc#1191065)</changelog>
  <changelog author="dmueller@suse.com" date="1652788800">- add jfsutils_format-security_ftbs.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="640ba02ef2213976d45f0aca6848a62a74e18d82d289c1a1b2131e1356b65462b14e943d83cae7e9c4481121ee52278cccbad6dfcbe91cab5205a7214f32b62e" name="jitterentropy-devel" arch="x86_64">
  <version epoch="0" ver="3.6.3" rel="160000.2.2"/>
  <changelog author="meissner@suse.com" date="1632225600">- add a userspace jitter entropy generator library</changelog>
  <changelog author="jengelh@inai.de" date="1632830400">- Trim conjecture from descriptions.</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- updated to 3.4.0
  * enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
  * fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
  It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
  * enhancement: add CMake support by Andrew Hopkins
- updated to 3.3.1
  * fix: bug fix in initialization logic by Vladis Dronov &lt;vdronov@redhat.com&gt;
  * fix: use __asm__ instead of asm to suit the C11 standard
- added a -devel-static package to be able to link it static.</changelog>
  <changelog author="meissner@suse.com" date="1662984000">- updated to 3.4.1
  * add FIPS 140 hints to man page
  * simplify the test tool to search for optimal configurations
  * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
  * enhancement: add ARM64 assembler code to read high-res timer</changelog>
  <changelog author="meissner@suse.com" date="1663070400">- jitterentropy-split-internal-header.patch:
  Hide the non-GNUC constructs that are library internal from the
  exported header. (bsc#1202870)</changelog>
  <changelog author="meissner@suse.com" date="1674734400">- jitterentropy-with-debug.patch: build with debuginfo (bsc#1207789)</changelog>
  <changelog author="pmonreal@suse.com" date="1679486400">- Fix a stack corruption on s390x: [bsc#1209627]
  * Output size of the STCKE command on s390x is 16 bytes, compared
    to 8 bytes of the STCK command. Fix a stack corruption in the
    s390x version of jent_get_nstime(). Add some more detailed
    information on the STCKE command.
  * github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
  * Add jitterentropy-fix-a-stack-corruption-on-s390x.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701864000">- Make use of distro flags with %set_build_flags</changelog>
  <changelog author="pmonreal@suse.com" date="1746014400">- Update to 3.6.3: [bsc#1242050]
  * Correct time stamp processing on AIX
  * Use high-resolution time stamp on Apple Silicon
  * GCD power-up test: consider OSR
  * Remove patches fixed in the update:
  - jitterentropy-fix-a-stack-corruption-on-s390x.patch
  * Rebase patches:
  - jitterentropy-split-internal-header.patch
  - jitterentropy-with-debug.patch
- Update to 3.6.2:
  * Fix RCT re-initialization in jent_read_entropy_safe
  * simplify test code
  * improve keyword portability
- Update to 3.6.1:
  * Add more test code
  * Add support for SunPRO compiler
  * Fix compilation on OpenBSD by replacing sed with tr
  * internal timer: Add support for Apple
  * Various small fixes to compilation to imporve portability
- Update to 3.6.0:
  * Remove bi-modal behavior of conditioning function
  * Make jent_read_entropy_safe safer by retrying the health test
  * Move the version information to make them available at compile time
- Update to 3.5.0:
  * add distinction between intermittent and permanent health failure
  * add compile time option to allow configuring a mask to reduce the
    size of the time stamp used for the APT</changelog>
</package>
<package pkgid="f25bfdf2f8529529b03c490c1ba4019a56a4c763c85163c03ae0ca49dbaf66553b7e57d918b6f8bafd1fc50f2a773e53a63ca5cbf0cac65bfe3d4044dbe56f84" name="jq" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- build without valgrind on riscv64 - does not exist (yet)</changelog>
  <changelog author="mardnh@gmx.de" date="1694088000">- Update to version 1.7
  * Make object key color configurable using JQ_COLORS environment
    variable.
  * Change the default color of null to Bright Black.
  * Respect NO_COLOR environment variable to disable color output.
  * Improved --help output. Now mentions all options and nicer
    order.
  * Fix multiple issues of exit code using --exit-code/-e option.
  * Add --raw-output0 for NUL (zero byte) separated output.
  * Fix assert crash and validate JSON for --jsonarg.
  * Remove deprecated --argfile option.
  Language changes
  * Use decimal number literals to preserve precision. Comparison
    operations respects precision but arithmetic operations might
    truncate.
  * Adds new builtin pick(stream) to emit a projection of the
    input object or array.
  * Adds new builtin debug(msgs) that works like debug but applies
    a filter on the input before writing to stderr.
  * Adds new builtin scan($re; $flags). Was documented but not
    implemented.
  * Adds new builtin abs to get absolute value. This potentially
    allows the literal value of numbers to be preserved as length
    and fabs convert to float.
  * Allow if without else-branch. When skipped the else-branch
    will be . (identity).
  * Allow use of $binding as key in object literals.
  * Allow dot between chained indexes when using .["index"]
  * Allow dot for chained value iterator .[], .[]?
  * Fix try/catch catches more than it should.
  * Speed up and refactor some builtins, also remove
    scalars_or_empty/0.
  * Now halt and halt_error exit immediately instead of continuing
    to the next input.
  * Fix issue converting string to number after previous convert
    error.
  * Fix issue representing large numbers on some platforms causing
    invalid JSON output.
  * Fix deletion using assigning empty against arrays.
  * Allow keywords to be used as binding name in more places.
  * Allow using nan as NaN in JSON.
  * Expose a module's function names in modulemeta.
  * Fix contains/1 to handle strings with NUL.
  * Fix stderr/0 to output raw text without any decoration.
  * Fix nth/2 to emit empty on index out of range.
  * Fix implode to not assert and instead replace invalid unicode
    codepoints.
  * Fix indices/1 and rindex/1 in case of overlapping matches in
    strings.
  * Fix sub/3 to resolve issues involving global search-and-replace
    (gsub) operations.
  * Fix empty regular expression matches.
  * Fix overflow exception of the modulo operator.
  * Fix string multiplication by 0 (and less than 1) to emit empty
    string.
  * Fix segfault when using libjq and threads.
  * Fix constant folding of division and reminder with zero
    divisor.
  * Fix error/0, error/1 to throw null error.
  * Simpler and faster transpose.
  * Simple and efficient implementation of walk/1.
  * Remove deprecated filters leaf_paths, recurse_down.
- Adjust URL/Source - new upstream
  https://github.com/stedolan/jq -&gt; https://github.com/jqlang</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1695816000">- switch to bootstrapped upstream tarball to fix version output
  [boo#1215737]</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- build with valgrind only on 64 bit architectures</changelog>
  <changelog author="mardnh@gmx.de" date="1702468800">- Update to version 1.7.1
  Security
  * Fix CVE-2023-50246 (boo#1218034)
    + Fix heap buffer overflow in jvp_literal_number_literal.
  * Fix CVE-2023-50268 (boo#1218038)
    fix stack-buffer-overflow if comparing nan with payload.
  CLI changes
  * Make the default background color more suitable for bright
    backgrounds.
  * Allow passing the inline jq script after --.
  * Fix possible uninitialised value dereference if jq_init() fails
  Language changes
  * Simplify paths/0 and paths/1.
  * Reject U+001F in string literals.
  * Remove unused nref accumulator in block_bind_library.
  * Remove a bunch of unused variables, and useless assignments.
  * main.c: Remove unused EXIT_STATUS_EXACT option.
  * Actually use the number correctly casted from double to int as
    index.
  * src/builtin.c: remove unnecessary jv_copy-s in
    type_error/type_error2.
  * Remove undefined behavior caught by LLVM 10 UBSAN.
  * Convert decnum to binary64 (double) instead of decimal64.
    This makes jq behave like the JSON specification suggests and
    more similar to other languages.
  * Fix memory leaks on invalid input for ltrimstr/1 and
    rtrimstr/1.
  * Fix memory leak on failed get for setpath/2.
  * Fix nan from json parsing also for nans with payload that
    start with 'n'.
  * Allow carriage return characters in comments.
  Documentation changes
  * Generate links in the man page.
  libjq
  * Add extern C for C++.</changelog>
  <changelog author="ncutler@suse.com" date="1747742400">- Add patch CVE-2024-53427.patch (CVE-2024-53427, bsc#1238078)</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
</package>
<package pkgid="9ae1232b7f39347c2294c7bb5a7ede0c4b2bfd2cf47adb477e021b52608f32234b8d8711b54bc0c7e4f4714e81bd7f4466d34b7f9e717e0927d1c8c99033c427" name="kbd" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709294400">- fix conversion of lowercase f in de-e1 keymap (boo#1207841)</changelog>
  <changelog author="sbrabec@suse.com" date="1712577600">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)
- Stop requiring kbd-legacy. All YaST supported languages should
  now have its keymaps in kbd.
- Remove kbd-1.15.2-prtscr_no_sigquit.patch rejected by the
  upstream. The problem is fixed for a long time, this is an
  additional modification. (PED-7977,
  https://github.com/legionus/kbd/pull/111):
- Drop kbd_fonts.tar.bz2 containing just several 30 years old
  inferior fonts with an unknown author and uncertain license.
- Add structured comments to patches.</changelog>
  <changelog author="tobi.goergens@gmail.com" date="1725364800">- Build libkeymap and create additional subpackages.</changelog>
  <changelog author="sbrabec@suse.com" date="1729166400">- Fix subpackage names and their dependencies.
- Add missing ldconfig scriptlets.</changelog>
  <changelog author="jengelh@inai.de" date="1729598400">- Enable libkfont
- Rename libkeymap-devel to just kbd-devel (the recommendation is
  to reuse the SRPM base name)</changelog>
  <changelog author="sbrabec@suse.com" date="1735819200">- Remove obsolete parts of suse-add.tar.bz2 (jsc#PED-7977),
  possible BREAKING CHANGES for obscure configurations:
  * Replace consolefonts/Cyr_a8x*.psf with upstream instances.
  * Replace consolefonts/cp850-full-8x*.psfu with upstream
    instances.
  * Drop consolefonts/lat5--*.psfu in favor of upstream
    lat5-*.psfu, exactly the same fonts with a better unimap.
  * Drop consolefonts/lat7.psf as it is lat7a-16.psf in the
    upstream.
  * Drop consolefonts/lt-brim-8x14.psfu in favor of upstream
    lat7a-14.psfu, exactly the same fonts with a better unimap.
  * Drop keymaps/i386/qwerty/Pl02.map in favor of nearly equal
    upstream pl2.map.
  * Drop keymaps/i386/qwerty/br-abnt-alt.map in favor of nearly
    equal upstream br-abnt.map.
  * Drop keymaps/i386/qwerty/tj_alt-UTF8.map that is already
    upstreamed.
  * Drop unimaps/iso07*.uni that is already upstreamed.
- Remove broken KBD_DISABLE_CAPS_LOCK feature (sysconfig.keyboard,
  kbdsettings, boo#1179897, jsc#PED-7814).
  Can be replaced by KEYMAP="{my map} disable.capslock" in
  /etc/vconsole.conf.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164800">- sysconfig.keyboard: KBD_NUMLOCK="bios" works only on systems
  without Secure Boot. Document that. Change the default to
  KBD_NUMLOCK="no". (boo#1212141)
- kbdsettings-nox86.patch: Update and return missing chunk.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164801">- Update to version 2.7.1:
  * setfont: Fixed regression in argument parsing.
  * dumpkeys: Fixed dumpkeys on pc and non-pc architectures.
  * libkeymap: Add API to get/set keymap keywords.
    Export functions to convert the value to kernel code.
    Fix double kbdfile open.
    Dump action codes for keycode 0.
  * libkfont: Fix buffer allocation for doubled font.
    Check console mode.
  * keymaps:
    Add hcesar layout, for portuguese speaking countries.
    Update Colemak-DH keymaps with upstream changes.
    sv-latin1.map: make Ctrl+AltGr+9 act as Ctrl+].
  * fonts:
    Remove non-free Agafari fonts. (bnc#95915,
    remove repack_kbd.sh)
  * other:
    Update man pages.
    Remove deprecated startup scripts.
    (Refresh kbd-2.0.2-fix-bashisms.patch.)
    Remove outdated docs.
    (Drop kbd-1.15.2-docu-X11R6-xorg.patch.)
    Update translations.
- Drop upstreamed patches: kbd-1.15.2-sv-latin1-keycode10.patch,
  kbd-2.0.2-doshell-reference.patch.
- Refresh kbd-1.15.5-loadkeys-search-path.patch.
- Releases are signed, add kbd.keyring and the signature.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743249600">- Add kbd-2.7.1-reproducible-gzip.patch (bsc#1240348)</changelog>
</package>
<package pkgid="457a0afaf38188a294a75456c20092cf1d9dc7e3870f2599d8ef99bc2dfe50f8b145bb32e506ce37367efc8d59dd99b2b71e1978c4385a8915ca9013c7a960db" name="kdump" arch="x86_64">
  <version epoch="0" ver="2.1.6" rel="160000.1.2"/>
  <changelog author="jbohac@suse.com" date="1731067200">- upgrade to version 2.0.11
  * fadump mkinitrd: propagate --debug to the inner dracut call
  * mkdumprd: look for kernel image under /boot as well</changelog>
  <changelog author="jbohac@suse.com" date="1732276800">- upgrade to version 2.0.12
  * fadump: pass additional parameters for capture kernel (jsc#PED-9889)</changelog>
  <changelog author="jbohac@suse.com" date="1739275200">- upgrade to version 2.0.16:
  * fix KDUMP_AUTO_RESIZE (bsc#1236921)
  * dracut: fix filtering ro keys in kdump_bond_config (bsc#1233137)
  * spec: add dependency on ethtool
  * allow negative KDUMP_KEEP_OLD_DUMPS (bsc#1234845)</changelog>
  <changelog author="jbohac@suse.com" date="1740744000">- upgrade to version 2.0.17
  * fix bonding options (bsc#1235933)
  * don't use wicked to read bond and bridge config
  * prevent KDUMP_NET_TIMEOUT busy loop when DNS fails
  * limit dump file permissions (bsc#1237497, bsc#1237529)</changelog>
  <changelog author="jbohac@suse.com" date="1744718400">- upgrade to version 2.0.18
  * set KDUMP_CPUs to 32 by default (bsc#1240769, jsc#PED-9894,
    bsc#1237754, bsc#1239999)</changelog>
  <changelog author="jbohac@suse.com" date="1747915200">- upgrade to version 2.1.0
  * fix calibrate (no run-time changes)
  * man: update kdump(7)
  * add kdump-commandline.service (jsc#PED-12454)
  * kdumptool: introduce the commandline subcommand (jsc#PED-12454)
  * kdumptool calibrate: add per-cpu userspace requirements
  * Use FADUMP_COMMANDLINE_APPEND to detect explicit ip= configuration
    (bsc#1242134)
- update calibrate values for SLFO (alp1600)</changelog>
  <changelog author="jbohac@suse.com" date="1752062400">- upgrade to version 2.1.1
  * check for reserved memory on load for better error reporting
  * update man page
  * set KDUMP_CPUS to 1 on XEN (bsc#1244289)
  * load.sh clean up
  * use eval for PRESCRIPT, POSTSCRIPT and TRANSFER
  * sftp: fix key-based authentication
  * fix and improve calibrate build
- update calibrate values</changelog>
  <changelog author="jbohac@suse.com" date="1752840000">- upgrade to version 2.1.4
  * work around failing calibration on aarch64
  * support for kernel flavour-specific calibration
  * specific calibration for aarch64 -64kb kernels (jsc#PED-12971)
  * use KDUMP_NET_TIMEOUT as sftp/ftp timeout
- update calibrate values</changelog>
  <changelog author="jbohac@suse.com" date="1753358400">- upgrade to version 2.1.5
  * kdumptool calibrate: use kernel flavour from the
    kdump kernel (jsc#PED-12971)
  * order kdump-commandline.service after kdump.service
  * updated documentation (bsc#1246908)</changelog>
  <changelog author="jbohac@suse.com" date="1755864000">- upgrade to version 2.1.6
  * drop broken option KDUMP_NETCONFIG="" from manpage
  * prevent NetworkManager from overwriting resolv.conf (bsc#1247848)
  * fix KDUMP_NETCONFIG=auto for NetworkManager (bsc#1247848)
  * exclude kernel.panic_on_warn sysctl (bsc#1247355)</changelog>
</package>
<package pkgid="100dcd1759a3e070ca5869f349c909029b18502764f00ebb1fb9d5e983cfd54b4ea38af9b781d026fc3e6f3046163ea50b3fb8ada82407a516ec63821de8eb70" name="keepalived" arch="x86_64">
  <version epoch="0" ver="2.3.1+git86.59c39afe" rel="160000.3.2"/>
  <changelog author="rpm@fthiessen.de" date="1645704000">- Update to 2.2.7
  * Fix CVE-2021-44225: The D-Bus policy does not sufficiently
    restrict the message destination, allowing any user to inspect
    and manipulate any property.
  * New features:
  * global: Don’t assume running as user root.
  * ipvs: Add support to twos scheduler.
  * vrrp: New features:
  * Add vrf option for unicast without specifying an interface.
  * Add option unicast_fault_no_peer.
  * Allow specification of multicast address to be used.
  * Add vrf option to static and vrrp routes.
  * Add option to resend vrrp states on fifos after reload.
  * Allow duplication of VRIDs on an interface with unicast peers.
  * systemd: Add keepalived-non-root.service systemd service file.
  * make BFD work when IPv6 disabled on system.
  * Fix calculating CLOCK_REALTIME and CLOCK_MONOTONIC offsets.
  * bfd: Handle interface down/address missing when keepalived starts.
    This resolves a segfault, and also makes bfd retry once per minute
    to create send socket if it cannot do so due to no address to bind
    to on an interface.
  * vrrp:
  * Fix configured IPv6 multicast addresses with VMACs.
  * Don’t segfault if duplicate VMAC name, but ignore second name.
  * Don’t delete and recreate VMAC on reload if only VRID has changed.
  * Don’t segfault if don’t have permission for ARP/NDISC socket.
  * Fix IPv6 with vmac_xmit_base.
  * Fix disabling vmac-xmit-base with VRRPv3 IPv6 use_vmac.
  * Fix specifying user/group for vrrp_scripts.
  * Various other fixes and improvements</changelog>
  <changelog author="mrueckert@suse.de" date="1649764800">- Own /etc/keepalived/keepalived.conf as %ghost entry
  otherwise upgrading the package will always move the
  /etc/keepalived/keepalived.conf to
  /etc/keepalived/keepalived.conf.rpmsave
- make permissions of config files more secure</changelog>
  <changelog author="mrueckert@suse.de" date="1685534400">- Update to 2.2.8
  https://www.keepalived.org/release-notes/Release-2.2.8.html</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(keepalived) and group(keepalived)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="mrueckert@suse.de" date="1721390400">- Update to 2.3.1
  https://www.keepalived.org/release-notes/Release-2.3.0.html
  https://www.keepalived.org/release-notes/Release-2.3.1.html</changelog>
  <changelog author="varkoly@suse.com" date="1723636800">- Update to version 2.3.1+git.1723301895.df93f341:
  * all: Ensure pid file exists when respawning child process
  * vrrp: check ifindex != 0 before using the interface
  * vrrp: Duplicate/drop MLDv1 listener reports on VMACs
  * core: ensure only one instance of keepalived can run per config_id
  * configure: add --enable-(cflags,cppflags,ldflags) options
  * configure: add --enable-sanitize-(undefined,leak,memory,scudo,hwaddress) options
  * vrrp: change vrrp_in_chk_vips to return bool rather than int
  * core: cosmetic code layout change
  * core: remove some duplicate include files
  * vrrp: stop memory leak when error in configuring vrrp_iptables
    (bsc#1228123) VUL-0: CVE-2024-41184: keepalived: integer overflow in vrrp_ipsets_handler</changelog>
  <changelog author="mrueckert@suse.de" date="1726056000">- Update to version 2.3.1+git59.b6681f98:
  * all: update how pidfile handled after reload with new configuration
  * Revert "all: ensure pidfile is created if a reload causes child to start"
  * Revert "all: update how pidfile handled after reload with new configuration"
  * all: update how pidfile handled after reload with new configuration
  * all: ensure pidfile is created if a reload causes child to start</changelog>
  <changelog author="mrueckert@suse.de" date="1726056001">- Update service file to use manual mode as disabled is deprecated
- switch to TAG_OFFSET for a more readable version</changelog>
  <changelog author="varkoly@suse.com" date="1728907200">- Update to version 2.3.1+git86.59c39afe:
  * vrrp: allow specifing interval amd timeout to milli-second resolution
  * vrrp: on reload only configured track_script name was checked
  * lib: fix corruption of master-child_pid red black tree
  * lib: add micro-second timers to memory allocation debugging
  * core: update addattr_l to match current iproute2 code - almost
  * lib: add file missing from previous commit
  * all: suppress an increases alignment warning
  * core: use /* FALLTHROUGH */ rather than __fallthrough;
  * ipvs: resolve a "cast increases required alignment" warning
  * build: don't redefine FORTIFY_SOURCE if host environment defines it
  * vrrp ipvs: remove unused definition of XENFS_SUPER_MAGIC
  * vrrp ipvs: fix warnings related to signedness of statfs() f_flags
  * all: use correct format specifier for time fields
  * bfd: make alloc_bfd() return NULL rather than false on error
  * all: make min_auto_priority delay variable an unsigned
  * configure: explicitly set language to C for configure
  * itest: Warn if close after send not set in tcp_server for http
  * test: Make tcp_server use of SO_LINGER optional
  * core: remove diagnostic message accidently added in commit 7cb09b2
  * vrrp ipvs: Stop setting SO_LINGER on TCP sockets
  * test: update tcp_server and tcp_client
  * bfd: use time_t to avoid implicit ptr type casting
  * VRRP: add thread_timer_expired keyword as a synonym of timer_expired_backup</changelog>
</package>
<package pkgid="87c5d9c99fbef06d20f94261e197acb5b277b14f574f4c8724a1026f7d7e1bbfe1aafa98a7c92552b0d67acb83b78fd2f9d611c71a947d38013319ce50d2047d" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.28.1"/>
  <changelog author="clopez@suse.de" date="1775563200">- Refresh
  patches.suse/scsi-scsi_transport_sas-Fix-the-maximum-channel-scan.patch.
- commit bf87874</changelog>
  <changelog author="clopez@suse.de" date="1775563201">- KVM: arm64: Fix ID register initialization for non-protected
  pKVM guests (CVE-2026-23425 bsc#1261506).
- commit b02fb9f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1775563202">- tg3: Fix race for querying speed/duplex (bsc#1257183).
- commit 4d083ab</changelog>
  <changelog author="dwagner@suse.de" date="1775563203">- nvmet: move async event work off nvmet-wq (git-fixes).
- nvme-pci: cap queue creation to used queues (git-fixes).
- nvme-pci: ensure we're polling a polled queue (git-fixes).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  (git-fixes).
- commit 5ccf382</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563204">- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
  atomic tearing (CVE-2026-23383 bsc#1260497).
- commit b5b5e19</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563205">- xdp: produce a warning when calculated tailroom is negative
  (CVE-2026-23343 bsc#1260527).
- commit 72b74a3</changelog>
  <changelog author="lduncan@suse.com" date="1775563206">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit f1d41b2</changelog>
  <changelog author="msuchanek@suse.de" date="1775649600">- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  (bsc#1261669 ltc#212590).
- commit e7cec47</changelog>
  <changelog author="pfalcato@suse.de" date="1775649601">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
</package>
<package pkgid="e24853ce4ed8418ede40813535695233a9133f6db30c02d58d834f4179b7ad7ada84f788dafca8a193050b62a5c0d72abbb9472c0c6009a03b50e52c1dce4f6b" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.27.1.160000.2.8"/>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="b76cffc83939f7127db53508114a16eff34f1581a451d50a50197817fbf6b9fb472fe2d79bbe5b05861ff85f8a4ac4dccb669abd4a4b75e05154f6e3cd61acd1" name="kernel-default-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.28.1"/>
  <changelog author="clopez@suse.de" date="1775563200">- Refresh
  patches.suse/scsi-scsi_transport_sas-Fix-the-maximum-channel-scan.patch.
- commit bf87874</changelog>
  <changelog author="clopez@suse.de" date="1775563201">- KVM: arm64: Fix ID register initialization for non-protected
  pKVM guests (CVE-2026-23425 bsc#1261506).
- commit b02fb9f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1775563202">- tg3: Fix race for querying speed/duplex (bsc#1257183).
- commit 4d083ab</changelog>
  <changelog author="dwagner@suse.de" date="1775563203">- nvmet: move async event work off nvmet-wq (git-fixes).
- nvme-pci: cap queue creation to used queues (git-fixes).
- nvme-pci: ensure we're polling a polled queue (git-fixes).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  (git-fixes).
- commit 5ccf382</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563204">- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
  atomic tearing (CVE-2026-23383 bsc#1260497).
- commit b5b5e19</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563205">- xdp: produce a warning when calculated tailroom is negative
  (CVE-2026-23343 bsc#1260527).
- commit 72b74a3</changelog>
  <changelog author="lduncan@suse.com" date="1775563206">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit f1d41b2</changelog>
  <changelog author="msuchanek@suse.de" date="1775649600">- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  (bsc#1261669 ltc#212590).
- commit e7cec47</changelog>
  <changelog author="pfalcato@suse.de" date="1775649601">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
</package>
<package pkgid="af42e272d00c3be8ed192ae2bde5584bf98388af9912c3b2bcde33b2aecdef54fd22c9f599ef2b4367d19299452c52984320f5f34971cb94c7d242ad3c452fe6" name="kernel-default-optional" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.28.1"/>
  <changelog author="clopez@suse.de" date="1775563200">- Refresh
  patches.suse/scsi-scsi_transport_sas-Fix-the-maximum-channel-scan.patch.
- commit bf87874</changelog>
  <changelog author="clopez@suse.de" date="1775563201">- KVM: arm64: Fix ID register initialization for non-protected
  pKVM guests (CVE-2026-23425 bsc#1261506).
- commit b02fb9f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1775563202">- tg3: Fix race for querying speed/duplex (bsc#1257183).
- commit 4d083ab</changelog>
  <changelog author="dwagner@suse.de" date="1775563203">- nvmet: move async event work off nvmet-wq (git-fixes).
- nvme-pci: cap queue creation to used queues (git-fixes).
- nvme-pci: ensure we're polling a polled queue (git-fixes).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  (git-fixes).
- commit 5ccf382</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563204">- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
  atomic tearing (CVE-2026-23383 bsc#1260497).
- commit b5b5e19</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563205">- xdp: produce a warning when calculated tailroom is negative
  (CVE-2026-23343 bsc#1260527).
- commit 72b74a3</changelog>
  <changelog author="lduncan@suse.com" date="1775563206">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit f1d41b2</changelog>
  <changelog author="msuchanek@suse.de" date="1775649600">- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  (bsc#1261669 ltc#212590).
- commit e7cec47</changelog>
  <changelog author="pfalcato@suse.de" date="1775649601">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
</package>
<package pkgid="8696b00040c06f4d48b16845da311d25a21e06c28b7578ac283ebe1597c3a76b66c35622ecacc9d13d07da607a503746038b6ab872f5c81c7557e1a5d832ca01" name="kernel-firmware-all" arch="noarch">
  <version epoch="0" ver="20250206" rel="160000.3.2"/>
  <changelog author="tiwai@suse.com" date="1736251200">- Update to version 20250106 (git commit e39831b1a9d7):
  * rtl_bt: Add separate config for RLT8723CS Bluetooth part
  * amdgpu: revert VCN 3.1.2 firmware
  * amdgpu: revert yellow carp VCN firmware
  * amdgpu: revert sienna cichlid VCN firmware
  * amdgpu: revert navy flounder VCN firmware
  * amdgpu: revert dimgrey cavefish VCN firmware
  * WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  * copy-firmware.sh: Fix typo in error message.
  * Add support to install files/symlinks in parallel.
  * Makefile: Remove obsolete/broken reference.
  * check_whence.py: Use a more portable shebang.
  * rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E</changelog>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update the version number to 20250206:
  no actual content change, just for making the transition smoother</changelog>
  <changelog author="tiwai@suse.com" date="1739361600">- Fix accidentally dropped buildreq-noarch</changelog>
  <changelog author="tiwai@suse.com" date="1739361601">- Drop superfluous post scripts and Requires;
  this package doesn't need to treat post scripts by itself</changelog>
</package>
<package pkgid="59f52b862314c6ec303140fff2afb463f7956230d9f264513dde764f78bf6ae21d56b31671aaa22026e2503c2ed39cd26fd5ec93fb5fe1798190698ce094d87b" name="kernel-firmware-amdgpu" arch="noarch">
  <version epoch="0" ver="20251203" rel="160000.1.1"/>
  <changelog author="tiwai@suse.com" date="1758888000">- Update to version 20250926 (git commit fad361e997ee):
  * amdgpu: DMCUB updates for various ASICs
  * Revert "amdgpu: update gc 10.3.6 firmware"</changelog>
  <changelog author="tiwai@suse.com" date="1759579200">- Update to version 20251004 (git commit 757854f42d83):
  * amdgpu: DMCUB updates for various ASICs
  * Update VCN for Navi1x, Green Sardine and Renoir</changelog>
  <changelog author="tiwai@suse.com" date="1761566400">- Update to version 20251024 (git commit 9b899c779b8a):
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates for various ASICs
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1762084800">- Update to version 20251031 (git commit 04b323bb64f9):
  * amdgpu: DMCUB updates for various ASICs</changelog>
  <changelog author="tiwai@suse.com" date="1762603200">- Update to version 20251107 (git commit b918d0b3cb97):
  * amdgpu: DMCUB updates for various ASICs</changelog>
  <changelog author="tiwai@suse.com" date="1763640000">- Update to version 20251119 (git commit fe13aa9b9830):
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update renoir firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update VCN 3.1.2 firmware
  * amdgpu: update PSP 13.0.5 firmware
  * amdgpu: update GC 10.3.6 firmware
  * amdgpu: update VCN 5.0.0 firmware
  * amdgpu: update SMU 14.0.3 firmware
  * amdgpu: update PSP 14.0.3 firmware
  * amdgpu: update GC 12.0.1 firmware
  * amdgpu: update SMU 14.0.2 firmware
  * amdgpu: update PSP 14.0.2 firmware
  * amdgpu: update GC 12.0.0 firmware
  * amdgpu: update VCN 4.0.4 firmware
  * amdgpu: update smu 13.0.7 firmware
  * amdgpu: update PSP 13.0.7 firmware
  * amdgpu: update GC 11.0.2 firmware
  * amdgpu: update SMU 13.0.10 firmware
  * amdgpu: update SDMA 6.0.3 firmware
  * amdgpu: update PSP 13.0.10 firmware
  * amdgpu: update GC 11.0.3 firmware
  * amdgpu: update smu 13.0.0 kicker firmware
  * amdgpu: update PSP 13.0.0 kicker firmware
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: update SMU 13.0.0 firmware
  * amdgpu: update PSP 13.0.0 firmware
  * amdgpu: update GC 11.0.0 firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update VCN 5.0.1 firmware
  * amdgpu: update PSP 13.0.12 firmware
  * amdgpu: update GC 9.5.0 firmware
  * amdgpu: update PSP 13.0.14 firmware
  * amdgpu: update GC 9.4.4 firmware
  * amdgpu: update PSP 14.0.5 firmware
  * amdgpu: update GC 11.5.3 firmware
  * amdgpu: update PSP 14.0.4 firmware
  * amdgpu: update GC 11.5.2 firmware
  * amdgpu: update green sardine firmware
  * amdgpu: update VCN 4.0.3 firmware
  * amdgpu: update SDMA 4.4.2 firmware
  * amdgpu: update PSP 13.0.6 firmware
  * amdgpu: update GC 9.4.3 firmware
  * amdgpu: update VCN 4.0.6 firmware
  * amdgpu: update PSP 14.0.1 firmware
  * amdgpu: update GC 11.5.1 firmware
  * amdgpu: update PSP 13.0.11 firmware
  * amdgpu: update GC 11.0.4 firmware
  * amdgpu: update VCN 4.0.5 firmware
  * amdgpu: update PSP 14.0.0 firmware
  * amdgpu: update GC 11.5.0 firmware
  * amdgpu: update VCN 4.0.2 firmware
  * amdgpu: update PSP 13.0.4 firmware
  * amdgpu: update GC 11.0.1 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update aldebaran firmware
  * amdgpu: add vce1 firmware</changelog>
  <changelog author="tiwai@suse.com" date="1763812800">- Update to version 20251121 (git commit ff6418d18552):
  * amdgpu: DMCUB updates for various ASICs</changelog>
  <changelog author="tiwai@suse.com" date="1764158400">- Update to version 20251125 (git commit 23568a4b9420):
  * Revert "amdgpu: update GC 11.0.1 firmware"</changelog>
  <changelog author="tiwai@suse.com" date="1764590400">- Update to version 20251201 (git commit 934bfe7e1e27):
  * Reapply "amdgpu: update SMU 14.0.3 firmware"
  * Revert "amdgpu: update SMU 14.0.3 firmware"
  * Revert "amdgpu: update GC 10.3.6 firmware"
  * Revert "amdgpu: update GC 11.5.1 firmware"</changelog>
  <changelog author="tiwai@suse.com" date="1764849600">- Update to version 20251203 (git commit a0f0e52138e5):
  * Revert "amdgpu: update GC 11.5.0 firmware"</changelog>
</package>
<package pkgid="04b260990675967ed56d3216e2f7c6d91ee65e1f96374482974aebc183931e89f5d4a6a980621dcaf310730239b7c8cfed0c0dccfb17998a006934980af40f80" name="kernel-firmware-ath10k" arch="noarch">
  <version epoch="0" ver="20250206" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1740744000">- Don't install superfluous info texts to firmware directory
- Update license entry</changelog>
  <changelog author="tiwai@suse.com" date="1742644800">- Correct aliases with comma (bsc#1239877)
- Update spec to make kernel-firmware-tools downloadable</changelog>
  <changelog author="tiwai@suse.com" date="1742904000">- Fix a typo in download URL</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
</package>
<package pkgid="4996f3ab8c6b08b3703c7e7df5b295b0c15910098b0e594a42f5bb439fddb7779635b6ec6613b2cbb726475294e3c017340bda28890fa26893d5da29e01356da" name="kernel-firmware-ath11k" arch="noarch">
  <version epoch="0" ver="20250424" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1740744000">- Update to version 20250227 (git commit 30f36b8b9053):
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
  * ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: update board-2.bin
- Don't install superfluous info files to firmware directory</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Update to version 20250424 (git commit c8af472e05cb):
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1</changelog>
  <changelog author="tiwai@suse.com" date="1745582401">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
</package>
<package pkgid="a9fd78859694f3927dc1d8bb6149a87fc1497da4e74e515e5275baeb6f020bb086b5fd8e90bbd2ec80d10144a92aa116d51d229d6e97db61c89f492fab91e45b" name="kernel-firmware-ath12k" arch="noarch">
  <version epoch="0" ver="20250919" rel="160000.1.1"/>
  <changelog author="tiwai@suse.com" date="1738843200">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Update to version 20250424 (git commit c8af472e05cb):
  * ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  * ath12k: QCN9274 hw2.0: update board-2.bin</changelog>
  <changelog author="tiwai@suse.com" date="1745582401">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1748260800">- Update to version 20250523 (git commit f4e75db20a11):
  * ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3</changelog>
  <changelog author="tiwai@suse.com" date="1754740800">- Update to version 20250808 (git commit 8f1ce114de6c):
  * ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1</changelog>
  <changelog author="tiwai@suse.com" date="1756987200">- Update to version 20250903 (git commit 577ee67ffca2):
  * ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1</changelog>
  <changelog author="tiwai@suse.com" date="1758369600">- Update to version 20250919 (git commit 493de17dee99):
  * ath12k: WCN7850 hw2.0: update board-2.bin</changelog>
  <changelog author="tiwai@suse.com" date="1760356800">- Add the missing Supplements (bsc#1250952)</changelog>
</package>
<package pkgid="d09f14b1e513f999be861defdb1904f5f60c1514cc5b23a4283bff95dc77327ada5760654ac6b0ccc568a15d3620293ed3d21cded12c6be156a2c6a4f596c48f" name="kernel-firmware-atheros" arch="noarch">
  <version epoch="0" ver="20250206" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736251200">- Update to version 20250106 (git commit e39831b1a9d7):
  * rtl_bt: Add separate config for RLT8723CS Bluetooth part
  * amdgpu: revert VCN 3.1.2 firmware
  * amdgpu: revert yellow carp VCN firmware
  * amdgpu: revert sienna cichlid VCN firmware
  * amdgpu: revert navy flounder VCN firmware
  * amdgpu: revert dimgrey cavefish VCN firmware
  * WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  * copy-firmware.sh: Fix typo in error message.
  * Add support to install files/symlinks in parallel.
  * Makefile: Remove obsolete/broken reference.
  * check_whence.py: Use a more portable shebang.
  * rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E</changelog>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
</package>
<package pkgid="beaeef0eb93fa4e44d72794631be8788baf241c14229c196491972e4674377fe71f5fc46d1e74aaf0fa3230fcfac8cd4f927ffc22150ca733100e431a2f3a8d4" name="kernel-firmware-bluetooth" arch="noarch">
  <version epoch="0" ver="20251202" rel="160000.1.1"/>
  <changelog author="tiwai@suse.com" date="1759579200">- Update to version 20251004 (git commit 757854f42d83):
  * rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA</changelog>
  <changelog author="tiwai@suse.com" date="1760097600">- Update to version 20251010 (git commit 49fafa182b23):
  * qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100</changelog>
  <changelog author="tiwai@suse.com" date="1760184000">- Update to version 20251010 (git commit fef0b3bbf494):
  * linux-firmware: Update firmware file for Intel Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel BlazarI core</changelog>
  <changelog author="tiwai@suse.com" date="1761566400">- Update to version 20251024 (git commit 9b899c779b8a):
  * QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659</changelog>
  <changelog author="tiwai@suse.com" date="1761912000">- Update to version 20251029 (git commit bfc84303530a):
  * rtl_bt: Add firmware and config files for RTL8761CUV</changelog>
  <changelog author="tiwai@suse.com" date="1762516800">- Update to version 20251106 (git commit b055b3e24542):
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel BlazarI core</changelog>
  <changelog author="tiwai@suse.com" date="1762948800">- Update to version 20251111 (git commit 6fc940781a01):
  * rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905</changelog>
  <changelog author="tiwai@suse.com" date="1763812800">- Update to version 20251121 (git commit ff6418d18552):
  * rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04</changelog>
  <changelog author="tiwai@suse.com" date="1764158400">- Update to version 20251125 (git commit 23568a4b9420):
  * QCA: Add Bluetooth firmware for WCN685x uart interface</changelog>
  <changelog author="tiwai@suse.com" date="1764763200">- Update to version 20251202 (git commit 685171356137):
  * linux-firmware: Update firmware file for Intel Scorpius core
  * linux-firmware: Update firmware file for Intel BlazarIGfP core
  * linux-firmware: Update firmware file for Intel BlazarI core
  * linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  * linux-firmware: Update firmware file for Intel BlazarU core</changelog>
</package>
<package pkgid="3159b02062d7e657f2a83650ce441ccd8227c8e14422b9e146195847bad77afc7dd2a327e57f5047c78e58fe0ede02d9cbc3bfb14347f07ac6aafa4cbfee1051" name="kernel-firmware-bnx2" arch="noarch">
  <version epoch="0" ver="20250627" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1751284800">- Update to version 20250627 (git commit f40eafe21683):
  * WHENCE: extract license texts</changelog>
</package>
<package pkgid="4b6d8b5be874b6aeae39d9c85fe50424f04443a95e2b1a17c3a568dcc5469e28b967400f5b8b9c50940966db9f48958a08c6b8f0f66f158bf8ad59b8cfeb5df1" name="kernel-firmware-brcm" arch="noarch">
  <version epoch="0" ver="20250623" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1745928000">- Update to version 20250428 (git commit 0d104598cd5b):
  * brcm: Add NVRAM file for Radxa Rock Pi X mini PC</changelog>
  <changelog author="tiwai@suse.com" date="1747656000">- Update to version 20250516 (git commit 759c4acafb4a):
  * brcmfmac: Add a couple of NanoPi devices</changelog>
  <changelog author="tiwai@suse.com" date="1749124800">- Update to version 20250603 (git commit 3b75d677f898):
  * brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt</changelog>
  <changelog author="tiwai@suse.com" date="1750766400">- Update to version 20250623 (git commit dbfe16e9e8ac):
  * brcm: Fix symlinks for Khadas VIM SDIO wifi config</changelog>
</package>
<package pkgid="92ccfb5a6d07cac57df3c1643e0bbb4a4b2803d1ca2ec66de275934513cfebd68b4c2fd662d98ac1df1b944fa3f1138077636d57912130e3c467c19ed97ead5d" name="kernel-firmware-chelsio" arch="noarch">
  <version epoch="0" ver="20250627" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1751284800">- Update to version 20250627 (git commit f40eafe21683):
  * WHENCE: extract license texts</changelog>
</package>
<package pkgid="52382e864bb9b3c273df63e2d978bf4d439513f5decac748439588f7277a9e0f729940a1d18f0a12fa070bff71bf158e052c2ea04a2092cc72aae62ea12a51c6" name="kernel-firmware-dpaa2" arch="noarch">
  <version epoch="0" ver="20250206" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736251200">- Update to version 20250106 (git commit e39831b1a9d7):
  * rtl_bt: Add separate config for RLT8723CS Bluetooth part
  * amdgpu: revert VCN 3.1.2 firmware
  * amdgpu: revert yellow carp VCN firmware
  * amdgpu: revert sienna cichlid VCN firmware
  * amdgpu: revert navy flounder VCN firmware
  * amdgpu: revert dimgrey cavefish VCN firmware
  * WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  * copy-firmware.sh: Fix typo in error message.
  * Add support to install files/symlinks in parallel.
  * Makefile: Remove obsolete/broken reference.
  * check_whence.py: Use a more portable shebang.
  * rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E</changelog>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
</package>
<package pkgid="d5e2ac1fadc6ccce56c87e81444facc8d0f7e9c938df9eb3b3eb17e0abf1abcce70b4dc3e94eca204363dd34b493199526fdf13f9f4fa4ff239fd4748bba2e1f" name="kernel-firmware-i915" arch="noarch">
  <version epoch="0" ver="20250708" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1741262400">- Update to version 20250306 (git commit 44740031a34e):
  * xe: Update GUC to v70.40.2 for BMG, LNL</changelog>
  <changelog author="tiwai@suse.com" date="1741694400">- Update to version 20250310 (git commit 11c4e60f9573):
  * i915: Update Xe3LPD DMC to v2.20</changelog>
  <changelog author="tiwai@suse.com" date="1744200000">- Update aliases from 6.15-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1744372800">- Update to version 20250410 (git commit 6a006cef10ce):
  * xe: Update GUC to v70.44.1 for BMG and LNL
  * i915: Update GUC to v70.44.1 for i915 platforms</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1745841600">- Update to version 20250425 (git commit 8d82acd29b5c):
  * i915: Update Xe3LPD DMC to v2.23</changelog>
  <changelog author="tiwai@suse.com" date="1749124800">- Update to version 20250603 (git commit 3b75d677f898):
  * xe: Update GUC to v70.45.2 for BMG, LNL
  * i915: Update GUC to v70.45.2 for DG2
  * xe: Update LNL GSC to v104.0.5.1429</changelog>
  <changelog author="tiwai@suse.com" date="1749124801">- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1751889600">- Update to version 20250707 (git commit ba5e4e381494):
  * xe: First HuC release for Pantherlake
  * xe: First GuC release for Pantherlake</changelog>
  <changelog author="tiwai@suse.com" date="1752148800">- Update to version 20250708 (git commit 99d64b4f788c):
  * xe: Add fan_control v203.0.0.0 for BMG</changelog>
</package>
<package pkgid="71a0970f492252fd1bb76641c70abbb65446c63b9d64b7d4f6dc944c09552e062392bc54236cc2640ec7c1ce3dc527bc6a5fff011bede9ebb3cbe219a0be2d72" name="kernel-firmware-intel" arch="noarch">
  <version epoch="0" ver="20250718" rel="160000.1.2"/>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1741521600">- Update to version 20250307 (git commit bd3d8a8b1bb7):
  * intel_vpu: Add firmware for 37xx and 40xx NPUs
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1741780800">- Update to version 20250311 (git commit b69d4b74c986):
  * linux-firmware: add firmware for qat_420xx devices</changelog>
  <changelog author="tiwai@suse.com" date="1743508800">- Update to version 20250331 (git commit 0f7fe1e739bf):
  * intel_vpu: Update NPU firmware</changelog>
  <changelog author="tiwai@suse.com" date="1745150400">- Update to version 20250419 (git commit 5aa42075d00c):
  * intel: ish: Update license file for ISH</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1747137600">- Update to version 20250512 (git commit 9f8e520fd736):
  * intel_vpu: Update NPU firmware</changelog>
  <changelog author="tiwai@suse.com" date="1749124800">- Update to version 20250603 (git commit 3b75d677f898):
  * Intel IPU7: Add firmware binary files</changelog>
  <changelog author="tiwai@suse.com" date="1752926400">- Update to version 20250718 (git commit a5fbfa20d1bd):
  * intel_vpu: Update NPU firmware</changelog>
</package>
<package pkgid="da843b62a2473bb937e3f137a4aa6994f7ad8be9eac65a70f51f4abfc19b2f1473b520659409e24f3cb78b70ec38f51174baedd4d61342e3d6636bc8dae73627" name="kernel-firmware-iwlwifi" arch="noarch">
  <version epoch="0" ver="20250609" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1738843200">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  * iwlwifi: add Bz/gl FW for core93-123 release
  * iwlwifi: update ty/So/Ma firmwares for core93-123 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1741867200">- Update to version 20250312 (git commit 89ba9b7ce05c):
  * iwlwifi: add Bz/gl FW for core94-91 release
  * iwlwifi: update ty/So/Ma firmwares for core94-91 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release</changelog>
  <changelog author="tiwai@suse.com" date="1745409600">- Update to version 20250422 (git commit 32f3227b67c0):
  * iwlwifi: add Bz-hr FW for core93-123 release</changelog>
  <changelog author="tiwai@suse.com" date="1745496000">- Update to version 20250423 (git commit c67433231cbd):
  * iwlwifi: add Bz/gl FW for core95-82 release
  * iwlwifi: update ty/So/Ma firmwares for core95-82 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1749124800">- Update to version 20250603 (git commit 3b75d677f898):
  * iwlwifi: add Bz/gl FW for core96-76 release
  * iwlwifi: update ty/So/Ma firmwares for core96-76 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
  * iwlwifi: update firmwares for 8000 series
  * iwlwifi: update 7265D firmware</changelog>
  <changelog author="tiwai@suse.com" date="1749556800">- Update to version 20250609 (git commit 0d92efb540f4):
  * Revert "iwlwifi: add Bz/gl FW for core96-76 release"</changelog>
  <changelog author="tiwai@suse.com" date="1750507200">- Update aliases</changelog>
</package>
<package pkgid="5e56f8f9826c0ebb724fda0d8a5e68c1ea486a62f294e1662ef3e35bc8180d8002d5d2f17b872d98c105f19d905ff7b44b9a888837925ba7c1cd67b07a93dd31" name="kernel-firmware-liquidio" arch="noarch">
  <version epoch="0" ver="20250206" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736251200">- Update to version 20250106 (git commit e39831b1a9d7):
  * rtl_bt: Add separate config for RLT8723CS Bluetooth part
  * amdgpu: revert VCN 3.1.2 firmware
  * amdgpu: revert yellow carp VCN firmware
  * amdgpu: revert sienna cichlid VCN firmware
  * amdgpu: revert navy flounder VCN firmware
  * amdgpu: revert dimgrey cavefish VCN firmware
  * WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  * copy-firmware.sh: Fix typo in error message.
  * Add support to install files/symlinks in parallel.
  * Makefile: Remove obsolete/broken reference.
  * check_whence.py: Use a more portable shebang.
  * rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E</changelog>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
</package>
<package pkgid="e8832d67f2859a538781f2b70ddf6c29fbd3ddbde643427a198c3b807f405b2753db2286c203dd89d900b78b16893ca1a9f6bee9584a4cb4836faf4a08570e97" name="kernel-firmware-marvell" arch="noarch">
  <version epoch="0" ver="20250206" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736251200">- Update to version 20250106 (git commit e39831b1a9d7):
  * rtl_bt: Add separate config for RLT8723CS Bluetooth part
  * amdgpu: revert VCN 3.1.2 firmware
  * amdgpu: revert yellow carp VCN firmware
  * amdgpu: revert sienna cichlid VCN firmware
  * amdgpu: revert navy flounder VCN firmware
  * amdgpu: revert dimgrey cavefish VCN firmware
  * WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  * copy-firmware.sh: Fix typo in error message.
  * Add support to install files/symlinks in parallel.
  * Makefile: Remove obsolete/broken reference.
  * check_whence.py: Use a more portable shebang.
  * rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E</changelog>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
</package>
<package pkgid="6599c5d73518885cf5e780a246940278f87a12e1fe936a9c613a660840afcdc92989c56ae3eefdc34aaf73d1a6efd9500ef055ecf300fd12b2405cd0b283ec1c" name="kernel-firmware-media" arch="noarch">
  <version epoch="0" ver="20250717" rel="160000.1.2"/>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1742644800">- Correct aliases with comma (bsc#1239877)
- Update spec to make kernel-firmware-tools downloadable</changelog>
  <changelog author="tiwai@suse.com" date="1742904000">- Fix a typo in download URL</changelog>
  <changelog author="tiwai@suse.com" date="1744200000">- Update to version 20250408 (git commit c1a774f36657):
  * qcom: update firmware binary for SM8250</changelog>
  <changelog author="tiwai@suse.com" date="1745323200">- Update to version 20250422 (git commit 944acaa23457):
  * qcom: vpu: add video firmware binary for qcm6490</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Update to version 20250424 (git commit c8af472e05cb):
  * qcom: vpu: update video firmware binary for SA8775p</changelog>
  <changelog author="tiwai@suse.com" date="1745582401">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1750852800">- Update to version 20250624 (git commit b05fabcd6f2a):
  * qcom: venus-5.4: add the firmware binary for qcs615</changelog>
  <changelog author="tiwai@suse.com" date="1751284800">- Update to version 20250627 (git commit f40eafe21683):
  * WHENCE: extract license texts
  * qcom: update firmware binary for SM8550</changelog>
  <changelog author="tiwai@suse.com" date="1752840000">- Update to version 20250717 (git commit 6fc20e018cca):
  * WHENCE: extract more license statements</changelog>
</package>
<package pkgid="4fd37e2464d9cef373df62907c74d756cd494210abdba22e9723d6176e8f4dc08a9f52dfe3e3250095c1f1740667b8eff1daf0a6d109ddb9e53a2731115981bb" name="kernel-firmware-mediatek" arch="noarch">
  <version epoch="0" ver="20251129" rel="160000.1.1"/>
  <changelog author="tiwai@suse.com" date="1756987200">- Update to version 20250903 (git commit 577ee67ffca2):
  * linux-firmware: update firmware for MT7925 WiFi device
  * mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.</changelog>
  <changelog author="tiwai@suse.com" date="1757592000">- Update to version 20250909 (git commit 4573c02ca0ca):
  * mediatek MT7922: update bluetooth firmware to 20250903123504
  * linux-firmware: update firmware for MT7922 WiFi device</changelog>
  <changelog author="tiwai@suse.com" date="1758888000">- Update to version 20250926 (git commit fad361e997ee):
  * mediatek: mtk_wed: drop links for mt7988</changelog>
  <changelog author="tiwai@suse.com" date="1760529600">- Update aliases from 6.18-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1761566400">- Update to version 20251024 (git commit 9b899c779b8a):
  * mediatek MT7920: update bluetooth firmware to 20251020151255
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7920 WiFi device
  * mediatek MT7922: update bluetooth firmware to 20251020143443
  * Revert "linux-firmware: update firmware for MT7922 WiFi device"</changelog>
  <changelog author="tiwai@suse.com" date="1761912000">- Update to version 20251029 (git commit bfc84303530a):
  * linux-firmware: update firmware for MT7925 WiFi device
  * mediatek MT7925: update bluetooth firmware to 20251015213201</changelog>
  <changelog author="tiwai@suse.com" date="1762862400">- Update to version 20251110 (git commit 15b5dddd9b2a):
  * linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1763467200">- Update to version 20251118 (git commit 53dce114cc5d):
  * mt76: add firmware for MT7990
  * mt76: update firmware for MT7992
  * mt76: update firmware for MT7996</changelog>
  <changelog author="tiwai@suse.com" date="1763640000">- Update to version 20251119 (git commit fe13aa9b9830):
  * mediatek MT7922: update bluetooth firmware to 20251118163447
  * linux-firmware: update firmware for MT7922 WiFi device</changelog>
  <changelog author="tiwai@suse.com" date="1764504000">- Update to version 20251129 (git commit 01006f5dea2d):
  * linux-firmware: update firmware for MT7925 WiFi device
  * mediatek MT7925: update bluetooth firmware to 20251124093155</changelog>
</package>
<package pkgid="5c470d401e5cd842bd21824d4387ab4e30818ef14818c8e705e4052e536629a1c1ee3928273b0355fbcc8479290468b74448c7d180c692b14584e1c2e50bc342" name="kernel-firmware-mellanox" arch="noarch">
  <version epoch="0" ver="20250717" rel="160000.1.2"/>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1744200000">- Update to version 20250408 (git commit c1a774f36657):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1752840000">- Update to version 20250717 (git commit 6fc20e018cca):
  * WHENCE: extract more license statements</changelog>
</package>
<package pkgid="8f074f01475a66f21865df5a6305ac54bac4915f4091d99f25f29bf9d4f4cdbc388f22e40ef6d29c6acdc039c1357a39337660a03ed7bdb08860fb85572ff3c8" name="kernel-firmware-mwifiex" arch="noarch">
  <version epoch="0" ver="20250206" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736251200">- Update to version 20250106 (git commit e39831b1a9d7):
  * rtl_bt: Add separate config for RLT8723CS Bluetooth part
  * amdgpu: revert VCN 3.1.2 firmware
  * amdgpu: revert yellow carp VCN firmware
  * amdgpu: revert sienna cichlid VCN firmware
  * amdgpu: revert navy flounder VCN firmware
  * amdgpu: revert dimgrey cavefish VCN firmware
  * WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  * copy-firmware.sh: Fix typo in error message.
  * Add support to install files/symlinks in parallel.
  * Makefile: Remove obsolete/broken reference.
  * check_whence.py: Use a more portable shebang.
  * rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E</changelog>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
</package>
<package pkgid="b4c2846600293eba3718db8026b12fdbc336f655bf7cc53414bd38d2c5a03f93257554041e65a9b200afc958602c3343518902427701b4efc991bd948ac9ea16" name="kernel-firmware-network" arch="noarch">
  <version epoch="0" ver="20250717" rel="160000.1.2"/>
  <changelog author="tiwai@suse.com" date="1738843200">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1740052800">- Update to version 20250219 (git commit 5faab136de1a):
  * linux-firmware: update firmware for en8811h 2.5G ethernet phy</changelog>
  <changelog author="tiwai@suse.com" date="1744200000">- Update to version 20250408 (git commit c1a774f36657):
  * linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1749124800">- Update to version 20250603 (git commit 3b75d677f898):
  * ice: update wireless_edge package to 1.3.23.0
  * ice: update comms package to 1.3.55.0
  * ice: update package to 1.3.43.0</changelog>
  <changelog author="tiwai@suse.com" date="1750507200">- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1751284800">- Update to version 20250627 (git commit f40eafe21683):
  * WHENCE: extract license texts</changelog>
  <changelog author="tiwai@suse.com" date="1752840000">- Update to version 20250717 (git commit 6fc20e018cca):
  * WHENCE: extract more license statements</changelog>
</package>
<package pkgid="4f60663ffed9ba7fb6a541b534b638fc930898b69f15b8d352a08f785cc6af7bf65b52f9245fff60fdd9a411e9249c92ebb44ac227e54225ccc3c6f394ac5ef9" name="kernel-firmware-nfp" arch="noarch">
  <version epoch="0" ver="20250206" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736251200">- Update to version 20250106 (git commit e39831b1a9d7):
  * rtl_bt: Add separate config for RLT8723CS Bluetooth part
  * amdgpu: revert VCN 3.1.2 firmware
  * amdgpu: revert yellow carp VCN firmware
  * amdgpu: revert sienna cichlid VCN firmware
  * amdgpu: revert navy flounder VCN firmware
  * amdgpu: revert dimgrey cavefish VCN firmware
  * WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  * copy-firmware.sh: Fix typo in error message.
  * Add support to install files/symlinks in parallel.
  * Makefile: Remove obsolete/broken reference.
  * check_whence.py: Use a more portable shebang.
  * rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E</changelog>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
</package>
<package pkgid="74fb91395d7e61e56e10b3ffa66b324b2ab90da9cb61644199b0ddc23fccce44797d24013612be0bd13f8927699fa55c3d15e514b9dd995a6a2d17aa014f0571" name="kernel-firmware-nvidia" arch="noarch">
  <version epoch="0" ver="20250516" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1738843200">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1742644800">- Correct aliases with comma (bsc#1239877)
- Update spec to make kernel-firmware-tools downloadable</changelog>
  <changelog author="tiwai@suse.com" date="1742904000">- Fix a typo in download URL</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1747656000">- Update to version 20250516 (git commit 759c4acafb4a):
  * nvidia: add GSP-RM version 570.144 firmware images</changelog>
  <changelog author="tiwai@suse.com" date="1749124800">- Add workaround for directory/symlink changes (bsc#1243843)</changelog>
  <changelog author="tiwai@suse.com" date="1749729600">- Fix zypper conflict about directory -&gt; symlink workaround (bsc#1244458)</changelog>
  <changelog author="tiwai@suse.com" date="1753099200">- Remove stale *.rpmmoved directories (bsc#1244458)</changelog>
</package>
<package pkgid="c2193b47fa487cb0e2f43ed2f0451584785b9c266693dda52637a93c47b316c740226069e71967ec9873cd108a393a04fa961cfca7761448259b5ea4a217371b" name="kernel-firmware-platform" arch="noarch">
  <version epoch="0" ver="20250717" rel="160000.1.2"/>
  <changelog author="tiwai@suse.com" date="1744200000">- Update aliases from 6.15-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1745323200">- Update to version 20250422 (git commit 944acaa23457):
  * bmi260: Add BMI260 IMU initial configuration data file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1746619200">- Update to version 20250507 (git commit 94e4d273ad22):
  * amd_pmf: Update AMD PMF TA Firmware to v3.1</changelog>
  <changelog author="tiwai@suse.com" date="1746792000">- Update to version 20250508 (git commit 788aadc8f73d):
  * linux-firmware: Amphion: Update vpu firmware</changelog>
  <changelog author="tiwai@suse.com" date="1747656000">- Update to version 20250516 (git commit 759c4acafb4a):
  * powervr: add firmware for Imagination Technologies BXS-4-64 GPU
  * cnm: update chips&amp;media wave521c firmware.</changelog>
  <changelog author="tiwai@suse.com" date="1747742400">- Update to version 20250520 (git commit 341b9e805613):
  * cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9</changelog>
  <changelog author="tiwai@suse.com" date="1750507200">- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1751284800">- Update to version 20250627 (git commit f40eafe21683):
  * WHENCE: expand the advansys license statement
  * WHENCE: some older AMD drivers are MIT licensed</changelog>
  <changelog author="tiwai@suse.com" date="1752840000">- Update to version 20250717 (git commit 6fc20e018cca):
  * WHENCE: extract more license statements</changelog>
</package>
<package pkgid="d594ab7292b6650d6428ce7af16e6e7f1160d0fdd88499834c76d49a22eae6d264c5069416ea329cac2e6947aca56a8aebd6e09f704dbba0fc393339ace82708" name="kernel-firmware-prestera" arch="noarch">
  <version epoch="0" ver="20250206" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736251200">- Update to version 20250106 (git commit e39831b1a9d7):
  * rtl_bt: Add separate config for RLT8723CS Bluetooth part
  * amdgpu: revert VCN 3.1.2 firmware
  * amdgpu: revert yellow carp VCN firmware
  * amdgpu: revert sienna cichlid VCN firmware
  * amdgpu: revert navy flounder VCN firmware
  * amdgpu: revert dimgrey cavefish VCN firmware
  * WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  * copy-firmware.sh: Fix typo in error message.
  * Add support to install files/symlinks in parallel.
  * Makefile: Remove obsolete/broken reference.
  * check_whence.py: Use a more portable shebang.
  * rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E</changelog>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
</package>
<package pkgid="241e748901987a2e862fb5d98b6de21282f7d52070575f884be23dfd819eac1e802296f107df7b01e4f0c650b0cf0fc5bb95db65ba4b6e54efe3ee8751917cbb" name="kernel-firmware-qcom" arch="noarch">
  <version epoch="0" ver="20250714" rel="160000.1.2"/>
  <changelog author="tiwai@suse.com" date="1747742400">- Update to version 20250520 (git commit 341b9e805613):
  * Adjust QUPv3 driver name</changelog>
  <changelog author="tiwai@suse.com" date="1749124800">- Update to version 20250603 (git commit 3b75d677f898):
  * qcom: add QUPv3 firmware for QCS8300 platform
  * qcom: sc8280xp: FW blob updates for X13s</changelog>
  <changelog author="tiwai@suse.com" date="1749124801">- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1749729600">- Better workaround for directory -&gt; symlink change (bsc#1244458)</changelog>
  <changelog author="tiwai@suse.com" date="1749988800">- Update to version 20250613 (git commit 12fe085fa409):
  * qcom: sc8280xp: Updated power FW for X13s</changelog>
  <changelog author="tiwai@suse.com" date="1750161600">- Update to version 20250616 (git commit 1d98972a5635):
  * qcom: add gpu firmwares for X1P42100 chipset</changelog>
  <changelog author="tiwai@suse.com" date="1751889600">- Update to version 20250707 (git commit ba5e4e381494):
  * qcom/adreno: sort entries in WHENCE</changelog>
  <changelog author="tiwai@suse.com" date="1752148800">- Update to version 20250708 (git commit 99d64b4f788c):
  * qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
  * qcom: Add sdx61 Foxconn vendor firmware image file</changelog>
  <changelog author="tiwai@suse.com" date="1752580800">- Update to version 20250714 (git commit ecdbd2b8af04):
  * qcom: Update gpu firmwares of QCS615 chipset</changelog>
  <changelog author="tiwai@suse.com" date="1753099200">- Remove stale *.rpmmoved directories (bsc#1244458)</changelog>
</package>
<package pkgid="7f675c8cfd3a3794f40006c4d6911d384a56782df3ef5573792eee85bcdcf7aea23ce18c22358dd17095d9daca5c2a137709366263249744b29eeda12854437e" name="kernel-firmware-qlogic" arch="noarch">
  <version epoch="0" ver="20250717" rel="160000.1.2"/>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1752840000">- Update to version 20250717 (git commit 6fc20e018cca):
  * WHENCE: extract more license statements</changelog>
</package>
<package pkgid="2c656f2f65704c87d2b255696a8de800f2769cfb3871b3d15bf171fe94a2a4ddf575f8c008a8fa0e161203dbe7389ce683fd0aba52fa5b13b93ab1052af40ed8" name="kernel-firmware-radeon" arch="noarch">
  <version epoch="0" ver="20250627" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1751284800">- Update to version 20250627 (git commit f40eafe21683):
  * WHENCE: some older AMD drivers are MIT licensed</changelog>
</package>
<package pkgid="f0f2a6494ceda8c92a7dbfaae4b24999d3c7b87b886855ac997ad40be30bac2b3e878827755cf50f22b905ec78c5cf365f13aae836b28c8b85512e78577f0ac6" name="kernel-firmware-realtek" arch="noarch">
  <version epoch="0" ver="20250717" rel="160000.1.2"/>
  <changelog author="tiwai@suse.com" date="1744200000">- Update aliases from 6.15-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1745323200">- Update to version 20250422 (git commit 944acaa23457):
  * rtw89: 8922a: update element RF TXPWR to R40
  * rtw89: 8852c: update element RF TXPWR to R78
  * rtw89: 8852c: add fw v0.27.125.0 with format version 2
  * Revert "rtw89: 8852c: update fw to v0.27.125.0"</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1746273600">- Update to version 20250502 (git commit 43dfb5fb64bb):
  * rtw89: 8852c: add tables for dynamic antenna TXPWR
  * rtw89: 8922a: update fw to v0.35.71.0</changelog>
  <changelog author="tiwai@suse.com" date="1747656000">- Update to version 20250516 (git commit 759c4acafb4a):
  * rtl_nic: add firmware rtl8127a-1</changelog>
  <changelog author="tiwai@suse.com" date="1749988800">- Update to version 20250613 (git commit 12fe085fa409):
  * rtl_nic: update firmware of RTL8153A</changelog>
  <changelog author="tiwai@suse.com" date="1750507200">- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1751544000">- Update to version 20250630 (git commit e2dad11e8d4b):
  * rtw89: 8922a: update fw to v0.35.80.0
  * rtw89: 8852c: update fw to v0.27.129.1
  * rtw89: 8852c: update fw to v0.27.128.0</changelog>
  <changelog author="tiwai@suse.com" date="1752667200">- Update to version 20250715 (git commit 04c379b552c7):
  * rtw89: 8852b: update fw to v0.29.128.0
  * rtw89: 8852bt: update fw to v0.29.127.0
  * rtw89: 8922a: add regd fw element with version R72-R6
  * rtw89: 8852c: add regd fw element with version R72-R57
  * rtw89: 8922a: update BB parameter V49</changelog>
  <changelog author="tiwai@suse.com" date="1752840000">- Update to version 20250717 (git commit 6fc20e018cca):
  * WHENCE: extract more license statements</changelog>
</package>
<package pkgid="7f8ef8be4aeeaafaa3a3322fcd956b7539f0d50042155ad9ae593f7959d64683b684ff8f14d7f1e15e5eaa49a1937bffa5bf344997cae0766b90a082fc518c71" name="kernel-firmware-serial" arch="noarch">
  <version epoch="0" ver="20250717" rel="160000.1.2"/>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1751284800">- Update to version 20250627 (git commit f40eafe21683):
  * WHENCE: extract license texts</changelog>
  <changelog author="tiwai@suse.com" date="1752840000">- Update to version 20250717 (git commit 6fc20e018cca):
  * WHENCE: extract more license statements</changelog>
</package>
<package pkgid="54749e64b6fb9fcc274f91e566c63d2a4665dc3efa80e5114f4cbfbc2ae574c99d803ac9fdff646f5f1179a113a48fd5fb25a1e81e70e0d74dd67ea09c16299a" name="kernel-firmware-sound" arch="noarch">
  <version epoch="0" ver="20250721" rel="160000.1.2"/>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to version 20250415 (git commit 2f411c10e457):
  * intel: avs: Update topology file for I2S Analog Devices 4567
  * intel: avs: Update topology file for I2S Realtek 5663
  * intel: avs: Update topology file for I2S Realtek 5640
  * intel: avs: Update topology file for I2S Realtek 5514
  * intel: avs: Update topology file for I2S Realtek 298
  * intel: avs: Update topology file for I2S Realtek 286
  * intel: avs: Update topology file for I2S Realtek 274
  * intel: avs: Update topology file for I2S Nuvoton 8825
  * intel: avs: Update topology file for I2S Maxim 98927
  * intel: avs: Update topology file for I2S Maxim 98373
  * intel: avs: Update topology file for I2S Maxim 98357a
  * intel: avs: Update topology file for HDAudio codecs
  * intel: avs: Update topology file for HDMI codecs
  * intel: avs: Update topology file for Digital Microphone Array
  * intel: avs: Update topology file for I2S Dialog 7219</changelog>
  <changelog author="tiwai@suse.com" date="1745323200">- Update to version 20250422 (git commit 944acaa23457):
  * ASoC: tas2781: Swap channel for SPI projects.</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1746273600">- Update to version 20250502 (git commit 43dfb5fb64bb):
  * cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  * cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  * cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  * cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops</changelog>
  <changelog author="tiwai@suse.com" date="1747137600">- Update to version 20250512 (git commit 9f8e520fd736):
  * intel: avs: Update topology file for Digital Microphone Array
    (bsc#1243030)</changelog>
  <changelog author="tiwai@suse.com" date="1747828800">- Update to version 20250521 (git commit 3fbaee2775a4):
  * cirrus: cs35l41: Fix firmware links for several ASUS laptops
  * cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
  * cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA</changelog>
  <changelog author="tiwai@suse.com" date="1749988800">- Update to version 20250613 (git commit 12fe085fa409):
  * cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41</changelog>
  <changelog author="tiwai@suse.com" date="1750507200">- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1751284800">- Update to version 20250627 (git commit f40eafe21683):
  * WHENCE: extract license texts</changelog>
  <changelog author="tiwai@suse.com" date="1753185600">- Update to version 20250721 (git commit d89120bb80fc):
  * cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
  * cirrus: cs35l41: Update Firmware for Dell Oasis
  * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  * qcom: Add Audio topology for QCS6490 RB3Gen2</changelog>
</package>
<package pkgid="eda2d4c64df4b198a5b458f0bfb86f2d33fcf22ea5cf0d677b7fd45a6c165b3c0f55bd7c7b0228f1ae61c2d2d87bc7ad4bd9fd9e930806dec9ea95891d28ecbf" name="kernel-firmware-ti" arch="noarch">
  <version epoch="0" ver="20250206" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736251200">- Update to version 20250106 (git commit e39831b1a9d7):
  * rtl_bt: Add separate config for RLT8723CS Bluetooth part
  * amdgpu: revert VCN 3.1.2 firmware
  * amdgpu: revert yellow carp VCN firmware
  * amdgpu: revert sienna cichlid VCN firmware
  * amdgpu: revert navy flounder VCN firmware
  * amdgpu: revert dimgrey cavefish VCN firmware
  * WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  * copy-firmware.sh: Fix typo in error message.
  * Add support to install files/symlinks in parallel.
  * Makefile: Remove obsolete/broken reference.
  * check_whence.py: Use a more portable shebang.
  * rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E</changelog>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
</package>
<package pkgid="0c5dbcbff5e15e76330b67233d786abdd3049cfd878b9afd058d5a7e1ea46e659f3de57b2a5a876bf8c3c388dd0054d3ec1590b0c386c20ce93819608e4a0d71" name="kernel-firmware-ueagle" arch="noarch">
  <version epoch="0" ver="20250206" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1736251200">- Update to version 20250106 (git commit e39831b1a9d7):
  * rtl_bt: Add separate config for RLT8723CS Bluetooth part
  * amdgpu: revert VCN 3.1.2 firmware
  * amdgpu: revert yellow carp VCN firmware
  * amdgpu: revert sienna cichlid VCN firmware
  * amdgpu: revert navy flounder VCN firmware
  * amdgpu: revert dimgrey cavefish VCN firmware
  * WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  * copy-firmware.sh: Fix typo in error message.
  * Add support to install files/symlinks in parallel.
  * Makefile: Remove obsolete/broken reference.
  * check_whence.py: Use a more portable shebang.
  * rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E</changelog>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
</package>
<package pkgid="6039593563d86326b1a2ab6779917b03f1b595bb7a05e9b2e0f00b0ccd1c936e3191e400ebd665109a461fd4cedc26651a4006b2aeef3b51537c44a7f67a02a9" name="kernel-firmware-usb-network" arch="noarch">
  <version epoch="0" ver="20250717" rel="160000.1.2"/>
  <changelog author="tiwai@suse.com" date="1736769600">- Update to version 20250111 (git commit b3049665a5d0):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update sdma 4.4.5 firmware
  * amdgpu: update psp 13.0.14 firmware
  * amdgpu: update gc 9.4.4 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update vcn 5.0.0 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vcn 4.0.3 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * cirrus: cs35l56: Correct some links to address the correct amp instance
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core
  * cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  * Fix has_gnu_parallel function</changelog>
  <changelog author="tiwai@suse.com" date="1737460800">- Update to version 20250120 (git commit 634d0a0aa07b):
  * mediatek MT7925: update bluetooth firmware to 20250113153307
  * linux-firmware: update firmware for MT7925 WiFi device
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update smu 14.0.3 firmware
  * amdgpu: update psp 14.0.3 firmware
  * amdgpu: update gc 12.0.1 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update smu 14.0.2 firmware
  * amdgpu: update psp 14.0.2 firmware
  * amdgpu: update gc 12.0.0 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update yellow carp firmware
  * qcom: correct licence information for SA8775P binaries
  * qcom: update SLPI firmware for RB5 board
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * qcom: add DSP firmware for SA8775p platform
  * qcom: correct venus firmware versions
  * qcom: add missing version information
  * linux-firmware: Update firmware (v10) for mt7988 internal
  * iwlwifi: add Bz FW for core90-93 release
  * linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  * rtw89: 8852b: update fw to v0.29.29.8
  * rtw89: 8852c: update fw to v0.27.122.0
  * rtw89: 8922a: update fw to v0.35.54.0
  * rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  * rtw89: 8852bt: update fw to v0.29.110.0
  * rtw89: 8852b: update fw to v0.29.29.7
- Fix license for qcom_q6v5_pas
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1737633600">- Update to version 20250122 (git commit 0e16f416fa29):
  * amdgpu: revert DMCUB 3.1.4 firmware (bsc#1236196)
  * amlogic: update firmware for w265s2</changelog>
  <changelog author="tiwai@suse.com" date="1738238400">- Update to version 20250129 (git commit 211fbc287a0b):
  * linux-firmware: Update FW files for MRVL SD8997 chips
  * i915: Update Xe2LPD DMC to v2.27
  * qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  * rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  * amdgpu: Update ISP FW for isp v4.1.1
  * trivial: contrib: wrap the process in try/except to catch server issues
  * trivial: contrib: use python-magic to detect encoding of emails
  * QCA: Add Bluetooth firmware for QCA6698
- Drop the versions in Requires in kernel-firmare-all meta package
- Fix a minor bug in the check script</changelog>
  <changelog author="tiwai@suse.com" date="1738843200">- Update to version 20250205 (git commit 429bdd620eb1):
  * amdgpu: DMCUB update for DCN401
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  * ath11k: QCA6698AQ hw2.1: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  * ath11k: QCA2066 hw2.1: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  * copy-firmware: Fix 'No such file or directory' error.
  * ath11k: add device-specific firmware for QCM6490 boards
  * qca: add more WCN3950 1.3 NVM files
  * qca: add firmware for WCN3950 chips
  * qca: move QCA6390 firmware to separate section
  * qca: restore licence information for WCN399x firmware
  * amdgpu: DMCUB updates for various ASICs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  * qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
- Update aliases from 6.13</changelog>
  <changelog author="tiwai@suse.com" date="1738843201">- Split to each indiviaul build for each topic (bsc#1236966):
  the uncompressed big kernel-firmware package is deprecated now</changelog>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1752840000">- Update to version 20250717 (git commit 6fc20e018cca):
  * WHENCE: extract more license statements</changelog>
</package>
<package pkgid="6cff12775204d3a512084119fc1676e3e4df3238fb9991a4b3dc5d391e10c46076b42364710b52b493076b0068d53f2dd9973cf9b5140c5112ca608cee79763c" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.28.1"/>
  <changelog author="clopez@suse.de" date="1775563200">- Refresh
  patches.suse/scsi-scsi_transport_sas-Fix-the-maximum-channel-scan.patch.
- commit bf87874</changelog>
  <changelog author="clopez@suse.de" date="1775563201">- KVM: arm64: Fix ID register initialization for non-protected
  pKVM guests (CVE-2026-23425 bsc#1261506).
- commit b02fb9f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1775563202">- tg3: Fix race for querying speed/duplex (bsc#1257183).
- commit 4d083ab</changelog>
  <changelog author="dwagner@suse.de" date="1775563203">- nvmet: move async event work off nvmet-wq (git-fixes).
- nvme-pci: cap queue creation to used queues (git-fixes).
- nvme-pci: ensure we're polling a polled queue (git-fixes).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  (git-fixes).
- commit 5ccf382</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563204">- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
  atomic tearing (CVE-2026-23383 bsc#1260497).
- commit b5b5e19</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563205">- xdp: produce a warning when calculated tailroom is negative
  (CVE-2026-23343 bsc#1260527).
- commit 72b74a3</changelog>
  <changelog author="lduncan@suse.com" date="1775563206">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit f1d41b2</changelog>
  <changelog author="msuchanek@suse.de" date="1775649600">- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  (bsc#1261669 ltc#212590).
- commit e7cec47</changelog>
  <changelog author="pfalcato@suse.de" date="1775649601">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
</package>
<package pkgid="f9a28fac1122d4799d25f8f4bd04daa0fb0d2e8b896460ab16c938b5dc255a46ad6d0c9df43fd9ccf3248c224b6452664f05a8c857c127e617d118eb186c9904" name="kexec-tools" arch="x86_64">
  <version epoch="0" ver="2.0.30" rel="160000.3.2"/>
  <changelog author="olaf@aepfle.de" date="1691496000">- Disable Xen support in ALP</changelog>
  <changelog author="petr@tesarici.cz" date="1694001600">- update to 2.0.27:
  * ppc64: add --reuse-cmdline parameter support
  * kexec: make -a the default
  * x86: add devicetree support
  * ppc64: document elf-ppc64 options and --dt-no-old-root
  * LoongArch: kdump: set up kernel image segment
  * arm64: zboot support</changelog>
  <changelog author="olaf@aepfle.de" date="1698148800">- Fix build with old glibc with 6419b008fde783fd0cc2cc266bd1c9cf35e99a0e.patch</changelog>
  <changelog author="jbohac@suse.com" date="1705665600">- add kexec-dont-use-kexec_file_load-on-xen.patch:
  kexec: don't use kexec_file_load on xen (bsc#1218590)</changelog>
  <changelog author="jbohac@suse.com" date="1709726400">- update to 2.0.28:
  * LoongArch: Load vmlinux.efi to the link address
  * LoongArch: Fix an issue with relocatable vmlinux
  * m68k: fix getrandom() use with uclibc
  * lzma: Relax memory limit for lzma decompressor
  * kexec: ppc64: print help to stdout instead of stderr
  * kexec/loongarch64: fix 'make dist' file loss issue
  * crashdump/x86: set the elfcorehdr segment size for hotplug
  * crashdump/x86: identify elfcorehdr segment for hotplug
  * crashdump: exclude elfcorehdr segment from digest for hotplug
  * crashdump: setup general hotplug support
  * crashdump: introduce the hotplug command line options
  * kexec: define KEXEC_UPDATE_ELFCOREHDR
  * kexec: update manpage with explicit mention of clean kexec
  * zboot: add loongarch kexec_load support
  * zboot: enable arm64 kexec_load for zboot image
- drop 6419b008fde783fd0cc2cc266bd1c9cf35e99a0e.patch, upstream
- add fix-building-on-x86_64-with-binutils-2.41.patch:
  * fix assembling on binutils &gt;= 2.42
- refresh kexec-tools-disable-test.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1723464000">- update to 2.0.29:
  * update man and --help
  * powerpc/kexec_load: add hotplug support
  * kexec_load: Use new kexec flag for hotplug support
  * x86-linux-setup.c: Use POSIX basename API
  * LoongArch: fix load command line segment error
  * LoongArch: add multi crash kernel segment support
  * LoongArch: fix kernel image size error
  * Arm: Fix add_buffer_phys_virt() align issue
  * Fix incorrect Free Software Foundation address in the license
  * util_lib/elf_info.c: fix a warning
  * kexec_file: add kexec_file flag to support debug printing
  * workflow: update to use checkout@v4
- drop kexec-dont-use-kexec_file_load-on-xen.patch, upstream
- drop fix-building-on-x86_64-with-binutils-2.41.patch, upstream
- kexec-tools-riscv-hotplug.patch: Fix build for riscv64.</changelog>
  <changelog author="olaf@aepfle.de" date="1726228800">- To create rckexec-reload, the service binary is required at
  build time. This binary is provided by aaa_base. Make sure this
  package is available during build.</changelog>
  <changelog author="ptesarik@suse.com" date="1735560000">- update to 2.0.30:
  * arm64: Support UKI image format
  * bug fixes</changelog>
  <changelog author="olaf@aepfle.de" date="1735732800">- force -std=gnu99 because C99 because the code uses features</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
</package>
<package pkgid="5613849b8a68454857b2e42625251abe42057bb720da45238cedfabcf69dbefaf9c6ab949ec70c54ffa8c072f9329a50741d893fbe9a3ff945512f613cab9ba1" name="keyutils" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="160000.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1551700800">- Replace krb5-devel BuildRequires with pkgconfig(krb5): Allow OBS
  to shortcut the ring0 bootstrap cycle by also using krb5-mini.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1561982400">- updated to 1.6
  - Apply various specfile cleanups from Fedora.
  - request-key: Provide a command line option to suppress helper execution.
  - request-key: Find least-wildcard match rather than first match.
  - Remove the dependency on MIT Kerberos.
  - Fix some error messages
  - keyctl_dh_compute.3: Suggest /proc/crypto for list of available hashes.
  - Fix doc and comment typos.
  - Add public key ops for encrypt, decrypt, sign and verify (needs linux-4.20).
  - Add pkg-config support for finding libkeyutils.
- upstream isn't offering PGP signatures for the source tarballs anymore</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 1.6.3:
  * Revert the change notifications that were using /dev/watch_queue.
  * Apply the change notifications that use pipe2(O_NOTIFICATION_PIPE).
  * Allow "keyctl supports" to retrieve raw capability data.
  * Allow "keyctl id" to turn a symbolic key ID into a numeric ID.
  * Allow "keyctl new_session" to name the keyring.
  * Allow "keyctl add/padd/etc." to take hex-encoded data.
  * Add "keyctl watch*" to expose kernel change notifications on keys.
  * Add caps for namespacing and notifications.
  * Set a default TTL on keys that upcall for name resolution.
  * Explicitly clear memory after it's held sensitive information.
  * Various manual page fixes.
  * Fix C++-related errors.
  * Add support for keyctl_move().
  * Add support for keyctl_capabilities().
  * Make key=val list optional for various public-key ops.
  * Fix system call signature for KEYCTL_PKEY_QUERY.
  * Fix 'keyctl pkey_query' argument passing.
  * Use keyctl_read_alloc() in dump_key_tree_aux().
  * Various manual page fixes.
- spec-cleaner run (fixup failing homepage url)</changelog>
  <changelog author="meissner@suse.com" date="1609934400">- adjust the library license to be LPGL-2.1+ only (the tools are GPL2+,
  the library is just LGPL-2.1+) (bsc#1180603)</changelog>
  <changelog author="aplanas@suse.com" date="1624536000">- Add /etc/keys/ and /usr/etc/keys/ directory (bsc#1187654)</changelog>
  <changelog author="aplanas@suse.com" date="1655812800">- Add /etc/keys/evn and /usr/etc/keys/evm together with the IMA ones</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1679572800">- Drop pkgconfig(krb5) BuildRequires: this dependency was dropped
  upstream in commit f9c7b4e4 (2018-11-02).</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="86ed8886119a448332f8ea786dc3c6d792afe7507c2a0ec081425b445867714f60ae5954e9b9a9bc99d4219a25ceb4b88656dce113988019b453a94fd423f8cc" name="kmod" arch="x86_64">
  <version epoch="0" ver="34.2" rel="160000.3.2"/>
  <changelog author="msuchanek@suse.de" date="1697544000">- Fix tests
  * refresh configure-Detect-openssl-sm3-support.patch
  * refresh kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch
  * refresh usr-lib-modules.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1701864000">- Add upstream fixes since v31
  * tools-depmod-fix-Walloc-size.patch
  * libkmod-remove-pkcs7-obj_to_hash_algo.patch
  * configure-Check-that-provided-paths-are-absolute.patch
- Refresh usrmerge patches to upstream version (cosmetic change only)</changelog>
  <changelog author="msuchanek@suse.de" date="1712232000">- Update to release 32
  * Drop python bindings
  * Remove unmaintained experimental tool
- Drop upstreamed patches
  * configure-Detect-openssl-sm3-support.patch
  * man-depmod.d-Fix-incorrect-usr-lib-search-path.patch
  * usr-lib-modprobe.patch
  * kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch
  * tools-depmod-fix-Walloc-size.patch
  * libkmod-remove-pkcs7-obj_to_hash_algo.patch
  * usr-lib-modules.patch
  * configure-Check-that-provided-paths-are-absolute.patch
- Refresh no-stylesheet-download.patch</changelog>
  <changelog author="jengelh@inai.de" date="1724241600">- Update to release 33
  * Add weak dependencies
  * Stop parsing .alias files from modprobe.d directories
- Delete no-stylesheet-download.patch (merged)
- Add 0001-testsuite-fix-path-for-test-user.patch</changelog>
  <changelog author="jengelh@inai.de" date="1740139200">- Update to release 34
  * modinfo now dlopens compression libraries, and only if needed.
    (insmod/modprobe exercises the kernel's built-in decompression
    anyway, so is unaffected).
  * depmod: add -m option for overriding the module directory at
    runtime.
  * depmod: deleted deprecated options --unresolved-error, --quiet,
  - root and --map.
  * rmmod: deleted deprecated option -w.
  * insmod: deleted deprecated options -p, -s.
- Delete 0001-testsuite-fix-path-for-test-user.patch (obsolete)</changelog>
  <changelog author="jengelh@inai.de" date="1741262400">- Update to release 34.1
  * Build fixes only</changelog>
  <changelog author="msuchanek@suse.de" date="1741780800">- tests: drop ppc64 workaround, print failed test results if any</changelog>
  <changelog author="jengelh@inai.de" date="1743163200">- Update to release 34.2
  * libkmod: fix buffer-overflow in weakdep_to_char
- Delete unused 0001-build-resolve-build-failure-due-to-missing-include.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1750939200">- Fix testsuite on Leap 16.0 (bsc#1240126)
  * Revert-build-check-for-__xstat-declarations.patch</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1755950400">- kmod-testsuite
  * BuildIgnore pesign-obs-integration (new runtime requirement
    of kernel-default-devel): we don't need it for the kmod
    testsuite, and it also breaks the build as we aren't
    producting any binaries. (bsc#1248108)</changelog>
</package>
<package pkgid="d08dc6ecc0121f5f4736263a13ac9f0f278ce9bf9dfa9b4bf76e379b1454e776004593d28253b6944558d0310b72d5529580136735fe94d4dda01bb84c3544b5" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.12.2+254+suse.924a3ed8" rel="160000.1.1"/>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.11.0~1+118+suse.4a51b1a
  See NEWS.md for details about upstream changes in 0.11.0.
  * Pre-release of upstream 0.11.0
  * Rework of the path checking algorithm to reduce wait time and improve
  performance
  * Modified the systemd unit `multipathd.service` such that multipathd will now
  restart after a failure or crash (gh#opensvc/multipath-tools#100)
  * multipathd: move systemd watchdog handling into daemon (bsc#1232227)
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.11.0+164+suse.24eeee7
- Reviewed Upstream changes from 0.12 development
  * Continued rework of the path checker loop
  * multipathd now sets the port_state of Fibre Channel remote ports to
    "marginal" for NVMe devices, too (with nvme_core.multipath=N only).
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix path grouping if a path device is added while offline with group_by_tpg
    and group_by_serial path grouping policy
    (gh#opensvc/multipath-tools#108, bsc#1236392)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
- Changes in Upstream 0.11.0 (see also NEWS.md)
  * multipathd: set rport port_state to marginal for NVMe devices
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
  * multipath-tools: add SCST to hwtable
  * Add defaults for SCST and HPE MSA Gen7 to hwtable
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)
  * Fixes for handling empty or incompletely created multipath maps
    (bsc#1236390)
  * During map creation, fixed the case where a map with different name, but
    matching UUID and matching type was already present. multipathd
    previously failed to set up such maps. Now it will reload them with the
    correct content. (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.11.0+183+suse.3973293:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.
  * multipath-tools: make multipathd listen on a pathname socket
    (/run/multipathd.socket) besides listening on an abstract socket.
    This allows connecting to multipathd from a containerized application
    (gh#opensvc/multipath-tools#111). In client mode, applications
    linked against libmpathcmd will attempt to connect to the pathname
    socket first, and to the abstract socket if this fails.
    The MULTIPATH_SOCKET_NAME environment variable can be used to
    override the socket name.
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * libmultipath: remove buggy reinstate_paths function</changelog>
  <changelog author="mwilck@suse.com" date="1762862400">- Update to version 0.11.3+184+suse.e1501732:
- Fixes from upstream 0.11.3 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1769428800">- Update to version 0.12.2+254+suse.924a3ed8:
- Bug fixes from 0.12.2 (bsc#1257007, see NEWS.md for details)
  * kpartx: fix segfault when operating on regular files
    (bsc#1257244, bsc#1257153)
  * multipathd: print path offline message even without a checker
    (bsc#1254094)
  * Fix `mpathpersist --report-capabilities` output.
  * Fix command descriptions in the multipathd man page.
  * Fix ISO C23 compatibility issue causing errors with new compilers.
  * Fix memory leak caused by not joining the "init unwinder" thread.
  * Fix memory leaks in kpartx.
  * Print the warning "setting scsi timeouts is unsupported for protocol" only
    once per protocol.
  * Make sure multipath-tools is compiled with the compiler flag
    `-fno-strict-aliasing`. (gh#opensvc/multipath-tools#130, bsc#1255285)
- Features from upstream 0.12.0 (see also NEWS.md):
  * Maps that were added outside of multipathd (e.g. using the **multipath**
    command) and that couldn't be reloaded by multipathd used to be ignored
    by multipathd. multipathd will now monitor them. If some paths were
    offline while the map was created, multipathd will now add them to the
    map when they go online again.
  * multipathd retries persistent reservation commands that have failed on one
    path on another one.
- Documentation fixes
- Additions to the hardware table</changelog>
</package>
<package pkgid="a9d03dfd0d762304085e2f4911e750e35f6597172d5fcdccb7efe52fd773e102fa73b56d43b6d0c53ebdfcc8607481f02b28ef78f930fb4ac7e9d3f46ad4e53d" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.21.3" rel="160000.2.2"/>
  <changelog author="scabrero@suse.de" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="dmueller@suse.com" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="pmonreal@suse.com" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="kukuk@suse.com" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="asn@cryptomilk.org" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
</package>
<package pkgid="78b591dbdbde377109222a9361fc3c450a8686a7a6d15baf21067bcea1eb6c795bd4635cc77560c566d8702aea93486bc0944786b0ea75ea04960ffb7782e9f6" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="160000.1.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1721390400">- Update to version 1.3.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.0
- Drop upstreamed patch
  0001-Collect-component-Role-rules-under-operator-Role-ins.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1724673600">- Update to version 1.3.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1
- Fix DV error report via VM printable status
  0001-Consider-the-new-DV-reason-ImagePullFailed.patch
- Fix permission error in storage migration tests
  0002-tests-Set-FSGroup-to-ensure-proper-permissions.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1728993600">- Enable aarch64 build for SLE and mark it as techpreview (jsc#PED-10545)</changelog>
  <changelog author="caleb.crane@suse.com" date="1737115200">- Update to version 1.4.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.4.0
- Drop patches
  0001-Consider-the-new-DV-reason-ImagePullFailed.patch
  0002-tests-Set-FSGroup-to-ensure-proper-permissions.patch
- Add patches
  0001-feat-pass-timeout-from-virt-monitor-to-virt-tail.patch
  0002-Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch (bsc#1232762)</changelog>
  <changelog author="caleb.crane@suse.com" date="1737115201">- Fix guest-console-log failure during live migration and Harvester upgrades
  0001-feat-pass-timeout-from-virt-monitor-to-virt-tail.patch
- Fix SEV(ES) guests not being bootable from incompatible firmware
  0002-Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch (bsc#1232762)</changelog>
  <changelog author="caleb.crane@suse.com" date="1745323200">- Update to version 1.5.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.5.0
- Drop patches
  0001-feat-pass-timeout-from-virt-monitor-to-virt-tail.patch
- Add patches
  0002-chore-deps-update-module-golang.org-x-crypto-to-v0.3.patch (bsc#1239328)
  0003-chore-deps-update-module-golang.org-x-oauth2-to-v0.2.patch (bsc#1239190)
  0004-chore-deps-update-module-golang.org-x-net-to-v0.36.0.patch (bsc#1238704)
- Rename patch
  0002-Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch
  0001-Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1745409600">- Remove custom SELinux policy from virt-launcher container</changelog>
  <changelog author="jfehlig@suse.com" date="1753099200">- Update to version 1.5.2
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.5.2
  bsc#1234537 (CVE-2024-45337), bsc#1235303 (CVE-2024-45338), bsc#1244486
- Drop upstream patch
  0002-chore-deps-update-module-golang.org-x-crypto-to-v0.3.patch
- Rename patches
  0001-Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch -&gt;
  Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch
  0003-chore-deps-update-module-golang.org-x-oauth2-to-v0.2.patch -&gt;
  chore-deps-update-module-golang.org-x-oauth2-to-v0.2.patch
  0004-chore-deps-update-module-golang.org-x-net-to-v0.36.0.patch -&gt;
  Update-module-golang.org-x-net-to-v0.36.0-SECURITY.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1753272000">- Replace/Supercede patch
  Update-module-golang.org-x-net-to-v0.36.0-SECURITY.patch -&gt;
  Update-module-golang.org-x-net-to-v0.38.0-SECURITY.patch (bsc#1238704, bsc#1241772)
- Rename patch for clarity and consistency
  chore-deps-update-module-golang.org-x-oauth2-to-v0.2.patch -&gt;
  Update-module-golang.org-x-oauth2-to-v0.27.0-SECURITY.patch
- Update _service file to reference v1.5.2
- Reorder patches with respect to the newly added patch</changelog>
  <changelog author="jfehlig@suse.com" date="1770724800">- Update to version 1.7.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.7.0
  bsc#1241772 (CVE-2025-22872), bsc#1253181 (CVE-2025-64432),
  bsc#1253185 (CVE-2025-64433), bsc#1253186 (CVE-2025-64434),
  bsc#1253189 (CVE-2025-64435), bsc#1253194 (CVE-2025-64437),
  bsc#1253748 (CVE-2025-64324), bsc#1257128, bsc#1257422 (CVE-2024-45310)
  Drop Update-module-golang.org-x-oauth2-to-v0.27.0-SECURITY.patch and
  Update-module-golang.org-x-net-to-v0.38.0-SECURITY.patch
- Upstream now uses stateless firmware for CoCo VMs. Drop
  Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch</changelog>
</package>
<package pkgid="0b5d5147afcdad51ab29e5c68a8903a0df37166ee1bc642c8d873e838f45e5ba5750662c8c063c7dd1f96aedb020c051797baff842472f501f559a575e0ed62c" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="160000.1.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1721390400">- Update to version 1.3.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.0
- Drop upstreamed patch
  0001-Collect-component-Role-rules-under-operator-Role-ins.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1724673600">- Update to version 1.3.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1
- Fix DV error report via VM printable status
  0001-Consider-the-new-DV-reason-ImagePullFailed.patch
- Fix permission error in storage migration tests
  0002-tests-Set-FSGroup-to-ensure-proper-permissions.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1728993600">- Enable aarch64 build for SLE and mark it as techpreview (jsc#PED-10545)</changelog>
  <changelog author="caleb.crane@suse.com" date="1737115200">- Update to version 1.4.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.4.0
- Drop patches
  0001-Consider-the-new-DV-reason-ImagePullFailed.patch
  0002-tests-Set-FSGroup-to-ensure-proper-permissions.patch
- Add patches
  0001-feat-pass-timeout-from-virt-monitor-to-virt-tail.patch
  0002-Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch (bsc#1232762)</changelog>
  <changelog author="caleb.crane@suse.com" date="1737115201">- Fix guest-console-log failure during live migration and Harvester upgrades
  0001-feat-pass-timeout-from-virt-monitor-to-virt-tail.patch
- Fix SEV(ES) guests not being bootable from incompatible firmware
  0002-Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch (bsc#1232762)</changelog>
  <changelog author="caleb.crane@suse.com" date="1745323200">- Update to version 1.5.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.5.0
- Drop patches
  0001-feat-pass-timeout-from-virt-monitor-to-virt-tail.patch
- Add patches
  0002-chore-deps-update-module-golang.org-x-crypto-to-v0.3.patch (bsc#1239328)
  0003-chore-deps-update-module-golang.org-x-oauth2-to-v0.2.patch (bsc#1239190)
  0004-chore-deps-update-module-golang.org-x-net-to-v0.36.0.patch (bsc#1238704)
- Rename patch
  0002-Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch
  0001-Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1745409600">- Remove custom SELinux policy from virt-launcher container</changelog>
  <changelog author="jfehlig@suse.com" date="1753099200">- Update to version 1.5.2
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.5.2
  bsc#1234537 (CVE-2024-45337), bsc#1235303 (CVE-2024-45338), bsc#1244486
- Drop upstream patch
  0002-chore-deps-update-module-golang.org-x-crypto-to-v0.3.patch
- Rename patches
  0001-Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch -&gt;
  Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch
  0003-chore-deps-update-module-golang.org-x-oauth2-to-v0.2.patch -&gt;
  chore-deps-update-module-golang.org-x-oauth2-to-v0.2.patch
  0004-chore-deps-update-module-golang.org-x-net-to-v0.36.0.patch -&gt;
  Update-module-golang.org-x-net-to-v0.36.0-SECURITY.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1753272000">- Replace/Supercede patch
  Update-module-golang.org-x-net-to-v0.36.0-SECURITY.patch -&gt;
  Update-module-golang.org-x-net-to-v0.38.0-SECURITY.patch (bsc#1238704, bsc#1241772)
- Rename patch for clarity and consistency
  chore-deps-update-module-golang.org-x-oauth2-to-v0.2.patch -&gt;
  Update-module-golang.org-x-oauth2-to-v0.27.0-SECURITY.patch
- Update _service file to reference v1.5.2
- Reorder patches with respect to the newly added patch</changelog>
  <changelog author="jfehlig@suse.com" date="1770724800">- Update to version 1.7.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.7.0
  bsc#1241772 (CVE-2025-22872), bsc#1253181 (CVE-2025-64432),
  bsc#1253185 (CVE-2025-64433), bsc#1253186 (CVE-2025-64434),
  bsc#1253189 (CVE-2025-64435), bsc#1253194 (CVE-2025-64437),
  bsc#1253748 (CVE-2025-64324), bsc#1257128, bsc#1257422 (CVE-2024-45310)
  Drop Update-module-golang.org-x-oauth2-to-v0.27.0-SECURITY.patch and
  Update-module-golang.org-x-net-to-v0.38.0-SECURITY.patch
- Upstream now uses stateless firmware for CoCo VMs. Drop
  Ensure-SEV-VMs-use-stateless-OVMF-firmware.patch</changelog>
</package>
<package pkgid="020026c65937c9d6463de34bbf9cdc9a6b6bff99f680b350c88601f0a26ecd88804fcfd1e80972012e800cc7172d835a487622f8b095d3dd7dca5a0f3f0dc119" name="lastlog2" arch="x86_64">
  <version epoch="0" ver="2.41.1" rel="160000.3.1"/>
  <changelog author="sbrabec@suse.com" date="1744027200">- Update to version 2.41:
  * agetty: Fixed an issue where issue files were not being printed
    from additional locations, such as /run or /usr/lib. This
    change now allows for the use of local information from /etc,
    in addition to generated files from /run and
    distribution-specific files from /usr/lib.
  * cfdisk and sfdisk: Added support for the --sector-size command
    line option.
  * sfdisk: Added a new option, --discard-free.
  * fdisk: Added a new command, 'T', to discard sectors.
  * chrt: The --sched-runtime now supports SCHED_{OTHER,BATCH}
    policies.
  * column: Can now handle ANSI SGR colors inside OSC 8 hyperlink
    escape codes and sequences.
  * enosys: Can now dump defined filters.
  * libmount:
  * Added experimental support for statmount() and listmount()
    syscalls.
  * This new functionality can be accessed using "findmnt
  - -kernel=listmount".
  * Added a new mount option,
    X-mount.nocanonicalize[=source|target].
  * Added new mount extensions to the "ro" flag (ro[=vfs,fs]).
  * Added a new option, X-mount.noloop, to disable automatic loop
    device creation.
  * Now supports bind symlinks over symlinks.
  * Reads all kernel info/warning/error messages from new API
    syscalls (and mount(8) prints them).
  * libuuid: Now supports RFC9562 UUIDs.
  * findmnt, lsblk, and lsfd: Added a new --hyperlink command line
    option to print paths as terminal hyperlinks.
  * findmnt: Can now address filesystems using --id and --uniq-id
    (requires listmount() kernel support).
  * flock: Added support for the --fcntl command line option.
  * hardlink: Can now prioritize specified trees on the command
    line using --prioritize-trees.
  * Can exclude sub-trees using --exclude-subtree or keep them in
    the current mount using --mount.
  * Duplicates can now be printed using --list-duplicates.
  * hwclock: Added a new --param-index option to address position
    for RTC_PARAM_{GET,SET} ioctls.
  * kill: Can now decode signal masks (e.g. as used in /proc) to
    signal names.
  * libblkid: Made many changes to improve detection, including
    exfat, GPT, LUKS2, bitlocker, etc.
  * login: Added support for LOGIN_ENV_SAFELIST in /etc/login.def.
  * lsfd: Now supports pidfs and AF_VSOCK sockets.
  * lsipc, ipcmk, ipcrm: Now supports POSIX ipc.
  * lslogins: Now supports lastlog2.
  * lsns: Added support for the --filter option.
  * build by meson: Now supports translated man pages and has fixed
    many bugs.
  * mkswap: The option --file should now be usable on btrfs.
  * nsenter: Improved support for pidfd and can now join target
    process's socket net namespace.
  * scriptlive: Added a new option, --echo &lt;never|always|auto&gt;.
  * zramctl: Now supports COMP-RATIO and --algorithm-params.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41-ReleaseNotes
- Update util-linux-login_defs-check.sh:
  * Make instructions up to date.
  * Update checksum reflecting the shadow update.
- Refresh libmount-print-a-blacklist-hint-for-unknown-filesyst.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1744891200">- Enable mountfd support again (jsc#PED-9752).
  BREAKING CHANGE
  Mountfd is nearly completely compatible with the old mount. There
  is a special case that cannot be handled by mountfd, and it needs
  to be handled by applications:
  Mountfd discriminates between physical mount layer and virtual
  mount layer. Once the physical mount layer is read-only,
  read-write mount on the virtual layer is not possible.
  If the first mount is read only, then the physical filesystem is
  mounted read-only, and later mount of the same file system as
  read-write is not possible. To solve this problem, the first
  mount needs to be read-only only on the virtual layer, keeping
  the physical layer read-write.
  The user space fix is simple:
  Instead of
    mount -oro
  use
    mount -oro=vfs
  This will keep the physical layer read-write, but the virtual
  file system layer (and the user space access) will be read-only.</changelog>
  <changelog author="sbrabec@suse.com" date="1747742400">- Fix segfault of findmnt (boo#1242705,
  gh#util-linux/util-linux#3574,
  util-linux-libblkid-econf-parse.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1748520000">- Add ul_ prefix to functions with common names. Fixes btrfsprogs
  build failure (gh#util-linux/util-linux#3603,
  util-linux-rename-common-symbols-1.patch,
  util-linux-rename-common-symbols-2.patch,
  util-linux-rename-common-symbols-3.patch,
  util-linux-rename-common-symbols-4.patch).</changelog>
  <changelog author="nicolas@belouin.fr" date="1749556800">- Fix libmount --no-canonicalize regression (boo#1244251,
  gh#util-linux/util-linux#3479,
  libmount-fix-no-canonicalize-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1750766400">- Update to version 2.41.1:
  * cfdisk: fix memory leak and possible NULL dereference
  * fdisk: fix possible memory leak
  * findmnt: fix -k option parsing regression (boo#1242705,
    drop util-linux-libblkid-econf-parse.patch)
  * hardlink: fix performance regression
  * include/cctype: fix string comparison
  * libblkid:
  * Fix crash while parsing config with libeconf
  * befs fix underflow
  * avoid strcasecmp() for ASCII-only strings
  * libblkid/src/topology/dm: fix fscanf return value check to
    match expected number of parsed items
  * libmount:
  * (subdir) restrict for real mounts only
  * (subdir) remove unused code
  * avoid calling memset() unnecessarily
  * fix --no-canonicalize regression (boo#1244251,
    drop libmount-fix-no-canonicalize-regression.patch)
  * lsblk:
  * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE
  * avoid strcasecmp() for ASCII-only strings
  * lscpu:
  * fix possible buffer overflow in cpuinfo parser
  * Fix loongarch op-mode output with recent kernel
  * lsfd:
  * scan the protocol field of /proc/net/packet as a hex number
  * fix the description for PACKET.PROTOCOL column
  * lsns:
  * enhance compilation without USE_NS_GET_API
  * fix undefined reference to add_namespace_for_nsfd #3483
  * more:
  * fix broken ':!command' command key
  * fix implicit previous shell_line execution #3508
  * tests: (test_mkfds::mapped-packet-socket) add a new parameter,
    protocol
  * treewide:
  * add ul_ to parse_timestamp() function name
    (drop util-linux-rename-common-symbols-4.patch)
  * add ul_ to parse_switch() function name
    (drop util-linux-rename-common-symbols-3.patch)
  * add ul_ to parse_size() function name
    (drop util-linux-rename-common-symbols-2.patch)
  * add ul_ to parse_range() function name
    (drop util-linux-rename-common-symbols-1.patch)
  * fix optional arguments usage
  * avoid strcasecmp() for ASCII-only strings
  * Wipefs: improve --all descriptions for whole-disks
  * Misc: Do not call exit() on code ending in shared libraries
  * Other fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes
- Fix problem with uname26 listed twice.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
</package>
<package pkgid="9a8d38e7db5fb494bcdc6990a8650d07d9be239492656051ce2142b280027a131fe5d69299cb42a9815658db76123477e73e3fcb73721631c07362f6477346e2" name="ldmtool" arch="x86_64">
  <version epoch="0" ver="0.2.5" rel="160000.2.2"/>
  <changelog author="cbosdonnat@suse.com" date="1491480000">- Release 0.2.3
- Added patches:
  * werror-fixes.patch
  * cast_be64toh.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Properly assign RPM group to shlib package
- Replace %soname to %sover to better reflects its intent
- Replace -exec rm by _much simpler_ -delete
- Trim excess whitespace</changelog>
  <changelog author="cbosdonnat@suse.com" date="1491825600">- Fix license files</changelog>
  <changelog author="olaf@aepfle.de" date="1496145600">- fix double const</changelog>
  <changelog author="lyan@suse.com" date="1540641600">- fix deprecated api g_type_class_add_private()
- Added patches:
  * Remove-deprecated-g_type_class_add_private.patch</changelog>
  <changelog author="aginies@suse.com" date="1582632000">- update to version 0.2.4
- update patch Remove-deprecated-g_type_class_add_private.patch
- remove upstream merged patches (werror-fixes.patch, cast_be64toh.patch)
- fix buildrequires
- use localsource as the github repo doesnt include yet the built tarball
  for 0.2.4 release</changelog>
  <changelog author="olaf@aepfle.de" date="1609848000">- Adjust Remove-deprecated-g_type_class_add_private.patch to fix build</changelog>
  <changelog author="carnold@suse.com" date="1750852800">- Update to version 0.2.5 (jsc#PED-12706)
  * Fix crash while creating mapper for a volume which lacks of
    partitions
  * Make libldm to parse and return volume GUID
  * Change the way we sanitise LDM partition name
  * Set UUID for device mapper devices (partitions and volumes)
  * Fix potential memory leak
  * Use device mapper device UUID instead of name to find device in
    a tree
  * New API: ldm_volume_dm_get_device
  * New API: ldm_partition_dm_get_device
  * Fix bug in libldm to allow for all spanned LDM volumes to bex
    correctly identified/mounted
- Upstream fixes post 0.2.5
  001-Add-example-systemd-unit-file.patch
  002-ldmtool-fix-NULL-pointer-dereference.patch
  003-Add-ability-to-override-device-mapper-UUID.patch
  004-src-Fix-declaration-of-ldm_new.patch
  005-Update-gtkdocize.patch
- Drop patch contained in new tarball
  Remove-deprecated-g_type_class_add_private.patch</changelog>
</package>
<package pkgid="1a9bda5cd24b093ffb9b910d37ed63be517a88ba366104e039884d3b2e4e4cabcf56c0e6598d6c3041d83424eae318c4867172624f1fe688a9cdf8c91d3be926" name="ledmon" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="jsegitz@suse.com" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_ledmon.service.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1658145600">- Update to version 0.96: (PED-85)
  * Manual updates, clarify --listed-only option
  * Fix cache indexing of ATA port
  * Fixes in regard to macros
  * Fix memory leak in amd_ipmi.c
  * Fix NULL pointer dereferences in sysfs.c
  * Make messages appear in service log immediately
- add patches after 0.96:
  + 0001-Ledctl-slots-management-94.patch
  + 0002-add-Dell-15G-servers.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1677585600">- add a patch to fix bsc#1208613
  * 0003-ipmi-avoid-error-messages-on-non-dell-platforms-112.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1682510400">- Don't use ProtectKernelTunables, can break some use cases
  (bsc#1210656)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1684411200">- Update to version 0.97:
  Enhancements
    ledctl: add support to empty slots blinking
    ledmon license change to LGPLv2
    ledctl: Add SES get/set/list slot support
    Update NPEM wait command
    Remove exclusionary language
    ledmon: Define ONESHOT_NORMAL for VMD
  Bug fixes
    ipmi: avoid error messages on non-dell platforms
    vmdssd: define normal pattern
    ledctl: clear unsupported params from config
    block.c: get_block_device_from_sysfs_path modification
    fix ibpi_value lists getter
    amd_ipmi: Allow to _enable_smbus_control
    ledmon.c: allocate memory for ignore
    sysfs: add only vmd devices to slots_list
    Rename --controller parameter
    Slots list implementations and fixes
- Drop no longer needed patches:
  * 0001-Ledctl-slots-management-94.patch
  * 0002-add-Dell-15G-servers.patch
  * 0003-ipmi-avoid-error-messages-on-non-dell-platforms-112.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1711627200">- Update to version 1.0.0:
  Enhancements
    lib: introduce library (not enabled in this build)
    tests: migrate tests to pytest
    Introduce "make check" option
    Allow disabling documentation installation
    Add minimal Nvme subsystem support
    Allow choosing output format from get-slot
    Rework handling --help option
    Update manual
  Bug fixes
    Fix log severity, messages and level detection
    Ledctl: skip slot state check for set locate_off
    ci: Compile with tests and library enabled
    configure.ac: build library when "--enbable-test"
    Allow setting multiple LEDs per slot on SES
    Prevent compiler from optimizing out security checks
    Fix compilation warnings
    Add compiler defenses flags
    Add support for clang compiler
    utils.c: remove duplicated "-c" short parameter
    Remove parsing ALLOWLIST and EXCLUDELIST using regex
    ledctl: Fix exit ledctl with test flag</changelog>
  <changelog author="nicholas.yang@suse.com" date="1715688000">- Enable building libled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Re-arrange spec files block to be in line with all other openSUSE
  spec files.</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731326400">- Update to version 1.1.0:
  Enhancements
    Various enhancements in tests, licensing and deployment
    Add --default-controller command to ledctl
  Bug fixes
    ledctl: add error message for missing devices
    ledctl: fix musl build failure by replacing on_exit() by atexit()
    Improve error handling for unsupported patters by falling back to normal
    Fix incorrect conversion of large integer values
    Fix compilation warnings
    Fix incorrect array index usage for block device and SES slot lookup</changelog>
  <changelog author="nicholas.yang@suse.com" date="1745409600">- Add a patch to fix string2ibpi function (bsc#1241207):
  * 260.patch</changelog>
</package>
<package pkgid="1acc8ed20d65112f2afd8830dd5fcf9f7f318b74172f9cfacdfa54aaa0356727512fc75284c8989e98867cb65e4754764540892da0553f573b725d66d80f94c9" name="less" arch="x86_64">
  <version epoch="0" ver="668" rel="160000.2.2"/>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to 608:
  * Add the --header option (github #43).
  * Add the --no-number-headers option (github #178).
  * Add the --status-line option.
  * Add the --redraw-on-quit option (github #36).
  * Add the --search-options option (github #213).
  * Add the --exit-follow-on-close option (github #244).
  * Add 'H' color type to set color of header lines.
  * Add #version conditional to lesskey.
  * Add += syntax to variable section in lesskey files.
  * Allow option name in -- command to end with '=' in addition to '\n'.
  * Add $HOME/.config to possible locations of lesskey file (github #153).
  * Add $XDG_STATE_HOME and $HOME/.local/state to possible locations
    of history file (github #223).
  * Don't read or write history file in secure mode (github #201).
  * Fix display of multibyte and double-width chars in prompt.
  * Fix ESC-BACKSPACE command when BACKSPACE key does not send 0x08
    (github #188).
  * Add more \k codes to lesskey format.
  * Fix bug when empty file is modified while viewing it.
  * Fix bug when parsing a malformed lesskey file (githb #234).
  * Fix bug scrolling history when --incsearch is set (github #214).
  * Fix buffer overflow when invoking lessecho with more than 63 -m/-n
    options (github #198).
  * Fix buffer overflow in bin_file (github #271).
  * Fix bug restoring color at end of highlighted text.
  * Fix bug in parsing lesskey file.
  * Defer moving cursor to lower left in some more cases.
  * Suppress TAB filename expansion in some cases where it doesn't make sense.
  * Fix termlib detection when compiler doesn't accept
    calls to undeclared functions.
  * Escape filenames when invoking LESSCLOSE.
  * Fix bug using multibyte UTF-8 char in search string
    with --incsearch (github #273).</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]
- Refreshed all other patches with quilt to an uniform -p1 patch
  style, which allows us to use %autosetup and simplify the spec
  file a bit.</changelog>
  <changelog author="kstreitova@suse.com" date="1683028800">- Update to 632 (differences between 608 and 632)
  * Add LESSUTFCHARDEF environment variable (github #275).
  * Add # command (github #330).
  * Add ^S search modifier (github #196).
  * Add --wordwrap option (github #113).
  * Add --no-vbell option (github #304).
  * Add --no-search-headers option (github #44).
  * Add --modelines option (github #89).
  * Add --intr option (github #224).
  * Add --proc-backspace, --proc-tab and --proc-return options (github #335).
  * Add --show-preproc-errors option (github #258).
  * Add LESS_LINES and LESS_COLUMNS environment variables (github #84).
  * Add LESS_DATA_DELAY environment variable (github #337).
  * Allow empty "lines" field in --header option.
  * Update Unicode tables.
  * Improve ability of ^X to interrupt F command (github #49).
  * Status column (-J) shows off-screen matches.
  * Parenthesized sub-patterns in searches are colored with unique colors, if supported by the regular expression library (github #196).
  * Don't allow opening a tty as file input unless -f is set (github #309).
  * Don't require newline input after +&amp;... option (github #339).
  * Fix incorrect handling of some Private Use Unicode characters.
  * Fix ANSI color bug when overstriking with colored chars (github #276).
  * Fix compiler const warning (github #279).
  * Fix signal race in iread (github #280).
  * Fix reading procfs files on Linux (github #282).
  * Fix --ignore-case with ctrl-R (no regex) search (github #300).
  * Fix bug doing repeat search after setting &amp; filter (github #299).
  * Fix bug doing repeat search before non-repeat search.
  * Fix crash with -R and certain line lengths (github #338).
  * Fix input of Windows dead keys (github #352).
  * Don't retain search options from a cancelled search (github #302).
  * Don't call realpath on fake filenames like "-" (github #289).
  * Implement lesstest test suite.
  * Convert function parameter definitions from K&amp;R to C89 (github #316).
- Drop patch cve-2022-46663.patch (merged).</changelog>
  <changelog author="kstreitova@suse.com" date="1683201600">- Update to 633
  * This release fixes a build problem found in less-632 on systems
    which have termcap.h in a subdirectory (ncurses/termcap.h or
    ncursesw/termcap.h). There is no functional difference between
    less-632 and less-633</changelog>
  <changelog author="info@paolostivanin.com" date="1692014400">- Update to 643:
  * Fix problem when a program piping into less reads from the tty,
    like sudo asking for password (github #368).
  * Fix search modifier ^E after ^W.
  * Fix bug using negated (^N) search (github #374).
  * Fix bug setting colors with -D on Windows build (github #386).
  * Fix reading special chars like PageDown on Windows (github #378).
  * Fix mouse wheel scrolling on Windows (github #379).
  * Fix erroneous EOF when terminal window size changes (github #372).
  * Fix compile error with some definitions of ECHONL (github #395).
  * Fix crash on Windows when writing logfile (github #405).
  * Fix regression in exit code when stdin is /dev/null and
    output is a file (github #373).
  * Add lesstest test suite to production release (github #344).
  * Change lesstest output to conform with
    automake Simple Test Format (github #399).</changelog>
  <changelog author="dmueller@suse.com" date="1699531200">- add zstd support to lessopen</changelog>
  <changelog author="danilo.spinella@suse.com" date="1716811200">- Update to 656:
  * Add ^O^N, ^O^P, ^O^L and ^O^O commands and mouse clicks (with --mouse) to find and open OSC8 hyperlinks (github #251).
  * Add --match-shift option.
  * Add --lesskey-content option (github #447).
  * Add LESSKEY_CONTENT environment variable (github #447).
  * Add --no-search-header-lines and --no-search-header-columns options (github #397).
  * Add ctrl-L search modifier (github #367).
  * A ctrl-P at the start of a shell command suppresses the "done" message (github #462).
  * Add attribute characters ('*', '~', '_', '&amp;') to --color parameter (github #471).
  * Allow expansion of environment variables in lesskey files.
  * Add LESSSECURE_ALLOW environment variable (github #449).
  * Add LESS_UNSUPPORT environment variable.
  * Add line number parameter to --header option (github #436).
  * Mouse right-click jumps to position marked by left-click (github #390).
  * Ensure that the target line is not obscured by a header line set by --header (github #444).
  * Change default character set to "utf-8", except remains "dos" on MS-DOS.
  * Add message when search with ^W wraps (github #459).
  * UCRT builds on Windows 10 and later now support Unicode file names (github #438).
  * Improve behavior of interrupt while reading non-terminated pipe (github #414).
  * Improve parsing of -j, -x and -# options (github #393).
  * Support files larger than 4GB on Windows (github #417).
  * Support entry of Unicode chars larger than U+FFFF on Windows (github #391).
  * Improve colors of bold, underline and standout text on Windows.
  * Allow --rscroll to accept non-ASCII characters (github #483).
  * Allow the parameter to certain options to be terminated with a space (--color, --quotes, --rscroll, --search-options and --intr) (github #495).
  * Fix bug where # substitution failed after viewing help (github #420).
  * Fix crash if files are deleted while less is viewing them (github #404).
  * Workaround unreliable ReadConsoleInputW behavior on Windows with non-ASCII input.
  * Fix -J display when searching for non-ASCII characters (github #422).
  * Don't filter header lines via the &amp; command (github #423).
  * Fix bug when horizontally shifting long lines (github #425).
  * Add -x and -D options to lesstest, to make it easier to diagnose a failed lesstest run.
  * Fix bug searching long lines with --incsearch and -S (github #428).
  * Fix bug that made ESC-} fail if top line on screen was empty (github #429).
  * Fix bug with --mouse on Windows when used with pipes (github #440).
  * Fix bug in --+OPTION command line syntax.
  * Fix display bug when using -w with an empty line with a CR/LF line ending (github #474).
  * When substituting '#' or '%' with a filename, quote the filename if it contains a space (github #480).
  * Fix wrong sleep time when system has usleep but not nanosleep (github #489).
  * Fix bug when file name contains a newline (CVE-2024-32487, bsc#1222849).
  * Fix bug when file name contains nonprintable characters (github #503).
  * Fix DJGPP build (github #497).
  * Update Unicode tables.
- Refresh less-429-shell.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1720785600">- Update to 661:
  * fix crash - buffer overflow by one in fexpand
  * fix free(): double free detected in tcache 2
  * fix segmentation fault on line-num-width &amp; -N</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1729512000">- Change preprocessor dependencies from Requires to Recommends. It's disabled by
  default and they are not necessary for less.</changelog>
  <changelog author="bwiedemann@suse.com" date="1734264000">- Update to 668
  * Fix crash when using --header on command line
  * Fix possible crash when scrolling left/right or toggling -S
  * Fix bug when using #stop in a lesskey file
  * Fix bug when using --shift or --match-shift on command line with a parameter starting with '.'
  * Fix bug in R command when file size changes
  * Fix bug using --header when file does not fill screen
  * Fix ^X bug when output is not a terminal
  * Fix bug where ^Z is not handled immediately
  * Fix bug where first byte from a LESSOPEN filter is deleted if it is greater than 0x7F
  * Fix uninitialized variable in edit_ifile
  * Fix incorrect handling of UTF-8 chars in prompts
- Add reproducible.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="7b7dffd9cf545593f6d9fa1017479a7bb93b3b63038f8635e2610986ab2440429ea7903c0b237656b7394f03ef86c82b7bddc99c52a74b38370ccc2854a93866" name="libLLVM19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="160000.2.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
  <changelog author="rguenther@suse.com" date="1748260800">- Use generic python3 for SLES 16 as python 3.11 is dropped there.
  [bsc#1243630]</changelog>
  <changelog author="bwiedemann@suse.com" date="1752235200">- Add reproducible.patch to make libomp.so reproducible (boo#1199076)
- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
</package>
<package pkgid="44f2d2fed3b2cf5cccd642ff3450e418d53e2e1b1f2269f70190297345809d6df2a791fea5baf7286cc18a1c3705e94c3e4cd437474b3e8bb3b39d0f8281331c" name="libSPIRV-Tools-2025_1_rc1" arch="x86_64">
  <version epoch="0" ver="2025.1~rc1" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1698408000">- Update to release 2023.5~rc1
  * opt: add new trim passes
  * SPV_QCOM_image_processing support
  * Add SPV_EXT_fragment_shader_interlock and
    SPV_KHR_physical_storage_buffer to allow lists
  * Add a new legalization pass to dedupe invocation interlock
    instructions</changelog>
  <changelog author="jengelh@inai.de" date="1703246400">- Update to release 2023.6~rc1
  * spirv-val: Loosen restriction on base type of
    DebugTypePointer and DebugTypeQualifier
  * spirv-val: Add WorkgroupMemoryExplicitLayoutKHR check for Block
  * opt: Add ComputeDerivativeGroup*NV capabilities to trim
    capabilities pass
  * opt: Do not crash when tryingto fold unsupported spec constant
  * opt: support 64-bit OpAccessChain index in FixStorageClass
  * opt: add StorageImageReadWithoutFormat to cap trim
  * opt: add PhysicalStorageBufferAddresses to trim</changelog>
  <changelog author="jengelh@inai.de" date="1710072000">- Update to release 2024.1~rc1
  * Add tooling support for SPV_KHR_maximal_reconvergence,
    SPV_KHR_float_controls2, SPV_KHR_quad_control,
    SPV_NV_shader_atomic_fp16_vector, SPV_QCOM_image_processing2
  * Fold 64-bit int operations
  * Support operand kind for SPV_INTEL_maximum_registers</changelog>
  <changelog author="jengelh@inai.de" date="1712923200">- Update to release 2024.1
  * Version bump only</changelog>
  <changelog author="jengelh@inai.de" date="1719316800">- Update to release 2024.3
  * Optimizer:
  * Do not fold MUL and ADDs to generate FMAs
  * Add AliasedPointer decoration
  * Add support for vulkan-shader-profiler external passes
  * Validator:
  * Add support for OpExtInstWithForwardRefs
  * Disassembler:
  * Add decorations to comments
  * Add --nested-indent and --reorder-blocks</changelog>
  <changelog author="jengelh@inai.de" date="1728388800">- Update to release 2024.4~rc1
  * Add knowledge of cooperative matrices
  * Add FPEncoding operand type
  * Allow for empty list of enums for an operand
  * Support SPV_KHR_untyped_pointers
  * properly handle the load and store cache control operand types
  * spirv-link: allow linking functions with different pointer arguments
  * Allow ArrayStride on untyped pointers
  * [OPT] Add SPV_KHR_ray_tracing_position_fetch to allow lists
  * Validate presence of Stride operand to OpCooperativeMatrix{Load,Store}KHR
  * [SPV_KHR_untyped_pointers] Fix verification of vload/vstore OpenCL.std instructions
  * spirv-opt: make traversal deterministic
  * add support for SPV_INTEL_global_variable_host_access
- Add 0001-SPV_KHR_untyped_pointers-Fix-verification-for-OpenCL.patch
  for shaderc.</changelog>
  <changelog author="jengelh@inai.de" date="1734264000">- Update to release 2024.4~rc2
  * General:
  * Add FPEncoding operand type. (#5726)
  * Support SPV_KHR_untyped_pointers, SPV_INTEL_global_variable_host_access,
    SPV_KHR_compute_shader_derivative
  * Vulkan 1.4 support (#5899)
  * Optimizer: Add knowledge of cooperative matrice
- Delete 0001-SPV_KHR_untyped_pointers-Fix-verification-for-OpenCL.patch
  (merged)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 in the hope to fix Mesa build
  (bsc#1238713)</changelog>
  <changelog author="jengelh@inai.de" date="1741780800">- Update to release 2025.1~rc1
  * Added OpImageSampleFootprintNV to IsAllowedSampledImageOperand
  * spirv-val: Validate zero product workgroup size
  * Added EXT_mesh_shader validation support
  * Added support for SPV_INTEL_subgroup_matrix_multiply_accumulate
  * Added SPV_AMDX_shader_enqueue version 2 support
  * Now validates SPV_NV_cooperative_vector
  * Added validation for SPV_NV_cluster_acceleration_structure,
    SPV_NV_linear_swept_spheres</changelog>
  <changelog author="jengelh@inai.de" date="1741867200">- Bump BuildRequires to match spirv-headers</changelog>
</package>
<package pkgid="1d835f74dc5d5978c2525249784704dc7abbb163106babc25959c9dad25f82fc89e0cc4808077a337a3ab4e8e7eda85ab5192de21b0fa655f665bca6115a2ec4" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="160000.3.1"/>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1709294401">- Trim descriptions for size (keep the big one for the prominently
  installed libX11-6).
- Spin documentation off to libX11-devel-doc, this saves buildroots
  800+ files and time (mandb is run in %posttrans).</changelog>
  <changelog author="sndirsch@suse.com" date="1711368000">- update to 1.8.8
  * Fix XIM input sometimes jumbled (#198, !236)
  (bsc#1252250)
  * Fix _XkbReadGetDeviceInfoReply for nButtons == dev-&gt;buttons (!237)
  (bsc#1252250)
  * Drop ifdefs for platforms that are no longer supported (!242, !243)
  * Assorted memory handling cleanups</changelog>
  <changelog author="sndirsch@suse.com" date="1712318400">- U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch
  * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208)</changelog>
  <changelog author="sndirsch@suse.com" date="1712404800">- Update to 1.8.9
  * Fix regressions introduced in 1.8.8 (!245, !248) - this includes
    reverting for now the previous "Fix XIM input sometimes jumbled
    (#198, !236)"
- supersedes
  * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1722340800">- Update to 1.8.10; this release includes:
  * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246)
  * Fix various static analysis errors (!250)
  * Add compose sequences for Arabic hamza (!218), Ezh (!221), and
  hryvnia currency (!259)
  * Make colormap private interfaces thread safe (#215, !254)
  * Fix deadlock in XRebindKeysym() (!256)
  * Assorted memory handling cleanups (!251, !258)
  * Restore VAX support still in use by NetBSD (!257)</changelog>
  <changelog author="sndirsch@suse.com" date="1740225600">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="7bcbf4e794c4bdbcdd7874795f3dcb177ff8d9600c9a1ed035cc7ac2fb7d6df517dda51ace68c032bb4d96cca1887f939f3f3c09696a43a61ad7d5c1268b9eaa" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.8.10" rel="160000.3.1"/>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1709294401">- Trim descriptions for size (keep the big one for the prominently
  installed libX11-6).
- Spin documentation off to libX11-devel-doc, this saves buildroots
  800+ files and time (mandb is run in %posttrans).</changelog>
  <changelog author="sndirsch@suse.com" date="1711368000">- update to 1.8.8
  * Fix XIM input sometimes jumbled (#198, !236)
  (bsc#1252250)
  * Fix _XkbReadGetDeviceInfoReply for nButtons == dev-&gt;buttons (!237)
  (bsc#1252250)
  * Drop ifdefs for platforms that are no longer supported (!242, !243)
  * Assorted memory handling cleanups</changelog>
  <changelog author="sndirsch@suse.com" date="1712318400">- U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch
  * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208)</changelog>
  <changelog author="sndirsch@suse.com" date="1712404800">- Update to 1.8.9
  * Fix regressions introduced in 1.8.8 (!245, !248) - this includes
    reverting for now the previous "Fix XIM input sometimes jumbled
    (#198, !236)"
- supersedes
  * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1722340800">- Update to 1.8.10; this release includes:
  * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246)
  * Fix various static analysis errors (!250)
  * Add compose sequences for Arabic hamza (!218), Ezh (!221), and
  hryvnia currency (!259)
  * Make colormap private interfaces thread safe (#215, !254)
  * Fix deadlock in XRebindKeysym() (!256)
  * Assorted memory handling cleanups (!251, !258)
  * Restore VAX support still in use by NetBSD (!257)</changelog>
  <changelog author="sndirsch@suse.com" date="1740225600">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="14c56a39f0e24596f77dc4326136fde77ef8c4586883c2ab5b78cbc1eeedc1cd74e6ad3bca6447871679fb6d68802c5fe288ddfbda5ed21241c6ac72b6acdb9b" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="160000.3.1"/>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1709294401">- Trim descriptions for size (keep the big one for the prominently
  installed libX11-6).
- Spin documentation off to libX11-devel-doc, this saves buildroots
  800+ files and time (mandb is run in %posttrans).</changelog>
  <changelog author="sndirsch@suse.com" date="1711368000">- update to 1.8.8
  * Fix XIM input sometimes jumbled (#198, !236)
  (bsc#1252250)
  * Fix _XkbReadGetDeviceInfoReply for nButtons == dev-&gt;buttons (!237)
  (bsc#1252250)
  * Drop ifdefs for platforms that are no longer supported (!242, !243)
  * Assorted memory handling cleanups</changelog>
  <changelog author="sndirsch@suse.com" date="1712318400">- U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch
  * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208)</changelog>
  <changelog author="sndirsch@suse.com" date="1712404800">- Update to 1.8.9
  * Fix regressions introduced in 1.8.8 (!245, !248) - this includes
    reverting for now the previous "Fix XIM input sometimes jumbled
    (#198, !236)"
- supersedes
  * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1722340800">- Update to 1.8.10; this release includes:
  * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246)
  * Fix various static analysis errors (!250)
  * Add compose sequences for Arabic hamza (!218), Ezh (!221), and
  hryvnia currency (!259)
  * Make colormap private interfaces thread safe (#215, !254)
  * Fix deadlock in XRebindKeysym() (!256)
  * Assorted memory handling cleanups (!251, !258)
  * Restore VAX support still in use by NetBSD (!257)</changelog>
  <changelog author="sndirsch@suse.com" date="1740225600">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="f68a6e311992dfe8fc9797607a79996befa8543a914ccafc838f722d0943b982f479e76c29c4153aeb3b24f8f0036062ac632cc4a96ca30e0956177428cc9000" name="libXau6" arch="x86_64">
  <version epoch="0" ver="1.0.12" rel="160000.2.2"/>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_1.0.6</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXau to libXau and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.0.7:
  + Improve the handling of "normal" locking collisions
  + Documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369828800">- Update to version 1.0.8:
  This maintenance release brings happiness by getting rid of things
  that make valgrind, clang, doclifter, automake, the GNOME build system,
  various other static analyzers, and obsessive developers be unhappy.
  Don't warn, be happy.</changelog>
  <changelog author="sndirsch@suse.com" date="1380542400">- U_0001-XauFileName-reset-bsize-when-malloc-failed.patch/
  U_0002-XauFileName-always-go-through-buf-allocation-if-buf-.patch
  * fixes regression in libXau 1.0.8, which resulted in a crash in
    Mozilla (bnc#831620,fdo#69929)</changelog>
  <changelog author="sndirsch@suse.com" date="1549886400">- Update to version 1.0.9:
  * Update configure.ac bug URL for gitlab migration
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish
  * XauFileName: always go through buf allocation if buf is NULL
  * XauFileName: reset bsize when malloc failed
  * AuDispose.c:remove redundant null check on calling free()
  * AuFileName.c: remove redundant null check on calling free()
  * AuRead.c: remove redundant null check on calling free()
  * Avoid out of boundary read access
- supersedes U_0001-XauFileName-reset-bsize-when-malloc-failed.patch,
  U_0002-XauFileName-always-go-through-buf-allocation-if-buf-.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1661601600">- Update to version 1.0.10
  * gitlab CI: add a basic build test
  * Fix spelling/wording issues
  * Autest.c: Fix -Wdiscarded-qualifiers warnings
  * Remove unnnecessary casts from malloc() and free() calls
  * XauReadAuth: move failure handling code to a common code block</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 1.0.11:
    configure: Use AC_SYS_LARGEFILE to enable large file support
- modernize spec file, install license into licensedir</changelog>
  <changelog author="sndirsch@suse.com" date="1734177600">- update to 1.0.12
  * This release adds support for building with meson as well as
    autoconf, thanks to the work of Dylan Baker.
- switched to meson build system</changelog>
</package>
<package pkgid="6df1250970970823a988f0f1921bff6ef9d960f285c2ee06b947df2ee4d861da33c87b73f05e68cdc6d3fb129c0f733fc0e12560b8a3596747234e486da5ee2d" name="libXcomposite1" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="160000.3.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Provide package descriptions and update URL</changelog>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1357473600">- Update to version 0.4.4:
  + This minor maintenance release cleans up the build configuration scripts,
    including making them compatible with automake-1.13, which errors out on
    the old AM_CONFIG_HEADER macro.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1552305600">- Update to version 0.4.5
  * autogen: add default patch prefix
  * autogen.sh: Implement GNOME Build API
  * autogen.sh: use exec instead of waiting for configure to finish
  * autogen.sh: use quoted string variables
  * configure: Remove AM_MAINTAINER_MODE
  * Use Xfree rather than XFree for consistency
  * Update configure.ac bug URL for gitlab migration
  * Update README for gitlab migration</changelog>
  <changelog author="sndirsch@suse.com" date="1559044800">- marked baselibs.conf as sourcefile in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1670155200">- Update to version 0.4.6
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Mark two dpy parameters const as suggested by cppcheck
  * Remove unnecessary casts from malloc() and free() calls
  * Wrap XComposite*CheckExtension() in do { ... } while(0)
  * Handle implicit conversion warnings from clang
  * XCompositeCloseDisplay: Mark codes as unused</changelog>
</package>
<package pkgid="4557f441a825d85b052c9def94d4e38fbaca3f100102e3fb6611d3d79f91c5dfbd59b5723fc9952a5e0574e04128e440be60753427c38e100e575405ebebc823" name="libXcursor1" arch="x86_64">
  <version epoch="0" ver="1.2.3" rel="160000.3.2"/>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.1.13:
  + Make the version number reported in Xcursor.h match the one
    reported in xcursor.pc
  + Fix issues found by Parfait bug checking tool
  + Build system improvements
- Changes from version 1.1.12:
  + Fix leaks
  + Fix compiler warnings and issues found by clang
  + Build system improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.1.14:
  This release delivers the fix for security vulnerability CVE-2013-2003
  and makes the Makefile.am more compatible with future automake releases.</changelog>
  <changelog author="sndirsch@suse.com" date="1398686400">- added missing pkgconfig(xextproto)</changelog>
  <changelog author="sndirsch@suse.com" date="1511870400">-  U_Avoid-heap-overflows-due-to-integer-overflow-signedn.patch
  * It is possible to trigger heap overflows due to an integer
    overflow while parsing images and a signedness issue while
    parsing comments. [CVE-2017-16612] (bsc#1065386)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1512648000">- Update to version 1.1.15:
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use strdup() instead of malloc(strlen())+strcpy()
  * Fix some clang integer sign/size mismatch warnings
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish
  * Fix heap overflows when parsing malicious files. (CVE-2017-16612)
  * Insufficient memory for terminating null of string in _XcursorThemeInherits
- Drop U_Avoid-heap-overflows-due-to-integer-overflow-signedn.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1552305600">- Update to version 1.2.0
  * This release adds ~/.local/share/icons to the front of the
    default cursor path in the library in support of the XDG user
    data dir. This default can still be overridden at at run time
    using the XCURSOR_PATH environment variable.</changelog>
  <changelog author="sndirsch@suse.com" date="1648987200">- Update to version 1.2.1
  * This release provides bug fixes, code cleanups, and some
    significant documentation improvements.</changelog>
  <changelog author="sndirsch@suse.com" date="1709467200">- Update to version 1.2.2
  * gitlab CI: stop requiring Signed-off-by in commits
  * configure: Use LT_INIT from libtool 2 instead of deprecated
    AC_PROG_LIBTOOL
  * If O_CLOEXEC is defined, add "e" to fopen modes
  * Add comment about keeping libxcb-cursor copy of code in sync
  * XcursorXcFileLoad: plug memory leak in error paths
  * Remove superfluous and unguarded config.h include</changelog>
  <changelog author="sndirsch@suse.com" date="1730980800">- Update to version 1.2.3
  * Change all *LoadImage(..., size) APIs to always return a cursor with the requested size.
  * Remove unnecessary MIN calls
  * build-fix
  * fix compiler warnings
  * improve manpage formatting
  * trim redundant code from the resize-calls
  * add new property "resized" and environment "XCURSOR_RESIZED"
  * add getter/setter for "resized" property
  * restore behavior of image-loading, provide resizing via internal function
  * provide internal variants of existing functions to pass "resized" parameter
  * use resized-parameter where available when loading images
  * add/use _XcursorLibraryLoadImages to pass resized-parameter when loading
  * add debug-logging for file.c, to help with analysis
  * add traces for library.c and xlib.c, also another internal function for dpy
  * document the new XCURSOR_RESIZED environment variable and resource "resized"
  * document/tidy the new set/get functions
  * changes will suggest new release
  * ensure ncomment and nimage values are positive
  * add debug-trace for the configuration information
  * fix overlooked compiler-warning
  * reduce the message-check to ignore the over-long one
  * amend per merge_requests/22#note_2642034
  * amend per merge_requests/22#note_2642042
  * Ignore invalid cursor files</changelog>
</package>
<package pkgid="55498786481411fd8cd3242b0d6dfdcd843080a918390265623f730244bb1025ddbb4072878235e5b8fe8c72661e9e1f1f87e610c53d5d9d5f7e374727e632c2" name="libXdamage1" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="160000.3.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Provide package descriptions and update URL</changelog>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1357473600">- Update to version 1.1.4:
  + This minor maintenance release cleans up the build configuration scripts,
    including making them compatible with automake-1.13, which errors out on
    the old AM_CONFIG_HEADER macro.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="sndirsch@suse.com" date="1552305600">- Update to version 1.1.5:
  * autogen: add default patch prefix
  * autogen.sh: Implement GNOME Build API
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS
  * configure: Remove AM_MAINTAINER_MODE
  * Use Xfree rather than XFree for consistency
  * Update README for gitlab migration</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- Update to version 1.1.6
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Variable scope reduction as recommended by cppcheck
  * Mark two dpy parameters const as suggested by cppcheck
  * XDamageCloseDisplay: Mark codes as unused
  * Remove unnecessary casts from malloc() and free() calls
  * Handle -Wconversion warnings from clang
  * Handle -Wshorten-64-to-32 warnings from clang</changelog>
</package>
<package pkgid="0e13fd9767f7161e48e4abd0074e5fb6002630363bc0a7fc77ba4c487b01c2718e29429cd0cbf4f9cd251d069d3babd8d6a837f25300399774663ca006612afa" name="libXext6" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="160000.3.2"/>
  <changelog author="jengelh@medozas.de" date="1328356800">- Remove apparently unused (Build)Requires on Xdmcp, xtrans
- Remove redundant tags/sections like %clean
  (see specfile guidelines)
- Parallel build with %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXext to libXext and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.3.1:
  + Fixes for compiler warnings
  + Improvements to formattings for all the included extension API
    specs
  + Improvements to the documentation
- Changes from version 1.3.0:
  + New API functions to support the Fence Sync Objects added in
    Sync extension version 3.1
  + Redefine the return values of several MIT-SHM API calls from
    Status (#define Status int) to Bool (typedef int Bool) to
    clarify the expected interpretation of the return values
  + Fix build issues
  + Documentation improvements
  + Build system improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.3.2:
  This release provides fixes for the recently announced security issue
  CVE-2013-1982, as well as build configuration improvements, man page
  macro cleanups to work better with doclifter, and several other small
  fixes.</changelog>
  <changelog author="sndirsch@suse.com" date="1406203200">- Update to version 1.3.3
  * Time for a release before the accumulated patches are old
    enough to vote.  Two new requirements: libX11 1.6 and a C89
    preprocessor.</changelog>
  <changelog author="sndirsch@suse.com" date="1406203201">- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1553169600">- Update to version 1.3.3
  * autogen: add default patch prefix
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Update configure.ac bug URL for gitlab migration
  * Assert that values buffer has enough room for provided values
  * Fix typos in man pages
  * Use __builtin_popcountl if available to replace Ones() in XSecurity.c
  * Add description of libXext to README.md
  * XSecurityGenerateAuthorization: Allocate enough space in values buffer
  * Update README for gitlab migration</changelog>
  <changelog author="sndirsch@suse.com" date="1667044800">- Update to version 1.3.5
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Xge.c, Xge.h: convert from ISO-8859-1 to UTF-8
  * Add extutilP.h header for xgeExtRegister() prototype
  * Remove unnecessary casts of malloc/calloc results
  * Remove unnecessary (char *) casts from Xfree() arguments
  * Use calloc instead of malloc if we may not initialize all the bytes
  * Import reallocarray() from libX11
  * Convert calls to Xmalloc arrays to use Xmallocarray instead
  * configure: Use AC_USE_SYSTEM_EXTENSIONS to set GNU_SOURCE &amp; other defines
  * Remove "All rights reserved" from Oracle copyright notices.
  * COPYING: Add info for Xge.* and reallocarray.* files
  * add ACLOCAL_AMFLAGS = -I m4 to make aclocal pick ax_gcc_builtin.m4</changelog>
  <changelog author="sndirsch@suse.com" date="1707134400">- Update to version 1.3.6
  * Wrap Xext*CheckExtension() in do { ... } while(0)
  * configure: raise minimum autoconf requirement to 2.70
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * _xgeGetExtensionVersion should not free info on failure
  * Check for malloc failure in _xgeGetExtensionVersion
  * _xgeDpyClose: handle NULL return from _xgeFindDisplay
  * XEVI: fix -Walloc-size</changelog>
</package>
<package pkgid="47abde0b079c57b14b4736b59bfd0cb4febd86164b95ad4bec3e8bc3f6b828922b42a4213a0f51ac5f58ca42d084ff3e891aaa027578882bc634c222b74dfa21" name="libXfixes3" arch="x86_64">
  <version epoch="0" ver="6.0.1" rel="160000.3.2"/>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369828800">- Update to version 5.0.1:
  This bug fix release includes the fix for the recently announced
  CVE-2013-1983, along with some other cleanups &amp; warning fixes.</changelog>
  <changelog author="sndirsch@suse.com" date="1464609600">- Update to version 5.0.2
  * Remove fallback for _XEatDataWords, require libX11 1.6 for it
- tagged baselibs.conf as source in specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 5.0.3:
  + fix Integer overflow on illegal server response</changelog>
  <changelog author="sndirsch@suse.com" date="1620820800">- Update to version 6.0.0
  * The big new feature here is support for the new
    ClientDisconnectMode. From the corresponding
    xorgproto announcement:
    An X server that is started on demand (Xwayland) should ideally
    also terminate when the last client disconnects. However, some
    X11 clients that provide system services will linger around
    forever, preventing that shutdown.
  * With the new XFixes request, a client can designate itself as
    to-be-terminated and the X server can ignore those clients when
    counting the number of remaining clients. If no other clients
    are left, the server can shut down.
  * Note that this requires changes to the X server and each
    client to work.</changelog>
  <changelog author="sndirsch@suse.com" date="1638360000">- update to version 6.0 is needed for GNOME41, particularly the
  gnome-settings-daemon's new feature to disconnect from Xwayland
  (JIRA #SLE-22829)</changelog>
  <changelog author="sndirsch@suse.com" date="1681128000">- Update to version 6.0.1
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Remove unnecessary casts from malloc &amp; free calls
  * Variable scope reduction as recommended by cppcheck
  * Mark two dpy parameters const as suggested by cppcheck
  * Quiet -Wconditional-uninitialized warnings from clang
  * Resolve 36 of 40 -Wextra-semi-stmt warnings from clang
  * Handle 63 of 63 -Wshorten-64-to-32 warnings from clang
  * Handle 60 of 60 -Wimplicit-int-conversion warnings from clang
  * Handle 6 of 9 -Wsign-conversion warnings from clang
  * XFixesCloseDisplay: Mark codes as unused
  * Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * Remove "All rights reserved" from Oracle copyright notices</changelog>
  <changelog author="dmueller@suse.com" date="1681387200">- add keyring validation
- modernize spec file. install license and documentation</changelog>
</package>
<package pkgid="2514f15691a18cf91d6b1e183842f904e9ebf449997bd9c291c174a6c64384427fb813e6255f5ead5c99cac05f2aec4b5397e97d899e8fee4dab636333aec9f6" name="libXft2" arch="x86_64">
  <version epoch="0" ver="2.3.8" rel="160000.2.2"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1386763200">- Added U_use-recommended-freetype-include.patch -- Freetype upstream
  recommends using their macros together with ft2build include.
  Positive sideeffect is that this patch makes it build with both
  freetype2 2.5.1, and older version</changelog>
  <changelog author="sndirsch@suse.com" date="1402056000">- Update to version 2.3.2
  * This release fixes a build issue with FreeType 2.5.1 &amp; later,
    and fixes the prototypes in the man page for XftDrawString8 &amp;
    XftDrawRect.
  * supersedes U_use-recommended-freetype-include.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1431432000">- added baselibs.conf as source to specfile</changelog>
  <changelog author="mliska@suse.cz" date="1548158400">- Use make_build macro in order to get verbose output of make.</changelog>
  <changelog author="sndirsch@suse.com" date="1553169600">- Update to version 2.3.3
  * This release updates XftDrawSrcPicture to use XRenderCreateSolidFill
    when available (Render version 0.10 or later).</changelog>
  <changelog author="sndirsch@suse.com" date="1627905600">- Update to version 2.3.4
  * This release handles the deprecation of the
    FcNameRegisterObjectTypes API by fontconfig, and provides
    minor cleanups for compiler warnings and man pages.</changelog>
  <changelog author="sndirsch@suse.com" date="1662465600">- Update to version 2.3.5
  * bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1662811200">- Update to version 2.3.6
  * Fixes a regression in 2.3.5 for XftTextExtents* length-checks.</changelog>
  <changelog author="sndirsch@suse.com" date="1668600000">- Update to version 2.3.7
  * libxft issue #15
    https://gitlab.freedesktop.org/xorg/lib/libxft/-/issues/15
    XftFontLoadGlyphs for mono font returns wrong info in extents from
    XftTextExtentsUtf8 for variable chars
    Patch by Scott Mcdermott, based on
    https://github.com/googlefonts/Inconsolata/issues/42
  * fix compiler warning
  * libxft issue #16
    https://gitlab.freedesktop.org/xorg/lib/libxft/-/issues/16
    Stack gets smashed in fonts with colors when calling XftGlyphRender
    BGRA changes made incorrect comparison for local vs allocated
    buffer in XftGlyphSpecRender
  * stdint.h header is needed for SIZE_MAX</changelog>
  <changelog author="sndirsch@suse.com" date="1681819200">- Updat to version 2.3.8
  * configure: Use LT_INIT from libtool 2 instead of deprecated
    AC_PROG_LIBTOOL
  * add check for missing glyph in XftFontCheckGlyph()
  * issue 17: libxft-2.3.7: Bold fonts in urxvt missing leftmost pixels
  * issue 18: Problems with rotated text (monospace font only)</changelog>
</package>
<package pkgid="a503753e5f8bf4f50651760619b8993fa218512de4ad6befe9f2546a240d90c5bd74d9506a25e8682df09581064dd2ca2131a4405a08006e65d728313a0aa880" name="libXi6" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="160000.3.2"/>
  <changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1450785600">- Update to version 1.7.6:
  One significant change here: libXi was using raw serial numbers in event
  cookies, the one read off the wire. All other events don't use that number
  but a Xlib-internal serial number which is similar but not always the same.
  This could cause events to look out of order. With this release, libXi is
  now using the same serial number for event cookies as it uses for all other
  events.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477656000">- Update to version 1.7.8:
  The changes of 1.7.7 are included.
  + Fix a crash introduced in the 1.7.7 release.
  + Properly validate server responses.</changelog>
  <changelog author="sndirsch@suse.com" date="1485172800">- Update to version 1.7.9:
  * Plug a memory leak
  * Check that allocating a buffer succeeded
  * Fix possible free of uninitialized pointer</changelog>
  <changelog author="sndirsch@suse.com" date="1561118400">- Update to version 1.7.10
  * Fix the FIXME in XIValuatorClass case of copy_classes function in XExtInt.c
  * _XIPassiveGrabDevice needs to set time value
  * Replace open-coded FP3232_TO_DOUBLE
  * autogen: add default patch prefix
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Update configure.ac bug URL for gitlab migration
  * Update README for gitlab migration
  * man: add a bunch of missing spaces
  * Update XIChangeHierarchy.txt</changelog>
  <changelog author="sndirsch@suse.com" date="1631707200">- Update to version 1.8
  * This release of libXi marks the support of XI 2.4 touchpad
    gesture events official. This feature is the only difference
    between libXi 1.8 and the latest release in the 1.7.x series
    (1.7.10).</changelog>
  <changelog author="sndirsch@suse.com" date="1683201600">- Update to version 1.8.1
  * Fix spelling/wording issues
  * gitlab CI: enable commit &amp; merge request checks
  * gitlab CI: enable gitlab's builtin static analysis
  * XInput_find_display: Don't dereference NULL dpyinfo
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * Initialize a few stack vars to zero</changelog>
  <changelog author="sndirsch@suse.com" date="1725537600">- Update to version 1.8.2
  * This release includes fixes for malloc failures and a double
    alignment issue on some machines. XFreeDeviceInfo can now be
    called with NULL and XGetFeedbackControl is more robust in
    the face of a malicious X server sending random data. Plus a
    typo fix in the man page.</changelog>
</package>
<package pkgid="4d6b2ca5b905ed6e9dc656ce4ac4bf2e31f43e1faa916a9ed8c13a4106df48d28818365af691937edac8050bffe5ac232f439c1f28e6f0dab7e6774e578c55c2" name="libXinerama1" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="160000.3.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.1.2:
  + Janitorial cleanups
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.1.3:
  This bug fix release primarily provides the fix for the recently announced
  security vulnerability CVE-2013-1985.</changelog>
  <changelog author="sndirsch@suse.com" date="1530878400">- Update to version 1.1.4
  * Contains some tiny bugfixes sitting in git unreleased for too long.</changelog>
  <changelog author="sndirsch@suse.com" date="1667044800">- Update to version 1.1.6
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * XineramaQueryScreens: fix -Wsign-compare warning
  * Remove "register" type qualifier from variable declarations</changelog>
</package>
<package pkgid="73d13c37b31cd93259ea78bf861f8a0cad8d4b04036daad9f07ec8ec2790e330f73ed228f0068c034967963f3786121c50471364425525ef98746e6221a88cec" name="libXmuu1" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="160000.3.2"/>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXmu to libXmu and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.1.1:
  + Cleanups of code that causes compiler warnings
  + Improvements to the documentation
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="sndirsch@suse.com" date="1377777600">- added requires to xbitmaps/-devel packages (bnc#836530)</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.1.2:
  + Add missing copyright notices to COPYING file.
  + Preserve constness when casting const pointers in various
    functions.
  + Fix a const issue.
  + autogen.sh: Implement GNOME Build API.
  + configure: Remove AM_MAINTAINER_MODE.
  + Remove unused DECnet ("DNETCONN") code from
    XmuConvertStandardSelection.</changelog>
  <changelog author="sndirsch@suse.com" date="1553169600">- Update to version 1.1.3
  * This minor maintenance release includes some small bug fixes,
    build configuration improvements and janitorial cleanups.</changelog>
  <changelog author="sndirsch@suse.com" date="1666094400">- Update to version 1.1.4
  This release includes two notable changes to XmuConvertStandardSelection():
  1) It no longer supports XA_IP_ADDRESS, which only supported IPv4 addresses
  and simply provided the output of gethostbyname() on the local hostname.
  2) XA_OWNER_OS no longer reports "BSD" for any Unix-like OS (including Linux)
  that it hadn't been coded to handle, instead relying on uname() where
  available to provide the OS name.
  The lack of bug reports about the previously misleading output for these
  suggests they're not widely used, with codesearch.debian.net only finding
  matches in libXmu and the rust bindings to libXmu, and not any consumers
  of these interfaces.</changelog>
  <changelog author="sndirsch@suse.com" date="1711368000">- Update to version 1.2.0
  * This release raises the minimum version of libXt required to 1.1.0
    (released in 2011), and for those builders who need to regenerate
    the autoconf files, raises the minimum version of autoconf required
    to 2.70 (released in 2020).</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to version 1.2.1
  * test: Add missing setjmp()
  * test: Add prototype for Xmureallocarray to silence warning</changelog>
</package>
<package pkgid="5b2c08e26dad7c1d4f93837b2c0af4dbc866263937170dd80e9f4b43593d7daa60b68203413895f8804e25e71611e493447e7a495bb20d72ff5a0c257035abe9" name="libXrandr2" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="160000.3.2"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378641600">- Update to version 1.4.2:
  This release fixes two small bugs in the library, and fixes an omission
  in the list of copyright notices in the COPYING file.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1431864000">- Update to version 1.5.0:
  Add support for monitors and fixes requires on libX11.</changelog>
  <changelog author="sndirsch@suse.com" date="1431950400">- added baselibs.conf as source in specfile</changelog>
  <changelog author="fcrozat@suse.com" date="1450267200">- update BuildRequires to pkgconfig(randrproto) &gt;= 1.5</changelog>
  <changelog author="sndirsch@suse.com" date="1475755200">- Update to version 1.5.1
  * Avoid out of boundary accesses on illegal responses
    (bnc#1003000, CVE-2016-7947, CVE-2016-7948)
  * fix: doGetScreenResources() info: redundant null check on
    calling free()
  * fix: redundant null check on calling free()</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #320388, bnc#1003000, CVE-2016-7947, CVE-2016-7948 (bsc#1041366)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511352000">- Add U_libXrandr_fix-memory-leak.patch: Fix memory leak on error
  paths.
- Drop unneeded autoconf, automake and libtool BuildRequires and no
  longer pass autoreconf.</changelog>
  <changelog author="sndirsch@suse.com" date="1553256000">- Update to version 1.5.2
  * autogen: add default patch prefix
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Update configure.ac bug URL for gitlab migration
  * Fix memory leak on error paths
  * Add description of libXrandr to README.md
  * Update README for gitlab migration
- supersedes U_libXrandr_fix-memory-leak.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1668945600">- Update to version 1.5.3
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Xrandr.h: remove misleading comment for XRRGetScreenSizeRange()
  * XRRGetProviderInfo: Remove unneeded ProviderInfoExtra
  * Variable scope reductions as recommended by cppcheck
  * Remove unnecessary casts of return values from malloc()</changelog>
  <changelog author="sndirsch@suse.com" date="1696507200">- Update to version 1.5.4
  This release fixes a bug where an invalid pointer (a pointer to the
  middle of a buffer returned from malloc() instead of to the beginning
  of the buffer) could be passed to free() when cleaning up after an
  out-of-bounds output is found in the response from the X server to
  XRRGetMonitors().</changelog>
</package>
<package pkgid="0936d19b141a5a74e76ea1bd04c0df53e43022a8cbeed21fda589a6d864c3faefa358caafe798498aef26158b6d8c0fd2090ebce912814da31ac310b6e846118" name="libXrender1" arch="x86_64">
  <version epoch="0" ver="0.9.11" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.de" date="1270382400">- libXrender 0.9.5
- obsoletes libXrender-commit-f6f784c.diff
- bumped version number to 7.5</changelog>
  <changelog author="sndirsch@novell.com" date="1283601600">- update to release 0.9.6
- bumped version number to 7.5_0.9.6
- fixed Summary/Group entries in -devel package</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_0.9.6</changelog>
  <changelog author="sndirsch@suse.com" date="1329480000">- fixed name of .changes (follows rename)</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 0.9.7:
  + Fix alpha premultiplication in XRenderParseColor
  + Compiler warning fixes
  + Documentation typo fixes
  + Build configuration fixes</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1371211200">- Update to version 0.9.8:
  This bugfix release delivers the fixes for the recently announced security
  issue CVE-2013-1987.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 0.9.9
  * Fix request length calculation for XRenderCompositeText32
  * Remove fallback for _XEatDataWords, require libX11 1.6 for it</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 0.9.10:
  + Fix documentation to explicitly mention premultiplied alpha
  + Avoid OOB write in XRenderQueryFilters
  + Validate lengths while parsing server data.</changelog>
  <changelog author="sndirsch@suse.com" date="1666440000">- Update to version 0.9.11
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Remove unnecessary casts from malloc &amp; free calls
  * Reduce variable scopes as recommended by cppcheck
  * Resolve -Wsign-compare warnings
  * Rename xDepth to xPDepth to quiet -Wshadow warnings
  * fix coredumps in XRenderComputeTrapezoids (issue #1)
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * WIP: Documentation
  * autogen.sh: use exec instead of waiting for configure to finish
  * Add missing HAVE_CONFIG_H guard to Xrenderint.h
  * amend cppcheck-scope change, fixing c89 build
  * additional cppcheck-scope warning
  * cppcheck (removing unused assignment lets variable scope reduction)
  * use casts to reduce compiler warnings (no object change)
  * use _Xconst with DataInt32/DataInt16/memcpy to reduce strict compiler warnings
  * use _X_UNUSED for compiler-warnings
  * whitespace fix
  * fix regression
  * fix coredumps in XRenderComputeTrapezoids (issue #1)
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * WIP: Documentation
  * autogen.sh: use exec instead of waiting for configure to finish
  * Add missing HAVE_CONFIG_H guard to Xrenderint.h
  * amend cppcheck-scope change, fixing c89 build
  * additional cppcheck-scope warning
  * cppcheck (removing unused assignment lets variable scope reduction)
  * use casts to reduce compiler warnings (no object change)
  * use _Xconst with DataInt32/DataInt16/memcpy to reduce strict compiler warnings
  * use _X_UNUSED for compiler-warnings
  * whitespace fix
  * fix regression</changelog>
</package>
<package pkgid="2e7b72089e3a88ea44cbcd7b051f4e60128839801d5365a91400f4991443673d906fd7d1dba873a5cff246e1e3c8dbb6c2d054626fef13b73c00aacaac2bda0a" name="libXv1" arch="x86_64">
  <version epoch="0" ver="1.0.12" rel="160000.2.2"/>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Rename xorg-x11-libXv to libXv and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.0.7:
  + Janitorial cleanups
  + Man page fix
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.0.8:
  This release delivers the fixes for the recently announced security issues
  CVE-2013-1989 &amp; CVE-2013-2066, plus a couple build configuration changes
  and man page fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1371988800">- Update to version 1.0.9:
  This quick fix release corrects an issue with the security fix from 1.0.8,
  in which, if the size checks did determine the response from the X server
  was too large to fit in the buffer it had allocated, XvQueryPortAttributes
  could return a pointer to the caller that pointed to uninitialized memory
  where the caller expected a nil-terminated string.</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.10:
  + Remove fallback for _XEatDataWords, require libX11 1.6 for it.
  + Refactor error handling.
  + Add missing calls to _XEatDataWords when we are skipping
    _XRead.
  + Replace custom copy of GetReq macro with call to Xlib 1.5's
    _XGetRequest.
  + Require ANSI C89 pre-processor, drop pre-C89 token pasting
    support.
  + Use pad_to_int32 macro instead of repeated (x + 3) &amp; ~3
    pattern.
  + Fix sign conversion &amp; comparison warnings from clang.
  + Remove unnecessary casts from Xmalloc calls.
  + Adopt X.Org standard code style, with consistent indentation.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477656000">- Update to version 1.0.11:
  + Fix typo in dependencies for lint library
  + Protocol handling issues in libXv - CVE-2016-5407</changelog>
  <changelog author="sndirsch@suse.com" date="1478088000">- tagged baselibs.conf as source in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- Update to version 1.0.12:
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Build xz tarballs instead of bzip2
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * XvGetReq: remove trailing semicolon that caller is expected to provide
  * Variable scope reductions
  * Handle implicit conversion warnings from clang</changelog>
</package>
<package pkgid="1e9448be38f051d3cd785b93756df5b922a10acd6c3ba6fc60600b3d1f7d971d2278641f8700d79d1a1c3b5ed161943757bd13b1c716456b9fac12daafa6c380" name="libXxf86vm1" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="160000.3.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Provide package descriptions and update homepage URL</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.1.2:
  + Janitorial cleanups
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.1.3:
  This release provides the fixes for the recently announced security issue
  CVE-2013-2001 along with a number of other fixes to the error handling
  code found while investigating that issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425816000">- Update to version 1.1.4:
  + Tell the compiler it's unlikely we're talking to an XFree86 3.x
    server.
  + Discard correct length for old-format replies in
    XF86VidModeGetGamma.
  + Remove fallback for _XEatDataWords, require libX11 1.6 for it.
  + Add XF86VidModeAddModeLine man page.
  + Fix a couple sign comparison warnings.
  + Require ANSI C89 pre-processor, drop pre-C89 token pasting
    support.
  + Enable parsing of C prototypes in the synopsis into prototype
    markup.
  + Eliminate use of .ta.</changelog>
  <changelog author="sndirsch@suse.com" date="1425902400">- added baselibs.conf as source to specfile in order to make
  factory checkin policy happy ...</changelog>
  <changelog author="sndirsch@suse.com" date="1664280000">- Update to version 1.1.5
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Fix -Wsign-compare warning
  * Variable scope reductions as suggested by cppcheck
  * Update GetOldReq to use _XGetRequest()
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish</changelog>
  <changelog author="dmueller@suse.com" date="1664452800">- modernize spec file, add license</changelog>
  <changelog author="sndirsch@suse.com" date="1734177600">- Update to version 1.1.6
  * Remove "All rights reserved" from Oracle copyright notices
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * Add X.Org's standard C warning flags to AM_CFLAGS
  * Add -no-undefined flag to LDFLAGS to fix Windows builds</changelog>
</package>
<package pkgid="93238268a14fcf2ce9c2e8ba9a3b841bbeee47d539483632fcbcefd1d031310607c4a8c4d3448f81675f510b3a0c1ddc1c330d346449097d393b504314fda1f3" name="libaccel-config1" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="160000.2.2"/>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to version 3.4.7:
  * No relevant changes
- Update to version 3.4.6.5:
  * Add Zcompress32, Zdecompress32, Compress and Decompress test
  * Add Zcompress16 and Zdecompress16 to IAA test
  * Add operation CRC64 into IAA test
  * Bug fixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1665403200">- Update to 3.4.8
  * Changes in accel-config test</changelog>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to version 3.5.0:
  * Fix static code analysis warnings
  * Fix lintian errors
  * Move test program and related configs to /usr/lib
  * Move contrib/configs/* to /etc
  * Some code cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1672142400">- Update to version 3.5.2:
  * Bug fix in help system
  * Remove mdev implementation</changelog>
  <changelog author="danilo.spinella@suse.com" date="1682683200">- Update to version 4.0:
  * use buildflags.mk, remove hardcoded CFLAGS
  * debian/accel-config-test.install fix path on copy
  * convert all magic number for 1&lt;&lt;12 to PAGE_SIZE
  * fix madvise() call to unmap pages
  * add updated idxd.h definition from kernel source
  * Remove redundant -f 0x0 in iaa_user_test_runner.sh
  * Fix dedicated mode wq size 1 failure
  * Modify incorrect print information
  * Modify block_on_fault in 2g2q_user_2.conf
  * Move get_random_value() to accel_test.c
  * Add algorithm to do Zcompress8
  * Add test code of operation Zcompress8
  * Modify script for executing Zcompress8 test
  * Add algorithm to do Zdecompress8
  * Add test code of operation Zdecompress8
  * Modify script for executing Zdecompress8 test
  * Add algorithm to do both Encrypt and Decrypt
  * Add test code of operation Encrypt
  * Modify script for executing Encrypt test
  * Add test code of operation Decrypt
  * Modify script for executing Decrypt test
  * Modify struct in idxd.h for IAA Translation Fetch
  * Add test code of IAA Translation Fetch
  * Modify script for executing IAA Translation Fetch test
  * Add helping information for new parameters
  * Add openssl package installation details
  * Fix bug of Zcompress8 about input size less 128
  * Remove ats_disable config for iax tests
  * Add identification for IAA1.0/2.0 platform
  * add per-wq prs disable tests
  * Update format bitmask attrs to match driver
  * Add new API to set and get wq op_config
  * Add option to config-wq to set op_config
  * Change json listing format of bitmasks
  * Add load, save and list config support for op_config
  * Update config-wq doc with op_config details
  * Add unit test for op_config configuration
  * Fix segmentation fault during list cmd in SPR
  * Add API to retrieve iaa_cap when available
  * Add group-&gt;desc_progress_limit support
  * Add group-&gt;batch_progress_limit support
  * Add wq-&gt;prs_disable support
  * Add device-&gt;event_log_size support
  * Do not set traffic class in tests
  * Skip op_config test if feature not present
  * Include IAA support in README
  * Fix bug in return value of pasid enabled check
  * add DIX Generate operation support
  * add translation fetch operation support
  * Remove traffic config for iax tests
  * Fix dsa_test segmentation fault when do 2G tests
- Update to version 3.5.3:
  * Fix bug of setting max destination size
  * Remove some leftover references to mdev
  * Remove text about installing kernel headers
  * Remove uninitialized local variable warning
  * Remove read_buffers 0 settings from configs</changelog>
  <changelog author="danilo.spinella@suse.com" date="1693396800">- Update to version 4.1:
  * add missing libssl-dev dependency
  * Skip configuring ats_disable if the attribute is not present
  * Add config-user-default command
  * Add option "-c &lt;config_file&gt;" to load default configurations from
    the file
  * Disable default configured WQs and devices
  * Add "-n &lt;wq_name&gt;" to specify WQ name for disabling WQs
  * Add user_default_profile.conf
  * Add doumentation for new command "config-user-default"</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705579200">- Update to versione 4.1.4:
  * Fix a bug while reading json objects
  * Do not save traffic class attributes
  * Handle cmd_status initialization failure without exiting
  * Remove SET_ERR macro which is error prone
  * Skip check for ats_disable if attribute absent
  * Add parameter for specifying dev and wq
  * Fix bug about checking result of decompression
- Update to version 4.1.3:
  * be less greedy in _cleanup greps
- Update to version 4.1.2:
  * Fix a memory leak bug
- Update to version 4.1.1:
  * update Standards-Version to 4.6.2 in control file
  * Use asm volatile for compilers that don't support
    __builtin_ia32_mfence
  * Fixes for pedantic compiler warnings
  * Update copyright years in man pages
  * Fix some syntax errors and cleanup in man pages
  * Fix --help and other options
  * Fix a bug with empty wq driver name
  * Fix bug about finding a mismatched wq
  * Add op mask to check if an op is available
  * Decide whether to do the operation or not
  * Fix batch event log core check output issues
  * Provide --skip-config to run dsa tests without device reset</changelog>
  <changelog author="dimstar@opensuse.org" date="1707998400">- Update to version 4.1.5:
  + Free driver_name in case of error adding wq.
  + change op config default value because of kernel change.
  + set read buffer allowed from 0 to 8.
  + disable enabled devices before unloading iaa_crypto.</changelog>
  <changelog author="dmueller@suse.com" date="1710763200">- update to 4.1.6:
  * Free driver_name when freeing wq
  * Disable all WQs and rmmod iaa_crypto
  * Remove the script about vfio passthrough device
  * Use madvise(MADV_DONTNEED) to ummap address</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723118400">- Update to 4.1.8:
  * Check for error return from iaa_do_crypto
  * Clean up resource leak in accfg_wq_get_occupancy
  * Update dsa_config_test_runner.sh
- 4.1.7 changelog:
  * Typo fixes
  * Make verbose logging optional
  * Clean up typo
  * Don't attempt to disable non-existent devices
  * Don't list attributes not present
  * add required SECURITY.md file for OSSF Scorecard compliance</changelog>
</package>
<package pkgid="88a1ce114225bd32931e2abdf7dbc26c38c0d69bc6f6561229baa024a104f52eeeae896b77337ff28bab46e0ebafb8b09d443f4ee90f5be9f4d6009c4e44b2fa" name="libacl1" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="160000.2.2"/>
  <changelog author="jeffm@suse.com" date="1539259200">- Update to v2.2.53.
- Removed patches:
  * 0001-Install-the-libraries-to-the-appropriate-directory.patch
  * 0001-Use-OS-byteswapping-macros.patch
  * 0002-setfacl.1-fix-typo-inclu-de-include.patch
  * 0003-test-fix-insufficient-quoting-of.patch
  * 0004-Makefile-rename-configure.in-to-configure.ac.patch
  * 0005-Bad-markup-in-acl.5-page.patch
  * 0006-.gitignore-ignore-and-config.h.in.patch
  * 0007-Use-autoreconf-rather-than-autoconf-to-regenerate-th.patch
  * 0008-libacl-Make-sure-that-acl_from_text-always-sets-errn.patch
  * 0009-libacl-fix-SIGSEGV-of-getfacl-e-on-overly-long-group.patch
  * 0010-punt-debian-rpm-packaging-logic.patch
  * 0011-move-gettext-logic-into-misc.h.patch
  * 0012-test-make-running-parallel-out-of-tree-safe.patch
  * 0013-modernize-build-system.patch
  * 0014-po-regenerate-files-after-move.patch
  * 0015-build-drop-aclincludedir-use-pkgincludedir.patch
  * 0016-build-make-use-of-an-aux-dir-to-stow-away-helper-scr.patch
  * 0017-build-ship-a-pkgconfig-file-for-libacl.patch
  * 0018-read_acl_-comments-seq-rename-line-to-lineno.patch
  * 0019-read_acl_-comments-seq-switch-to-next_line.patch
  * 0020-telldir-return-value-and-seekdir-second-parameters-a.patch
  * 0021-mark-libmisc-funcs-as-hidden-so-they-are-not-exporte.patch
  * 0022-add-__acl_-prefixes-to-internal-symbols.patch
  * 0023-cp.test-Check-permissions-of-the-right-file.patch
  * 0024-libacl-acl_set_file-Remove-unnecesary-racy-check.patch
  * 0025-fix-compilation-with-latest-xattr-git.patch
  * 0026-getfacl-Fix-memory-leak.patch
  * 0027-Fix-the-display-block-nesting-in-acl.5.patch
  * 0028-setfacl-man-page-Minor-wording-improvements.patch
  * 0029-getfacl-Fix-minor-resource-leak.patch
  * 0030-Do-not-export-symbols-that-are-not-supposed-to-be-ex.patch
  * 0031-walk_tree-mark-internal-variables-as-static.patch
  * 0032-ignore-configure.lineno.patch
  * acl-2.2.52-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1541678400">- libacl-devel used to require libattr-devel, but that is no longer
  the case, packages that relied on this indirect dependency to
  be present were fixed years ago.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Update boilerplate descriptions for libacl-devel.
- Remove out-of-date comments for libattr.
- Remove old BuildRoot and %defattr tags.
- Move library into the standard library directory.</changelog>
  <changelog author="dmueller@suse.com" date="1598961600">- update url</changelog>
  <changelog author="dimstar@opensuse.org" date="1611662400">- Replace system-user-{bin,daemon} with user({bin,daemon}): be
  resilient to package name changes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1620820800">- Update to version 2.3.1
  * Update German translation
  * getfacl: fix indent in --help output
  * getfacl: Add --one-file-system option, with this option getfacl
    will not cross mount points
  * Fix segfault on allocation failure
  * Avoid SIGSEGV with link-time optimisation enabled
- Use SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- modernize spec-file (move license to licensedir)</changelog>
  <changelog author="mliska@suse.cz" date="1649419200">- Disable -D_FORTIFY_SOURCE=3 for now
  as explained here: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104964</changelog>
  <changelog author="dimstar@opensuse.org" date="1707998400">- Update to version 2.3.2:
  + libobj: declare s_str directly in string_obj_tag.
  + Use thread-safe getpwnam_r and getgrnam_r.
  + setfacl: preserve the failed status when processing multiple
    files.
  + man: Document pitfall with negative permissions and user
    namespaces.
  + tools: mark long_options static &amp; const.</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- BuildRequire gettext-devel instead of gettext-tools-mini: let
  OBS sort out if the -mini package is the right one to be used or
  not.</changelog>
</package>
<package pkgid="42cb728ae636c7d8c33b4b2a26b5f6dd36f08d0f273e9dfa57a2d9f09ad8e9d807574e47f2efb25e4358340949f3bf3ec5ad0a544524e5d92481159a0e4879d7" name="libaio1" arch="x86_64">
  <version epoch="0" ver="0.3.113" rel="160000.3.2"/>
  <changelog author="schwab@suse.de" date="1548936000">- riscv-support.patch: Add support for RISC-V</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133233).</changelog>
  <changelog author="tchvatal@suse.com" date="1564574400">- Update to 0.3.112:
  * Various patches for architectures/etc
- Update url
- Update install
- Enable tests
- Remove mostly merged patches or differently fixed issues:
  * libaio-aarch64-support.diff
  * libaio-generic-arch.diff
  * libaio-optflags.diff
  * 00_arches.patch
  * 00_arches_sh.patch
  * 01_link_libgcc.patch
  * 02_libdevdir.patch
  * 03_man_errors.patch
  * riscv-support.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566907200">-  Add _constraints for PowerPC to avoid OOM at build time</changelog>
  <changelog author="lduncan@suse.com" date="1613390400">- Update to version libaio0.3.112+29.696a5e6483ba:
  * Fix test issue with gcc-11 (bsc#1181869)
  * harness: Skip the test if io_pgetevents() is not implemented
  * harness: Print better error messages on error conditions in 22.t
  * harness: Fix PROT_WRITE mmap check
  * harness: fix read into PROT_WRITE mmap test
  * harness: skip 22.p if async_poll isn't supported
  * harness: Handle -ENOTSUP from io_submit() with RWF_NOWAIT
  * harness: Add fallback code for filesystems not supporting O_DIRECT
  * harness: add support for skipping tests
  * harness: Make the test exit with a code matching the pass/fail state</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 0.3.113:
  * cases/16.t: loongarch only supports eventfd2
  * Add loongarch to supported architectures in libaio.spec
  * Add endian detection and bit width detection for loongarch
  * Use generic syscall number schema for loongarch
  * Fix struct io_iocb_vector padding for 32bit architectures
  * struct io_iocb_sockaddr padding for 32bit architectures
  * Verify structure padding is correct at build time
  * harness: add test for aio poll missed events</changelog>
  <changelog author="dmueller@suse.com" date="1657627200">- add fix-splice-signature.patch to fix build on 32bit</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- skip testsuite on qemu_linux_user builds</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Make the package respect %optflags and disable LTO.</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="350bf01789e041e8ab48e567eaaa3e80f20d42a194e4446da9de5b26e6cd321c05480c1c337a6e541ed113ab93f676275522a8b1a6224261b9ab1e11afde0229" name="libalternatives1" arch="x86_64">
  <version epoch="0" ver="1.2+30.a5431e9" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1623240000">- Version v1.0.0:
  * Prefix symbols with libalts_ to avoid symbol clashes
  * Add symbol visibility and versioning
  * Decamelize public symbols and rename</changelog>
  <changelog author="adam.majer@suse.de" date="1624276800">- Update to version v1.1:
  * docs: Add broken manpage
  * tests: unit tests configs
  * tests: fix memory leak during tests
  * list_binaries: initialize pointer that is later used in free
  * libalts_exec_default() sets errno on not found</changelog>
  <changelog author="adam.majer@suse.de" date="1631534400">- Update to version v1.2:
  * Add config option=KeepArgv0 to keep original argument during
    exec() call</changelog>
  <changelog author="jengelh@inai.de" date="1631620800">- Use noun phrase for the summary; fix grammar in description.</changelog>
  <changelog author="adam.majer@suse.de" date="1631620801">- Update to version v1.2+3.b848aad:
  * tests: fix array overrun in unit tests</changelog>
  <changelog author="dmueller@suse.com" date="1668427200">- switch to a manual service rather than a buildtime tar service
  which introduces a bootstrap cycle between python and tar_scm</changelog>
  <changelog author="bogdan.lezhepekov@suse.com" date="1682424000">- Update to version v1.2+30.a5431e9: (bsc#1191692)
  * Change license to less restrictive Apache 2.0
  * doc: fixing a few typos
  * Adds option to display target executable only
  * Makefiles and cmake: rework for reproducible build
  * Improve Makefile
  * libalts_exec_default: fix memory leak on error condition
  * libalts_write_binary_configured_priority_to_file: fix memory leak
  * saveConfigData(): fix file descriptor leak in while loop error case
  * loadConfigData(): use goto exit label to prevent file descriptor leaks
  * libalts_load_available_binaries: use goto err: label to fix leaks
  * loadAlternativeForBinary: goto-assisted error handling to avoid leaks
  * checkGroupConsistencies(): explicitly ignore unused `flags`
  * lib: refactor error handling of findAltConfig()
  * utils: fix possible memory leaks on error conditions
  * docs: fix some typos and grammar
  * Update README.md
  * lib: generally open[at] with O_CLOEXEC
  * Fix logic in options parser
  * Add basic Makefile for buidling without cmake
  * Added description for options=KeepArgv0
  * cmake: Express the dependency on CUnit correctly for building tests
  * cmake: Build and install CMake and PkgConfig files
  * cmake: Fix setup of shared linker flags
  * config.h: Fix the version to match the current latest tag</changelog>
</package>
<package pkgid="afc34335212ad9526f4d838399bd0bcaad9e437ebcb8123a6f77f1fd4f9c72b048703c860fc58e3dcd2892424ac54f0b29214651773c03e8fadd2802a1229f8c" name="libarchive13" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Update to 3.7.4:
  * rar: Fix OOB in rar e8 filter (CVE-2024-26256, bsc#1222911)
  * zip: Fix out of boundary access
  * 7zip: Limit amount of properties
  * bsdtar: Fix error handling around strtol() usages
  * passphrase: Improve newline handling on Windows
  * passphrase: Never allow empty passwords
  * rar: Fix "File CRC Error" when extracting specific rar4 archives
  * xar: Avoid infinite link loop
  * zip: Update AppleDouble support for directories
  * zstd: Implement core detection
- Update to 3.7.3:
  * PCRE2 support
  * add trailing letter b to bsdtar(1) substitute pattern
  * add support for long options "--group" and "--owner" to tar(1)
  * Fix possible vulnerability in tar error reporting introduced in f27c173
  * ISO9660: preserve the natural order of links
  * rar5: fix decoding unicode filenames on Windows
  * rar5: fix infinite loop if during rar5 decompression the last block produced no data
  * xz filter: fix incorrect eof at the end of an lzip member
  * zip: fix end-of-data marker processing when decompressing zip archives
  * multiple bsdunzip(1) fixes
  * filetime truncation fix on Windows
- Fix rpmlint warning about summary being too long</changelog>
  <changelog author="danilo.spinella@suse.com" date="1716379200">- Fix bsdunzip test failing due to a locale issue
  * fix-bsdunzip-test.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718884800">- Update lib-suffix.patch
  * Add LIB_SUFFIX to libdir path in the pkg-config file</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1727438400">- Update to 3.7.6:
  * tar: clean up linkpath between entries
  * tar: fix memory leaks when processing symlinks or parsing pax headers
  * iso: be more cautious about parsing ISO-9660 timestamps
- Version 3.7.5 changes:
  * fix multiple vulnerabilities identified by SAST
  * cpio: ignore out-of-range gid/uid/size/ino and harden AFIO parsing
  * lzop: prevent integer overflow
  * rar4: protect copy_from_lzss_window_to_unp() (CVE-2024-20696, bsc#1225971)
  * rar4: fix CVE-2024-26256 (CVE-2024-26256, bsc#1225972)
  * rar4: fix OOB in delta and audio filter
  * rar4: fix out of boundary access with large files
  * rar4: add boundary checks to rgb filter
  * rar4: fix OOB access with unicode filenames
  * rar5: clear 'data ready' cache on window buffer reallocs
  * rpm: calculate huge header sizes correctly
  * unzip: unify EOF handling
  * util: fix out of boundary access in mktemp functions
  * uu: stop processing if lines are too long
  * 7zip: fix issue when skipping first file in 7zip archive that is a multiple
    of 65536 bytes
  * ar: fix archive entries having no type
  * lha: do not allow negative file sizes
  * lha: fix integer truncation on 32-bit systems
  * shar: check strdup return value
  * rar5: don't try to read rediculously long names
  * xar: fix another infinite loop and expat error handling
  * many Windows fixes, cleanups and improvements
- Drop fix-soversion.patch, fix-bsdunzip-test.patch
  * Fixed upstream</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1729166400">- Update to 3.7.7:
  * gzip: prevent a hang when processing a malformed gzip inside a gzip
  * tar: don't crash on truncated tar archives
  * tar: fix two leaks in tar header parsing
  * 7-zip: read/write symlink paths as UTF-8
  * cpio: exit with an error code if an entry could not be extracted
  * rar5: report encrypted entries
  * tar: fix truncation of entry pathnames in specific archives</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1740484800">- Fix CVE-2024-57970, heap-based buffer over-read in header_gnu_longlink
  because it mishandles truncation (CVE-2024-57970, bsc#1237233)
  * CVE-2024-57970.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1741694400">- Fix CVE-2025-1632, null pointer dereference in bsdunzip.c
  (CVE-2025-1632, bsc#1237606)
  * CVE-2025-1632.patch
- Fix CVE-2025-25724, Buffer Overflow vulnerability in libarchive
  (CVE-2025-25724, bsc#1238610)
  * CVE-2025-25724.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742731200">- Update to 3.7.8:
  * 7zip reader: add SPARC and POWERPC filter support for non-LZMA compressors
  * tar reader: Ignore ustar size when pax size is present
  * tar writer: Fix bug when -s/a/b/ used more than once with b flag
  * libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter
  * libarchive: Adding missing seeker function to archive_read_open_FILE()
- inludes the previously patched security fixes, dropping:
  CVE-2025-1632.patch, CVE-2025-25724.patch, CVE-2024-57970.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1743854400">- Update to 3.7.9:
  * fix regression regarding GNU sparse entries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1749124800">- update to 3.8.1:
  * libarchive: fix FILE_skip regression
  * compress: Prevent call stack overflow
  * iso9660: always check archive_string_ensure return value
  * tar: Support negative time values with pax
  * tar: Reset accumulated header state after reading macOS metadata blob
  * tar: Keep block alignment after pax error
  * tar: Handle extra bytes after sparse entries
- includes changes from 3.8.0:
  * bsdtar: support --mtime and --clamp-mtime
  * 7-zip reader: improve self-extracting archive detection
  * xar: xmllite support for the XAR reader and writer
  * zip writer: added XZ, LZMA, ZSTD and BZIP2 support
  * zip writer: added LZMA + RISCV BCJ filter
  * rar: do not skip past EOF while reading (boo#1244159)
  * rar: fix double free with over 4 billion nodes (boo#1244160)
  * rar: fix heap-buffer-overflow (boo#1244161)
  * warc: prevent signed integer overflow (boo#1244162)
  * tar: fix overflow in build_ustar_entry (boo#1244163)
  * bsdtar: don't hardlink negative inode files together
  * gz: allow setting the original filename for gzip compressed files
  * lib: improve lseek handling
  * lib: support @-prefixed Unix epoch timestamps as date strings
  * rar: support large headers on 32 bit systems
  * tar reader: Improve LFS support on 32 bit systems
- drop lib-suffix.patch, different implementation upstream
- spec file clean-up, removing currently unused -static</changelog>
</package>
<package pkgid="5e89224c9c670bee50666c31c8f087fa82331baec2bc23d80b5b4b8cbb5a57f277a99c4276e697c176fb6b6e46145761122d7b2ec483930432c76853c812cfba" name="libasm1" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190:
  * libelf: Add RELR support.
  * libdw: Recognize .debug_[ct]u_index sections
  * readelf:
  - Support readelf -Ds, --use-dynamic --symbol.
  - Support .gdb_index version 9
  * scrlines: New tool that compiles a list of source files associated
    with a specified dwarf/elf file.
  * backends: Various LoongArch updates.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove files packaged by elfutils-debuginfod</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734004800">- Add fix-static-linking.patch (bsc#1234445)</changelog>
</package>
<package pkgid="2b5f98fd241cef2bc51a9c5c4a345704f21d246ef3be37c0d62a3ffe36207c54f6b4689e226de0355b4452918a82a1b524ca16090761e1b2e76f0789b1926797" name="libasound2" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1694260800">- Upstream fix backport:
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
- Upstream fix for PCM segfault regression (bsc#1215167):
  0003-pcm-Fix-segfault-with-32bit-libs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Updated to alsa-lib 1.2.11:
  * auto-tools fixes, versioned symbol fixes
  * support dB TLVs for single controls
  * various PCM updates, including subformat extensions
  * UMP and sequencer API fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib
- Dropped obsoleted patches:
  0001-control.h-Fix-ump-header-file-detection.patch
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
  0003-pcm-Fix-segfault-with-32bit-libs.patch
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch
  0005-seq-Fix-typos-in-symbol-version-definitions.patch
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-lib 1.2.12:
  * pcm: plug support for iec958 subframe samples
  * pcm: ladspa - Skip missing ladspa directories
  * topology: correct version script path
  * ucm: define and describe Syntax 7
  * async handler cleanup fix
  * conf updates
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-lib 1.2.13:
  * static build fixes
  * documentation update for control remap API
  * PCM dmix fixes
  * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync()
  * ump: Add a function to provide the packet word length of a UMP type
  * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions
  * seq: Add API functions to set different tempo base values
  * seq: Add API helper functions for creating UMP Endpoint and Blocks
  * documentation fixes for UMP and sequencer API
  * test: Add an example programs for UMP
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib
- Conditionally take libtool</changelog>
  <changelog author="tiwai@suse.com" date="1731672000">- Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732449600">- Fix header inclusions for implicit dependnecies (bsc#1233682)
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-lib 1.2.14:
  * Disable and delete alsalisp code
  * include: prefer alsa/asoundlib.h for apps, dependency cleanups
  * seq: Define new events for UMP EP/FB change notifications
  * control: remap improvements
  * pcm: tstamp mode fixes
  * rawmidi: ump fixes and tied device flag extensions
  * seq: fix UMP handling and other minot fixes
  * ucm: add sys-card substitution, etc
  * test/playmidi1: fix compilation caused by conflict between midifile.h and ump_msg.h
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-lib
- Drop obsoleted patches:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
</package>
<package pkgid="eaf78be09d9ebfb5806f9ce83be6157156ab4f3b1bfc828b1dd045506dffa2339924f9b453b5eecaf2e133305d713d0ad9206c7bdd4f040508763fb3fb488c23" name="libassuan9" arch="x86_64">
  <version epoch="0" ver="3.0.2" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1545220800">- qemu-disable-fdpassing-test.patch: remove</changelog>
  <changelog author="kbabioch@suse.de" date="1549886400">- Update to 2.5.3:
  * Add a timeout for writing to a SOCKS5 proxy.
  * Add workaround for a problem with LD_LIBRARY_PATH on newer systems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603540800">- update to 2.5.4:
  * Fix some minor build annoyances</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 2.5.5:
  * Fix a crash in the logging code
  * Upgrade autoconf</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 2.5.6:
  * Fix logging of confidential data. [rA0fc31770fa]
  * Fix memory wiping. [T5977]
  * Fix macOS build problem. [T5440,T5610]
  * Upgrade autoconf stuff.
  * Release-info: https://dev.gnupg.org/T6542</changelog>
  <changelog author="pmonreal@suse.com" date="1708948800">- Update upstream libassuan.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1709812800">- Update to 2.5.7:
  * New configure option --with-libtool-modification. [T6619]
  * Change the naming of the 64 bit Windows DLL from libassuan6-0.dll
    to libassuan-0.dll to sync this with what we did for libgpg-error.
  * Release-info: https://dev.gnupg.org/T7028</changelog>
  <changelog author="pmonreal@suse.com" date="1718884800">- Update to 3.0.0:
  * API change: For new code, which uses libassuan with nPTH, please
    use gpgrt_get_syscall_clamp and assuan_control, instead of the
    system_hooks API.  Use of ASSUAN_SYSTEM_NPTH is deprecated with new
    API version 3. If it's really needed to keep using old
    implementation of ASSUAN_SYSTEM_NPTH, you need to change your your
    application code, to define
    ASSUAN_REALLY_REQUIRE_V2_NPTH_SYSTEM_HOOKS before including
    &lt;assuan.h&gt;.  For an application which uses version 2 API
    (NEED_LIBASSUAN_API=2 in its configure.ac), use of
    ASSUAN_SYSTEM_NPTH is still supported. [T5914]
  * New function assuan_control. [T6625]
  * New function assuan_sock_accept. [T5925]
  * New functions assuan_pipe_wait_server_termination and
    assuan_pipe_kill_server to support abstraction of process. [T6487]
  * Windows support for sendfd/recvfd. [T6236]
  * Implement timeout in assuan_sock_connect_byname. [T3302]
  * No support for WindowsCE, any more. [T6170]
  * New socket flags "linger" and "reuseaddr". [rA87f92fe962]
  * Interface changes relative to the 2.5.0 release:
  - assuan_sock_accept                  NEW.
  - assuan_pipe_wait_server_termination NEW.
  - assuan_pipe_kill_server             NEW.
  - assuan_sock_set_flag                EXTENDED.
  - assuan_sock_get_flag                EXTENDED.
  * Release-info: https://dev.gnupg.org/T7163</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1722168000">- update to 3.0.1 (shared library version 9)
  * API change: For new code, which uses libassuan with nPTH, use
    gpgrt_get_syscall_clamp and assuan_control, instead of the
    system_hooks API. Use of ASSUAN_SYSTEM_NPTH is deprecated with
    new API version 3.
  * Various API extensions
  * New socket flags "linger" and "reuseaddr"
- drop extra gpg-error requirement on -devel, it is autogenerated
- drop texinfo macro from spec files, handled via file triggers
- package license texts</changelog>
  <changelog author="pmonreal@suse.com" date="1739966400">- Update to 3.0.2:
  * Fix for FreeBSD to set the pid of assuan_peercred_t. [rAdfa5e6532d]
  * Use socklen_t for the length of socket address. [T5924]
  * Fix errno setting on Windows for assuan_sock_bind failure. [T7456]
  * New assuan_sock_get_flag "w32_error" to get the actual Windows
  error after a system call and not just the mapped errno. [T7456]</changelog>
</package>
<package pkgid="b477cb980be0784b98b72bb270004f18615112d9de129fd9cf615a5e0371196e80abbd2d8fd0083e89402f8e33f9d467678cf1a26a144e2ae4c67ae27e28a9a9" name="libatasmart-utils" arch="x86_64">
  <version epoch="0" ver="0.19" rel="160000.3.2"/>
  <changelog author="vuntz@opensuse.org" date="1254484800">- Add libatasmart-jmicron.patch to fix issues with some bridges not
  working well. See rh#515881 for details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1258113600">- Update to version 0.17:
  + Add various blobs
  + Ignore attributes 5 and 190 on some Apple SSD
  + Check the right boolean when calculating blob size
  + Delay smart initialization until the first SMART call is done
- Changes from version 0.16:
  + Disable jmicron access mode for some more jmicron bridges
- Changes from version 0.15:
  + Support some ssd smart attrs
  + Add various blobs.
  + Blacklist 152d:2329 jmicron usb bridges
  + Add vala vapi files.
- Drop libatasmart-jmicron.patch: fixed upstream.</changelog>
  <changelog author="ro@suse.de" date="1268740800">- fix build by initializing member suffix_of in strpool.c</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="vuntz@opensuse.org" date="1321358400">- Update to version 0.18:
  + Add support for end-to-end-error, command-timeout,
    available-reserved-space, program-fail-count, erase-fail-count
    attributes.
  + Display endurance-remaining as percentage decreasing from 100
    to 0.
  + Show MB, GB or TB depending on the value.
  + Ignore sector count if it is -1.
  + Speed up get_overall() and get_bad().
  + Restrict the list of exported symbols to sk_.*
  + Use quirks for more Apple SSD firmware versions
  + Blacklist an Oxford Semiconductor bridge.
  + Add INTEL SSD 320 120GB blob and several quirks for Intel SSD
    G3 (Available Reserved Space, Media Wearout Indicator, Total
    LBAs Written, Timed Workload Media Wear, Timed Workload Host
    Reads, Workload Timer, etc.)
  + Several small bug fixes and other code changes.
  + Build system improvements.
- Drop libatasmart-initialize.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.19:
  + Add quirks for Intel SSD Serie 320
  + Add S.M.A.R.T attributes for Samsung SSD</changelog>
  <changelog author="perry.werneck@gmail.com" date="1461931200">- Adding "xz" as BuildRequires since it's not default on SLES11 and
  using a bigger description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Add libatasmart-0.19-wd-fix.patch: Fix issue with WD drives.
  Fixes fdo#61998.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578139200">- Modernize spec file
- Use pkgconfig(libudev) instead of libudev-devel, allows shortcut
  via systemd-mini package.</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="53ac97f988a94a80620be3a1b040f3ffab4bfae1b553ce2c3dbacc5b30491d9b569da66185134fd7ea52d4af9ecac1e1035ed459ef550505a247d18a3aa14c26" name="libatasmart4" arch="x86_64">
  <version epoch="0" ver="0.19" rel="160000.3.2"/>
  <changelog author="vuntz@opensuse.org" date="1254484800">- Add libatasmart-jmicron.patch to fix issues with some bridges not
  working well. See rh#515881 for details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1258113600">- Update to version 0.17:
  + Add various blobs
  + Ignore attributes 5 and 190 on some Apple SSD
  + Check the right boolean when calculating blob size
  + Delay smart initialization until the first SMART call is done
- Changes from version 0.16:
  + Disable jmicron access mode for some more jmicron bridges
- Changes from version 0.15:
  + Support some ssd smart attrs
  + Add various blobs.
  + Blacklist 152d:2329 jmicron usb bridges
  + Add vala vapi files.
- Drop libatasmart-jmicron.patch: fixed upstream.</changelog>
  <changelog author="ro@suse.de" date="1268740800">- fix build by initializing member suffix_of in strpool.c</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="vuntz@opensuse.org" date="1321358400">- Update to version 0.18:
  + Add support for end-to-end-error, command-timeout,
    available-reserved-space, program-fail-count, erase-fail-count
    attributes.
  + Display endurance-remaining as percentage decreasing from 100
    to 0.
  + Show MB, GB or TB depending on the value.
  + Ignore sector count if it is -1.
  + Speed up get_overall() and get_bad().
  + Restrict the list of exported symbols to sk_.*
  + Use quirks for more Apple SSD firmware versions
  + Blacklist an Oxford Semiconductor bridge.
  + Add INTEL SSD 320 120GB blob and several quirks for Intel SSD
    G3 (Available Reserved Space, Media Wearout Indicator, Total
    LBAs Written, Timed Workload Media Wear, Timed Workload Host
    Reads, Workload Timer, etc.)
  + Several small bug fixes and other code changes.
  + Build system improvements.
- Drop libatasmart-initialize.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.19:
  + Add quirks for Intel SSD Serie 320
  + Add S.M.A.R.T attributes for Samsung SSD</changelog>
  <changelog author="perry.werneck@gmail.com" date="1461931200">- Adding "xz" as BuildRequires since it's not default on SLES11 and
  using a bigger description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Add libatasmart-0.19-wd-fix.patch: Fix issue with WD drives.
  Fixes fdo#61998.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578139200">- Modernize spec file
- Use pkgconfig(libudev) instead of libudev-devel, allows shortcut
  via systemd-mini package.</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="0dc56fc1ab6c781479b70b01642f5dc042fd5ed5aa12e7919f6817cc4ea521d552f1307e048b24aa1f6ee172dfe46f4f9e634d74724494e286228d4fd794411d" name="libatk-1_0-0" arch="x86_64">
  <version epoch="0" ver="2.56.3" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1736596800">- Update to version 2.54.1:
  + Fix various memory leaks.
  + Fix the build on FreeBSD.
- Switch to source service for tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736596801">- Update to version 2.55.0 (Unstable):
  + Improve warnings when setting a property.
  + Use the appropriate annotations for callbacks.
  + device: Support adding grabs given a keysym.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736856000">- Update to version 2.55.0.1 (Unstable):
  + Fix regression in 2.55.0 where ungrabbing keys did not work
    reliably.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 2.55.2 (Unstable):
  + Attempt to fix a use after free in the atk bridge.
  + Add a switch role.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.55.90 (Unstable):
  + Support grabbing keyboard shortcuts through the new
    org.freedesktop.a11y.KeyboardMonitor interface. This allows key
    grabs to be supported under Wayland with the latest mutter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 2.56.0:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743249600">- Update to version 2.56.1:
  + device-a11y-manager:
  - Fix crash on dispose
  - Check properly for the DBus backend presence</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1745841600">- Update to version 2.56.2:
  + Fix the build with glib &lt; 2.76.
  + a11y-manager-device: Fix unmap_keysym_modifier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751198400">- Update to version 2.56.3:
  + DeviceEventController: update mouse coordinates before sending
    button events
  + atspi-device-legacy: Don't crash when XkbGetMap fails
  + Return localized role name for ATSPI_ROLE_EDITBAR</changelog>
  <changelog author="mgorse@suse.com" date="1752235200">- Add upstream fixes:
  +  at-spi2-core-grab-memory-leak.patch
  + at-spi2-core-key-grabs.patch (glgo#GNOME/at-spi2-core!193)
  + at-spi2-core-plug-crash.patch (glgo#GNOME/at-spi2-core#198)</changelog>
</package>
<package pkgid="c0474abe3dc3c141ab287b6e9487b429c72df961c2cc690247e126df803e2dbb27eb12061e2d59ceb7ce0baf09194bb35923e618e522b32ddf540106ccbd8148" name="libatk-bridge-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.56.3" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1736596800">- Update to version 2.54.1:
  + Fix various memory leaks.
  + Fix the build on FreeBSD.
- Switch to source service for tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736596801">- Update to version 2.55.0 (Unstable):
  + Improve warnings when setting a property.
  + Use the appropriate annotations for callbacks.
  + device: Support adding grabs given a keysym.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736856000">- Update to version 2.55.0.1 (Unstable):
  + Fix regression in 2.55.0 where ungrabbing keys did not work
    reliably.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 2.55.2 (Unstable):
  + Attempt to fix a use after free in the atk bridge.
  + Add a switch role.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.55.90 (Unstable):
  + Support grabbing keyboard shortcuts through the new
    org.freedesktop.a11y.KeyboardMonitor interface. This allows key
    grabs to be supported under Wayland with the latest mutter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 2.56.0:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743249600">- Update to version 2.56.1:
  + device-a11y-manager:
  - Fix crash on dispose
  - Check properly for the DBus backend presence</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1745841600">- Update to version 2.56.2:
  + Fix the build with glib &lt; 2.76.
  + a11y-manager-device: Fix unmap_keysym_modifier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751198400">- Update to version 2.56.3:
  + DeviceEventController: update mouse coordinates before sending
    button events
  + atspi-device-legacy: Don't crash when XkbGetMap fails
  + Return localized role name for ATSPI_ROLE_EDITBAR</changelog>
  <changelog author="mgorse@suse.com" date="1752235200">- Add upstream fixes:
  +  at-spi2-core-grab-memory-leak.patch
  + at-spi2-core-key-grabs.patch (glgo#GNOME/at-spi2-core!193)
  + at-spi2-core-plug-crash.patch (glgo#GNOME/at-spi2-core#198)</changelog>
</package>
<package pkgid="69c2d94399126e05061c10540278480e8ca387041f9b6b322d851aaf66b7c2a5c03b254ad9bccb63fd8d00853495f093284783384b43508994d01c4c09eb6101" name="libatomic1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="e6db4977bbad1838be985f4ceaa22b2505384ab02b5793a91fa9ff10f7447a36dc201c0aa9a2eba06b120f5a12e1dd66134c73d10b3b1238f4b4d11a13c5ac45" name="libatspi0" arch="x86_64">
  <version epoch="0" ver="2.56.3" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1736596800">- Update to version 2.54.1:
  + Fix various memory leaks.
  + Fix the build on FreeBSD.
- Switch to source service for tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736596801">- Update to version 2.55.0 (Unstable):
  + Improve warnings when setting a property.
  + Use the appropriate annotations for callbacks.
  + device: Support adding grabs given a keysym.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736856000">- Update to version 2.55.0.1 (Unstable):
  + Fix regression in 2.55.0 where ungrabbing keys did not work
    reliably.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 2.55.2 (Unstable):
  + Attempt to fix a use after free in the atk bridge.
  + Add a switch role.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.55.90 (Unstable):
  + Support grabbing keyboard shortcuts through the new
    org.freedesktop.a11y.KeyboardMonitor interface. This allows key
    grabs to be supported under Wayland with the latest mutter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 2.56.0:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743249600">- Update to version 2.56.1:
  + device-a11y-manager:
  - Fix crash on dispose
  - Check properly for the DBus backend presence</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1745841600">- Update to version 2.56.2:
  + Fix the build with glib &lt; 2.76.
  + a11y-manager-device: Fix unmap_keysym_modifier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751198400">- Update to version 2.56.3:
  + DeviceEventController: update mouse coordinates before sending
    button events
  + atspi-device-legacy: Don't crash when XkbGetMap fails
  + Return localized role name for ATSPI_ROLE_EDITBAR</changelog>
  <changelog author="mgorse@suse.com" date="1752235200">- Add upstream fixes:
  +  at-spi2-core-grab-memory-leak.patch
  + at-spi2-core-key-grabs.patch (glgo#GNOME/at-spi2-core!193)
  + at-spi2-core-plug-crash.patch (glgo#GNOME/at-spi2-core#198)</changelog>
</package>
<package pkgid="3db805f2c888b56c7a793e75280eebb0459d4d284bf45227b800e08c4826b1df795eb698fa01c71397eb2e6189f5e781a4e96945aaa97128d4c92e9b112e8c02" name="libattr1" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- remove man5/attr.5, it is now part of man-pages
  http://lwn.net/Articles/643559/</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Remove obsolete Obsolete lines
- Drop static subpackage, nothing in TW depends on it Deb/RH do not
  provide it either
- Rely on simple upstream make install target
- Run tests
- Update to 2.4.48:
  * Provide default xattr.conf
  * Update buildsystem to reflect current autotools state
  * Small test updates
  * Remove various deprecated sections like attr/attr.h
- Update keyring, Mike Frysinger released this version
- Add patch to have tests working with newer perls:
  * 0001-attr-2.4.48-test-suite-perl.patch</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Replace unspecific boilerplate summary from years ago.</changelog>
  <changelog author="schwab@suse.de" date="1536148800">- Add libattr-devel-static subpackage</changelog>
  <changelog author="dmueller@suse.com" date="1536667200">- update description for libattr-devel-static to make it less
  boilerplate</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.5.1:
  * Fix libtool library versioning regression
  * Update po files and German translation
  * getfattr: Add --one-file-system option
  * Move struct stat into struct walk_tree_args
  * Move list of open directories into struct walk_tree_args
  * Move walk_tree_rec arguments into a separate struct
  * xattr.conf: Indicate afs metadata xattrs should be skipped when copying
  * Fix typos in manual pages
  * getfattr.1: by default only user namespace attributes are dumped
  * Enable large-file support on systems that do not enable it by default
  * test: escape left brace in a regex in test/run
- drop 0001-attr-2.4.48-test-suite-perl.patch (upstream)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1707825600">- update to 2.5.2:
  * attr: eliminate a dead store in attr_copy_action()
  * libattr: Set symbol versions for legacy syscalls via attribute
    or asm
  * exports: use LGPL for library code
  * documentation updates
  * translation updates (Polish, Dutch, Gregorian, French)
  * build system updates</changelog>
</package>
<package pkgid="d4d34317610568213be2336abed9190d67b21474793768de9ffbb9088622218df2602e04e83ad6287a41910d2766a02a22283c8356b8b2b33ea99156ef6366e2" name="libaudit1" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1671105600">- Enable build for ARM (32-bit)
- Update to version 3.0.9:
  * In auditd, release the async flush lock on stop
  * Don't allow auditd to log directly into /var/log when log_group is non-zero
  * Cleanup krb5 memory leaks on error paths
  * Update auditd.cron to use auditctl --signal
  * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
  * In auparse, special case kernel module name interpretation
  * If overflow_action is ignore, don't treat as an error
  (3.0.8)
  * Add gcc function attributes for access and allocation
  * Add some more man pages (MIZUTA Takeshi)
  * In auditd, change the reinitializing of the plugin queue
  * Fix path normalization in auparse (Sergio Correia)
  * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
  * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
  * Drop ProtectHome from auditd.service as it interferes with rules
  (3.0.7)
  * Add support for the OPENAT2 record type (Richard Guy Briggs)
  * In auditd, close the logging file descriptor when logging is suspended
  * Update the capabilities lookup table to match 5.16 kernel
  * Improve interpretation of renamat &amp; faccessat family of syscalls
  * Update syscall table for the 5.16 kernel
  * Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
  * audit-allow-manual-stop.patch
  * audit-ausearch-do-not-require-tclass.patch
  * audit-no-gss.patch
  * enable-stop-rules.patch
  * fix-hardened-service.patch
  * harden_auditd.service.patch
- Remove patches (fixed by version update):
  * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Add new headers 'audit_logging.h' and 'audit-records.h' for
    audit-devel</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec: add requirement for 'awk' package (bsc#1231236)</changelog>
</package>
<package pkgid="447f07772043ac0c00036bdac1120ba88c577ba58c13481dd2e1832d1fa4599b32555500106ffb82d8f131f70deaca2679ce80626cb3080615dd487ab733f1ca" name="libaugeas0" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="7f81a8462efc98bc0a9b610cd43fc6b5cfcc7cf76b82220533f51350d6a778f9c07e6ab77bb0f22854f2f4ef2a0096e5f0e5f9bee90774201e357fb27d28843e" name="libauparse0" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1671105600">- Enable build for ARM (32-bit)
- Update to version 3.0.9:
  * In auditd, release the async flush lock on stop
  * Don't allow auditd to log directly into /var/log when log_group is non-zero
  * Cleanup krb5 memory leaks on error paths
  * Update auditd.cron to use auditctl --signal
  * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
  * In auparse, special case kernel module name interpretation
  * If overflow_action is ignore, don't treat as an error
  (3.0.8)
  * Add gcc function attributes for access and allocation
  * Add some more man pages (MIZUTA Takeshi)
  * In auditd, change the reinitializing of the plugin queue
  * Fix path normalization in auparse (Sergio Correia)
  * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
  * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
  * Drop ProtectHome from auditd.service as it interferes with rules
  (3.0.7)
  * Add support for the OPENAT2 record type (Richard Guy Briggs)
  * In auditd, close the logging file descriptor when logging is suspended
  * Update the capabilities lookup table to match 5.16 kernel
  * Improve interpretation of renamat &amp; faccessat family of syscalls
  * Update syscall table for the 5.16 kernel
  * Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
  * audit-allow-manual-stop.patch
  * audit-ausearch-do-not-require-tclass.patch
  * audit-no-gss.patch
  * enable-stop-rules.patch
  * fix-hardened-service.patch
  * harden_auditd.service.patch
- Remove patches (fixed by version update):
  * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Add new headers 'audit_logging.h' and 'audit-records.h' for
    audit-devel</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec: add requirement for 'awk' package (bsc#1231236)</changelog>
</package>
<package pkgid="d981a219dffd2da4705eb60a47694f46945fc714e7f68f1c726d8e75236564da34874c5c9bff5f0d37ee85b0e3526464b4413063d860a422ba948209f99ea947" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="4ec49ebd7500d3c9b2c20f9d661664d72b72796d82b87f9d2364c58080a140e6660091ee0272226418d3d05874bc073205bd8d88ced66055f992868794d62ac8" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="4e583db0fbc2e4c7d27dbd5bbc8a41b1a534aad7035f000ea9eeb587fa0e5f7911cd3260e5f8f4857955ea4edf64a44af47d6b0593591811a295b305feba7dd9" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="990060250a4df125b762c32587d13e0a72a14e97467012e9e6cf8c4bf87a55c7f3d8e2190f08a6c68badbbfbe997c486f3fca44b80875836137c1a8428f04cc2" name="libbasicobjects0" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="160000.2.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="1d349d794fce2256682131216f96f7ed7f36259f394605e5abbb4a82c6f37eb854e8bcb8614bff30c1800ab711d3686a6e2b80ae8a8c0affbae4ca624ba2c666" name="libbd_btrfs3" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="f575c74ee08ea728af548265664f2b271d41b228bcde7f6ae97b2bfb9cb4b61456f8fcd4257ec7ea710fde18a20086224b31536a6c077d10323e3a1acdcf7263" name="libbd_crypto3" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="5db63595fa969d8d92a14d7d8ddc3a12cc772765863a2ad81b1d424d6742ee3c0ef62c25d1d16cdaf22cd65fa9a3b438a2b66b64bc093dd3c437e207efe3e5fa" name="libbd_fs3" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="8849f810c6d76dd7a4eb090f6404983b6552ec7094245b6fa201220dd3a8818920b2b70588fd4f22db9bf118fd09d378746684b74197cfddb7ee168e32d172b6" name="libbd_loop3" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="daebf0e9dc458dbce1007c1d03c2e727f6184f4b6edcc509ada7c99795b345213e4183f2bf810dd4112a3adb4a52c9a672a6e06ec8ac10a2d99cac6c63602707" name="libbd_lvm3" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="122cc00c95354b8332be489beca051c5006f6b45fbe630a83915f1707baab99402c7ea4b70f0f02074900c96bbd1569a5eeb76eaaeb05549138c5db52a499b04" name="libbd_mdraid3" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="c0ce07b2eb716adfdba29946bcc982291290caf70a3e3e7ae25bc266f68467f8befe8f623a57d307b6606c562a39af6876d882ffe63e8fc698e43e718d7d08fc" name="libbd_nvme3" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="7ab4b6d1804e5507f4fa4caec05df741ac11bb2c69dc4bb0ec6b6a6a92f1a655158c7c5fed01c071bd06b7a85afce57c21565675a1275efe1fbb51c6fccff1b6" name="libbd_part3" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="8cc516fc11997f94dc57f70ded48f68365e9d7db1511c0585daa6f9842afe042f7a082d6a793ec7f08bf431e94b14e6bc18c55a6b51d77ecc6778208de197d9f" name="libbd_swap3" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="90ad01dfabbdef46e2aa205d19ef756a5ea3dd10b2facdf4587ff4f0d7ccf3df7e1637d8741dddbb47e7c3dbbc5555764551bcdb806a352cd566a2b6f0b697cb" name="libbd_utils3" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="185744ad1f83f880dc3c615044a9faffe40faaa5d8042cde8ffd9a3ca83dc4a6efc74047bd7a9a9cd4aa58420857897429c80d96d379d201d31e277e1065843f" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.41.1" rel="160000.3.1"/>
  <changelog author="sbrabec@suse.com" date="1744027200">- Update to version 2.41:
  * agetty: Fixed an issue where issue files were not being printed
    from additional locations, such as /run or /usr/lib. This
    change now allows for the use of local information from /etc,
    in addition to generated files from /run and
    distribution-specific files from /usr/lib.
  * cfdisk and sfdisk: Added support for the --sector-size command
    line option.
  * sfdisk: Added a new option, --discard-free.
  * fdisk: Added a new command, 'T', to discard sectors.
  * chrt: The --sched-runtime now supports SCHED_{OTHER,BATCH}
    policies.
  * column: Can now handle ANSI SGR colors inside OSC 8 hyperlink
    escape codes and sequences.
  * enosys: Can now dump defined filters.
  * libmount:
  * Added experimental support for statmount() and listmount()
    syscalls.
  * This new functionality can be accessed using "findmnt
  - -kernel=listmount".
  * Added a new mount option,
    X-mount.nocanonicalize[=source|target].
  * Added new mount extensions to the "ro" flag (ro[=vfs,fs]).
  * Added a new option, X-mount.noloop, to disable automatic loop
    device creation.
  * Now supports bind symlinks over symlinks.
  * Reads all kernel info/warning/error messages from new API
    syscalls (and mount(8) prints them).
  * libuuid: Now supports RFC9562 UUIDs.
  * findmnt, lsblk, and lsfd: Added a new --hyperlink command line
    option to print paths as terminal hyperlinks.
  * findmnt: Can now address filesystems using --id and --uniq-id
    (requires listmount() kernel support).
  * flock: Added support for the --fcntl command line option.
  * hardlink: Can now prioritize specified trees on the command
    line using --prioritize-trees.
  * Can exclude sub-trees using --exclude-subtree or keep them in
    the current mount using --mount.
  * Duplicates can now be printed using --list-duplicates.
  * hwclock: Added a new --param-index option to address position
    for RTC_PARAM_{GET,SET} ioctls.
  * kill: Can now decode signal masks (e.g. as used in /proc) to
    signal names.
  * libblkid: Made many changes to improve detection, including
    exfat, GPT, LUKS2, bitlocker, etc.
  * login: Added support for LOGIN_ENV_SAFELIST in /etc/login.def.
  * lsfd: Now supports pidfs and AF_VSOCK sockets.
  * lsipc, ipcmk, ipcrm: Now supports POSIX ipc.
  * lslogins: Now supports lastlog2.
  * lsns: Added support for the --filter option.
  * build by meson: Now supports translated man pages and has fixed
    many bugs.
  * mkswap: The option --file should now be usable on btrfs.
  * nsenter: Improved support for pidfd and can now join target
    process's socket net namespace.
  * scriptlive: Added a new option, --echo &lt;never|always|auto&gt;.
  * zramctl: Now supports COMP-RATIO and --algorithm-params.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41-ReleaseNotes
- Update util-linux-login_defs-check.sh:
  * Make instructions up to date.
  * Update checksum reflecting the shadow update.
- Refresh libmount-print-a-blacklist-hint-for-unknown-filesyst.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1744891200">- Enable mountfd support again (jsc#PED-9752).
  BREAKING CHANGE
  Mountfd is nearly completely compatible with the old mount. There
  is a special case that cannot be handled by mountfd, and it needs
  to be handled by applications:
  Mountfd discriminates between physical mount layer and virtual
  mount layer. Once the physical mount layer is read-only,
  read-write mount on the virtual layer is not possible.
  If the first mount is read only, then the physical filesystem is
  mounted read-only, and later mount of the same file system as
  read-write is not possible. To solve this problem, the first
  mount needs to be read-only only on the virtual layer, keeping
  the physical layer read-write.
  The user space fix is simple:
  Instead of
    mount -oro
  use
    mount -oro=vfs
  This will keep the physical layer read-write, but the virtual
  file system layer (and the user space access) will be read-only.</changelog>
  <changelog author="sbrabec@suse.com" date="1747742400">- Fix segfault of findmnt (boo#1242705,
  gh#util-linux/util-linux#3574,
  util-linux-libblkid-econf-parse.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1748520000">- Add ul_ prefix to functions with common names. Fixes btrfsprogs
  build failure (gh#util-linux/util-linux#3603,
  util-linux-rename-common-symbols-1.patch,
  util-linux-rename-common-symbols-2.patch,
  util-linux-rename-common-symbols-3.patch,
  util-linux-rename-common-symbols-4.patch).</changelog>
  <changelog author="nicolas@belouin.fr" date="1749556800">- Fix libmount --no-canonicalize regression (boo#1244251,
  gh#util-linux/util-linux#3479,
  libmount-fix-no-canonicalize-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1750766400">- Update to version 2.41.1:
  * cfdisk: fix memory leak and possible NULL dereference
  * fdisk: fix possible memory leak
  * findmnt: fix -k option parsing regression (boo#1242705,
    drop util-linux-libblkid-econf-parse.patch)
  * hardlink: fix performance regression
  * include/cctype: fix string comparison
  * libblkid:
  * Fix crash while parsing config with libeconf
  * befs fix underflow
  * avoid strcasecmp() for ASCII-only strings
  * libblkid/src/topology/dm: fix fscanf return value check to
    match expected number of parsed items
  * libmount:
  * (subdir) restrict for real mounts only
  * (subdir) remove unused code
  * avoid calling memset() unnecessarily
  * fix --no-canonicalize regression (boo#1244251,
    drop libmount-fix-no-canonicalize-regression.patch)
  * lsblk:
  * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE
  * avoid strcasecmp() for ASCII-only strings
  * lscpu:
  * fix possible buffer overflow in cpuinfo parser
  * Fix loongarch op-mode output with recent kernel
  * lsfd:
  * scan the protocol field of /proc/net/packet as a hex number
  * fix the description for PACKET.PROTOCOL column
  * lsns:
  * enhance compilation without USE_NS_GET_API
  * fix undefined reference to add_namespace_for_nsfd #3483
  * more:
  * fix broken ':!command' command key
  * fix implicit previous shell_line execution #3508
  * tests: (test_mkfds::mapped-packet-socket) add a new parameter,
    protocol
  * treewide:
  * add ul_ to parse_timestamp() function name
    (drop util-linux-rename-common-symbols-4.patch)
  * add ul_ to parse_switch() function name
    (drop util-linux-rename-common-symbols-3.patch)
  * add ul_ to parse_size() function name
    (drop util-linux-rename-common-symbols-2.patch)
  * add ul_ to parse_range() function name
    (drop util-linux-rename-common-symbols-1.patch)
  * fix optional arguments usage
  * avoid strcasecmp() for ASCII-only strings
  * Wipefs: improve --all descriptions for whole-disks
  * Misc: Do not call exit() on code ending in shared libraries
  * Other fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes
- Fix problem with uname26 listed twice.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
</package>
<package pkgid="82e81578cdff434c144dd7c89066c1ca37a6e05bdef8e6a7a7a4bcb881e2fef1a227eceed9e0d37c0cd73ca1de31a190a6cb671462cb54bbce83df7249705fa5" name="libblockdev" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="b94a42c17a22dc2e8d938943d008e0c413a60771981622d9e6ce7f21f2cd778bf6ec6729dcbbcbfe71421be863ac85b3250cd7a11ba62f902f2adeb7ff4f5cbc" name="libblockdev3" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- update to 3.1.1:
  * Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined
  * Port to G_GNUC_INTERNAL for controlling symbols visibility
  * Fix some more occurrences of missing port to G_GNUC_UNUSED
  * dm_logging: Annotate redirect_dm_log() printf format
  * tests: Add NVMe persistent discovery controller tests
  * tests: Add NVMe controller type checks
  * Makefile: Fix bumpver to work with micro versions
  * tests: Manually remove removed PVs from LVM devices file
  * tests: Ignore LVM devices file for non-LVM tests
  * tests: Fix removing custom LVM devices file
  * nvme: Add bd_nvme_is_tech_avail to the API file
  * lvm-dbus: Fix passing size for pvresize over DBus
- Update to 3.1.0:
  * Add BDPluginSpec constructor and use it in plugin_specs_from_names
  * overrides: Remove unused 'sys' import
  * swap: Add support for checking label and UUID format
  * fs: Add a function to check label format for F2FS
  * fs: Add a generic function to check for fs info availability
  * fs: Fix allowed UUID for generic mkfs with VFAT
  * fs: Add support for getting filesystem min size for NTFS and Ext
  * Mark NVDIMM plugin as deprecated since 3.1
  * part: Fix potential double free when getting parttype
  * Fix missing progress initialization in bd_crypto_luks_add_key
  * lvm-dbus: Fix leaking error
  * lvm-dbus: Avoid using already-freed memory
  * utils: Add expected printf string annotation
  * fs: Report reason for open() and ioctl() failures
- Add %{_libdir}/libbd_s390.so for s390x because missing file identitied
- Update to 3.0.4:
  * plugins: use g_autofree for free'ing g_char's
  * plugins: btrfs: use g_autofree where possible for g_free
  * fs: correct btrfs set label description
  * nvme: Rework memory allocation for device ioctls
  * spec: Obsolete vdo plugin packages
  * spec: Move obsoleted devel subpackages to libblockdev-devel
  * ci: Bump actions/checkout from v3 to v4
  * part: Do not open disk read-write for read only operations
  * fs: Disable progress for ntfsresize
  * packit: Add configuration for downstream builds
  * logging: Default to DEBUG log level if compiled with --enable-debug
  * Use log function when calling a plugin function that is not loaded
  * lvm-dbus: Replace g_critical calls with bd_utils_log_format
  * tests: Fail early when recompilation fails in library_test
- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C
- Update to version 3.0.2:
  * Use ntfsinfo instead of ntfscluster for faster
    bd_fs_ntfs_get_info.
  * Restrict list of exported symbols via -export-symbols-regex.
  * lib: Silence the missing DEFAULT_CONF_DIR_PATH.
  * loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices.
  * fs: Fix unused error in extract_e2fsck_progress.
  * fs: Use read-only mount where possible for generic FS
    functions.
  * fs: Document that generic functions can mount filesystems.
  * fs: Avoid excess logging in extract_e2fsck_progress.
- Restructure all sub-packages in the spec file to enhance
  maintainability.
- Update to 3.0.1:
  * New bugfix release of the libblockdev library with multiple
    fixes.
  * loop: Define LOOP_SET_BLOCK_SIZE is not defined. And remove
    bd_loop_get_autoclear definition.
  * crypto: Remove stray struct redefinition.
  * fs: Simplify struct BDFSInfo. And add missing copy and free
    functions to the header file.
  * vdo_stats: Remove unused libparted include.
  * lvm: Make _vglock_start_stop static. Fix declaration for
    bd_lvm_vdolvpoolname. And add bd_lvm_segdata_copy/free to the
    header file.
  * Make the conf.d directory versioned.
- Changes from version 3.0.0:
  * New major release of the libblockdev library. This release
    contains a large API overhaul.
  * VDO a KBD plugins were removed.
  * New NVMe plugin was added.
  * Runtime dependencies are no longer checked during plugin
    initialization.
  * Part plugin was rewritten to use libfdisk instead of libparted
  * Crypto plugin API went through an extensive rewrite.
  * Support for new technologies was added to the crypto plugin:
    FileVault2 encryption, DM Integrity, LUKS2 tokens.
  * Filesystem plugin adds support for btrfs, F2FS, NILFS2, exFAT
    and UDF.
  * Support for new filesystem operations was added to the plugin:
    setting label and UUID, generic mkfs function and API for
    getting feature support for filesystems.
  * dmraid support was removed from the DM plugin.
  * Python 2 support was dropped.
- Drop no longer needed libblockdev-fix-libkmod-include.patch
- Drop no longer supported sub-packages with their dependencies,
  and their configure options, following upstream changes: python2
  (python-devel), bcache, dmraid (dmraid-devel BuildRequires) and
  kbd.
- Add (gcc &gt;= 11 or gcc11) boolean BuildRequires to ensure the
  package is buildable on Leap 15.5, where the gcc meta-package is
  of version 7.
- Bump the SO version to 3 for the shared library and GI bindings
  sub-packages.
- Add ext2fs, fdisk, and libkeyutils pkgconfig() BuildRequires.
  The first is a new dependency for the FS plugin. The second, for
  the PART plugin. And the latter, for the CRYPTO plugin (before,
  the explicit_bzero() function would be searched for).
- Add libnvme-devel &gt;= 1.3 BuildRequires, and pass --with-nvme to
  configure, needed for the NVMe plugin (new upstream addition).
- Pass --with-tools to configure, ensuring we keep building the
  libblockdev tools.</changelog>
  <changelog author="thomas.blume@suse.com" date="1750680000">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="93c0653e34d4b32ad13ad2ee8e1b5484eecfd65d10aba488bea5c2d040c9557dcf5dcce5cc56c7e00d59b296efecf9991d973ebc4d65529d78de53c9f5952dcf" name="libblogger2" arch="x86_64">
  <version epoch="0" ver="2.35" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743163200">- Update to version 2.29
  * Make sure that password prompt is seen Latest
    Use a temporary buffer to be silent during asking passwords.
    And stop system console output during password questions
    only if temporary buffer becomes short. As well as do coloring
    on /dev/ttysclp0 for S390.
- Drop patch.patch as now upstream</changelog>
  <changelog author="werner@suse.de" date="1743422400">- Update to version 2.30
  * The asking variable is not shared
  * Allow password asking prompt to be repeated if empty.
  * Make spinner support UTF-8 multibyte conform.
  * Spinner lines of system still not handled.</changelog>
  <changelog author="werner@suse.de" date="1743595200">- Update to version 2.31
  * Handel BS on password prompt as well
  * Drop spining code as systemd uses clear to end of line
    escape sequence (hard coded!) for its cylon lines.
- blog: again suggest blog-plymouth</changelog>
  <changelog author="werner@suse.de" date="1743681600">- Update to version 2.32
  * Better 3270 console support, use uevent below /sys file system</changelog>
  <changelog author="werner@suse.de" date="1744286400">- The suse-module-tools are required at build otherwise blog
  is not in the initrd</changelog>
  <changelog author="werner@suse.de" date="1744372800">- Use rpm-config-SUSE instead of suse-module-tools for suse version
  above 1550 and add code for the missing macros for older
  distributions like leap 15.6</changelog>
  <changelog author="werner@suse.de" date="1744804800">- Update to version 2.34
  * Make it work on s390x (still no 3215 console)
    This is a bug fix release.  But still no support in conmode
    3215 as there is a race triggered by using conmode 3215.
    The order of the systemd units seems to change with this
    console mode.</changelog>
  <changelog author="werner@suse.de" date="1744891200">- Add patch blog-install.patch
  * Fixes install problems
  * Use module-setup.sh to install in BUILDROOT</changelog>
  <changelog author="werner@suse.de" date="1744891201">- Add patch blog-3215.patch
  * Try to avoid blocking mode of 3215 console on s390x as holding
    the output at `MORE' stops blogd, that is that it can not see
    any messages over its socket like switch of the root file system.</changelog>
  <changelog author="werner@suse.de" date="1745841600">- Update to version 2.35
  * Make s390 3215 console work that is use EPOLLOUT|EPOLLONESHOT
    to control if we can write to ttyS0 in nonblocking mode and if
    not reenable EPOLLOUT|EPOLLONESHOT.
  * At boot set for ttyS0 via vmcp API nonblocking MORE mode with
    `0 0'.  It beeps but boots.
- Remove patches now upstream
  * blog-3215.patch
  * blog-install.patch</changelog>
</package>
<package pkgid="4b91bd868545d7da8758490c0b9cd7efc82de93396215d84e43d9dc3c970b5d2f9b857f65d0d915ee5cbd7a5ac1c0c36b246d100dbae65a5b3931780c20202ea" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.79" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1709121600">- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
  to bluez-obexd, so that file transfer features of the applications
  can be used by default (bsc#1209153).
- Update the description of bluez-obexd.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Fix python3 shebang from test files (bsc#1212476)</changelog>
  <changelog author="calad0i.fill@outlook.com" date="1722859200">- add fix-a2dp-suspend-crash.patch (Issue #701 in upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1722859201">- update to 5.77:
  * Fix issue with storing and handling connection parameters.
  * Fix issue with handling device that are marked as temporary.
  * Fix issue with HID and special handling for non-keyboards.
  * Fix issue with BR/EDR not support when discoverable is off.
  * Add support for initial implementation of ASHA profile.
  * Fix issue with broadcast channel location and stream
    capabilities.
  * Fix issue with handling BIS management and synchronization.
  * Fix issue with handling Extended Advertising.
  * Fix issue with UserspaceHID and replay structures.
  * Add support for providing PPCP characteristic.
  * Fix issue with build system and header inclusion.
  * Fix issue with not enabling Wideband Speech when available.
  * Fix issue with UserspaceHID and Bluetooth Classic devices.
  * Fix issue with checking for services being connected.
  * Fix issue with GATT client connection creation.
  * Fix issue with OBEX and small file transfers.
  * Fix issue with handling pairing with Apple AirPods.
  * Fix issue with BAP and setting up broadcast source.
  * Fix issue with BAP and register all endpoints.
  * Fix issue with BAP and missing metadata property.
  * Fix issue with BAP and not handling out of order responses.
  * Fix issue with BAP and attempting to set device as
    connectable.
  * Add support for CCP plugin for call control profile.
  * Fix issue with BAP and handling stream IO linking.
  * Fix issue with BAP and setup of multiple streams per
    endpoint.
  * Fix issue with AVDTP and potential incorrect transaction
    label.
  * Fix issue with A2DP and handling crash on suspend.
  * Fix issue with GATT database and an invalid pointer.
  * Add support for AICS service.
- drop bluez-test-2to3.diff, bluez-cups-libexec.patch:
  upstream has different solutions for ages, use those instead
- drop fix-link-key-address-type.patch,
  fix-a2dp-suspend-crash.patch: upstream</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1723723200">- add bluez-no-cups-devel-buildreq.patch to avoid cups-devel
  buildrequires which results in an excessive build loop</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142400">- Update to 5.78:
  * Fix issue with handling notification of scanned BISes to BASS
  * Fix issue with handling checking BIS caps against peer caps.
  * Fix issue with handling MGMT Set Device Flags overwrites.
  * Fix issue with handling ASE notification order.
  * Fix issue with handling BIG Info report events.
  * Fix issue with handling PACS Server role.
  * Fix issue with registering UHID_START multiple times.
  * Fix issue with pairing method not setting auto-connect.
- Fix 3 rpmlint warnings, some configuration files were not marked as so.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142401">- Mark the configuration files as 'noreplace'.</changelog>
  <changelog author="pallaswept@proton.me" date="1726660800">- add Fix-crash-after-bt_uhid_unregister_all.patch to fix crashes
  when devices disconnect or go to sleep</changelog>
  <changelog author="fcrozat@suse.com" date="1730894400">- Update to 5.79:
  * Fix issue with handling address type while pairing.
  * Add support for allowing to set A2DP transport delay.
  * Add support for persistent userspace HID operation.
  * Add support for handling syncing to multiple BISes.
- Drop Fix-crash-after-bt_uhid_unregister_all.patch, merged
  upstream.</changelog>
  <changelog author="lioli7k@gmail.com" date="1739793600">- Add supplements bluedevil6 for bluez-obexd
  * In Plasma 6 bluedevil5 got renamed to bluedevil6.
    While bluedevil6 provides bluedevil5 on Tumbleweed it's a good
    idea to add it for future proofing.</changelog>
</package>
<package pkgid="9e9531feffbfd987590b318648dcf3f5f1ef672f3503b297a7468a70e47737852a94efa9701f47322130bb70e4afc9f37322da32216381ab14dcfa4221a406c3" name="libboost_thread1_86_0" arch="x86_64">
  <version epoch="0" ver="1.86.0" rel="160000.2.2"/>
  <changelog author="aschnell@suse.com" date="1693915200">- update to 1.83.0
  * new libraries:
    + Compat - Header-only Library.
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_83_0.html
- dynamic_linking.patch: updated
- boost-mpi-noreturn.patch: added</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698148800">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698321600">- Fix build for gnu-mpich-hpc broken by previous update</changelog>
  <changelog author="aschnell@suse.com" date="1702555200">- update to 1.84.0
  * new libraries:
    + Cobalt (single-threaded asynchronicity framework)
    + Redis (implements protocol RESP3)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_84_0.html
- drop boost-phoenix-revert-std-tuple-support.patch (upstream)
- drop boost-mpi-noreturn.patch (upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1708516800">- avoid obsolete rpm syntax</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Avoid BuildRequire of 'gcc-c++ &gt; 5' which is only a redundant
  check.  This interferes with Substitute.</changelog>
  <changelog author="aschnell@suse.com" date="1713873600">- update to 1.85.0
  * new libraries:
    + charconv (implementation of &lt;charconv&gt;)
    + scope (collection of scope guard utilities)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_85_0.html
- dynamic_linking.patch: updated
- boost-charconv-quadmath.patch: added</changelog>
  <changelog author="hsk17@mail.de" date="1719662400">- add patch boost-1.85.0-python-numpy-2.patch from upstream</changelog>
  <changelog author="aschnell@suse.com" date="1725019200">- update to 1.86.0
  * process turned into compile library
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_86_0.html
- boost-aarch64-flags.patch: updated
- boost-1.57.0-python-abi_letters.patch: updated
- boost-process.patch: removed (included upstream)
- boost-charconv-quadmath.patch: removed (improved upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1725278400">- fix compilation of compute module (gh#boostorg/uuid#166)
- boost-compute-uuid.patch: added</changelog>
</package>
<package pkgid="22adc0f6ec17aab0c187dbd5d5a3bc7b4a3f9990f751fc245644240af8272487c40ae026abdb9cd6c6a9128ebc38633210e36965bbca3c8eb538fb9655d732c6" name="libbpf1" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="160000.1.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- update to 1.4.3:
  * Fix libbpf unintentionally dropping FD_CLOEXEC flag when (internally)
    duping FDs</changelog>
  <changelog author="dmueller@suse.com" date="1721304000">- update to 1.4.5:
  * Another small bug fix release backporting https://github.com/
    libbpf/libbpf/commit/d9f9fd5b22223ae69c62e083da6093d95a0db799
    which works around kernel-side bug with USDT PID filtering on
    kernels that support multi-uprobe (but have broken PID
    filtering).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1725451200">- update to 1.4.6:
  * BPF skeleton forward compatibility fix (f6f2402);
  * BTF endianness inheritance bug fix (fe28fae).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289600">- update to 1.4.7:
  * fix interop issues between generic bpf_object__open() APIs and BPF
    subskeleton w.r.t. global data handling
  * speed up BTF sanity checks by skipping already validated base BTF
  * fix legacy treatment of non-SEC()-annotated subprogram as entry BPF program
    in some cases</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289601">- update to 1.5.0:
  * libbpf can now open (but not load!) BPF objects of non-native endianness,
    enabling cross-architecture support for BPF skeleton generation and BPF
    object introspection
  * BPF skeleton will now auto-attach SEC(".struct_ops") maps as part of
    &lt;skeleton&gt;__attach() call
  * BPF kprobe session programs support (SEC("kprobe.session"))
  * allow specifying kernel module name for fentry/fexit BPF programs
    (SEC(fentry/module:function)
  * libbpf recognizes LIBBPF_LOG_LEVEL environment variable, which can be used
    to set default log verboseness
  * BPF ringbuf APIs that limit maximum number of consumed records at a time
    (ring_buffer__consume_n(), ring__consume_n())
  * distilled BTF support (btf__distill_base(), btf__relocate())
  * BPF link-based attachment of BPF_PROG_TYPE_SOCKMAP programs
    (bpf_program__attach_sockmap())
  * bpf_object__token_fd() API to fetch BPF token FD of a BPF object, if any
  * fixes for fetching syscall arguments on arm64, s390x, risc-v architectures
  * better GCC-BPF source code compatibility
  * __bpf_fastcall support for a few BPF helpers
  * __uptr annotation definition added to bpf/bpf_helpers.h API header
  * fixes and improvements around handling missing and nulled out struct_ops
    programs
  * fixed mmap()-ing logic for global data, fixing interop between generic
    bpf_object__open() APIs and BPF subskeletons
  * BPF skeleton backwards compatibility handling fixes
  * handle LTO-produced *.llvm.&lt;hash&gt; symbols better
  * feature detection fixes in the presence of BPF token inside user namespace
  * older kernels have broken PID filtering logic for multi-uprobes, libbpf now
    detects this and avoids the use of multi-uprobes for USDTs
  * fix accidental drop of FD_CLOEXEC flag during BPF map reuse
  * few BTF dumper formatting fixes
  * a few more small fixes all around.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734523200">- Drop libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch
  * included since 1.4.0</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1747742400">- update to 1.5.1:
  * Patch release with a single backported change that improves compatibility
    story of older versions of libbpf-cargo.
    https://github.com/libbpf/libbpf/commit/
    453601a65a6ebcf523b009585b49ce0ad0adeff1</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749124800">- Workaround kernel module size increase due to BTF deduplication
  issue since the introduction of TYPEOF_UNQUAL (poo#183503 bsc#1244135)
  * add 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1753099200">- update to 1.6.0:
  * add more control over BPF object lifetime with new preparation step
    (bpf_object__prepare() API)
  * libbpf will report symbolic error code (e.g., "-EINVAL") in addition to
    human-readable error description
  * bpf_prog_stream_read() API
  * BPF token support when attaching BPF trampoline-based BPF programs in
    bpf_program__set_attach_target()
  * BPF token support for BPF_BTF_GET_FD_BY_ID command
  * support multi-uprobe session (SEC("uprobe.session")) BPF programs
  * support unique_match option for multi-kprobe attachment
  * support creating and destroying qdisk with BPF_TC_QDISC flag;
  * bpf_program__attach_cgroup_opts() which enables more precise cgroup-based
    attachment ordering
  * automatically take advantage of memory-mappable kernel BTF
    (/sys/kernel/btf/vmlinux), if supported
  * emit_strings option for BTF dumper API, improving string-like data printing
  * add BPF program's func and line info accessors
  * BPF linker supports linking ELF object files coming from memory buffer and
    referenced by FD, in addition to file path-based APIs;
  * small improvements to BTF dedup to handle rare quirky corner cases produces
    by some compilers
  * add likely() and unlikely() convenience macros;
  * __arg_untrusted annotation for BPF global subprog arguments;
  * bpf_stream_printk() macro for working with BPF streams;
  * bpf_usdt_arg_size() API
- update to 1.6.0:
  * fixing a possible crash when handling BPF arena global variable relocations
- drop 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch, which
  is now included</changelog>
</package>
<package pkgid="c938a612a0b50138cd30eac070227fd4bb45e886f2debde6d29192ad16e579f98a208d1ffc7cb45b183e6baaed9c5bbae492ace20aab75251d1d13b9fbf9f344" name="libbrotlicommon1" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1544788800">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="sflees@suse.de" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andythe_great@pm.me" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="jengelh@inai.de" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="meissner@suse.com" date="1677326400">- add 32bit devel package for Wine development.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="jengelh@inai.de" date="1693483200">- Update to release 1.1
  * CLI: added a --dictionary option
- Reomve 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="dmueller@suse.com" date="1697544000">- build with optflags again</changelog>
</package>
<package pkgid="29b5264b84616b2328426aec9b9cfd65934aa9e61eaad64881a83f2e728959a6bb2fde724ab6fc2cdb2740f94d317e2926fc512f2f55649b8b55daf86f82ffc6" name="libbrotlidec1" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1544788800">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="sflees@suse.de" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andythe_great@pm.me" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="jengelh@inai.de" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="meissner@suse.com" date="1677326400">- add 32bit devel package for Wine development.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="jengelh@inai.de" date="1693483200">- Update to release 1.1
  * CLI: added a --dictionary option
- Reomve 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="dmueller@suse.com" date="1697544000">- build with optflags again</changelog>
</package>
<package pkgid="666b700f0766e22df07c1b0e3f6590e7d1b245ada3ae5692dc3bec2c5f842a9d43a797f3696aac0dba5edc671f778478d719c630156ba9fdade748ea74f43c23" name="libbsd0" arch="x86_64">
  <version epoch="0" ver="0.11.7" rel="160000.3.2"/>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 0.8.6:
  * test:
    + Fix nlist() unit test on IA64 and PowerPC 64-bit ELFv1
  * Fix handling of non-contiguous argv + envp in setproctitle()
- Changes for version 0.8.5:
  * test:
    + Handle libtool executable names in getprogname() unit test
    + Remove unused variable in nlist() unit test
  * man:
    + Ship and install libbsd(7)
    + Update man page sections in titles and references
  * Fix ELF definitions for PowerPC in local-elf.h
  * Fix ELF definitions for MIPS in local-elf.h
- Changes for version 0.8.4:
  * Add support for RISC-V
  * Support GCC deprecated attribute for GCC older than 4.5
  * Fix the __progname check to avoid the optimizer discarding the symbol
  * Gracefully handle lack of system &lt;sys/cdefs.h&gt;
  * Do not provide funopen() on musl
  * Try &lt;linux/a.out.h&gt; if &lt;a.out.h&gt; is not present
  * Do not use legacy BSD u_* types
  * Import &lt;sys/time.h&gt; for some of its macros</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Update to version 0.8.7:
  * Fix &lt;sys/cdefs.h&gt; for gcc with no __has_include or
    __has_include_next support
  * man: Document on what other BSDs arc4random(3) is present
  * Handle several functions now being provided by glibc
  * test: Fix nlist(3) unit test on IA64
- switch to mirror temporarily, per announce:
  https://lists.freedesktop.org/archives/libbsd/2018-January/000166.html</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Update to version 0.9.1:
  * Add __arraycount() macro.
  * Add flopenat() function.
  * Add strtoi() and strtou() functions.
  * Add several new vis and unvis functions.
  * Add pidfile_fileno() function, and struct pidfh is now opaque.
  * The humanize_number() now understands HN_IEC_PREFIXES.
  * The fmtcheck() function supports all standard printf(3)
    conversions.
  * The getentropy(), and thus arc4random() functions will not
    block anymore on Linux on boot when there's not enough entropy
    available.
  * The arc4random() function handles direct clone() calls better.</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO - symbol versioning unsupported by GCC (boo#1133096).</changelog>
  <changelog author="mpluskal@suse.com" date="1576497600">- Update to version 0.10.0:
  * Several security related fixes for nlist() reported by Daniel
    Hodson and one by Coverity Scan.
  * Preliminary and partial Windows porting, thanks to Aaron
    Dierking.
  * Fix for a leak in the vis family of functions.
  * Fix for a configure check to not unnecessarily link against
    librt.
  * General portability fixes for musl, uClibc, macOS and
    GNU/kFreeBSD.
  * New architectures support for nlist().
  * Switch the &lt;err.h&gt; *c() functions to be standalone and add
    err(), warn(), errx() and warnx() familiy of functions in case
    the system lacks them.
  * Several man page fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static).
- Make description neutral; adhere to noun phrasing.</changelog>
  <changelog author="dmueller@suse.com" date="1650024000">- update to 0.11.6:
  * import pwcache module from OpenBSD
  * use libmd for hashing functions
  * Fix message digest library checks
  * Switch libmd wrapper to dlsym
  * Enable .init_array support when building with LTO
  * Switch md5 back to direct linking
- reenable LTO</changelog>
  <changelog author="dmueller@suse.com" date="1650456000">- add missing devel requires</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 0.11.7:
  * man: Discourage using the library in non-overlay mode
  * include: Adjust reallocarray() per glibc adoption
  * include: Adjust arc4random() per glibc adoption
  * include: explicit_bzero() requires _DEFAULT_SOURCE
  * include: Simplify glibc version dependent macro handling
  * doc: Switch references from pkg-config to pkgconf
  * doc: Add missing empty line to separate README sections
  * doc: Refer to the main git repository as primary
  * test: Fix explicit_bzero() test on the Hurd
  * fgetwln: Add comment about lack of getwline(3) for recommendation
  * setmode: Dot not use saveset after free
  * man: Rewrite gerprogname(3bsd) from scratch
  * man: Lowercase man page title
  * man: Document that some arc4random(3) functions are now in glibc 2.36
  * Sync arc4random(3) implementation from OpenBSD
  * Fix ELF support for big endian SH
  * man: Use -compact also for alternative functions in libbsd(7)
  * getentropy: Fix function cast for getauxval()</changelog>
  <changelog author="gmbr3@opensuse.org" date="1678881600">- Add libbsd-glibc-2.34-closefrom.patch to avoid conflicting
  with function provided by glibc 2.34</changelog>
</package>
<package pkgid="cbcb8764d61d7e5bcab40161289df4d6c6379b5f0aa8711c21aeb3e10d9013787c2718626d51e261c4f3794932e0cd09b03228aca789b19d8401e2fc1f51e8b9" name="libbtrfs0" arch="x86_64">
  <version epoch="0" ver="6.14" rel="160000.2.2"/>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1718798400">- update to 6.9
  * mkfs:
  * if --force used, don't continue if the mount status cannot be
    determined (e.g. due to permissions)
  * fix minimum size calculation on zoned devices, make it work with option -b
  * check:
  * option --clear-ino-cache removed (functionality still provided in
    'rescue' command group)
  * detect and repair wrong file extent item ram_bytes value
  * qgroup clear-stale:
  * sync the filesystem before search to read the up to date state
  * handle cases where qgroup cannot be deleted due to uncleaned subvolume
    or when squota is enabled
  * qgroup show: display status of qgroup regarding the cleaning of the
    subvolume or if it's squota
  * receive: fix stream parsing on strict alignment hosts (e.g. ARM v5 or v6)
  * tune change-csum: fix check of dev-replace status item, continue if no
    dev-replace in progress
  * dump-tree: print contents of dev-replace status item
  * convert: fix extent iteration to handle prealloc/unwritten extents
  * libbtrfsutil:
  * patchlevel version update 1.3.1
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * libbtrfs:
  * patchlevel version update 0.1.3
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * build:
  * fix compatibility with e2fsprogs 1.47.1
  * fix header file dependency tracking
  * other:
  * documentation updates</changelog>
  <changelog author="dheidler@suse.de" date="1718971200">- Let btrfsprogs-bash-completion require btrfsprogs with same version
  as there is a file conflict with the bash completion scripts
  still being bundled with btrfsprogs in older versions shipped with 15.6</changelog>
  <changelog author="dsterba@suse.cz" date="1720094400">- update to 6.9.2
  * subvol list: fix accidental trimming of subvolume name
  * check: revert checking file extent item 'ram_bytes'
  * libbtrfsutil:
  * patchlevel version update 1.3.2
  * fix accidentally closing fd passed to subvolume iterator
- update to 6.9.1
  * fix detection of intermediate super block flags (e.g. csum change and
    other conversions)
  * raid-stripe-tree support (still experimental):
  * moved under experimental build flags (mkfs, convert)
  * format change, removed encoding type; backward incompatible
  * receive dump: escape special chars in xattr names and values, and clone
    source path
  * tune change csum: fix reservation size when starting a transaction
  * other:
  * new and updated tests
  * updated CI images, new reference build targets
  * cleanups and refactoring</changelog>
  <changelog author="dsterba@suse.cz" date="1722427200">- update to 6.10
  * inspect:
  * list-chunks: new command to print information about chunks (i.e.
    the physical chunks as stored on devices), sortable; requires root as
    it's using SEARCH_TREE ioctl
  * tree-stats:
  * new option -t to print only the given tree
  * add long options for size units
  * filesystem df: with increased verbosity print per-type information from sysfs
  * version: print a line with built-in features or options (+FEATURE1 -FEATURE2)
  * image: document option -s and its potential problems
  * fixes:
  * scrub status: user selected base for Rate values
  * receive: escape special characters in paths and xattrs
  * dump-tree: escape special characters in paths and xattrs
  * image: sanitizing filenames did not work properly in all cases
  * convert: fix displayed restored image path on rollback
  * tune change csum: do conversion in smaller batches
  * other:
  * build fixes for uClibc
  * build fix for python 3.13
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1723723200">- update to 6.10.1
  * mkfs: rework --rootdir traversal, skip hardlinks and create new inodes
    instead, also warn about them, this did not work as expected and will be
    fixed in the future
  * receive: search in older trees for UUIDs when detecting clone sources
  * libbtrfsutil: bindings available at https://pypi.org/project/btrfsutil
  * libbtrfs:
  * patchlevel version update 0.1.4
  * cleanup in headers, removed unused definitions, no functional changes
  * don't ship list.h and rbtree.h
  * other: documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1736164800">- update to 6.12
  * subvolume delete: add new option to do recursive subvolume deletion (for
    regular user delete only accessible subvolumes)
  * mkfs:
  * new option --subvol to create subvolumes in given paths, read-write,
    read-only and default
  * add hard link detection support for --rootdir option
  * fixes:
  * receive: message verbosity fixes
  * check: fix false positive report of missing checksum for extent holes
  * check: handle compressed extents when checking tree log
  * when asking Y/N user questions, flush the terminal so the question is
    displayed (e.g. btrfstune -S)
  * other
  * code refactoring, error handling
  * python packaging fixes
  * documentation updates
  * new tests
- update to 6.11
  * check:
  * check items in tree-log
  * detect invalid file extent items for symlinks
  * properly detect inode cache and suggest removal by 'clear-ino-cache'
  * convert: fix symlink length checks
  * fi show: remove stray newline at the end of the output
  * fixes:
  * open devices in write-exclusive mode in most commands, prevent
    concurrent mount by other programs
  * rescue clear-ino-cache: fix subvolume iteration that can fail in some cases
  * map-logical: fix first extent searching condition
  * fi resize: warn if new size is below 256M
  * tree-checker:
  * slightly stricter file type validation
  * verify device extent items
  * other:
  * documentation updates
  * ship btrfs-ioctl manual page (incomplete)</changelog>
  <changelog author="dsterba@suse.cz" date="1743422400">- update to 6.13
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec: package btrfs-find-root unconditionally (bsc#1239992)
- Refresh patches: mkfs-default-features.patch (context)</changelog>
  <changelog author="dsterba@suse.cz" date="1743681600">- update to 6.14
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec file:
  - update subpackage descriptions
  - drop conditional build of documentation, always use source
  - drop pre-systemd udev workarounds (version 190)</changelog>
</package>
<package pkgid="82ece380c86e2bf9a259ec6fa4a0d0976afb589eebbf70886a87627fad49d63bc6c72148d30f1fd3071ae750ca22161b7256d5a09d1c07ed5a29ffeec8d6ee53" name="libbtrfsutil1" arch="x86_64">
  <version epoch="0" ver="6.14" rel="160000.2.2"/>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1718798400">- update to 6.9
  * mkfs:
  * if --force used, don't continue if the mount status cannot be
    determined (e.g. due to permissions)
  * fix minimum size calculation on zoned devices, make it work with option -b
  * check:
  * option --clear-ino-cache removed (functionality still provided in
    'rescue' command group)
  * detect and repair wrong file extent item ram_bytes value
  * qgroup clear-stale:
  * sync the filesystem before search to read the up to date state
  * handle cases where qgroup cannot be deleted due to uncleaned subvolume
    or when squota is enabled
  * qgroup show: display status of qgroup regarding the cleaning of the
    subvolume or if it's squota
  * receive: fix stream parsing on strict alignment hosts (e.g. ARM v5 or v6)
  * tune change-csum: fix check of dev-replace status item, continue if no
    dev-replace in progress
  * dump-tree: print contents of dev-replace status item
  * convert: fix extent iteration to handle prealloc/unwritten extents
  * libbtrfsutil:
  * patchlevel version update 1.3.1
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * libbtrfs:
  * patchlevel version update 0.1.3
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * build:
  * fix compatibility with e2fsprogs 1.47.1
  * fix header file dependency tracking
  * other:
  * documentation updates</changelog>
  <changelog author="dheidler@suse.de" date="1718971200">- Let btrfsprogs-bash-completion require btrfsprogs with same version
  as there is a file conflict with the bash completion scripts
  still being bundled with btrfsprogs in older versions shipped with 15.6</changelog>
  <changelog author="dsterba@suse.cz" date="1720094400">- update to 6.9.2
  * subvol list: fix accidental trimming of subvolume name
  * check: revert checking file extent item 'ram_bytes'
  * libbtrfsutil:
  * patchlevel version update 1.3.2
  * fix accidentally closing fd passed to subvolume iterator
- update to 6.9.1
  * fix detection of intermediate super block flags (e.g. csum change and
    other conversions)
  * raid-stripe-tree support (still experimental):
  * moved under experimental build flags (mkfs, convert)
  * format change, removed encoding type; backward incompatible
  * receive dump: escape special chars in xattr names and values, and clone
    source path
  * tune change csum: fix reservation size when starting a transaction
  * other:
  * new and updated tests
  * updated CI images, new reference build targets
  * cleanups and refactoring</changelog>
  <changelog author="dsterba@suse.cz" date="1722427200">- update to 6.10
  * inspect:
  * list-chunks: new command to print information about chunks (i.e.
    the physical chunks as stored on devices), sortable; requires root as
    it's using SEARCH_TREE ioctl
  * tree-stats:
  * new option -t to print only the given tree
  * add long options for size units
  * filesystem df: with increased verbosity print per-type information from sysfs
  * version: print a line with built-in features or options (+FEATURE1 -FEATURE2)
  * image: document option -s and its potential problems
  * fixes:
  * scrub status: user selected base for Rate values
  * receive: escape special characters in paths and xattrs
  * dump-tree: escape special characters in paths and xattrs
  * image: sanitizing filenames did not work properly in all cases
  * convert: fix displayed restored image path on rollback
  * tune change csum: do conversion in smaller batches
  * other:
  * build fixes for uClibc
  * build fix for python 3.13
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1723723200">- update to 6.10.1
  * mkfs: rework --rootdir traversal, skip hardlinks and create new inodes
    instead, also warn about them, this did not work as expected and will be
    fixed in the future
  * receive: search in older trees for UUIDs when detecting clone sources
  * libbtrfsutil: bindings available at https://pypi.org/project/btrfsutil
  * libbtrfs:
  * patchlevel version update 0.1.4
  * cleanup in headers, removed unused definitions, no functional changes
  * don't ship list.h and rbtree.h
  * other: documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1736164800">- update to 6.12
  * subvolume delete: add new option to do recursive subvolume deletion (for
    regular user delete only accessible subvolumes)
  * mkfs:
  * new option --subvol to create subvolumes in given paths, read-write,
    read-only and default
  * add hard link detection support for --rootdir option
  * fixes:
  * receive: message verbosity fixes
  * check: fix false positive report of missing checksum for extent holes
  * check: handle compressed extents when checking tree log
  * when asking Y/N user questions, flush the terminal so the question is
    displayed (e.g. btrfstune -S)
  * other
  * code refactoring, error handling
  * python packaging fixes
  * documentation updates
  * new tests
- update to 6.11
  * check:
  * check items in tree-log
  * detect invalid file extent items for symlinks
  * properly detect inode cache and suggest removal by 'clear-ino-cache'
  * convert: fix symlink length checks
  * fi show: remove stray newline at the end of the output
  * fixes:
  * open devices in write-exclusive mode in most commands, prevent
    concurrent mount by other programs
  * rescue clear-ino-cache: fix subvolume iteration that can fail in some cases
  * map-logical: fix first extent searching condition
  * fi resize: warn if new size is below 256M
  * tree-checker:
  * slightly stricter file type validation
  * verify device extent items
  * other:
  * documentation updates
  * ship btrfs-ioctl manual page (incomplete)</changelog>
  <changelog author="dsterba@suse.cz" date="1743422400">- update to 6.13
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec: package btrfs-find-root unconditionally (bsc#1239992)
- Refresh patches: mkfs-default-features.patch (context)</changelog>
  <changelog author="dsterba@suse.cz" date="1743681600">- update to 6.14
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec file:
  - update subpackage descriptions
  - drop conditional build of documentation, always use source
  - drop pre-systemd udev workarounds (version 190)</changelog>
</package>
<package pkgid="94f498b342cada177f5e9e169a13b55388a9b465788e2eba5f4b282d9cedbc2e2fee8002b3e7633ccaa4b1a52f30fd718ba46b1af828ffbbb0770f41d83952bf" name="libburn4" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1425816000">- Update to 1.3.8
  * Bug fix: Wrong stack usage caused SIGBUS on sparc when
    compiled by gcc -O2
  * Bug fix: Minimum drive buffer fill was measured by cdrskin
    before the buffer could get full
  * Bug fix: A failed MMC BLANK command did not cause error
    indication by libburn
  * Bug fix: A final fsync(2) was performed with stdio drives,
    even if not desired</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1432555200">- Update to 1.4.0:
  libburn:
  * Bug fix: Wrong read access to memory.
  cdrskin:
  * Bug fix: Double free with cdrskin -vvv. Introduced with
    rev 5065, version 1.3.1.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to 1.4.2.pl01:
  cdrskin:
  * Bug fix: cdrskin "failed to attach fifo" when burning from
    stdin. Regression of 1.4.2, rev 5522.
  From 1.4.2:
  libburn:
  * Bug fix: burn_disc_get_media_id() returned BD identifiers 2
    chars too long
  * Bug fix: burn_disc_get_multi_caps() returned 2048 bytes too
    many in caps.start_range_high
  * Bug fix: Media summary session count of blank and closed media
    was short by 1
  * Bug fix: Endless loop if transport error occurs while waiting
    for drive ready
  * New API calls burn_drive_get_serial_no() and
    burn_drive_get_media_sno()
  * Result of a Coverity audit: 40+ code changes, but no
    easy-to-trigger bugs
  cdrskin:
  * New -toc line "Drive id" tells the drive's individual serial
    number</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: Option drive_scsi_dev_family=sg did not convert
    /dev/sr* to /dev/sg*
  * Bug fix: burn_make_input_sheet_v07t() falsly recognized double
    byte encoding. Affected cdrskin option: cdtext_to_v07t=
  * Bug fix: Double free at end of run if
    burn_write_opts_set_leadin_text() is used. Affected cdrskin
    option: textfile=
  * Bug fix: DVD book type of DVD+RW DL and DVD+R DL was reported
    wrong.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: SAO CD could be perceived 2 blocks to short.
    Regression in 1.4.4 by rev 5672.
  * New API call burn_drive_set_immed()
  * New cdrskin option use_immed_bit=</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: Option -dummy did not affect writing by
    direct_write_amount=
  * New API call burn_drive_reset_simulate()
  * New API call burn_drive_get_bd_r_pow()
  * Refusing to write to BD-R if formatted to Pseudo Overwrite</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to 1.5.0:
  * User defined padding was moved after appended partitions
  * xorriso and libisoburn make user of the new xattr capability of libisofs
  * libburn got some rarely triggered bugs fixed</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 1.5.2.pl01
  * Bug fix
  + cdrskin multi-track burning was slow and stalled after track 1.
    Regression introduced in version 1.5.0, O_DIRECT is now
    disabled for track sources.
  version 1.5.2:
  * Bug fixes
    + No lock was obtained for setting up a fifo object
    + Stream recording was applied regardless whether the drive
    offers it. This caused Xfburn failures with some MATSHITA
    laptop drives.
    + TDK Corporation was not recognized as manufacturer of
    DVD-R "TTH02"
  * Made libburn ready for building out-of-source.
  * New API calls burn_drive_get_feature_codes(),
    burn_drive_get_feature()
  * New cdrskin option --list_features
- Added signature file and keyring as sources
- Spec cleanup</changelog>
  <changelog author="dmueller@suse.com" date="1614081600">- update to 1.5.4:
  * Bug fix: Early SCSI commands from sg-linux.c were not logged
  * New API call burn_drive_set_speed_exact()
  * New API call burn_nominal_slowdown()</changelog>
  <changelog author="davejplater@gmail.com" date="1687780800">- Update to 1.5.6 (jsc#PED-5018)
  * Bug fix: Overburning with cdrskin option -force ended by a
    libburn error
  * New API call burn_write_opts_set_bdr_obs_exempt()
  * New cdrskin option --bdr_obs_exempt
  * Officially enabled overburning with burn_write_opts_set_force(,1)</changelog>
</package>
<package pkgid="887cb80464ec6fd5d1953a0224c3351c7295498b4ab0acbf70e6f69cddc7cd1661e2c5a197294607276754227a32927e4fe0874350d14c9e7fa12a620cdc40f8" name="libbytesize1" arch="x86_64">
  <version epoch="0" ver="2.10" rel="160000.2.2"/>
  <changelog author="luc14n0@linuxmail.org" date="1517918400">- Add a %{name}-lang Recommends tag in the preamble and a %{name}
  Provides tag under the lib subpackage so the lang subpackge can
  be installable.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 1.3:
  + Do not segfault when trying to bs_size_free NULL.
- Cleanup specfile removing deprecations.
- Update LGPL License tag appending '-only' to comply with SPDX
  3.0.
- Add gcc BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 1.4:
  + There are only small changes in this release.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.4:
  * remove msgcat dependency
  * Translated using Weblate (Bengali (India))
  * Add Travis build status badge
  * Update translation files
  * add translation platform widget
  * Translated using Weblate (Turkish)
  * Fix memory leak in bs_size_new_from_str
  * Update translation files
  * src/gettext: fix warning if gettext is already present
  * fix build on shells where test == fails
  * Require the same version of python3-bytesize in libbytesize-tools
  * New minor release of the libbytesize library. There are only two bugfixes in this release.
  * Full list of changes
  * fix out of tree build failure
  * Fix return value for round_to_nearest when using Size
  * New bytesize calculator bssize has been added.
  * Code has been ported from PCRE to PCRE2.
  * Python 2 support has been removed.
  * Run all libbytesize tests from one script
  * Add all "public" python API symbols to __init__.py
  * Allow running tests using installed library
  * Remove Python 2 support
  * Port to pcre2
  * Add support for floor division by a non-integer number in Python
  * Add a simple bytesize calculator tool
  * Add tools to autotools and packaging
  * Exit with 1 from configure if there were failures
  * Add a summary to the end of ./configure output
  * Only support modulo between two Size instances
  * Fix parsing of exponential representations of real numbers
  * Add the '--version' option to bs_calc.py
  * Add a man page for the bscalc tool
  * Assume the given expression is in bytes if no unit is given</changelog>
  <changelog author="dmueller@suse.com" date="1612008000">- update to 2.5:
  * translation updates
  * tools: Read input from stdin when not running in a tty
  * Add support to ppc64le for debian build
  * testsuite fixes</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.6:
  * Make sure Size can be interpreted as integer in Python 3.10
  * Translation updates</changelog>
  <changelog author="dmueller@suse.com" date="1657800000">- update to 2.7:
  * Fix skipping tests when required locale is missing
  * Remove Travis CI configuration
  * Fix some warnings and typos in docstrings and comments
  * Fix warnings dicovered by the GCC analyzer
  * build: avoid bashisms in configure
  * Update translation files
  * Do not use distutils to get Python library path</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 2.8:
  * Added translation using Weblate
  * configure.ac: Remove invalid email address for bug reports
  * spec: Bump release to 21 for Packit daily builds
  * spec: Fix source archive URL
  * Make use of error optional
  * Replace C++ style comments with C style
  * Various docstring fixes
  * docs: Remove information about Python 2 support
  * Remove unused test dependencies variables from Makefile
  * Do not hardcode pylint executable name in Makefile</changelog>
  <changelog author="luc14n0@opensuse.org" date="1683374400">- Drop lang sub-package recommendation. It's not needed anymore now
  that lang packages provide package supplementation instead.
- Make bscalc sub-package 'noarch', since it doesn't contain any
  binaries, only a Python script and its manpage.</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- Add NEWS.rst to source documentation
- Add %python3_fix_shebang to fix binaries dependency on
  /usr/bin/python3
- Update to release 2.10
  * remove dependency on python3-six
- Rename python3-libbytesize sub-package to python3-bytesize. This
  is the expected name by its consumers.
- Update to version 2.9:
  * This release contains fixes for some small issues.
  * Updated translations.</changelog>
</package>
<package pkgid="164e4b73483addcacd869298d9b5a86e32bfebe1c946bd1e9b9a4182de026c9a5bb348d9f7b0aa16004d29a6b1adb2ebf2fb9d47361286de398269147fdc4417" name="libbz2-1" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534852800">- Replace the URL. The bzip.org owner changed [bsc#1104445].
- Remove the URL from the 'Source' line. The 1.0.6 version is not
  available.
- Run spec-cleaner.</changelog>
  <changelog author="kstreitova@suse.com" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561636800">- Update to version 1.0.7:
  * Fix undefined behavior in the macros SET_BH, CLEAR_BH, &amp;
    ISSET_BH.
  * bzip2: Fix return value when combining --test,-t and -q.
  * bzip2recover: Fix buffer overflow for large argv[0].
  * bzip2recover: Fix use after free issue with outFile
    (CVE-2016-3189).
  * Make sure nSelectors is not out of range (CVE-2019-12900
    bsc#1139083)
- Drop patches fixed upstream:
  * bzip2-unsafe_strcpy.patch.
  * bzip2-1.0.6-CVE-2016-3189.patch.
- Refresh patches with quilt.</changelog>
  <changelog author="mpluskal@suse.com" date="1561723200">- Update bug reference
- Fix downloaded patches</changelog>
  <changelog author="kstreitova@suse.com" date="1563796800">- Update to version 1.0.8:
  * Accept as many selectors as the file format allows.
    This relaxes the fix for CVE-2019-12900 from 1.0.7
    so that bzip2 allows decompression of bz2 files that
    use (too) many selectors again.
  * Fix handling of large (&gt; 4GB) files on Windows.
  * Cleanup of bzdiff and bzgrep scripts so they don't use
    any bash extensions and handle multiple archives correctly.
- remove (applied upstream)
  * bzip2-1.0.6-fix-bashisms.patch
  * bzip2-1.0.6-bzgrep_return_value.patch
- use a new Source url</changelog>
  <changelog author="suse+build@de-korte.org" date="1572436800">- Use correct version in autotools patchset
  M bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static)
- Use %autosetup (rediff bzip2-1.0.6.2-autoconfiscated.patch to p1)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Port rpmlintrc format to rpmlint 2.x.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
</package>
<package pkgid="6bc14cbe1f8f82eee08f4401cb58214b2e1c0da353c94c6250f0f646c6bf8769ef20a866883ba076b843c8676044ca3eb2ba1216b22f48ccc35e00ca1f1c036d" name="libcairo-gobject2" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
</package>
<package pkgid="2e87ebf009fb535023c5f838ec508637b066acc4787ddbff0ba620c1b33f3710f91af96b6f2e5a57bdaf71204954524c982103306c7122377fa07dee9e3c23b7" name="libcairo2" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
</package>
<package pkgid="0ea601818f70383a9dced140794c0d1445a80023799c294e8e4369b2781284f1a6379ae5061a4b7e80f040e550597647328c5eee04937e0c1c2c4bed11e7bf32" name="libcap-ng0" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="160000.3.2"/>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 0.7.9:
  * Detect and output a couple errors in filecap
  * Use pthread_atfork to optionally reset the pid and related info
    on fork
- cleanup with spec-cleaner
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1518955201">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="dimstar@opensuse.org" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="info@paolostivanin.com" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="rpm@fthiessen.de" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="info@paolostivanin.com" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jgwang@suse.com" date="1704196800">- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support</changelog>
  <changelog author="mcepl@cepl.eu" date="1716206400">- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.</changelog>
</package>
<package pkgid="2fa21786c3b70fbf4f20640ea504d723d885c4b8424c176a2aca2bbc0821c1d69c52fb3fa234d78b96c2bd3e383833ba90f5b7b1e92dd6d068d1dc99aa5ef0e0" name="libcap2" arch="x86_64">
  <version epoch="0" ver="2.73" rel="160000.3.1"/>
  <changelog author="dmueller@suse.com" date="1675512000">- update to 2.67:
  * Replace use of fgrep with grep -F (POSIX grep flags preferred by
    GNU grep) - patch from David Seifert.
  * Added SPDX identifiers to License file(s). Hopefully this will
    help the various robots out there correctly identify the
    longstanding licenses for libcap and friends. (Bug: 216609
    reported by Günther Noack)
  * Started down the rabbit hole of trying to address (Bug: 216610
    reported by Günther Noack on behalf of Michael Stapelberg)
  * The basic issue is how to link C code with Go psx without using
    CGo. This is all a low level hackery. If you are interested,
    browse the source.
  * Correct for bad whatis entries in man pages (this was throwing a
    Debian build test, detail)
  * Also reviewed man pages and addressed cross linkage issues (Bug:
  * Cleaned up some README.md files (made a github mirror now just so
    I can automatically render them).
  * Changed meaning of DYNAMIC=no builds.
    This now builds everything with static linking except for libc.
    The reason for this exception is explained in the commit message.
  * Inserted demonstration exploit code in capso.so to support
    article.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine.</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Revert LTO again; it still breaks builds</changelog>
  <changelog author="mliska@suse.cz" date="1679659201">- Enable LTO and add missing -ffat-lto-objects for the provided
  static libs.</changelog>
  <changelog author="dmueller@suse.com" date="1680177600">- update to 2.68:
  * Force libcap internal functions to be hidden outside the library
  * Expanded the list of man page (links) to all of the supported API
    functions.
  * fixed some formatting issues with the libpsx(3) manpage.
  * Add support for a markdown preamble and postscript when generating
    .md versions of the man pages (Bug 217007)
  * psx package clean up
  * fix some copy-paste errors with TestShared()
  * added a more complete psx testing into this test as well
  * cap package clean up
  * drop an unnecessary use of ", _" in the sources
  * cleaned up cap.NamedCount documentation
  * Converted goapps/web/README to .md format and fixed the
    instructions to indicate go mod tidy is needed.
  * cap_compare test binary now cleans up after itself (Bug 217018)
  * Figured out how to cross compile Go programs for arm (i.e. RPi) that
    use C code, don't use cgo but do use the psx package
  * Eliminate use of vendor directory</changelog>
  <changelog author="meissner@suse.com" date="1684238400">- updated to 2.69
  - An audit was performed on libcap and friends by https://x41-dsec.de/ (blog) . The audit (final report, 2023-05-10) was sponsored by the the Open Source Technology Improvement Fund, https://ostif.org/ (blog). Five issues were found. Four of them are addressed in this release. Each issue was labeled in the audit results as follows:
  - LCAP-CR-23-01 (SEVERITY) LOW (CVE-2023-2602) - found by David Gstir (bsc#1211418)
  - LCAP-CR-23-02 (SEVERITY) MEDIUM (CVE-2023-2603) - found by Richard Weinberger (bsc#1211419)
  - LCAP-CR-23-100 (SEVERITY) NONE
  - LCAP-CR-23-101 (SEVERITY) NONE
  - LCAP-CR-23-102 (SEVERITY) NONE
  - Man page style improvement from Emanuele Torre</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716638400">- update to 2.70:
  * setcap changes to make it harder to set invalid file capabilities
  * Lots of documentation fixes
  * Fix c89 compilation syntax for the C code in the libraries
  * libpam has deprecated providing the _pam_overwrite() function,
    so use memset() instead</changelog>
  <changelog author="pvorel@suse.cz" date="1733140800">- update to 2.73:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap?authuser=0#h.7yd7ab9ppagk</changelog>
  <changelog author="schwab@suse.de" date="1733745600">- Disable psx_test and b219174 tests in qemu emulation</changelog>
  <changelog author="meissner@suse.com" date="1775822400">- CVE-2026-4878: Fixed a a potential TOCTOU race condition in cap_set_file() (bsc#1261809)
  0001-Address-a-potential-TOCTOU-race-condition-in-cap_set.patch:</changelog>
</package>
<package pkgid="483dd1212cb3f23724251f39cddeec5d0eae6eab4c42388554cacd1c1c7db9659d8956b440d79146433012ddd3ef023c8b5a84251747480a2f31be586666d72a" name="libcapstone4" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="160000.2.2"/>
  <changelog author="duwe@suse.com" date="1429185600">- initial version</changelog>
  <changelog author="mardnh@gmx.de" date="1514462400">- Specfile cleanup</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1518436800">- Correct the license tag, Capstone is BSD-3-Clause
- Provide python3 bindings
- Rename bindings subpackage to docs, it does not contain any
  bindings but documentation
- Package some more documentation
- Build with %{optflags}</changelog>
  <changelog author="afaerber@suse.de" date="1523793600">- Update to 3.0.5-rc2
  * Package cstool
- Adopt %license</changelog>
  <changelog author="brogers@suse.com" date="1534334400">- Update to 3.0.5
  * build static library (but still don't install), since build
  explicitly links cstool against it</changelog>
  <changelog author="aloisio@gmx.com" date="1586433600">- Update to version 4.0.1
  [ Core ]
  * Fix some issues for packaging (Debian, Gentoo).
  * Better support for building with Mingw.
  * cstool has new option -s to turn on skipdata mode.
  * cstool -v now report build settings of the core.
  * Add suite/capstone_get_setup.c so users can integrate with
    their own code
  * to retrieve Capstone settings at build time.
  [ Arm ]
  * Fix 4.0 regression: the tbh [r0, r1, lsl #1] instruction
    sets the operand.shift.value back again.
  * Remove ARM_REG_PC group for BX instruction.
  [ X86 ]
  * Fix: endbr32 and endbr64 instructions are now properly
    decoded in both CS_MODE_32 and CS_MODE_64.
  [ M680X ]
  * Fix some issues reported by clang-analyzer.
  [ Python ]
  * Fix skipdata setup.
  * Add getter/setter for skipdata_mnem, skipdata_callback.
  version 4.0:
  [ Core ]
  * New APIs: cs_regs_access()
  * Add new options for cs_option(): CS_OPT_MNEMONIC &amp;
    CS_OPT_UNSIGNED &amp; CS_OPT_SYNTAX_MASM.
  * Various updates &amp; bugfixes for all architectures.
  * Add 4 new architectures: EVM, M68K, M680X &amp; TMS320C64x.
  * Add new group types: CS_GRP_PRIVILEGE &amp;
    CS_GRP_BRANCH_RELATIVE.
  * Add new error types: CS_ERR_X86_MASM.
  [ X86 ]
  * Add XOP code condition type in x86_xop_cc.
  * Add some info on encoding to cs_x86 in cs_x86_encoding.
  * Add register flags update in cs_x86.{eflags, fpu_flags}
  * Change cs_x86.disp type from int32_t to int64_t.
  * Add new groups: X86_GRP_VM &amp; X86_GRP_FPU.
  * Lots of new instructions (AVX)
  [ ARM64 ]
  * Add instruction ARM64_INS_NEGS &amp; ARM64_INS_NGCS.
  [ Mips ]
  * Add mode CS_MODE_MIPS2.
  [ PPC ]
  * Change cs_ppc_op.imm type from int32_t to int64_t.
  * Add new groups: PPC_GRP_ICBT, PPC_GRP_P8ALTIVEC,
    PPC_GRP_P8VECTOR &amp; PPC_GRP_QPX.
  * Lots of new instructions (QPX among them)
  [ Sparc ]
  * Change cs_sparc_op.imm type from int32_t to int64_t.
  [ Binding ]
  * New bindings: PowerShell &amp; VB6
- Bumped sover to 4
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1590408000">- Rename -docs subpackage to -doc to follow openSUSE practices.
- Descriptions: say what the package is, not what it wants to be.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 4.0.2
  Windows kernel-mode driver support
  - Add armv8, ppc32 &amp; thumbv8 modes
  - Print instruction ID
  - Support CS_OPT_UNSIGNED for ATT syntax
  - Fix operand size for some instructions
  - Fix LOCK prefixes
  - Recognize xacquire/xrelease prefix
  - Fix call/jmp access mode of mem operand
  - Add ENDBR32, ENDBR64 to reduce mode
  - Other minor fixes
  - Support CS_OPT_UNSIGNED
  - Fix register access flags for memory instructions
  - Fix UMOV vess
  - Update writeback for STR_POST_REG
  - Store correct register value in op.reg_pair
  - BDZLA is absolute branch
  - Fix truncated 64bit imm operand
  - Fix base/index printing
  - Fix skipdata struct being destroyed
  - Add __repr__ for capstone.CsInsn
  - Fix Java bindings to use pointers instead of longs
  - Fix x86_op record</changelog>
  <changelog author="mwilck@suse.com" date="1672747200">- Enable static library, and add libcapstone-devel-static subpackage
  (this is helpful for qemu-linux-user)</changelog>
</package>
<package pkgid="db126f369f158cf2b8920779ddb06ca9c5fb6ca960142cfb6237841f898564ae347381b089791c89a5aa8fc7273bca3c89583496990349a8d4bbecaafa19c1cf" name="libcares2" arch="x86_64">
  <version epoch="0" ver="1.34.5" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1707480000">- Ensure multibuild flavors result in different src names.</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- c-ares 1.27.0
  Security:
  * Moderate. CVE-2024-25629. Reading malformatted /etc/resolv.conf,
    /etc/nsswitch.conf or the HOSTALIASES file could result in a crash.
    GHSA-mg26-v6qh-x48q (CVE-2024-25629, bsc#1220279)
  Features:
  * New function ares_queue_active_queries() to retrieve number of in-flight
    queries. PR #712
  * New function ares_queue_wait_empty() to wait for the number of in-flight
    queries to reach zero. PR #710
  * New ARES_FLAG_NO_DEFLT_SVR for ares_init_options() to return a failure if
    no DNS servers can be found rather than attempting to use 127.0.0.1. This
    also introduces a new ares status code of ARES_ENOSERVER. PR #713
  Changes:
  * EDNS Packet size should be 1232 as per DNS Flag Day. PR #705
  Bugfixes:
  * Fix warning due to ignoring return code of write(). PR #709
  * CMake: don't override target output locations if not top-level. Issue #708
  * Fix building c-ares without thread support. PR #700</changelog>
  <changelog author="adam.majer@suse.de" date="1712059200">- c-ares 1.28.1
  Features:
  * Emit warnings when deprecated c-ares functions are used.
    This can be disabled by passing a compiler definition of
    `CARES_NO_DEPRECATED`. [PR #732]
  * Add function `ares_search_dnsrec()` to search for records
    using the new DNS record data structures. [PR #719]
  * Rework internals to pass around `ares_dns_record_t` instead of
    binary data, this introduces new public functions of
    `ares_query_dnsrec()` and `ares_send_dnsrec()`. [PR #730]
  Changes:
  * tests: when performing simulated queries, reduce timeouts
    to make tests run faster
  * Replace configuration file parsers with memory-safe parser. [PR #725]
  * Remove `acountry` completely, the manpage might still get
    installed otherwise. [Issue #718]
  Bugfixes:
  * CMake: don't overwrite global required libraries/definitions/includes
    which could cause build errors for projects chain building c-ares.
    [Issue #729]
  * On some platforms, `netinet6/in6.h` is not included by `netinet/in.h`
    and needs to be included separately. [PR #728]
  * Fix a potential memory leak in `ares_init()`. [Issue #724]
  * Some platforms don't have the `isascii()` function.
    Implement as a macro. [PR #721]
  * CMake: Fix Chain building if CMAKE runtime paths not set
  * NDots configuration should allow a value of zero. [PR #735]</changelog>
  <changelog author="jgwang@suse.com" date="1717329600">- c-ares 1.29.0
  Features:
  * When using ARES_OPT_EVENT_THREAD, automatically reload
    system configuration when network conditions change.
    [PR #759]
  * Apple: reimplement DNS configuration reading to more
    accurately pull DNS settings. [PR #750]
  * Add observability into DNS server health via a server state
    callback, invoked whenever a query finishes. [PR #744]
  * Add server failover retry behavior, where failed servers are
    retried with small probability after a minimum delay.
    [PR #731]
  Changes:
  * Mark ares_channel_t * as const in more places in the public
    API. [PR #758]
  Bugfixes:
  * Due to a logic flaw dns name compression writing was not
    properly implemented which would result in the name prefix not
    being written for a partial match. This could cause issues in
    various record types such as MX records when using the
    deprecated API. Regression introduced in 1.28.0. [Issue #757]
  * Revert OpenBSD SOCK_DNS flag, it doesn't do what the docs say
    it does and causes c-ares to become non-functional. [PR #754]
  * ares_getnameinfo(): loosen validation on salen parameter.
    [Issue #752]
  * cmake: Android requires C99. [PR #748]
  * ares_queue_wait_empty() does not honor timeout_ms &gt;= 0.
    [Issue #742]</changelog>
  <changelog author="adam.majer@suse.de" date="1718020800">- c-ares 1.30.0
  Features:
  * Basic support for SIG RR record (RFC 2931 / RFC 2535) [PR #773]
  Changes:
  * Validation that DNS strings can only consist of printable ascii characters
  otherwise will trigger a parse failure. [75de16c] and [40fb125]
  Bugfixes:
  * QueryCache: Fix issue where purging on server changes wasn't working. [a6c8fe6]
- updated dowload URLs to point to github
- updated keyring to include Brad House DA7D64E4C82C6294CB73A20E22E3D13B5411B7CA</changelog>
  <changelog author="adam.majer@suse.de" date="1718712000">- c-ares 1.31.0
  Changes:
  * Enable Query Cache by default. [PR #786]
  Bugfixes:
  * Enhance Windows DNS configuration change detection to also
  detect manual DNS configuration changes. [PR #785]
  * Various legacy MacOS Build fixes. [Issue #782]
  * Ndots value of zero in resolv.conf was not being honored. [852a60a]
  * Watt-32 build support had been broken for some time. [PR #781]
  * Distribute `ares_dns_rec_type_tostr` manpage. [PR #778]</changelog>
  <changelog author="adam.majer@suse.de" date="1730203200">- c-ares 1.34.2
  Features:
  * adig: read arguments from adigrc. [PR #856]
  * Add new pending write callback optimization via `ares_set_pending_write_cb`. [PR #857]
  * New function `ares_process_fds()`. [PR #875]
  * Failed servers should be probed rather than redirecting queries which could
  cause unexpected latency. [PR #877]
  * adig: rework command line arguments to mimic dig from bind. [PR #890]
  * Add new method for overriding network functions
  `ares_set_socket_function_ex()` to properly support all new functionality.
  [PR #894]
  * Fix regression with custom socket callbacks due to DNS cookie support. [PR #895]
  * ares_socket: set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets [PR #887]
  * URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv(). [PR #882]
  Changes:
  * Connection handling modularization. [PR #857], [PR #876]
  * Expose library/utility functions to tools. [PR #860]
  * Remove `ares__` prefix, just use `ares_` for internal functions. [PR #872]
  Bugfixes:
  * fix: potential WIN32_LEAN_AND_MEAN redefinition.
  [PR #869]
  * Fix googletest v1.15 compatibility.
  [PR #874]
  * Fix pkgconfig thread dependencies.
  [PR #884]
  Features in 1.33.0:
  * Add DNS cookie support (RFC7873 + RFC9018) to help prevent off-path cache
  poisoning attacks. [PR #833]
  * Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
  on supported systems. [PR #840]
  Changes:
  * Reorganize source tree. [PR #822]
  * Refactoring of connection handling to prevent code duplication. [PR #839]
  * New dynamic array data structure to prevent simple logic flaws in array
  handling in various code paths. [PR #841]
  Bugfixes:
  * `ares_destroy()` race condition during shutdown due to missing lock. [PR #831]
  Features in 1.32:
  * Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
  by specifying `ARES_FLAG_DNS0x20`.  Disabled by default. [PR #800]
  * Rework query timeout logic to automatically adjust timeouts based on network
  conditions.  The timeout specified now is only used as a hint until there
  is enough history to calculate a more valid timeout. [PR #794]
  Changes:
  * DNS RR TXT strings should not be automatically concatenated as there are use
  cases outside of RFC 7208.  In order to maintain ABI compliance, the ability
  to retrieve TXT strings concatenated is retained as well as a new API to
  retrieve the individual strings.  This restores behavior from c-ares 1.20.0.
  [PR #801]
  * Clean up header inclusion logic to make hacking on code easier. [PR #797]
  * GCC/Clang: Enable even more strict warnings to catch more coding flaws. [253bdee]
  Bugfixes:
  * Tests: Fix thread race condition in test cases for EventThread. [PR #803]
  * Thread Saftey: `ares_timeout()` was missing lock. [74a64e4]</changelog>
  <changelog author="adam.majer@suse.de" date="1735560000">- c-ares 1.34.4
  This is a bugfix release.
  Changes:
    QNX Port: Port to QNX 8, add primary config reading support, add CI build. PR #934, PR #937, PR #938
  Bugfixes:
    Empty TXT records were not being preserved. PR #922
    docs: update deprecation notices for ares_create_query() and ares_mkquery(). PR #910
    license: some files weren't properly updated. PR #920
    Fix bind local device regression from 1.34.0. PR #929, PR #931, PR #935
    CMake: set policy version to prevent deprecation warnings. PR #932
    CMake: shared and static library names should be the same on unix platforms like autotools uses. PR #933
    Update to latest autoconf archive macros for enhanced system compatibility. PR #936
  In version 1.34.3
  This is a bugfix release.
  Changes:
    Build the release package in an automated way so we can provide provenance as per SLSA3. PR #906
  Bugfixes:
    Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. Issue #911
    TSAN warns on missing lock, but lock isn't actually necessary. PR #915
    ares_getaddrinfo() for AF_UNSPEC should retry IPv4 if only IPv6 is received. 765d558
    ares_send() shouldn't return ARES_EBADRESP, its ARES_EBADQUERY. 91519e7
    Fix typos in man pages. PR #905
- skip-test.patch: fix failing tests</changelog>
  <changelog author="adam.majer@suse.de" date="1735905600">- skip-test.patch replaced with upstream unit test fix
  a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1744113600">- c-ares version 1.34.5
  * CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that
    was introduced in v1.32.3 (bsc#1240955)
- a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch: upstreamed, removed</changelog>
</package>
<package pkgid="a911b089f71c2aa91072c5d7778fc7fc8d5ae33b8860b5d57a3ab678924f0badd5b3dfc75df7e1e4f1f359e04d4d5babfe0f789df97ed4aaac01a37261808bb2" name="libcbor0_11" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1600776000">- Update to version 0.8.0
  * BREAKING: Fix cbor_tag_item not increasing the reference count
    on the tagged item reference it returns
  * BREAKING: CBOR_DECODER_EBUFFER removed from cbor_decoder_status
    + cbor_stream_decode will set CBOR_DECODER_NEDATA instead if the
    input buffer is empty
  * Fix cbor_stream_decode to set cbor_decoder_result.required to
    the minimum number of input bytes necessary to receive the next
    callback (as long as at least one byte was passed)
  * Fixed several minor manpage issue</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 0.9.0:
  * Improved pkg-config paths handling
  * Use explicit math.h linkage
  * BREAKING: Fixed handling of items that exceed the host size_t range
  * cbor_decode explicitly checks size to avoid overflows (previously broken,
    potentially resulting in erroneous decoding on affected systems)
- split docs into multibuild flavor to avoid build cycle via openssh&lt;-&gt;
  python-pyOpenSSL &lt;-&gt; python-cryptography</changelog>
  <changelog author="dmueller@suse.com" date="1638878400">- fix duplicate src package name issue on multibuild</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Install manual page in the correct man section</changelog>
  <changelog author="info@paolostivanin.com" date="1673870400">- Update to 0.10.1:
  * BREAKING: Fix cbor_copy leaking memory and creating invalid items when the allocator fails.
  * BREAKING: Improved half-float encoding for denormalized numbers. [#208]
  * Make the buffer_size optional in cbor_serialize_alloc [#205]
  * Fix a potential memory leak when the allocator fails during array or map decoding [#224]
  * Fix a memory leak when the allocator fails when adding chunks to indefinite bytestrings.
  * Fix a memory leak when the allocator fails when adding chunks to indefinite strings
  * Fix cbor_build_tag illegal memory behavior when the allocator fails
  * Add a new cbor_serialized_size API
  * Reworked cbor_serialize_alloc to allocate the exact amount of memory necessary upfront</changelog>
  <changelog author="alarrosa@suse.com" date="1677067200">- Merge change from SLE15 SP4 made by pgajdos@suse.com on
  Tue Apr  5 14:36:56 UTC 2022:
- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.3</changelog>
  <changelog author="info@paolostivanin.com" date="1677499200">- Update to 0.10.2:
  * Fixed minor test bug causing failures for x86 Linux
  * Made tests platform-independent</changelog>
  <changelog author="pgajdos@suse.com" date="1712059200">- version update to 0.11.0
  * Updated documentation to refer to RFC 8949
  * Improvements to cbor_describe
    Bytestring data will now be printed as well by akallabeth
    Formatting consistency and clarity improvements
  * Fix cbor_string_set_handle not setting the codepoint count
  * BREAKING: cbor_load will no longer fail on input strings that are
    well-formed but not valid UTF-8
    If you were relying on the validation, please check the result
    using cbor_string_codepoint_count instead
  * BREAKING: All decoders like cbor_load and cbor_stream_decode will
    accept all well-formed tag values (bug discovered by dskern-github)
    Previously, decoding of certain values would fail with
    CBOR_ERR_MALFORMATED or CBOR_DECODER_ERROR
    This also makes decoding symmetrical with serialization, which
    already accepts all values</changelog>
  <changelog author="ecsos@opensuse.org" date="1726488000">- The doc fails to build with an assert in sphinx in 15sp6 also.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
</package>
<package pkgid="c5efa0e75ece5328acfa093681646c851fd6bdde6e5a4e25c46558a8b74f85df0b6dbbee4aa8d9541a6c7e4daf2001081bb23249eebe87a0ec350de28344153f" name="libcdda_interface0" arch="x86_64">
  <version epoch="0" ver="3.10.2" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1342353600">- own directories for japanese man pages, no need to buildrequire man
  for that</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1369137600">- add config-guess-sub-update.diff:
  * configure.guess/sub update for aarch64 support</changelog>
  <changelog author="tchvatal@suse.com" date="1382616000">- Redo the buildsystem to use only shared libs and allow parallel
  building to have it faster in obs.
  * removed patches:
  - cdparanoia-III-dt_needed.patch
  - cdparanoia-large-pic.diff
  * added patches:
  - 010_build_system.patch
  - 050_all_build_only_shared_libraries.patch</changelog>
  <changelog author="schwab@suse.de" date="1523966400">- config-guess-sub-update.diff: update for RISC-V support</changelog>
  <changelog author="adam.majer@suse.de" date="1524052800">- Adjust licenses to be installed with %license not %doc
- libraries are covered by LGPL-2.1-or-greater and the command-line
  tool is GPL-2.0-or-greater</changelog>
  <changelog author="tchvatal@suse.com" date="1524052801">- Do not bother to talk about it being beta release as we
  are shipping this since 2008</changelog>
  <changelog author="jengelh@inai.de" date="1524052802">- Update descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e67205a6444cbbf114c1008ff1544fca637df4d28280c30ee40c88b5b385bbd6844811aae27b16a307fea4503706eeaf2ea3af366f9571c3b18beb51fe52d690" name="libcdda_paranoia0" arch="x86_64">
  <version epoch="0" ver="3.10.2" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1342353600">- own directories for japanese man pages, no need to buildrequire man
  for that</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1369137600">- add config-guess-sub-update.diff:
  * configure.guess/sub update for aarch64 support</changelog>
  <changelog author="tchvatal@suse.com" date="1382616000">- Redo the buildsystem to use only shared libs and allow parallel
  building to have it faster in obs.
  * removed patches:
  - cdparanoia-III-dt_needed.patch
  - cdparanoia-large-pic.diff
  * added patches:
  - 010_build_system.patch
  - 050_all_build_only_shared_libraries.patch</changelog>
  <changelog author="schwab@suse.de" date="1523966400">- config-guess-sub-update.diff: update for RISC-V support</changelog>
  <changelog author="adam.majer@suse.de" date="1524052800">- Adjust licenses to be installed with %license not %doc
- libraries are covered by LGPL-2.1-or-greater and the command-line
  tool is GPL-2.0-or-greater</changelog>
  <changelog author="tchvatal@suse.com" date="1524052801">- Do not bother to talk about it being beta release as we
  are shipping this since 2008</changelog>
  <changelog author="jengelh@inai.de" date="1524052802">- Update descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e2772c716e7bb650d67fee8e47be27cec323b3af8545fbd0d3e8a311fb95ac9096ee1842c08f2f22bdc7f05cbeb1bb8184e0833c4f6a7fa1bd152bb186da9f7d" name="libcdrdeflt1_0" arch="x86_64">
  <version epoch="0" ver="3.02~a10" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="a26032cbd920c1d4e20e8a139554ac4c7c8d040593d680021a3c00a6ad4a7dfc131560d1da5782f1891911ed2b728b39ced4b08dd7c2d28ec390a6233e0b3a7a" name="libcollection4" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="160000.2.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="92b77ceb27f05de14af047707b18067c97a87968dd8305a67886363b7c8b11fa577f5df56af27b2497f86211a0f21d803fb67a1dd753fa1320b410c4035d8ab6" name="libcolord2" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="160000.1.1"/>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1648209600">- Update to version 1.4.6:
  + Add missing copyright notices.
  + Add Spyder X entry.
  + Document where to send patches.
  + Don't use exact floating point comparisons.
  + Drop option for removed reverse engineering tools.
  + Drop references to hughski.com.
  + Fix a small memory leak in sqlite3_exec().
  + Fix typo in device-removed signal documentation.
  + Make introspection optional in meson.
- Drop -Dreverse=false meson parameter: no longer supported.
- Fix a few rpmlint warnings:
  + Do not self-obsolete shared-color-profiles by providing the
    symbol with a version.
  + Call +%tmpfiles_create %{_tmpfilesdir}/colord.conf in %post.
  + Package /usr/share/bash-completion/completions/colormgr with
    mode 644: the files are not executed, but sourced.
  + Own %{_localstatedir}/lib/colord/icc (ghost): this directory is
    generated by %tmpfiles_create.</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak on db
  open failure (boo#1202802 CVE-2021-42523).</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for various architectures.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- Reduce memory constraints for riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patch as PATCH-FEATURE-OPENSUSE.</changelog>
  <changelog author="mjambor@suse.com" date="1721908800">- Build -D_FILE_OFFSET_BITS=64 and -D_TIME_BITS=64 in order to avoid
  wrong type being passed to gmtime_r on i586 (and perhaps other 32bit
  targets). [boo#1228331]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1725451200">- Remove script in %pre to change ownership of /var/lib/colord
  (bsc#1208056).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="dimstar@opensuse.org" date="1756123200">- Update to version 1.4.8:
  + New Features:
  - Add AppStream metainfo XML with hardware provide info.
  - Add support for -Dsystemd_root_prefix to make local building
    easier.
  - Install sysusers.d config file if configured user is not
    root.
  + Bugfixes:
  - Add the source attribute for each man page.
  - Drop component type from AppStream metadata XML to avoid
    parsing error.
  - Fix a critical warning when running the self tests.
  - Fix USB scanners not working with RestrictAddressFamilies.
  - Fix writing to the database with ProtectSystem=strict.
  - Properly set the status to CD_SESSION_STATUS_RUNNING.
  - Use g_ascii_strtod instead of atof().
  - Use sqlite3_errmsg() to avoid getting a mutable error
    message.
- Changes from version 1.4.7:
  + Bugfixes:
  - Add various hardenings to the systemd service.
  - Always close the ICC profile when loading fails.
  - Avoid destructing LCMS plugin twice with lcms 2.14.
  - Do not make state files executable in tmpfiles.d/colord.conf.
  - Fix a double free spotted by Coverity.
  - Fix an error check when parsing the DTP94 data.
  - Fix a -Wincompatible-pointer-types warning.
  - Fix potential crash when reading from broken Huey hardware.
  - Set FILE_OFFSET_BITS explicitly.
  - Use a 64-bit time_t.
  - Use thread context for Gamut Alarm codes.
- Drop colord-CVE-2021-42523.patch and
  harden_colord.service.patch: fixed upstream.</changelog>
</package>
<package pkgid="df0b7482fbb21fe1293f80b355a36bbff9fe5be894f1592f28531fd80c1115a4d41a3e85743ea8ee9a5f47caec619b0b91229abb650860dab27c385117a9cca6" name="libcom_err2" arch="x86_64">
  <version epoch="0" ver="1.47.0" rel="160000.3.2"/>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="lhenriques@suse.com" date="1705060800">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck:
  Suppress "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="8982ce841c6278d4c3da2a1951de212584f328a6246fc4b417b0e007e47bab81fc2ebf168a534c70edf06f89f36b0d1d99cebe426fe9a64345550b545cc1d339" name="libconfig11" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="160000.2.2"/>
  <changelog author="davejplater@gmail.com" date="1337428800">- Added baselibs.conf for 32 bit ffado
- Disabled pdf and html docs, moved info to devel package</changelog>
  <changelog author="p.drouand@gmail.com" date="1356782400">- Update to 1.4.9 version:
  * lib/libconfigcpp.c++ - Fixed compiler warnings in constructor
    initializers
  * tinytest/tiytest.c, tinytest/tinytest.h - added tt_file_exists();
    added alternate implementations of some test macros since MSVC does
    not support C99 fully; added comparators for text files (ignoring
    line endings)
  * tests/tests.c - use tt_file_exists() rather than access(); alias
    snprintf to _snprintf for MSVC; compare files as text files rather
    than as binary files
  * lib/scanner.l - fixed parsing issue when backslash in string is
    followed by invalid escape character; reported by Jimmy Scott
  * lib/scanner.c - regenerated
  * lib/libconfig.h, lib/libconfig.h++, lib/Makefile.am,
    doc/libconfig.texi, configure.ac - bump version numbers
  * aclocal.m4, ac_config.h - regenerated
  * m4/*, aux-build/*, libtool - updated to newer</changelog>
  <changelog author="jengelh@inai.de" date="1412510400">- Make doc subpackage noarch; improve on RPM group classification</changelog>
  <changelog author="i@marguerite.su" date="1433678400">- update version 1.5.0
  * lib/libconfig.c - Don't fclose() a null pointer.
  * lib/libconfig.c, lib/wincompat.h - check if file being
    opened is a directory
  * lib/libconfig.c, lib/libconfig.h, lib/libconfig.h++,
    doc/libconfig.texi - added config_set_options(),
    config_get_options(), setOptions(), getOptions().
  * lib/libconfig.c++, lib/libconfig.h++ - added patches
    from Matt Renaud (added iterators, removed throws()
    specifications); added Setting.lookup(); code cleanup;
    added patch from Yuri Dyachenko (made exception
    constructors public)
  * lib/libconfig.c, lib/libconfig.h - renamed
    config_setting_lookup_from() to config_setting_lookup()
    and documented it; patch from Alexander Klauer (floating
    point precision loss)
  * doc/libconfig.texi - documented new APIs, bumped version
  * lib/scanner.c, lib/scanner.h, lib/scanner.l, libconfig.c -
    scanner code cleanup; and regenerated with flex 2.5.39
  * lib/grammar.c, lib/grammar.h, lib/grammar.y - parser code
    cleanup; and regenerated with bison 3.0.2
  * lib/libconfig.c - bugfix; capture root filename
  * tests/Makefile.am - fix for out-of-source builds
  * ac_config.h.in, aclocal.m4 - updated to newer autotools</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Update to 1.6.0:
  * Added include_dir feature (support for Debian-style conf.d/
    includes) (pull request #36)
  * Added octal_ints feature (support for integer expressed in octal,
    useful for permissions and masks in UNIX-like systems (pull req #42)
  * Fixed "Removing a setting removes all siblings" (issue #41)
    Props random85
  * Allow specifying the number of decimals wanted when outputting
    Based upon a suggestion by zhaopingsun (issue #31)
  * Make libconfig usable from CMake (pull request/issue #28)
    Props thfi
  * Documentation fixes
  - Copyright and examples
  - Included TeX patch from Debian (fixes FTBS with TeXlive)
  * Resync Debian packaging
    includes updated packages for GCC5 transition</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 1.7:
  * Redesigned the directory-include feature to avoid using
    platform-specific directory scanning code, and to fix a bug in
    the handling of nested includes. The application can now do its
    own directory scanning and/or wildcard expansion by registering
    an include function.
  * Added new CONFIG_OPTION_ALLOW_SCIENTIFIC_NOTATION to allow
    either %f or %g-style formatting for floating point values.
  * Improved the options APIs in both the C and C++ libraries.
  * Improved the automatic conversion between int and int64 values.
  * Fixed build errors caused by out-of-sync generated lexer and
    parser source files.
  * Added an API to clear an existing configuration.
  * Fixed a problem where a group or list could be added to an array.
  * Changed default float precision from 2 to 6.
  * Modified grammar to allow trailing commas in lists and arrays.
  * Removed logic that clipped negative values to 0 in (unsigned int)
    cast operator.
  * Updated manual and added a new chapter on other libconfig
    implementations and bindings.
  * Various internal code cleanup.
  * Fixed failing unit tests.
  * Upgraded VS2015 solution/project files to VS2017.
- Use new project URL
- sonum updated from 8 to 11</changelog>
  <changelog author="jengelh@inai.de" date="1518004800">- Ensure neutrality of description, and strip other OS mentions.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- libconfig 1.7.2:
  * fix a slow memory leak
- includes changes from 1.7.1:
  * Fixed a bug that caused incorrect processing of strings with
    escape sequences.
  * Added a new 'fsync' configuration option.
- switch to upstream bootstrapped tarball</changelog>
  <changelog author="jengelh@inai.de" date="1624190400">- Update to release 1.7.3
  * Fixed a heap corruption bug in config_clear()
  * Added a Setting::isString() method
  * Renamed all remaining internal methods that lacked a
    "libconfig_" prefix.</changelog>
</package>
<package pkgid="5cf75a0f08ae812e24ec50e55290a5c84ba2f8041675d39a5116b44ed7e84c38fa8493ae875519f5113699baa68d1a7e73a064cb046bce55dc3dcf3f4fa81f0d" name="libcontainers-common" arch="noarch">
  <version epoch="0" ver="20250409" rel="160000.2.2"/>
  <changelog author="meissner@suse.com" date="1710936000">- reenable SUSE registry key validation for new key.</changelog>
  <changelog author="danish.prakash@suse.com" date="1712577600">- Add patch to keep containers.conf modifications in sync with upstream (bsc#1213556)
  + 0001-containers.conf-SUSE-clear-cni-config-dir-for-ALP.patch
- Fallback to podman's default capabilities and journal driver via containers.conf
- New release 20240408
- bump bundled c/common to 0.58.0
- bump bundled c/image to 5.30.0
- bump bundled c/storage to 1.53.0</changelog>
  <changelog author="danish.prakash@suse.com" date="1713960000">- Introduce new subpackage that ships registries.conf that uses
  registry.suse.com as the only unqualified registry while pulling images on
  SL Micro and SP6. (jsc#SMO-376, jsc#PED-8289)</changelog>
  <changelog author="danish.prakash@suse.com" date="1718712000">- Move the following distro configs files to /usr/share/containers/:
  * /etc/containers/mounts.json
  * /etc/containers/storage.conf
  * /etc/containers/seccomp.json
- New release 20240618
- bump bundled c/common to 0.59.1
- bump bundled c/image to 5.31.0
- bump bundled c/storage to 1.54.0</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- update storage.conf &amp; containers.conf to latest versions from upstream
  The only functional changes are in storage.conf:
  * change storage.options.pull_options.enable_partial_images from false to true
  * change storage.options.overlay.mount_options from `mountopt =
    "nodev,metacopy=on"` to `mountopt = "nodev"`
- add download_files service to fetch the latest config on `osc service mr`
- add storage-conf-prio-list.patch that modifies the upstream storage.conf to
  add our storage driver priority list</changelog>
  <changelog author="danish.prakash@suse.com" date="1719230401">- While migrating config files from /etc/containers/ to /usr/share/containers/,
  preserve config files *if* modified by the user (fixes bsc#1226825).</changelog>
  <changelog author="dmueller@suse.com" date="1738929600">- fix shortnames.config by updating them from upstream</changelog>
  <changelog author="danish.prakash@suse.com" date="1744200000">- containers.conf default configuration modifications:
  * set runc as the default OCI runtime (bsc#1239088)
  * set nftables as the default firewall driver for netavark
- New release 20250409
  * bump bundled c/common to 0.59.1
  * bump bundled c/image to 5.31.0
  * bump bundled c/storage to 1.54.0</changelog>
  <changelog author="danish.prakash@suse.com" date="1748520000">- Sync containers.conf &amp; storage.conf with the current c/* versions
- Rename storage-conf-prio-list.patch to 0002-storage-conf-prio-list.patch
- Add patch to set SUSE defaults to containers.conf:
  * 0003-containers-conf-suse-defaults.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1752494400">- Remove subpackage libcontainers-sles-mounts and prevent auto mounting
  SUSEConnect credentials from host to container. SLE16 onwards, the idea is
  to expect users to explicitly mount secrets. (bsc#1246227)</changelog>
</package>
<package pkgid="0742a44d66e5a120808c11c7e8cea101611aa6c6b5c60d6e8a6f32f194b985ea3766adbccc4aa381d151bba2193b365eb2403fa53642b2dea52b711bd208acb7" name="libcontainers-default-policy" arch="noarch">
  <version epoch="0" ver="20250409" rel="160000.2.2"/>
  <changelog author="meissner@suse.com" date="1710936000">- reenable SUSE registry key validation for new key.</changelog>
  <changelog author="danish.prakash@suse.com" date="1712577600">- Add patch to keep containers.conf modifications in sync with upstream (bsc#1213556)
  + 0001-containers.conf-SUSE-clear-cni-config-dir-for-ALP.patch
- Fallback to podman's default capabilities and journal driver via containers.conf
- New release 20240408
- bump bundled c/common to 0.58.0
- bump bundled c/image to 5.30.0
- bump bundled c/storage to 1.53.0</changelog>
  <changelog author="danish.prakash@suse.com" date="1713960000">- Introduce new subpackage that ships registries.conf that uses
  registry.suse.com as the only unqualified registry while pulling images on
  SL Micro and SP6. (jsc#SMO-376, jsc#PED-8289)</changelog>
  <changelog author="danish.prakash@suse.com" date="1718712000">- Move the following distro configs files to /usr/share/containers/:
  * /etc/containers/mounts.json
  * /etc/containers/storage.conf
  * /etc/containers/seccomp.json
- New release 20240618
- bump bundled c/common to 0.59.1
- bump bundled c/image to 5.31.0
- bump bundled c/storage to 1.54.0</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- update storage.conf &amp; containers.conf to latest versions from upstream
  The only functional changes are in storage.conf:
  * change storage.options.pull_options.enable_partial_images from false to true
  * change storage.options.overlay.mount_options from `mountopt =
    "nodev,metacopy=on"` to `mountopt = "nodev"`
- add download_files service to fetch the latest config on `osc service mr`
- add storage-conf-prio-list.patch that modifies the upstream storage.conf to
  add our storage driver priority list</changelog>
  <changelog author="danish.prakash@suse.com" date="1719230401">- While migrating config files from /etc/containers/ to /usr/share/containers/,
  preserve config files *if* modified by the user (fixes bsc#1226825).</changelog>
  <changelog author="dmueller@suse.com" date="1738929600">- fix shortnames.config by updating them from upstream</changelog>
  <changelog author="danish.prakash@suse.com" date="1744200000">- containers.conf default configuration modifications:
  * set runc as the default OCI runtime (bsc#1239088)
  * set nftables as the default firewall driver for netavark
- New release 20250409
  * bump bundled c/common to 0.59.1
  * bump bundled c/image to 5.31.0
  * bump bundled c/storage to 1.54.0</changelog>
  <changelog author="danish.prakash@suse.com" date="1748520000">- Sync containers.conf &amp; storage.conf with the current c/* versions
- Rename storage-conf-prio-list.patch to 0002-storage-conf-prio-list.patch
- Add patch to set SUSE defaults to containers.conf:
  * 0003-containers-conf-suse-defaults.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1752494400">- Remove subpackage libcontainers-sles-mounts and prevent auto mounting
  SUSEConnect credentials from host to container. SLE16 onwards, the idea is
  to expect users to explicitly mount secrets. (bsc#1246227)</changelog>
</package>
<package pkgid="fed72079bf67b4a9d2923d4ee85ce014a47eeebd9fa896d43f2076230bfd87f6206d7455f60447a6105650fe03cf98cb828c28e96d96da0e0536fbeac98b2c84" name="libcpupower1" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="trenn@suse.de" date="1713182400">- Parse turbostat and intel-speed-select version from kernel sources and
  add them to %description</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1728043200">- Upstream fixed lib default installation path in 3a5bb5066f4c
  [- cpupower_exclude_kernel_Makefile.patch]</changelog>
  <changelog author="trenn@suse.de" date="1741262400">- Not also adopt the kernel version, but also the exact build release
  By that it is finally possible to find out on which exact (kernel)
  sources the cpupower tools are based on.
  D amd_do_not_show_amount_of_boost_states_if_zero.patch
-&gt; This was only needed for an old Dell test env, will not go mainline
  and can vanish now.</changelog>
  <changelog author="trenn@suse.de" date="1742299200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.</changelog>
</package>
<package pkgid="f73c9cc82e7d6f49e2fed96d35e6aa0a483d23b9bb6ee450c7e1cf273d8b3c3a55ee22fa3374b7523bae7be73774ff0afb4df9e822cd12b081158ea19135dac6" name="libcrack2" arch="x86_64">
  <version epoch="0" ver="2.9.11" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="jengelh@inai.de" date="1628683200">- Drop --with-pic, as it has no effect with --disable-static.</changelog>
  <changelog author="pgajdos@suse.com" date="1636027200">- %check: really test the package [bsc#1191736]</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 2.9.8:
  * rules: Drop using register keyword
  * add exec perms
  * translation updates
  * Use what's in the build environment and use a current autoconf
  * util/Makefile.am: fix link with lintl
  * Force grep to treat the input as text when formatting word files</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- version update to 2.9.11
  * Merge fedora patches and man pages
  * Fix missing files in dist tarball, other automake fixes (Leandro Nini)
  * Fix error handling during build of dictionary (yixiangzhike)
  * Fix to localization support (A. Wilcox, nekopsykose)
  * Fix to test utilities (Alexander Kanavin)
  * Translation updates from weblate
  * python: adjust include path for builddir by @thesamesam in #61
  * Make buffer static and avoid returning stack-allocated memory by @drfiemost in #63
- modified patches
  % 0002-cracklib-2.9.2-visibility.patch (refreshed)</changelog>
</package>
<package pkgid="8b70d3c57ce5ce855be1767525c3b6eb0939d3fd788dd1c5fff8fbde1401a0deedf6247632003d549b089bf1415cab66910eed5f312e98dfdac06ab7f81f311d" name="libcrypt1" arch="x86_64">
  <version epoch="0" ver="4.4.38" rel="160000.3.2"/>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 4.4.27:
  * Limit the maximum amount of rbytes to 64 bytes (512 bits) for yescrypt,
    gost-yescrypt, and scrypt</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 4.4.28:
  No changes whatsoever.</changelog>
  <changelog author="schwab@suse.de" date="1669809600">- Update to 4.4.33
  * Fix variable name in crypt(3) for a datamember of 'struct crypt_data'
  * Fix -Werror=strict-overflow in lib/crypt-des.c, which is seen
    by GCC 12.x
  * Add some SHA-2 Maj() optimization in lib/alg-sha256.c
  * Fix -Werror=conversion in lib/alg-yescrypt-opt.c
  * Improvements to huge page handling in lib/alg-yescrypt-platform.c
  * Fix -Werror=sign-conversion in lib/alg-yescrypt-platform.c</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1678449600">- Enable livepatching support on x86_64.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO now (boo#1138833) and use FAT LTO objects for static libs.</changelog>
  <changelog author="schwab@suse.de" date="1685620800">- Update to 4.4.34
  * Optimize some cast operation for performance in
    lib/alg-yescrypt-platform.c.
  * Add SHA-2 Maj() optimization proposed by Wei Dai in lib/alg-sha512.c.
  * Explicitly clean the stack and context state after computation in
    lib/alg-gost3411-2012-hmac.c, lib/alg-hmac-sha1.c, and lib/alg-sha256.c
    (issue #168).</changelog>
  <changelog author="dmueller@suse.com" date="1688212800">- update to 4.4.35:
  * Fix build with Perl v5.38.0 (issue #170).
  * Fix build with MinGW-w(32|64).</changelog>
  <changelog author="schwab@suse.de" date="1689595200">- Update to 4.4.36
  * Fix left over bits failing with Perl v5.38.0</changelog>
  <changelog author="lucas.mulling@suse.com" date="1735819200">- Update to 4.4.37
  * Several fixes to the manpages (issue #185).
  * Only test the needed makecontext signature during configure (issue #178).
  * Fix -Werror=strict-overflow in lib/crypt-bcrypt.c, which is seen by GCC
    4.8.5 (issue #197).
- Symlink duplicated manpages</changelog>
  <changelog author="lucas.mulling@suse.com" date="1736856000">- Update to 4.4.38
  * Fix several "-Wunterminated-string-initialization", which are seen by
    upcoming GCC 15.x (issue #194).
  * Fix "-Wmaybe-uninitialized" in crypt.c, which is seen by GCC 13.3.0.
  * Skip test/explicit-bzero if compiling with ASAN.
  * Drop hard requirement for the pkg-config binary (issue #198).
- Use %ldconfig_scriptlets</changelog>
</package>
<package pkgid="d0b5e69facd80f1195e8ceadca83ce787f0218971781804518bcf162f6bd354b8d1834f390fde858e6b23ea26a5e00744051d30a46239cf8db0e9253ebcf6ded" name="libcryptsetup12" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1722340800">- Update to 2.7.3:
  * Do not allow formatting LUKS2 with Opal SED (hardware encryption)
    if the reported logical sector size for the block device and Opal
    encryption logical block differs.
  * Fixes to wiping LUKS2 headers after Opal locking area erase.
  * Mention the need for possible PSID revert before Opal format for some
    drives (man page).
  * Fix Bitlocker-compatible code to ignore newly seen metadata entries.
  * Fix interactive query retry if LUKS2 unbound keyslot is present.
  * Detect unsupported zoned devices for LUKS header devices.
  * Allow "capi" cipher format for benchmark command and fix parsing
    of plain IV in "capi" format.
  * Add support for HCTR2 encryption mode.
  * Source code now uses SPDX license identifiers instead of full
    license preambles.
  * Fix missing includes for cryptographic backend that could cause
    compilation errors for some systems.
  * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2.
  * Fix various (mostly false positive) issues detected by Coverity.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1722427200">- Update to 2.7.4:
  * Detect device busy failure for device-mapper table-referenced
    devices.
  * Fix shared activation for dm-verity devices.
  * Add --shared option for veritysetup open action.
  * Do not use exclusive flag for the allocated backing loop files.
  * Fixes for problems found by static analyzers and Valgrind.
  * Fixes to tests and CI scripts.
- Use fdupes to link identical man pages.</changelog>
  <changelog author="meissner@suse.com" date="1725019200">- cryptsetup-fips140-3.patch: extend the password for PBKDF2 benchmarking
  to be more than 20 chars to meet FIPS 140-3 requirements (bsc#1229975)</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 2.7.5:
  * Fix possible online reencryption data corruption (only in 2.7.x).
    In some situations (initializing a suspended device-mapper device),
    cryptsetup disabled direct-io device access. This caused unsafe
    online reencryption operations that could lead to data corruption.
    The code now adds strict checks (and aborts the operation) and
    changes direct-io detection code to prevent data corruption.
  * Fix a clang compilation error in SSH token plugin.
    As clang linker treats missing symbols as errors, the linker phase
    for the SSH token failed as the optional cryptsetup_token_buffer_free
    was not defined.
  * Fix crypto backend initialization in crypt_format_luks2_opal API call.</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
  [bsc#1236375, bsc#1236164]
  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
    but its not FIPS compliant. A system would be unbootable if using
    Argon2id or Argon2i for disk encryption and then switching to
    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
  * Remove the dependency on libargon2 as is now provided by openssl.</changelog>
  <changelog author="pmonreal@suse.com" date="1748520000">- Add a dependency on device-mapper to libcryptsetup12 to install
  the required device-mapper udev rules. [bsc#1241612]</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Update to 2.8.0:
  * Full release notes in:
  - https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes
  * Introduce support for inline mode (use HW sectors with additional hardware
    metadata space).
  * Finalize use of keyslot context API.
  * Make all keyslot context types fully self-contained.
  * Add --key-description and --new-key-description cryptsetup options.
  * Support more precise keyslot selection in reencryption initialization.
  * Allow reencryption to resume using token and volume keys.
  * Cryptsetup repair command now tries to check LUKS keyslot areas for corruption.
  * Opal2 SED: PSID keyfile is now expected to be 32 alphanumeric characters.
  * Opal2: Avoid the Erase method and use Secure Erase for locking range.
  * Opal2: Fix some error description (in debug only).
  * Opal2: Do not allow deferred deactivation.
  * Allow --reduce-device-size and --device-size combination for reencryption
    (encrypt) action.
  * Fix the userspace storage backend to support kernel "capi:" cipher specification format.
  * Disallow conversion from LUKS2 to LUKS1 if kernel "capi:" cipher specification is used.
  * Explicitly disallow kernel "capi:" cipher specification format for LUKS2
    keyslot encryption.
  * Do not allow conversion of LUKS2 to LUKS1 if an unbound keyslot is present.
  * cryptsetup: Adjust the XTS key size for kernel "capi:" cipher specification.
  * Remove keyslot warning about possible failure due to low memory.
  * Do not limit Argon2 KDF memory cost on systems with more than 4GB of available memory.
  * Properly report out of memory error for cryptographic backends implementing Argon2.
  * Avoid KDF2 memory cost overflow on 32-bit platforms.
  * Do not use page size as a fallback for device block size.
  * veritysetup: Check hash device size in advance.
  * Print a better error message for unsupported LUKS2 AEAD device resize.
  * Optimize LUKS2 metadata writes.
  * veritysetup: support --error-as-corruption option.
  * Report all sizes in status and dump command output in the correct units.
  * Add --integrity-key-size option to cryptsetup.
  * Support trusted &amp; encrypted keyrings for plain devices.
  * Support plain format resize with a keyring key.
  * TCRYPT: Clear mapping of system-encrypted partitions.
  * TCRYPT: Print all information from the decrypted metadata header in
    the tcryptDump command.
  * Always lock the volume key structure in memory.
  * Do not run direct-io read check on block devices.
  * Fix a possible segfault in deferred deactivation.
  * Exclude cipher allocation time from the cryptsetup benchmark.
  * Add Mbed-TLS optional crypto backend.
  * Fix the wrong preprocessor use of #ifdef for config.h processed by Meson.
  * Reorganize license files. The license text files are now in docs/licenses.
    The COPYING file in the root directory is the default license.
  * Remove cc-by-sa-4.0.txt as already shipped now in docs/licenses
    and named as COPYING.CC-BY-SA-4.0.
  * Libcryptsetup API extensions. The libcryptsetup API is backward compatible
    with all existing symbols. Due to the self-contained memory allocation,
    these symbols have the new version:
  - crypt_keyslot_context_init_by_passphrase;
  - crypt_keyslot_context_init_by_keyfile;
  - crypt_keyslot_context_init_by_token;
  - crypt_keyslot_context_init_by_volume_key;
  - crypt_keyslot_context_init_by_signed_key;
  - crypt_keyslot_context_init_by_keyring;
  - crypt_keyslot_context_init_by_vk_in_keyring;
  * New symbols:
  - crypt_format_inline
  - crypt_get_old_volume_key_size
  - crypt_reencrypt_init_by_keyslot_context
  - crypt_safe_memcpy
  * New defines:
  - CRYPT_ACTIVATE_HIGH_PRIORITY
  - CRYPT_ACTIVATE_ERROR_AS_CORRUPTION
  - CRYPT_ACTIVATE_INLINE_MODE
  - CRYPT_REENCRYPT_CREATE_NEW_DIGEST
  * New requirement flag:
  - CRYPT_REQUIREMENT_INLINE_HW_TAGS</changelog>
  <changelog author="pmonreal@suse.com" date="1755777600">- Update to 2.8.1:
  * Fix status and deactivation of TCRYPT (VeraCrypt compatible) devices that use chained ciphers.
  * Fix unlocking BITLK (BitLocker compatible) devices with multibyte UTF8 characters in the passphrase.
  * Do not allow activation of the LUKS2 device if the used keyslot is not encrypted (it uses a null cipher).
  - Such a configuration cannot be created by cryptsetup, but can be crafted outside of it.
  - Null cipher is sometimes used to create an empty container for later reencryption.
  - Only an empty passphrase can activate such a container (the same as in LUKS1).
  * Do not silently decrease PBKDF parallel cost (threads) if set by an option.
  - The maximum parallel cost is limited to 4 threads.
  * Fixes to configuration and installation scripts.
  - Meson and autoconf tools now properly support --prefix option for temporary directory installation.
  - Multiple fixes and cleanups to config.h for compatibility between Meson and autoconf.
  - Fix the luks2-external-tokens-path Meson option to work the same as in autoconf.
  - Fix Meson install for tool binaries, install fvault2Open man page and include test/fuzz/meson.build in release.
  * Major update to manual pages.
  - Try to explain the PBKDF hardcoded limits.
  - Add a better explanation for automatic integrity tag recalculation.
  - Mention crypt/verity/integritytab.
  - Remove or reformulate some misleading warnings present only with old and no longer supported kernels.
  - Clarify that some commands do not wipe data and unify OPAL reset wording.
  - Clarify the --label option.
  - There are also many other grammar and stylistic fixes to unify the man-page style.
  * Fixes for false-positive and annoying (optional) warnings added in recent compilers.</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Update to 2.8.3:
  * Stable bug-fix release with minor extensions.
- Update to 2.8.2:
  * BITLK: Fix for BitLocker metadata validation on big-endian systems.</changelog>
  <changelog author="pmonreal@suse.com" date="1770033600">- Update to 2.8.4: (jsc#PED-15889)
  * Fix integritysetup resize (grow) of the device if integrity bitmap
    mode is used. Increasing the integrity device in bitmap mode did
    not work as integritysetup incorrectly used journal settings that
    were not applicable.
  * Fix device size status reports in cryptsetup and integritysetup.
    If the device uses a sector size larger than 512 bytes, the newly
    reported byte sizes (introduced in 2.8.0) in the status report
    were incorrectly displayed.
  * BITLK: Fix unlocking BitLocker device with recovery passphrase.
    If the recovery passphrase was present in the first keyslot, the
    device failed to unlock. This bug was introduced in 2.8.2 with
    Clear Key support.</changelog>
</package>
<package pkgid="9af479c1dc57c1f3d63e62cd29e69ef0594a49acfa5e110ca5fd71efb7f7535f80b95966b39736360717b9e73f35ca6fbfcbc88dc9404a14eda6d0730b1fa190" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.4.16" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
</package>
<package pkgid="f13fe2c865822a9b9dc68798c9cc4e9eb15a28fa521863f4a10794b966c8a10493c5eacddb3faa703369e509a5eb59f64cdb2931b895607ec3375a6dccc3da9a" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="160000.5.1"/>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * tool_operate: reset the URL --url-query between --next (510fdad)
  * Add patches:
  - curl-CVE-2026-1965.patch curl-CVE-2026-1965-disable-ntlm-fix.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="1c3cc689a24289f30b9e67946f2e9cdf75203437c978fbd2e38678156b67c51f72df41d460f06d1d32d5d48be1cdeebc15a5ab680d38d939e61de8a876d62eff" name="libdaemon0" arch="x86_64">
  <version epoch="0" ver="0.14" rel="160000.3.2"/>
  <changelog author="seife@suse.de" date="1227787200">- update to version 0.13:
  - add daemon_reset_sigs() and daemon_unblock_sigs()
  - improve error handling
- obsoletes bnc-309132.patch, libdaemon-0.10-testd-fix-FD_SET.diff</changelog>
  <changelog author="seife@suse.de" date="1233057600">- mark filedescritor as closed after closing it, preventing
  application errors in e.g. avahi (bnc#469342, bnc#442210)
  Thanks to Stefan Thaeter for providing the patch.</changelog>
  <changelog author="crrodriguez@suse.de" date="1233748800">- move shared libraries to /%{_lib} so ifplugd can use them
- remove static libraries again</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="vuntz@opensuse.org" date="1286280000">- Update to version 0.14:
  + add daemon_set_verbosity() call
  + make daemon_nonblock() actually work
  + numerous updates
  + build fixes
- Drop libdaemon-0.12-bnc449728.diff,
  libdaemon-0.13-bnc469342.diff: fixed upstream.
- Improve descriptions.
- Do not set CFLAGS since we use %configure.
- Use %makeinstall.</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1328961600">- Move library back to %{_libdir}, /usr merge project.</changelog>
  <changelog author="mpluskal@suse.com" date="1426075200">- Cleanup spec file with spec-cleaner
- Use url for source</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static).
- Modernize rpm macro constructs.</changelog>
</package>
<package pkgid="7cd6d821dc90b4d5c6da835dfd0e73c8b5d3acef71924ec7df6c6a16f4e61bd050cb7d5d8e5f4e65df809c395201e1bcd5c1577f06bb7f4d9cb0476b976ceb7a" name="libdatrie1" arch="x86_64">
  <version epoch="0" ver="0.2.13" rel="160000.3.2"/>
  <changelog author="vuntz@opensuse.org" date="1298462400">- Add missing baselibs.conf.</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="p.drouand@gmail.com" date="1423051200">- Update to version 0.2.8
  * Fix compiler warnings in test suites.
  * Fix edge-case error on alphabet set of size 255.
  * Fail trie operations on non-alphabet inputs, rather than silently
    allowing them to sneak in as false keys.
  * Improved documentation.
- Add xz build require to keep SLE11 support</changelog>
  <changelog author="dimstar@opensuse.org" date="1439899200">- Add libdatrie-doxygen-found-is-enough.patch: when we find
  doxygen, we assume it is new enough. The configure script uses
  'expr 1.8.4 \&lt; $DOXYGEN_VER', which returns false for 1.8.10.
- For safeguard, we specify the minimal required version of
  doxygen (1.8.4) in the buildrequirements.</changelog>
  <changelog author="pgajdos@suse.com" date="1439899201">- update to version 0.2.9
  * Fix infinite loop on empty trie iteration.
  * Document about alphabet size.
  * Disable timestamp in Doxygen-generated doc.
  * etc. see ChangeLog
- remove libdatrie-doxygen-found-is-enough.patch in favour of
  libdatrie-doxygen-version-check.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to version 0.2.10
  * Correctly check doxygen version on configure
  * Optimization on AlphaMap mapping
- remove libdatrie-doxygen-version-check.patch
  * upstreamed in 7db54c662357dba5f109eaf1b24490f46ca23d44
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups. Remove ineffective --with-pic.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 0.2.12:
  - More C90 (ANSI C) compliance.
  - Prevent some compiling conflicts with other sources.
  - Fix miscellaneous compiler warnings.
  - Prevent trimming on extremely long dictionary path names.
  - Detect iconv() error more correctly in trietool.
  - Clarify package description that search time is O(m), where m is
    key length, not O(1), while still claiming that it's independent
    of database size.
  - Fix trie_state_get_data() on a prefix key.
  - Fix reported segfault on full-range alpha map.</changelog>
  <changelog author="dmueller@suse.com" date="1613044800">- update to 0.2.13:
  - Fix wrong key listing in byte trie
  - Fix cross-compiling issue caused by AC_FUNC_MALLOC
  - Fix isspace() arg problem on NetBSD.
  - Fix some documentations.
  - Really use TRIE_CHAR_TERM in TrieChar string termination.
    Changing TRIE_CHAR_TERM definition now won't break the code.
  - Fix Windows build issue by avoiding &lt;unistd.h&gt; include.
  - [New APIs] Add serialization of the trie into memory buffer.</changelog>
</package>
<package pkgid="2d5b66190b1280ebd023fc432944b35fc0113eed7186923dc7c853f34c7445dc0c6b81d97ef99e23ae8bcf5202f69ac58519e978131207787ee258a0c5592710" name="libdav1d7" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1683288000">- Use ldconfig_scriptlets macro, minor spec clean-up.</changelog>
  <changelog author="jengelh@inai.de" date="1685534400">- Add to description some performance mentions that set it apart
  from other packages e.g. gav1.</changelog>
  <changelog author="aloisio@gmx.com" date="1685620800">- Update to version 1.2.1
  * Fix a threading race on task_thread.init_done
  * NEON z2 8bpc and high bit-depth optimizations
  * SSSE3 z2 high bit-depth optimziations
  * Fix a desynced luma/chroma planes issue with Film Grain
  * Reduce memory consumption
  * Improve dav1d_parse_sequence_header() speed
  * OBU: Improve header parsing and fix potential overflows
  * OBU: Improve ITU-T T.35 parsing speed
  * Misc buildsystems, CI and headers fixes</changelog>
  <changelog author="aloisio@gmx.com" date="1696420800">- Update to version 1.3.0
  * Reduce memory usage in numerous places
  * ABI break in Dav1dSequenceHeader, Dav1dFrameHeader,
    Dav1dContentLightLevel structures
  * new API function to check the API version:
    dav1d_version_api()
  * Rewrite of the SGR functions for ARM64 to be faster
  * NEON implemetation of save_tmvs for ARM32 and ARM64
  * x86 palette DSP for pal_idx_finish function
- Bump soversion to 7</changelog>
  <changelog author="aloisio@gmx.com" date="1707912000">- Update to version 1.4.0
  * AVX-512 optimizations for z1, z2, z3 in 8bit and
    high-bitdepth
  * New architecture supported: loongarch
  * Loongarch optimizations for 8bit
  * New architecture supported: RISC-V
  * RISC-V optimizations for itx
  * Misc improvements in threading and in reducing binary size
  * Fix potential integer overflow with extremely large frame
    sizes (bsc#1220105, CVE-2024-1580)</changelog>
  <changelog author="aloisio@gmx.com" date="1710504000">- Update to version 1.4.1
  * Optimizations for 6tap filters for NEON (ARM)
  * More RISC-V optimizations for itx (4x8, 8x4, 4x16, 16x4,
    8x16, 16x8)
  * Reduction of binary size on ARM64, ARM32 and RISC-V
  * Fix out-of-bounds read in 8bpc SSE2/SSSE3 wiener_filter
  * Msac optimizations</changelog>
  <changelog author="aloisio@gmx.com" date="1716638400">- Update to version 1.4.2
  * AVX2 optimizations for 8-tap and new variants for 6-tap
  * AVX-512 optimizations for 8-tap and new variants for 6-tap
  * Improve entropy decoding on ARM64
  * New ARM64 optimizations for convolutions based on DotProd
    extension
  * New ARM64 optimizations for convolutions based on i8mm
    extension
  * New ARM64 optimizations for subpel and prep filters for i8mm
  * Misc improvements on existing ARM64 optimizations, notably
    for put/prep
  * New PowerPC9 optimizations for loopfilter
  * Support for macOS kperf API for benchmarking</changelog>
  <changelog author="aloisio@gmx.com" date="1718193600">- Update to version 1.4.3
  * AArch64: Fix potential out of bounds access in DotProd H/HV
    filters
  * cli: Prevent buffer over-read</changelog>
  <changelog author="aloisio@gmx.com" date="1729252800">- Update to version 1.5.0
  * WARNING: we removed some of the SSE2 optimizations, so if
    you care about systems without SSSE3, you should be careful
    when updating!
  * Optimize index offset calculations for decode_coefs
  * picture: copy HDR10+ and T35 metadata only to visible frames
  * SSSE3 new optimizations for 6-tap (8bit and hbd)
  * AArch64/SVE: Add HBD subpel filters using 128-bit SVE2
  * AArch64: Add USMMLA implempentation for 6-tap H/HV
  * AArch64: Optimize Armv8.0 NEON for HBD horizontal filters
    and 6-tap filters
  * Power9: Optimized ITX till 16x4.
  * Loongarch: numerous optimizations
  * RISC-V optimizations for pal, cdef_filter, ipred, mc_blend,
    mc_bdir, itx
  * Allow playing videos in full-screen mode in dav1dplay</changelog>
  <changelog author="aloisio@gmx.com" date="1737374400">- Update to version 1.5.1
  * Rewrite of the looprestoration (SGR, wiener) to reduce stack
    usage
  * Rewrite of {put,prep}_scaled functions
  * Improvements on the SSSE3 SGR
  * Improvements on ARM32/ARM64 looprestoration optimizations
  * RISC-V: blend optimizations for high bitdepth
  * Power9: blend optimizations for 8bpc
  * Port RISC-V to POSIX/non-Linux OS
  * AArch64: Add Neon implementation of load_tmvs
  * Fix a rare, but possible deadlock, in flush()</changelog>
</package>
<package pkgid="ff739d9c6b3884a99b09bf1304317adaaa33ba75cfd2879666868264bf85f51ed14c0e7e0dfdeaa88401afda5263be3284b2bc7e050b9ad628553bc290e69872" name="libdbus-1-3" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
  <changelog author="sflees@suse.de" date="1695297600">- No longer start or offer starting dbus as a system service
  dbus-broker will be the only supported system dbus. Although
  the existing daemon will stay as some things (gdm) require
  dbus-run-session</changelog>
  <changelog author="dimstar@opensuse.org" date="1695297601">- Explicitly require /usr/bin/cmp for the post scripts instead of
  diffutils: allow other implementations like busybox-diffutils to
  be acceptable.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1701518400">- common: dbus.socket still gets used after migration to
  dbus-broker so keep pre/post/postun scriptlets</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Add feature-suse-auto-socket-target-wants.patch: move
  from static enable symlinks to systemd created symlinks otherwise
  it can't be enabled by systemd-presets-common-SUSE
- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing the socket or user service aswell</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Add RH/Fedora compat provides dbus-libs to library package
  needed by Mullvad</changelog>
  <changelog author="sflees@suse.de" date="1714392000">- Drop feature-suse-auto-socket-target-wants.patch and use the
  filesystem instead, this works more consistenly with dbus-broker</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="72b1a0bc10cc91af2e5f881f72e20ef315f59cf41b822a5018eec211e8ee61708a1b3ef3d83fde1287ba215cf7f72cea7bb0b8718b5e2ab89c62ce6c9bddf991" name="libdeflt1_0" arch="x86_64">
  <version epoch="0" ver="2022.10.16" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="585f39f8ebf77637b6e45a780e0e417a0f67ea10355f508672d894659218a2fb82a9c304bb9b66667160e0f1dcf431236ac942c9d350a91e4ac473d17a25569b" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="2.03.29_1.02.203" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1723550400">- lvm2-monitor.service fails to start (boo#1228854)
  + bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch</changelog>
  <changelog author="glass.su@suse.com" date="1725019200">- [SLFO] systemd 254 is missing reworked SYSTEMD_READY logic in device mapper udev rules (bsc#1229518)
  * update udev dependency version in lvm2.spec</changelog>
  <changelog author="glass.su@suse.com" date="1734350400">- Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29
  * ** WHATS_NEW from 2.03.24 to 2.03.29 ***
  Version 2.03.29 - 09th December 2024
  ====================================
    Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify.
    Allow test mode when lvmlockd is built without dlm support.
    Add a note about RAID + integrity synchronization to lvmraid(7) man page.
    Add a function for running lvconvert --repair on RAID LVs to lvmdbusd.
    Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}).
    Fix renaming of raid sub LVs when converting a volume to raid (2.03.28).
    Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize.
    Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27).
  Version 2.03.28 - 04th November 2024
  ====================================
    Use radix_tree to lookup for UUID within committed metadata.
    Use radix_tree to lookup LV list entry within VG struct.
    Introduce setting config/validate_metadata = full | none.
    Restore fs resize call for lvresize -r on the same size LV (2.03.17).
    Correct off-by-one devicesfile backup counting.
    Replace use of dm_hash with radix_tree for lv names and uuids.
    Refactor vg_validate with uniq_insert and better use of CPU caches.
    Add radix_tree_uniq_insert.
    Update DM cache when taking next VG lock instead of dropping it.
    Generate json string id only for json reporting.
    For vgsummary use new API call dm_config_parse_only_section().
    Use radix_tree for PV names mapping.
    Split check_lv_segment into separate _in/complete_vg variant.
    Use find_lv instead of find_lv_in_vg when possible.
    Do a mirror fixup only when mirrors with logs are imported.
    Add faster crc32 calculation from zlib code for x86_64.
    Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization.
  Version 2.03.27 - 02nd October 2024
  ===================================
    Fix swap device size detection using blkid for lvresize/lvreduce/lvextend.
    Detect GPT partition table and pass partition filter if no partitions defined.
    Add global/sanlock_align_size option to configure sanlock lease size.
    Disable mem locking when activation/reserved_stack or reserved_memory is 0.
    Fix locking issues in lvmlockd leaving thin pool locked.
    Deprecate vdo settings vdo_write_policy and vdo_write_policy.
    Lots of typo fixes across lvm2 code base (codespell).
    Corrected integrity parameter interleave_sectors for DM table line.
    Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10.
    Do not accept duplicate device names for pvcreate.
  Version 2.03.26 - 23rd August 2024
  ==================================
    Fix internal error reported by pvmove on a VG with single PV.
    Also accept --mknodes --refresh for vgscan.
    Fix vgmknodes --refresh to wait for udev before checking /dev content.
    Use log/report_command_log=1 config setting by default for JSON output format.
    Fix unreleased memory pools on RAID lvextend.
    Add --integritysettings option to manipulate dm-integrity settings.
  Version 2.03.25 - 12nd July 2024
  ================================
    Utilize more radix_tree instead of dm_hash and btree.
    Refactor DM uuid caching from device_mapper directory.
    Enhance checking for DM uuid device.
    Fix lvm shell command completion on tab key (2.03.24).
    Avoid lockd_vg call to lvmlockd for local VGs.
    Allow forced change of locktype from none.
    Handle OPTIONS defined in /etc/sysconfig/lvmlockd.
  * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 ***
  Version 1.02.203 - 09th December 2024
  =====================================
  Version 1.02.202 - 04th November 2024
  =====================================
    Introduce dm_config_parse_only_section to stop parsing after section.
    For shorter string use on stack buffers when generating sections.
    Enhance dm_config tokenizer.
  Version 1.02.201 - 02nd October 2024
  ====================================
    Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails.
    Improve error messages on failed udev cookie create/inc/dec operation.
  Version 1.02.200 - 23rd August 2024
  ===================================
  Version 1.02.199 - 12nd July 2024
  =================================
- update lvm2.spec
  - change lvm2_version to 2.03.29
  - change upstream_device_mapper_version and device_mapper_version to 1.02.203
  - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package
  - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd
  - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="glass.su@suse.com" date="1738756800">- thin-provisioning-tools 1.1.0 requires device-mapper-devel, this creates a cycle (boo#1236749)
  * update lvm2.spec
  - remove build require dependency thin-provisioning-tools from devicemapper
  - remove thin-provisioning-tools related configure options from devicemapper
  - remove a trivial empty line in extra_opts if default_use_devices_file=1</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1740657600">- fixing HA16.0 Product building issues for packages: lvm2-lockd, cluster-md, dlm, drbd (bsc#1237701)
  * update lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="3a39ffe54879838256a38a721ca74b8660f88c72941c157e63caa2249ba6b8f2f5fe0af63315d382670905d7ebf12861bdc5780e1f8b04d1438e984c4f9468f9" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="2.03.29_1.02.203" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1723550400">- lvm2-monitor.service fails to start (boo#1228854)
  + bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch</changelog>
  <changelog author="glass.su@suse.com" date="1725019200">- [SLFO] systemd 254 is missing reworked SYSTEMD_READY logic in device mapper udev rules (bsc#1229518)
  * update udev dependency version in lvm2.spec</changelog>
  <changelog author="glass.su@suse.com" date="1734350400">- Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29
  * ** WHATS_NEW from 2.03.24 to 2.03.29 ***
  Version 2.03.29 - 09th December 2024
  ====================================
    Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify.
    Allow test mode when lvmlockd is built without dlm support.
    Add a note about RAID + integrity synchronization to lvmraid(7) man page.
    Add a function for running lvconvert --repair on RAID LVs to lvmdbusd.
    Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}).
    Fix renaming of raid sub LVs when converting a volume to raid (2.03.28).
    Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize.
    Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27).
  Version 2.03.28 - 04th November 2024
  ====================================
    Use radix_tree to lookup for UUID within committed metadata.
    Use radix_tree to lookup LV list entry within VG struct.
    Introduce setting config/validate_metadata = full | none.
    Restore fs resize call for lvresize -r on the same size LV (2.03.17).
    Correct off-by-one devicesfile backup counting.
    Replace use of dm_hash with radix_tree for lv names and uuids.
    Refactor vg_validate with uniq_insert and better use of CPU caches.
    Add radix_tree_uniq_insert.
    Update DM cache when taking next VG lock instead of dropping it.
    Generate json string id only for json reporting.
    For vgsummary use new API call dm_config_parse_only_section().
    Use radix_tree for PV names mapping.
    Split check_lv_segment into separate _in/complete_vg variant.
    Use find_lv instead of find_lv_in_vg when possible.
    Do a mirror fixup only when mirrors with logs are imported.
    Add faster crc32 calculation from zlib code for x86_64.
    Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization.
  Version 2.03.27 - 02nd October 2024
  ===================================
    Fix swap device size detection using blkid for lvresize/lvreduce/lvextend.
    Detect GPT partition table and pass partition filter if no partitions defined.
    Add global/sanlock_align_size option to configure sanlock lease size.
    Disable mem locking when activation/reserved_stack or reserved_memory is 0.
    Fix locking issues in lvmlockd leaving thin pool locked.
    Deprecate vdo settings vdo_write_policy and vdo_write_policy.
    Lots of typo fixes across lvm2 code base (codespell).
    Corrected integrity parameter interleave_sectors for DM table line.
    Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10.
    Do not accept duplicate device names for pvcreate.
  Version 2.03.26 - 23rd August 2024
  ==================================
    Fix internal error reported by pvmove on a VG with single PV.
    Also accept --mknodes --refresh for vgscan.
    Fix vgmknodes --refresh to wait for udev before checking /dev content.
    Use log/report_command_log=1 config setting by default for JSON output format.
    Fix unreleased memory pools on RAID lvextend.
    Add --integritysettings option to manipulate dm-integrity settings.
  Version 2.03.25 - 12nd July 2024
  ================================
    Utilize more radix_tree instead of dm_hash and btree.
    Refactor DM uuid caching from device_mapper directory.
    Enhance checking for DM uuid device.
    Fix lvm shell command completion on tab key (2.03.24).
    Avoid lockd_vg call to lvmlockd for local VGs.
    Allow forced change of locktype from none.
    Handle OPTIONS defined in /etc/sysconfig/lvmlockd.
  * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 ***
  Version 1.02.203 - 09th December 2024
  =====================================
  Version 1.02.202 - 04th November 2024
  =====================================
    Introduce dm_config_parse_only_section to stop parsing after section.
    For shorter string use on stack buffers when generating sections.
    Enhance dm_config tokenizer.
  Version 1.02.201 - 02nd October 2024
  ====================================
    Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails.
    Improve error messages on failed udev cookie create/inc/dec operation.
  Version 1.02.200 - 23rd August 2024
  ===================================
  Version 1.02.199 - 12nd July 2024
  =================================
- update lvm2.spec
  - change lvm2_version to 2.03.29
  - change upstream_device_mapper_version and device_mapper_version to 1.02.203
  - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package
  - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd
  - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="glass.su@suse.com" date="1738756800">- thin-provisioning-tools 1.1.0 requires device-mapper-devel, this creates a cycle (boo#1236749)
  * update lvm2.spec
  - remove build require dependency thin-provisioning-tools from devicemapper
  - remove thin-provisioning-tools related configure options from devicemapper
  - remove a trivial empty line in extra_opts if default_use_devices_file=1</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1740657600">- fixing HA16.0 Product building issues for packages: lvm2-lockd, cluster-md, dlm, drbd (bsc#1237701)
  * update lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="c6d46fcf085dc54ca559d9912ca80d35b00d62f236c83f4175b53b165afde18186e1d85883b8b80d18656fd14e523b8142cc0b904af872363fa7a32e9da4352b" name="libdhash1" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="160000.2.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="41ffd998cec4f19253970b6c29a430f1206de3a5ac28a2e1a36aaf4246880cc36b104b344b157a26bab762188f3de3aa72a74955ca261fe80521c0d5c2508569" name="libdialog15" arch="x86_64">
  <version epoch="0" ver="1.3" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
  <changelog author="sbrabec@suse.com" date="1541592000">- Fix mangled Hindi translation (bsc#1115005).</changelog>
  <changelog author="werner@suse.de" date="1550059200">- Update to version 1.3-20190211
  + modify to work with ncurses' threaded-library, which does not allow
    assignment to LINES/COLS (report by Marcus Roeckrath).
  + correct clearing after text in progressbox from 2018/06/21 changes
    for resizing (reports by David Boyd, Alan Somers).
  + improved configure macros CF_GNU_SOURCE, CF_POSIX_C_SOURCE,
    CF_XOPEN_SOURCE
  + update config.guess, config.sub
- Includes also version 1.3-20181107
  + convert ja.po to UTF-8 for consistency (suggested by Stanislav
    Brabec).
  + repair mis-encoded hi.po (report/analysis by Stanislav Brabec).
- Includes also version 1.3-20181022
  + improved configure macros CF_CC_ENV_FLAGS, CF_LD_RPATH_OPT,
    CF_LIBRARY_PATH, CF_SHARED_OPTS, CF_WITH_MAN2HTML,
    CF_WITH_VERSIONED_SYMS from ncurses
  + add ast.po, from
    http://translationproject.org/latest/dialog/
- Includes also version 1.3-20180621
  + improve file-offset computation in textbox.c (Werner Fink).
  + fix an overlooked case with real_auto_size() to maximize when
    height or width is given as -1.
  + build-fixes for configure options "--disable-Xdialog2" and
    "--disable-form"
  + add traces for each widget to show its parameters.
  + modify color scheme for mixedgauge to use the dialog window colors,
    like the captions.
  + fix a too-small malloc in the mixedgauge widget.
  + fix a use-after-free in dlg_remove_callback().
  + improve handling of SIGWINCH for several widgets (Debian #865840).
    + menubox, the point of the Debian report was that it would be nice
    to increase the window size if the terminal size increases.  Did
    that as a special case less problematic than decreasing the
    terminal size.  Added samples/menubox11 to demonstrate by
    comparison with menubox10 a problem with debconf which puts extra
    newlines in the caption that interfere with autowrap.
    + progressbox and derived prgbox, programbox, now handle resizing.
    + yesno, window was cleared
  + add dlg_ttysize() to support new options, allowing scripts to obtain
    some text-formatting details without initializing the terminal.
  + add options --print-text-only, and --print-text-size for scripts that
    adjust the widget size according to how the captions are formatted.
  + improve dialog.pl:
    + add demo.pl, to demonstrate the functions
    + quote/escape string parameters passed to dialog.
    + ensure all "integer" parameters are really integers.
    + use actual screensize for list captions rather than assuming 24
    lines.
  + when trimming blanks, treat unconverted tabs the same as spaces.
  + correct parameter to test when trimming blanks from the script,
    e.g., with "--trim" (report by Jarno Suni).
  + improve documentation of the various whitespace-filtering options,
    to show which take precedence (Debian #867536, cf: Debian #102942).
  + modify msgbox.c, yesno.c to bind SCROLLKEY_BINDINGS before
    TRAVERSE_BINDINGS so that up/down arrow will by default scroll the
    message up/down rather than be aliases for tab-traversal (report by
    Fredrik Kers).
  + modify dump_one_binding() to show when a binding is overridden.
  + improve format of trace-file, making comment-syntax consistent,
    as well as showing argv-splitting as a series of comments.
  + modify dlg_string_to_argv() to change the quoting behavior to be
    more consistent with shell behavior (patch by Denilson Sa Maia).
  + modify dlg_getc() to return ESC when a timeout expires, notifying
    callers that a quit occurred rather than exiting the application
    (suggested by Rodrigo Freitas).
  + modify handle_inputs() to ensure cursor-visibility is restored when
    there is no input character available (report by Guillaume Vareille).
  + improve comment in manual page regarding which widgets can use the
    "--help-button" (prompted by discussion with Csanyi Pal).
  + add a check for valid object pointer in tailbox's main loop since
    the getc-callback may have been freed within ui_getc.c (report by
    "David").
  + improved configure macros for ncurses: CF_GNU_SOURCE, CF_SHARED_OPTS,
    CF_CURSES_LIBS, CF_CURSES_FUNCS, CF_NCURSES_CONFIG
  + improved configure script checks for groff vs man2html:
    CF_PROG_GROFF and CF_WITH_MAN2HTML
  + build-fix from lynx for AM_WITH_NLS configure macro
  + update config.guess, config.sub
- Remove fix for Hindi translation as now upstream
- Remove patch textbox-file_size.patch now upstream
- Remove dialog.ko.po.bz2 as ko.po now upstream
- Modify patch dialog-1.2-20121230.dif</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="werner@suse.de" date="1616068800">- Update to version 1.3-20210306
  + add several usage-messages to dialog.pot
  + improve configure-check for ld searchpath on HP-UX and Solaris.
  + fix a few cppcheck warnings
  + updated eo.po, fi.po, pt.po, sq.po, sv.po, ru.po, uk.po, zh_CN.po
    from http://translationproject.org/latest/dialog/
  + updated dialog.pot
  + add option --no-hot-list, to allow suppressing the hotkey feature
    from lists.
  + increase minimum height of inputbox to avoid input field overlapping
    with the button-box (report by Victor Ananjevsky).
  + modify options-parsing to permit a "no" on any boolean option and
    deprecating the "no" options without a "-" , e.g., generalizing on
    "--nook" equivalence to "--no-ok".
  + minor spelling fixes, per codespell
  + update configure macros, for quoting/escaping fixes per shellcheck
  + update config.guess, config.sub
  + modify configure script's compiler check to work around Xcode's
    useless aliases for standard C.
  + enable keep-tite feature for NetBSD 8 and up; earlier releases would
    dump core.
  &gt; new features/fixes (Glenn Herteg)
  + add option "--cursor-off-label"
  + add option "--erase-on-exit"
  + fix errata in manpage.
  + fix logic: dlg_button_to_char() would return wrong value if no
    uppercase was found
  + add DIALOG_TIMEOUT to sample scripts, and use report-button more
    consistently to handle unexpected exit-status values.
  + add dlg_getenv_num() and dlg_getenv_str().
  + add DLG_EXIT_TIMEOUT to allow scripts to exit on an expired timeout
    with an exit-status different from DLG_EXIT_ERROR or DLG_EXIT_ESC
    (patch by Norbert Koch).
  + modify dlg_ok_label() and dlg_ok_labels() to ignore --no-ok if all
    buttons would be omitted.
  + add/use dlg_der_window() to account for derived windows just like
    subwindows, to fix regression in dlg_getc() in fselect/dselect
    widget.
  + modify several widgets to make their handling of --no-ok consistent
    with the majority of the widgets: editbox.c, menubox.c, msgbox.c,
    rangebox.c, textbox.c, timebox.c
  + add ^D as binding for new virtual key DLGK_LEAVE, which will close
    the current dialog by activating the currently-selected button.
  + improve manual-page description of --no-ok option (reports by
    Hans Mueller, Gil Delescluse).
  + modify configure script to make Solaris -R rpath feature work
  + fix regression in dlg_getc() caused by not taking into account
    subwindows used for input (report by Michael Wihl).
  + add validity-checks for window pointer (report/testcase by Michael
    Wihl).
  + improve configure macros:
    CF_CLANG_COMPILER: apply compiler-flags needed for test.
    CF_WITH_SCREEN_PDCURSES: use this to reduce X11-checks.
  + amend initialization for dlg_getc to fix regression in pause widget
    from 2020/03/27 changes (reports by Aidan Tessier, Norbert Koch,
    Josmar Pierri).
  + improve configure macros:
    CF_CLANG_COMPILER: split-out check for -Qunused-arguments to ensure
    that clang supports it.  IBM xlclang does not.
    CF_MIXEDCASE_FILENAMES: when cross-compiling to darwin (macOS),
    assume the filesystem doesn't support mixed-case
  + modify init_dialog's initialization of tab_len and aspect_ratio to
    avoid overwriting initialization done in process_common_options
    (report/patch by Rainer Weikusat, Debian #970508).
  + fix out-of-order description for --tailbox vs --rangebox in manpage
    (report by Glenn Herteg).
  + updated configure-macros: compiler-warnings and shared-library
    options.  Changed configure --with-warnings to --enable-warnings for
    consistency.
  + update config.guess
  + updated sq.po from http://translationproject.org/latest/dialog/
  + add clarification in manual page to show when the single/double
    quotes may be needed (prompted by discussion with Danilo G Baio).
  + fix an extra ".exe" in makefile.in which prevented Cygwin build.
  + fix most cppcheck warnings
  + tailbox/tailboxbg's exit-button now works with mouse-clicks
  + fix repainting while resizing for the editbox widget.
  + add configure-check for curses_exit() from ncurses 6.2
  + fix a few memory leaks in fselect.c, mixedgauge.c when resizing.
  + fix inconsistency in dlg_string_to_argv() which made the checklist9
    example not work.
  + add empty-string check in dlg_print_listitem() to avoid indexing past
    the end of the array of character-offsets.
  + improve handling of KEY_RESIZE by repainting the backtitle after
    clearing the screen (integrated patch by Rainer Weikusat, Debian
    [#954185]).
  + improve logic for wtimeout() calls which are used to set temporary
    non-blocking reads (prompted by patch by Rainer Weikusat, Debian
    [#954220]).
  + add "make check" rule.
  + updated configure-macros.
  + updated configure-macros, to work around ncurses vs xcode's c99 -W
  + update config.guess
  + updated configure-macros.
  + update config.guess
  + correct rc-file lookup of "default" color (report by Grady Martin,
    cf: 2019/09/24).
  + fix several issues in the sample scripts reported by shellcheck.
  + fix a few spelling errors reported by codespell (report by Jens
    Schleusener).
  + correct check for return-value of isblank(), which is not necessarily
    0/1 (report/patch by Paul Cercueil, Peter Korsgaard, cf: 2018/05/31).
  + amend change for parsing command-options before calling init_dialog,
    to handle --no-shadow, etc., which are initialized in init_dialog
    (report by Paul Cercueil, cf: 2018/06/21).
  + add dlg_trace_va_msg to manpage, symbol files.
  + improve layout of several widgets' data area when maximizing.
  + modify dselect/fselect to work with autosizing (Debian #915949).
  + add error messages from dlg_exiterr() to trace file.
  + improve manual page description of escaping in key-bindings.
  + modify inputmenu to recognize the "Cancel" button and keys bound to
    that feature while editing a renamed menu item.
  + revert one change, in form.c to the --last-key feature (Debian
    [#942025]).
  + correct ordering of libraries in configure-script, which appended
    in a case where it should have prepended.
  + update config.guess, config.sub
  + improve dialog-config script's filtering of -L options using the
    linker default directories.
  + improve dialog-config script, adding a -L option corresponding to
    the configure --libdir option if it would be a duplicate (report by
    Andrew Kosteltsev).
  + build-fix for configure --disable-trace
  + updated pt.po from http://translationproject.org/latest/dialog/
  + allow for underline- and reverse-video flags in the ".rc" file
    (integrated patch by Richard Robbins).
  + amend change to --last-key feature to eliminate an unnecessary
    separator (report by Gabriele Balducci).
  + extend --last-key feature to the remaining widgets which have
    ok/cancel buttons, and add logic to map keys which happen to be
    bound to ok/extra/cancel/help to simulate a button-press on the
    corresponding button (report by "sgewrk").
  + further fixes for dialog-config.in (report by Andrew Kosteltsev).
  + modify dialog-config.in so that setting prefix or exec-prefix to
    a given value with --prefix=VALUE or --exec-prefix=VALUE has the
    expected result of changing bindir, etc.
  + correct substitution for $LIBS value in dialog-config.in (report by
    Andrew Kosteltsev).
  + modify dlg_will_resize() and dlg_result_key() functions to reduce
    the chance that dialog exits on a SIGWINCH (Debian #930775).
  + make test-package for the development headers/library
  + add --libs-only-L, etc., to dialog-config script (prompted by
    discussion with Andrew Kosteltsev).
  + fix a memory leak in gauge widget (Andrew Kosteltsev).
  + minor fix for CF_GCC_WARNINGS
  + update config.guess, config.sub
- Modify patch dialog-1.2-20121230.dif
- This update fixes boo#1183668</changelog>
  <changelog author="dimstar@opensuse.org" date="1623844800">- Update to version 1.3-20210530:
  + amend adjustment to inputbox height so the autosized dimensions
    match  older versions (boo#1184503).
  + improve configure checks, to reduce warnings during those checks
  + updated translations.
- Changes from version 1.3-20210509:
  + improve configure checks, e.g., for libtool version
- Changes from version 1.3-20210324:
  + add configure option --enable-stdnoreturn to build when C11
    _Noreturn feature is enabled in recent ncurses development.
- Changes from version 1.3-20210319:
  Updated translations.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743076800">- Use %autosetup to work with rpm-4.20 (bsc#1240154)</changelog>
</package>
<package pkgid="7fbb6bb4961ad7fcb206c086b2608c35b134fb892943cdc906be42b63c452f8c49ce0adba0513856d678e91c483f2a2daaa17140636044fd26a5d47759ae51d1" name="libdpdk-25" arch="x86_64">
  <version epoch="0" ver="24.11.4" rel="160000.1.1"/>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
</package>
<package pkgid="c1014c89e10b6a4e732ded358038a8528427e44a3d5858a2c566b58b2252d05a635cf8db27c1292492428ed89576a1287d147fa4ad2b61f40f2ec271c0fcba86" name="libdrm2" arch="x86_64">
  <version epoch="0" ver="2.4.124" rel="160000.3.2"/>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 2.4.118:
  * improve SMPTE color LUT accuracy
  * util: factor out and optimize C8 SMPTE color LUT
  * util: add support for DRM_FORMAT_C[124]
  * util: store number of colors for indexed formats
  * util: add SMPTE pattern support for C4 format
  * util: add SMPTE pattern support for C1 format
  * util: add SMPTE pattern support for C2 format
  * modetest: add support for DRM_FORMAT_C[124]
  * modetest: add SMPTE pattern support for C[124] formats
  * intel: determine target endianness using meson
  * util: fix 32 bpp patterns on big-endian
  * util: fix 16 bpp patterns on big-endian
  * util: add missing big-endian RGB16 frame buffer formats
  * modetest: add support for parsing big-endian formats
  * util: add test pattern support for big-endian XRGB1555/RGB565
  * util: fix pwetty on big-endian
  * util: add pwetty support for big-endian RGB565
  * modetest: add support for big-endian XRGB1555/RGB565
  * modetest: add support for DRM_FORMAT_NV{15,20,30}
  * modetest: switch usage to proper options grammar
  * xf86drm: add drmGetNodeTypeFromDevId
  * Sync headers with drm-next
  * xf86drmMode: add drmModeCloseFB()</changelog>
  <changelog author="sndirsch@suse.com" date="1701172800">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build on sle15-sp6</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.4.119:
  * add amdgpu_va_get_start_addr</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build</changelog>
  <changelog author="sndirsch@suse.com" date="1705147200">- update to 2.4.120
  * radeon: fix missing stencil_tile_mode initialisation in the
    linear/fallback case
  * amdgpu: fix use-after-free
  * Sync headers with drm-next
- adjusted
  * n_libdrm-drop-valgrind-dep-generic.patch
  * n_libdrm-drop-valgrind-dep-intel.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1717416000">- update to 2.4.121
  * meson: make build system happy by replacing deprecated feature
  * include poll.h instead of sys/poll.h
  * amdgpu: Make amdgpu_device_deinitialize thread-safe
  * Revert "xf86drm: ignore symlinks in process_device()"
  * xf86drm: Don't consider node names longer than the maximum allowed
  * tests/amdgpu: fix compile warning with the guard enum value
  * tests/amdgpu: fix compile error with gcc7.5
  * tests/amdgpu: fix compile error with gcc14
  * tests/util: add tidss driver
  * meson: Replace usages of deprecated ExternalProgram.path()
  * meson: Fix broken str.format usage
  * amdgpu: add marketing names from Adrenalin 23.11.1
  * amdgpu: add marketing names from PRO Edition for W7700
  * amdgpu: add marketing names from Windows Steam Deck OLED APU driver
  * amdgpu: add marketing names from amd-6.0
  * amdgpu: add marketing name for Radeon RX 6550M
  * amdgpu: add marketing names from amd-6.0.1
  * amdgpu: Make amdgpu_cs_signal_semaphore() thread-safe
  * amdgpu: sync amdgpu_drm.h
  * symbols-check: Add _GLOBAL_OFFSET_TABLE_
  * symbols-check: Add _fbss, _fdata, _ftext
  * amdgpu: expose amdgpu_va_manager publicly
  * amdgpu: add amdgpu_va_range_alloc2
  * amdgpu: add amdgpu_device_initialize2
  * amdgpu: fix deinit logic
  * ci: build with meson --fatal-meson-warnings
  * ci: use "meson setup" sub-command
  * xf86drm: document drmDevicesEqual()
  * xf86drm: ignore symlinks in process_device()</changelog>
  <changelog author="sndirsch@suse.com" date="1719403200">- update to 2.4.122
  * fix FTBS on FreeBSD (or non-Linux in general)
  * freedreno: fix FTBS on non-Linux platforms (unused header)
  * etnaviv: fix FTBS on undefined linux/* headers on non-Linux platforms.
  * ci: upgrade debian container to bookworm
  * ci: upgrade FreeBSD VM to 14.1
  * Remove libm in libdrm dependencies
  * Sync headers with drm-next</changelog>
  <changelog author="sndirsch@suse.com" date="1724760000">- update to 2.4.123
  * amdgpu: add new marketing names
  * amdgpu: add new marketing names
  * Convert to Android.bp
  * libs: Tie DSO minor versions to libdrm version
  * readdir_r is deprecated.
  * Fix FTBS on undefined clock_gettime() and asprintf()
  * Export include dirs with -isystem
  * Makes libdrm available on host
  * Adds libdrm_headers
  * Make libdrm recovery_available
  * add crosvm to com.android.virt
  * Enable GPU in crosvm
  * Android.bp: Add include exports for android dir
  * Disable ioctl signed overload for Bionic libc
  * build: bump version to 2.4.123
  * Delete all Makefile.sources files
  * tests: Make modetest and proptest cc_binary in Android.bp</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- update to 2.4.124
  * include/drm/README: update drm-next link to use gitlab instead of cgit
  * modetest: simplify planar YUV handling
  * modetest: add support for YUV422 and YUV444 plane format
  * xf86drm: print AMD modifiers properly
  * tests/util: Call `drmGetDevices2()` instead of `drmOpen()`ing all modules
  * android: add genrule for generated_static_table_fourcc.h
  * modetest: Make modetest availble to vendor on Android
  * build: simplify Linux system check</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- adjusted patches
  * n_libdrm-drop-valgrind-dep-generic.patch
  * n_libdrm-drop-valgrind-dep-intel.patch</changelog>
</package>
<package pkgid="f2464ac47c5f16d117500f98efc9aa5b87161d74c1a40b59e0bd2038675c08f7e4a6957fde31e3442194f501b6a885e15fa70b70a00041d4d7492a1dd3605e9b" name="libdrm_amdgpu1" arch="x86_64">
  <version epoch="0" ver="2.4.124" rel="160000.3.2"/>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 2.4.118:
  * improve SMPTE color LUT accuracy
  * util: factor out and optimize C8 SMPTE color LUT
  * util: add support for DRM_FORMAT_C[124]
  * util: store number of colors for indexed formats
  * util: add SMPTE pattern support for C4 format
  * util: add SMPTE pattern support for C1 format
  * util: add SMPTE pattern support for C2 format
  * modetest: add support for DRM_FORMAT_C[124]
  * modetest: add SMPTE pattern support for C[124] formats
  * intel: determine target endianness using meson
  * util: fix 32 bpp patterns on big-endian
  * util: fix 16 bpp patterns on big-endian
  * util: add missing big-endian RGB16 frame buffer formats
  * modetest: add support for parsing big-endian formats
  * util: add test pattern support for big-endian XRGB1555/RGB565
  * util: fix pwetty on big-endian
  * util: add pwetty support for big-endian RGB565
  * modetest: add support for big-endian XRGB1555/RGB565
  * modetest: add support for DRM_FORMAT_NV{15,20,30}
  * modetest: switch usage to proper options grammar
  * xf86drm: add drmGetNodeTypeFromDevId
  * Sync headers with drm-next
  * xf86drmMode: add drmModeCloseFB()</changelog>
  <changelog author="sndirsch@suse.com" date="1701172800">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build on sle15-sp6</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.4.119:
  * add amdgpu_va_get_start_addr</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build</changelog>
  <changelog author="sndirsch@suse.com" date="1705147200">- update to 2.4.120
  * radeon: fix missing stencil_tile_mode initialisation in the
    linear/fallback case
  * amdgpu: fix use-after-free
  * Sync headers with drm-next
- adjusted
  * n_libdrm-drop-valgrind-dep-generic.patch
  * n_libdrm-drop-valgrind-dep-intel.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1717416000">- update to 2.4.121
  * meson: make build system happy by replacing deprecated feature
  * include poll.h instead of sys/poll.h
  * amdgpu: Make amdgpu_device_deinitialize thread-safe
  * Revert "xf86drm: ignore symlinks in process_device()"
  * xf86drm: Don't consider node names longer than the maximum allowed
  * tests/amdgpu: fix compile warning with the guard enum value
  * tests/amdgpu: fix compile error with gcc7.5
  * tests/amdgpu: fix compile error with gcc14
  * tests/util: add tidss driver
  * meson: Replace usages of deprecated ExternalProgram.path()
  * meson: Fix broken str.format usage
  * amdgpu: add marketing names from Adrenalin 23.11.1
  * amdgpu: add marketing names from PRO Edition for W7700
  * amdgpu: add marketing names from Windows Steam Deck OLED APU driver
  * amdgpu: add marketing names from amd-6.0
  * amdgpu: add marketing name for Radeon RX 6550M
  * amdgpu: add marketing names from amd-6.0.1
  * amdgpu: Make amdgpu_cs_signal_semaphore() thread-safe
  * amdgpu: sync amdgpu_drm.h
  * symbols-check: Add _GLOBAL_OFFSET_TABLE_
  * symbols-check: Add _fbss, _fdata, _ftext
  * amdgpu: expose amdgpu_va_manager publicly
  * amdgpu: add amdgpu_va_range_alloc2
  * amdgpu: add amdgpu_device_initialize2
  * amdgpu: fix deinit logic
  * ci: build with meson --fatal-meson-warnings
  * ci: use "meson setup" sub-command
  * xf86drm: document drmDevicesEqual()
  * xf86drm: ignore symlinks in process_device()</changelog>
  <changelog author="sndirsch@suse.com" date="1719403200">- update to 2.4.122
  * fix FTBS on FreeBSD (or non-Linux in general)
  * freedreno: fix FTBS on non-Linux platforms (unused header)
  * etnaviv: fix FTBS on undefined linux/* headers on non-Linux platforms.
  * ci: upgrade debian container to bookworm
  * ci: upgrade FreeBSD VM to 14.1
  * Remove libm in libdrm dependencies
  * Sync headers with drm-next</changelog>
  <changelog author="sndirsch@suse.com" date="1724760000">- update to 2.4.123
  * amdgpu: add new marketing names
  * amdgpu: add new marketing names
  * Convert to Android.bp
  * libs: Tie DSO minor versions to libdrm version
  * readdir_r is deprecated.
  * Fix FTBS on undefined clock_gettime() and asprintf()
  * Export include dirs with -isystem
  * Makes libdrm available on host
  * Adds libdrm_headers
  * Make libdrm recovery_available
  * add crosvm to com.android.virt
  * Enable GPU in crosvm
  * Android.bp: Add include exports for android dir
  * Disable ioctl signed overload for Bionic libc
  * build: bump version to 2.4.123
  * Delete all Makefile.sources files
  * tests: Make modetest and proptest cc_binary in Android.bp</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- update to 2.4.124
  * include/drm/README: update drm-next link to use gitlab instead of cgit
  * modetest: simplify planar YUV handling
  * modetest: add support for YUV422 and YUV444 plane format
  * xf86drm: print AMD modifiers properly
  * tests/util: Call `drmGetDevices2()` instead of `drmOpen()`ing all modules
  * android: add genrule for generated_static_table_fourcc.h
  * modetest: Make modetest availble to vendor on Android
  * build: simplify Linux system check</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- adjusted patches
  * n_libdrm-drop-valgrind-dep-generic.patch
  * n_libdrm-drop-valgrind-dep-intel.patch</changelog>
</package>
<package pkgid="d49b740b04264e3b71659377ee9d206366997a52ef14be2ded9a5b2f973a60efe2948f094728eaca74000377a618c72ab13bd5ccfc2305a5451bb7812cb9f070" name="libdrm_intel1" arch="x86_64">
  <version epoch="0" ver="2.4.124" rel="160000.3.2"/>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 2.4.118:
  * improve SMPTE color LUT accuracy
  * util: factor out and optimize C8 SMPTE color LUT
  * util: add support for DRM_FORMAT_C[124]
  * util: store number of colors for indexed formats
  * util: add SMPTE pattern support for C4 format
  * util: add SMPTE pattern support for C1 format
  * util: add SMPTE pattern support for C2 format
  * modetest: add support for DRM_FORMAT_C[124]
  * modetest: add SMPTE pattern support for C[124] formats
  * intel: determine target endianness using meson
  * util: fix 32 bpp patterns on big-endian
  * util: fix 16 bpp patterns on big-endian
  * util: add missing big-endian RGB16 frame buffer formats
  * modetest: add support for parsing big-endian formats
  * util: add test pattern support for big-endian XRGB1555/RGB565
  * util: fix pwetty on big-endian
  * util: add pwetty support for big-endian RGB565
  * modetest: add support for big-endian XRGB1555/RGB565
  * modetest: add support for DRM_FORMAT_NV{15,20,30}
  * modetest: switch usage to proper options grammar
  * xf86drm: add drmGetNodeTypeFromDevId
  * Sync headers with drm-next
  * xf86drmMode: add drmModeCloseFB()</changelog>
  <changelog author="sndirsch@suse.com" date="1701172800">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build on sle15-sp6</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.4.119:
  * add amdgpu_va_get_start_addr</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build</changelog>
  <changelog author="sndirsch@suse.com" date="1705147200">- update to 2.4.120
  * radeon: fix missing stencil_tile_mode initialisation in the
    linear/fallback case
  * amdgpu: fix use-after-free
  * Sync headers with drm-next
- adjusted
  * n_libdrm-drop-valgrind-dep-generic.patch
  * n_libdrm-drop-valgrind-dep-intel.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1717416000">- update to 2.4.121
  * meson: make build system happy by replacing deprecated feature
  * include poll.h instead of sys/poll.h
  * amdgpu: Make amdgpu_device_deinitialize thread-safe
  * Revert "xf86drm: ignore symlinks in process_device()"
  * xf86drm: Don't consider node names longer than the maximum allowed
  * tests/amdgpu: fix compile warning with the guard enum value
  * tests/amdgpu: fix compile error with gcc7.5
  * tests/amdgpu: fix compile error with gcc14
  * tests/util: add tidss driver
  * meson: Replace usages of deprecated ExternalProgram.path()
  * meson: Fix broken str.format usage
  * amdgpu: add marketing names from Adrenalin 23.11.1
  * amdgpu: add marketing names from PRO Edition for W7700
  * amdgpu: add marketing names from Windows Steam Deck OLED APU driver
  * amdgpu: add marketing names from amd-6.0
  * amdgpu: add marketing name for Radeon RX 6550M
  * amdgpu: add marketing names from amd-6.0.1
  * amdgpu: Make amdgpu_cs_signal_semaphore() thread-safe
  * amdgpu: sync amdgpu_drm.h
  * symbols-check: Add _GLOBAL_OFFSET_TABLE_
  * symbols-check: Add _fbss, _fdata, _ftext
  * amdgpu: expose amdgpu_va_manager publicly
  * amdgpu: add amdgpu_va_range_alloc2
  * amdgpu: add amdgpu_device_initialize2
  * amdgpu: fix deinit logic
  * ci: build with meson --fatal-meson-warnings
  * ci: use "meson setup" sub-command
  * xf86drm: document drmDevicesEqual()
  * xf86drm: ignore symlinks in process_device()</changelog>
  <changelog author="sndirsch@suse.com" date="1719403200">- update to 2.4.122
  * fix FTBS on FreeBSD (or non-Linux in general)
  * freedreno: fix FTBS on non-Linux platforms (unused header)
  * etnaviv: fix FTBS on undefined linux/* headers on non-Linux platforms.
  * ci: upgrade debian container to bookworm
  * ci: upgrade FreeBSD VM to 14.1
  * Remove libm in libdrm dependencies
  * Sync headers with drm-next</changelog>
  <changelog author="sndirsch@suse.com" date="1724760000">- update to 2.4.123
  * amdgpu: add new marketing names
  * amdgpu: add new marketing names
  * Convert to Android.bp
  * libs: Tie DSO minor versions to libdrm version
  * readdir_r is deprecated.
  * Fix FTBS on undefined clock_gettime() and asprintf()
  * Export include dirs with -isystem
  * Makes libdrm available on host
  * Adds libdrm_headers
  * Make libdrm recovery_available
  * add crosvm to com.android.virt
  * Enable GPU in crosvm
  * Android.bp: Add include exports for android dir
  * Disable ioctl signed overload for Bionic libc
  * build: bump version to 2.4.123
  * Delete all Makefile.sources files
  * tests: Make modetest and proptest cc_binary in Android.bp</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- update to 2.4.124
  * include/drm/README: update drm-next link to use gitlab instead of cgit
  * modetest: simplify planar YUV handling
  * modetest: add support for YUV422 and YUV444 plane format
  * xf86drm: print AMD modifiers properly
  * tests/util: Call `drmGetDevices2()` instead of `drmOpen()`ing all modules
  * android: add genrule for generated_static_table_fourcc.h
  * modetest: Make modetest availble to vendor on Android
  * build: simplify Linux system check</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- adjusted patches
  * n_libdrm-drop-valgrind-dep-generic.patch
  * n_libdrm-drop-valgrind-dep-intel.patch</changelog>
</package>
<package pkgid="a77becc60aa0d7e94f67c85d8d6cfd3eadfe2039f252af452bf0f695a815c3a6214f892687141da80df936734c502b8b4819bd4f36406a420a60019e9e858596" name="libdrm_radeon1" arch="x86_64">
  <version epoch="0" ver="2.4.124" rel="160000.3.2"/>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 2.4.118:
  * improve SMPTE color LUT accuracy
  * util: factor out and optimize C8 SMPTE color LUT
  * util: add support for DRM_FORMAT_C[124]
  * util: store number of colors for indexed formats
  * util: add SMPTE pattern support for C4 format
  * util: add SMPTE pattern support for C1 format
  * util: add SMPTE pattern support for C2 format
  * modetest: add support for DRM_FORMAT_C[124]
  * modetest: add SMPTE pattern support for C[124] formats
  * intel: determine target endianness using meson
  * util: fix 32 bpp patterns on big-endian
  * util: fix 16 bpp patterns on big-endian
  * util: add missing big-endian RGB16 frame buffer formats
  * modetest: add support for parsing big-endian formats
  * util: add test pattern support for big-endian XRGB1555/RGB565
  * util: fix pwetty on big-endian
  * util: add pwetty support for big-endian RGB565
  * modetest: add support for big-endian XRGB1555/RGB565
  * modetest: add support for DRM_FORMAT_NV{15,20,30}
  * modetest: switch usage to proper options grammar
  * xf86drm: add drmGetNodeTypeFromDevId
  * Sync headers with drm-next
  * xf86drmMode: add drmModeCloseFB()</changelog>
  <changelog author="sndirsch@suse.com" date="1701172800">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build on sle15-sp6</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.4.119:
  * add amdgpu_va_get_start_addr</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build</changelog>
  <changelog author="sndirsch@suse.com" date="1705147200">- update to 2.4.120
  * radeon: fix missing stencil_tile_mode initialisation in the
    linear/fallback case
  * amdgpu: fix use-after-free
  * Sync headers with drm-next
- adjusted
  * n_libdrm-drop-valgrind-dep-generic.patch
  * n_libdrm-drop-valgrind-dep-intel.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1717416000">- update to 2.4.121
  * meson: make build system happy by replacing deprecated feature
  * include poll.h instead of sys/poll.h
  * amdgpu: Make amdgpu_device_deinitialize thread-safe
  * Revert "xf86drm: ignore symlinks in process_device()"
  * xf86drm: Don't consider node names longer than the maximum allowed
  * tests/amdgpu: fix compile warning with the guard enum value
  * tests/amdgpu: fix compile error with gcc7.5
  * tests/amdgpu: fix compile error with gcc14
  * tests/util: add tidss driver
  * meson: Replace usages of deprecated ExternalProgram.path()
  * meson: Fix broken str.format usage
  * amdgpu: add marketing names from Adrenalin 23.11.1
  * amdgpu: add marketing names from PRO Edition for W7700
  * amdgpu: add marketing names from Windows Steam Deck OLED APU driver
  * amdgpu: add marketing names from amd-6.0
  * amdgpu: add marketing name for Radeon RX 6550M
  * amdgpu: add marketing names from amd-6.0.1
  * amdgpu: Make amdgpu_cs_signal_semaphore() thread-safe
  * amdgpu: sync amdgpu_drm.h
  * symbols-check: Add _GLOBAL_OFFSET_TABLE_
  * symbols-check: Add _fbss, _fdata, _ftext
  * amdgpu: expose amdgpu_va_manager publicly
  * amdgpu: add amdgpu_va_range_alloc2
  * amdgpu: add amdgpu_device_initialize2
  * amdgpu: fix deinit logic
  * ci: build with meson --fatal-meson-warnings
  * ci: use "meson setup" sub-command
  * xf86drm: document drmDevicesEqual()
  * xf86drm: ignore symlinks in process_device()</changelog>
  <changelog author="sndirsch@suse.com" date="1719403200">- update to 2.4.122
  * fix FTBS on FreeBSD (or non-Linux in general)
  * freedreno: fix FTBS on non-Linux platforms (unused header)
  * etnaviv: fix FTBS on undefined linux/* headers on non-Linux platforms.
  * ci: upgrade debian container to bookworm
  * ci: upgrade FreeBSD VM to 14.1
  * Remove libm in libdrm dependencies
  * Sync headers with drm-next</changelog>
  <changelog author="sndirsch@suse.com" date="1724760000">- update to 2.4.123
  * amdgpu: add new marketing names
  * amdgpu: add new marketing names
  * Convert to Android.bp
  * libs: Tie DSO minor versions to libdrm version
  * readdir_r is deprecated.
  * Fix FTBS on undefined clock_gettime() and asprintf()
  * Export include dirs with -isystem
  * Makes libdrm available on host
  * Adds libdrm_headers
  * Make libdrm recovery_available
  * add crosvm to com.android.virt
  * Enable GPU in crosvm
  * Android.bp: Add include exports for android dir
  * Disable ioctl signed overload for Bionic libc
  * build: bump version to 2.4.123
  * Delete all Makefile.sources files
  * tests: Make modetest and proptest cc_binary in Android.bp</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- update to 2.4.124
  * include/drm/README: update drm-next link to use gitlab instead of cgit
  * modetest: simplify planar YUV handling
  * modetest: add support for YUV422 and YUV444 plane format
  * xf86drm: print AMD modifiers properly
  * tests/util: Call `drmGetDevices2()` instead of `drmOpen()`ing all modules
  * android: add genrule for generated_static_table_fourcc.h
  * modetest: Make modetest availble to vendor on Android
  * build: simplify Linux system check</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- adjusted patches
  * n_libdrm-drop-valgrind-dep-generic.patch
  * n_libdrm-drop-valgrind-dep-intel.patch</changelog>
</package>
<package pkgid="f5251e28af250fa28027786ae0da7c2d4edd05afd6db4ef7f12de0c3b6a02371d2af5df2e4edb141c6e981f08601bd7b5d1ecdf920fb8655a1d43867ebcc7ae9" name="libduktape207" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 2.7.0:
  * Fix memory unsafe behavior when valstack size limit hit in
    call setup
  * Fix a realloc() memory leak triggered when (1) previous
    allocation exists, (2) new realloc size is 0, (3) GC is
    triggered before first realloc() attempt
  * Fix void pointer arithmetic in duk_alloc_pool.c, caused
    problems with MSVC
  * Fix broken bytecode dump on big endian architectures
  * Fix DUK_USE_GET_RANDOM_DOUBLE() argument handling
  * Use yaml.safe_load() instead of yaml.load() in Py2 tooling
  * Dist makefile and pkg-config improvements
  * Fix Makefile.jsoncbor build
  * Reformat source with clang-format-12
- Bump sover define following upstream changes.
- Rebase duktape-link-m.patch with quilt.
- Drop pc.in file, no longer needed.
- Pass the needed prefixes etc to make_build and make_install.
- Use ldconfig_scriptlets macro.</changelog>
</package>
<package pkgid="6fe04909fd8dfdf4e472981ec290303554ab2aed3e8f5276cab4a1a1c47bff251b461fb7649404f435b525d95e3a7d36ce7cb490abb9ef6a21194c0d68fb3afe" name="libdw1" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190:
  * libelf: Add RELR support.
  * libdw: Recognize .debug_[ct]u_index sections
  * readelf:
  - Support readelf -Ds, --use-dynamic --symbol.
  - Support .gdb_index version 9
  * scrlines: New tool that compiles a list of source files associated
    with a specified dwarf/elf file.
  * backends: Various LoongArch updates.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove files packaged by elfutils-debuginfod</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734004800">- Add fix-static-linking.patch (bsc#1234445)</changelog>
</package>
<package pkgid="a7988c8ef48dbafa51ae032bb0c2463ca2372a53d4d585b0dffa0e5af94e5fe0603e497ae784650fe0caf05968d2afb7bdb820cdde8c2ee6f88bc49faf56229f" name="libeac3" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="160000.2.2"/>
  <changelog author="mardnh@gmx.de" date="1709985600">- Initial package, version 1.1.3</changelog>
</package>
<package pkgid="35a7cf8bea12f5a33b366b02a785d59f010263e023d832c69bc32ed239fdffbf9b1b4436c6992d070f0b751df0c3fe69f2b9fe339b7bc05ecca81be2cd6f0039" name="libeconf0" arch="x86_64">
  <version epoch="0" ver="0.7.9" rel="160000.2.2"/>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
  <changelog author="schubi@suse.com" date="1726660800">- Update to version 0.7.3:
  * Groups handled in an own list (#218)
  * Add econftool as dependency of its tests
  * Simplify snprintf call
  * Remove unused functions and reduce variable visibility (#213)
  * Fix typos (#212)</changelog>
  <changelog author="schubi@suse.com" date="1727352000">- Update to version 0.7.4:
  * Fixed memory leaks (#219)
  * Fixed: econf_readDirs crashes if one of the paths is NULL (#211)
  * Added links to man page. E.g. "man econf_readConfig" is working now.
  * Handle groups correctly which do not have any key entry.</changelog>
  <changelog author="schubi@suse.com" date="1727870400">- Updated license in the spec file to MIT.</changelog>
  <changelog author="schubi@suse.com" date="1733745600">- Update to version 0.7.5:
  * Removed PATH_MAX (Issue #220)
  * Add ROOT_PREFIX as option to replace TESTSDIR hack
  * CI: valgrind doesn't work together with sanitizers
  * econf_readConfig: don't allocate econf_file in error case
  * tests: use cleanup to free key_file for some tests
  * libeconf: don't allocate array from size 0
  * libeconf: fix use of uninitialized stat result if file does not exist
  * econftool: dynamically allocate xdg_config_dir
  * Disable clang &lt;= 17, enable valgrind
  * Disable whitespace check
  * Disable deprecation warning for econftool and example
  * Add new CI with different compilers and valgrind
  * Test econf_readConfig()
  * Disable deprecation warning for tests
  * Implement econf_*freep functions for automatic cleanup
  * Cleanup *free functions</changelog>
  <changelog author="schubi@suse.com" date="1734091200">- Update to version 0.7.6:
  * Do not try to parse files with name like ".." and "." (#227)
  * using econf_readConfig in econftool</changelog>
  <changelog author="schubi@suse.com" date="1736769600">- Update to version 0.7.7:
  * Additional fix for parsing empty config files (bsc#1234405).</changelog>
  <changelog author="schubi@suse.com" date="1745582400">- Update to version 0.7.8:
  * Fix memory access if there are a comment character inside a comment.</changelog>
  <changelog author="schubi@suse.com" date="1746705600">- Update to version 0.7.9:
  * Comments can include comment character tag multiple time.
  * Fixed static library declaration in meason
  * Fixed versioning in cmake</changelog>
</package>
<package pkgid="1f130f05414b32395f68300fc248d421e15272192fb44e041ab563790099ea66e2bb796b3444a2807206b7d5e5aa75e96b62da87addfc27366710bef78ff9891" name="libedit0" arch="x86_64">
  <version epoch="0" ver="20210910.3.1" rel="160000.2.2"/>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]
- Move development docu into -devel subpackage</changelog>
  <changelog author="dmueller@suse.com" date="1522238400">- move Changelog back to runtime package as it might not
  be only developer documentation</changelog>
  <changelog author="mpluskal@suse.com" date="1532347200">- Update to version 20180525-3.1:
  * Sync with upstream sources
- Drop no longer needed patches:
  * libedit-20100424-3.0-ncurses.patch
  * libedit-ocloexec.patch
  * libedit-visibility.patch
- Trim unused dependencies
- Drop %check section (there are no tests available)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1533556800">- Bump version tag.
- Make sure all manpages are prefixed with "el_" to avoid file
  conflicts with readline-doc:
  * Add libedit-20180525-manpage-conflicts.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Remove redundant --with-pic (only for static libs).
- Fix RPM groups.</changelog>
  <changelog author="idonmez@suse.com" date="1556625600">- Update to version 20190324-3.1:
  * Sync with upstream sources</changelog>
  <changelog author="fstrba@suse.com" date="1594641600">- Regenerate the build system before the build in order to avoid
  errors due to automake version mismatch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594900800">- autoreconf already runs libtoolize no need to run twice</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 20210910:
  * all: sync with upstream source
  * see http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libedit
- drop libedit-20180525-manpage-conflicts.patch (upstream)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1680696000">- libedit-hidden-symbols.patch: hide strlcpy and strlcat
  symbols
  * Both now part of POSIX, will appear in libc shortly.
  * Function names starting with ‘str’, ‘mem’, or ‘wcs’ followed
    by a lowercase letter are reserved.</changelog>
</package>
<package pkgid="a5bbb335cf5ff59b8adced775f3915be90b86897edd384acd441cfa2dcb6d512d34ed7b613da2b639ae3b1816373ffabf40e7503804d79d683fc0916bab3b4fb" name="libefa1" arch="x86_64">
  <version epoch="0" ver="56.1" rel="160000.2.2"/>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="nicolas.morey@suse.com" date="1739966400">- Update to rdma-core v56.0 (jsc#PED11323)
  - No release notes available</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743681600">- Update to rdma-core v56.1 (jsc#PED-11289, jsc#PED-11323)
  - Bug fixes for all providers</changelog>
</package>
<package pkgid="79db459548730289455b3db109230fa6bc3abda74c4bb10aafd0eed8e97d90165fcc0d37d29e1bf1222364f846c07922db99620c26889a0c871f2b9fa30bb440" name="libefivar1" arch="x86_64">
  <version epoch="0" ver="38" rel="160000.2.2"/>
  <changelog author="glin@suse.com" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="glin@suse.com" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="mliska@suse.cz" date="1597406400">- Do not partition LTO as we may reach new GAS error:
  Error: invalid attempt to declare external version
  name as default in symbol `efi_set_variable@@LIBEFIVAR_0.24'</changelog>
  <changelog author="glin@suse.com" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault in non-EFI systems (bsc#1175989)</changelog>
  <changelog author="glin@suse.com" date="1623844800">- Add efivar-bsc1187386-fix-emmc-parsing.patch to fix the eMMC
  sysfs parsing (bsc#1187386)
- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
  <changelog author="glin@suse.com" date="1660132800">- Add efivar-bsc1202209-fix-glibc-2.36-build.patch to fix the build
  error against glibc 2.36 (bsc#1202209)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1671624000">- Update spec file to current standards</changelog>
  <changelog author="glin@suse.com" date="1676030400">- Update to 38
  + Rework some makefile bits to make overriding some options
    simpler
  + Handle /sys/devices/virtual/{nvme-fabrics,nvme-subsystem}
    devices
  + guids.S: Include &lt;cet.h&gt; when CET is enabled
  + Fix /sys/block sysfs parsing for eMMC-s
  + Properly check mmap return error
  + Fix s{yt,ty}le typo in efi_get_variable(3)
  + Handle NULL set_variable()
  + Fix parsing for nvme-subsystem devices
  + Attempt to fix the identified thread safety bugs
  + Make thread-test depend on libefivar.so
  + Upstream a local patch from rawhide
  + Fix conversion from UTF8 to UCS2
  + efivar: make docs match current code for 'efivar -A'
  + Add code of conduct
  + Misc minor fixes
  + Add efi_time_t declarations and helper functions
  + More misc fixes
  + Coverity fixes 20211208
  + Fix linux virtual root device parsing
  + efivar.spec.in: fix license to be valid SPDX
  + Add efisecdb tooling
  + Fix linker string comparison for dash
- Add efivar-bsc1206388-revamp-efi_well_known-variable-handling.patch
  to remove the ld script hack for efi_well_known_* variables
  that caused build failure with LTO (bsc#1206388)
- Add mandoc to BuildRequires to build efisecdb man page
- Add efivar-adjust-dependency.patch to avoid 'make install' from
  building the binaries again
- Add efivar-filter-gcc-march.patch to drop '-march=native' from
  HOST_CPPFLAGS for ppc64le and riscv64 due to the absence of the
  gcc parameter
- Refresh libefiboot-export-disk_get_partition_info.patch
  + Cast (uint8_t *) signature to (partition_signature_t *)
  + Update src/libefiboot.map.in
- Remove upstreamed patches
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
  + efivar-bsc1127544-fix-ucs2len.patch
  + efivar-bsc1175989-handle-NULL-set-variable.patch
  + efivar-bsc1181967-fix-nvme-parsing.patch
  + efivar-bsc1187386-fix-emmc-parsing.patch
  + efivar-fix-efidp_ipv4_addr-fields-assignment.patch
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1697025600">- We don’t mandoc at all after all (gh#rhboot/efivar#229 and
  gh#rhboot/efivar#253).</changelog>
  <changelog author="bwiedemann@suse.com" date="1728388800">- Adapt efivar-filter-gcc-march.patch to drop -march=native (boo#1231368)</changelog>
</package>
<package pkgid="64feaea78bdef2c9f32ac95826105cbaad2e636dbd5c1d3f771c0d6fee9a500d7ed6a39a7f93575a35183680563a00f5b9177958c742f69a2c3759bef10c19c4" name="libelf1" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190:
  * libelf: Add RELR support.
  * libdw: Recognize .debug_[ct]u_index sections
  * readelf:
  - Support readelf -Ds, --use-dynamic --symbol.
  - Support .gdb_index version 9
  * scrlines: New tool that compiles a list of source files associated
    with a specified dwarf/elf file.
  * backends: Various LoongArch updates.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove files packaged by elfutils-debuginfod</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734004800">- Add fix-static-linking.patch (bsc#1234445)</changelog>
</package>
<package pkgid="d2260d9c9acc1ee83fb7b2efe4cd2dcf5e1d656d2205db1af1f25aa5c379841d4ae420b1b46cdcaa558d28e0214c3f52f924e6f4024cc4cbf773fe736d7ec95d" name="libepoxy0" arch="x86_64">
  <version epoch="0" ver="1.5.10" rel="160000.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.5.3:
  + Fix build with uClibc
  + Fix GLES3 symbol lookup
  + Fix conditional compilation
  + Require Meson 0.47
  + Fix Autotools build with EGL-X11 support
- Changes from version 1.5.2:
  + Fix the detection of the -z,relro linker flag
  + Query the EGL context version when bootstrapping on GLES
  + Avoid inadvertedly loading libraries when probing for them
  + Consistently use abort() instead of exit() for internal state
    checks
  + Fix a performance regression in the global function pointer
    trampolines introduced by using -Bsymbolic-functions
  + Improve performance when using GL function pointers like
    glAlphaFunc
- Changes from version 1.5.1:
  + Generalise checks for dlvsym
  + Add an option for disabling building the test suite
  + Typo fixes in the comments and documentation
  + Simplify the Meson configuration logic for EGL and GLX
  + Use assert when no context is found
  + Remove a test superceded by GLVND
  + Avoid Meson warnings when testing for linker arguments
- Pass tests=false to meson, ensure we do not build the test-suite.
- Drop la files removal, they are no longer built.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1555502400">- Remove pkgconfig dependecies for glesv1_cm and glesv2:
  Starting with mesa commit b01524fff05
  "meson: don't build libGLES*.so with GLVND" mesa stopped
  providing glesv1_cm.pc and glesv2.pc along. Let epoxy find the
  libraries directly instead.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578139200">- Update to version 1.5.4:
  + Don't build GLX tests if X11 support is disabled
  + Add unit tests for epoxy_gl_version()
  + Reduce the size of the binary by reusing static strings
  + Fix build on Solaris
  + Update the GL registries
- Only require python3-base package for building instead of
  full python3 package.
- Allow building with meson 0.46:
  Add Lower-the-minimum-required-version-of-Meson.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608638400">- Update to version 1.5.5:
  + Remove Python 2 support.
  + Remove Autotools support.
  + Use EGL_NO_X11 to disable X11 headers.
  + Use call convention for mock function.
  + Return correct version of GLSL on GLES2.
  + Rely on Meson's darwin_versions option.
- Drop Lower-the-minimum-required-version-of-Meson.patch: New
  minimum meson is 0.48.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621339200">- Update to version 1.5.7:
  * Remove type redefinition
- Includes changes from 1.5.6:
  * Fix issue loading OpenGL/GLX/EGL libraries
  * Expose dependency variables in pkg-config file
  * Close output objects when generating files</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1621598400">- Update to version 1.5.8:
  + Revert changes from PR #238 / #229
  + Fixes regressions: #240, #252, #253</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629028800">- Update to version 1.5.9:
  + Allow libopengl.so to be used when GLX_LIB is missing.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- needed for jira#SLE/SLE-19965, jira#SLE/SLE-19964, jira#SLE/SLE-18653</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 1.5.10:
  + Fix for building with MSVC on non-English locale.
  + Fix build on Android.
  + Add the right include paths for EGL and X11 headers.
- Upstream tarball url changed, probably by mistake, so leave old
  url in place, but disabled.</changelog>
  <changelog author="sndirsch@suse.com" date="1667822400">- needed by jira#PED-1174 (Mesa needs sync with Xserver, which
  then needs updated libepoxy)</changelog>
</package>
<package pkgid="40e7672c564d400f99eb8f0dfd8e6d99f46f5fc89fc24ef7a25d12050f83caf240f90b50bb332710e46a2d91c54251e91401ce444e96dda4eb19fd69b6a78603" name="libesmtp6_2_0" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="freitag@novell.com" date="1272456000">- Add libestmp-commonname.diff to do stricter check on commonName
  bnc#585393.</changelog>
  <changelog author="dimstar@opensuse.org" date="1281441600">- Update to version 1.0.6:
  + Each component matched by match-domain() is either a single
    '*' which matches anything or a case-insensitive comparison
    with a string of alphanumeric characters or a '-'.
- Changes from version 1.0.5:
  + The Gmail server reports enhanced status codes but then fails
    to provide them in some cases. The parser is now tolerant of
    this but warns the application using a new event flag
    SMTP_EV_SYNTAXWARNING that it is progressing despite the syntax
    error.
  + Fixed bug where To, Cc, Bcc etc. accepted only single values
    instead of a list.
  + Fix reversed comparison on the return value of gettimeofday().
- Drop upstream fixed patches libesmtp-1.0.4-multiple-cc.patch and
  libestmp-commonname.diff.
- Cleaned spec file using spec-cleaner.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1475236800">- Add libesmtp-tlsv12.patch: All TLS clients must support and use
  the highest TLS version available if possible not only TLS 1.0.
  Patch sent to upstream long time ago, no response. website
  has also vanished from the internet (bsc#1005909).
- Pass --disable-isoc to configure, pick the compiler's default C
  standard mode (currently gnu11).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- SSL support was silently lost on openSSL 1.1 update.
  libesmtp-openssl11.patch makes things work again.</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Drop ineffective --with-pic. Drop %__-type macro indirections.
  Drop redundant %clean section.
- Implement shared library packaging guideline.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="yfjiang@suse.com" date="1628251200">- Add libesmtp-fix-cve-2019-19977.patch: Fix stack-based buffer
  over-read in ntlm/ntlmstruct.c (bsc#1160462 bsc#1189097).</changelog>
  <changelog author="info@paolostivanin.com" date="1672142400">- Update to 1.1.0:
  * CVE-2019-19977: avoid potential stack overflow in NTLM authenticator.
  * Migrate build system to Meson
  * Remove GNU libltdl support, assume dlopen() always available.
  * Use a linker map to restrict public symbols to API only.
  * Add sentinel and ‘format printf’ attributes to function declarations.
  * Remove getaddrinfo() implementation.
  * Use strlcpy() for safer string copies, provide implementation
    for systems that need it.
  * Update ‘application data’ APIs
  * Add ‘smtp_get_server_name()’ API.
  * Collect replacement functions into missing.c
  * Prohibit Resent-Reply-To: header.
  * Use canonic domain name of MTA where known
  * Implement rfc2822date() with strftime() if available.
  * add option for XDG file layout convention instead of ~/.authenticate
  * OpenSSL
    + Remove support for OpenSSL versions before v1.1.0
    + Update OpenSSL API calls used for modern versions
    + Require TLS v1 or higher
  * Add add_ntlm.patch
  * Drop the following patches:
    + libesmtp-removedecls.diff
    + libesmtp-1.0.4-bloat.patch
    + libesmtp-fix-cve-2019-19977.patch
    + libesmtp-openssl11.patch
    + libesmtp-tlsv12.patch</changelog>
  <changelog author="mjambor@suse.com" date="1720612800">- Added libesmtp-c99.patch which adds a required feature macro
  definition so that strlcpy function is properly declared in the
  standard header file.  [boo#1225800]</changelog>
</package>
<package pkgid="f58edc6b2c427ff1bbf134d6a736fc2fd126f7ec6ef9fb96ad4f5b494b289400ad0b0ed22a336a2bbc99ad4fb13dc3c960619cfc7b3cb9986069030ca6de56aa" name="libevent-2_1-7" arch="x86_64">
  <version epoch="0" ver="2.1.12" rel="160000.2.2"/>
  <changelog author="mrostecki@suse.com" date="1531224000">- Make use of %license macro</changelog>
  <changelog author="ddiss@suse.com" date="1558958400">- Update to 2.1.10 stable
  * evdns: add DNS_OPTION_NAMESERVERS_NO_DEFAULT /
    EVDNS_BASE_NAMESERVERS_NO_DEFAULT
  * Add support for EV_TIMEOUT to event_base_active_by_fd
  * kqueue: Avoid undefined behaviour.
  * Prevent integer overflow in kq_build_changes_list.
  * evdns: fix lock/unlock mismatch in evdns_close_server_port()
  * Protect min_heap_push_ against integer overflow.
  * le-proxy: initiate use of the Winsock DLL
  * Fix leaks in error path of the bufferevent_init_common_()
  * buffer: make evbuffer_prepend() of zero-length array no-op
  * Don't loose top error in SSL
  * Remove needless check for arc4_seeded_ok
  * Cleanup __func__ detection
  * Add convenience macros for user-triggered events
  * Notify event base if there are no more events, so it can exit without
    delay
  * Fix base unlocking in event_del() if event_base_set() runned in another
    thread
  * If precise_time is false, we should not set EVENT_BASE_FLAG_PRECISE_TIMER
  * Fix race in access to ev_res from event loop with event_active()
  * Return from event_del() after the last event callback termination
  * Preserve socket error from listen across closesocket cleanup
  * fix connection retries when there more then one request for connection
  * improve error path for bufferevent_{setfd,enable,disable}()
  * Fix conceivable UAF of the bufferevent in evhttp_connection_free()
  * Fix evhttp_connection_get_addr() fox incomming http connections
  * fix leaks in evhttp_uriencode()
  * CONNECT method only takes an authority
  * Allow bodies for GET/DELETE/OPTIONS/CONNECT
  * Do not crash when evhttp_send_reply_start() is called after a timeout.
  * Fix crashing http server when callback do not reply in place
  * fix handling of close_notify (ssl) in http with openssl bufferevents
  * use *_new_with_arg() to match function prototype
  * avoid NULL dereference on request is not EVHTTP_REQ_POST
  * bufferevent_socket_connect{,_hostname}() missing event callback and use
    ret code
  * don't fail be_null_filter if bytes are copied
  * Call underlying bev ctrl GET_FD on filtered bufferevents
  * be_openssl: avoid leaking of SSL structure
  * Add missing includes into openssl-compat.h
  * Explicitly call SSL_clear when reseting the fd.
  * sample/https-client: use host SSL certificate store by default
  * ipv6only socket bind support
  * evdns: handle NULL filename explicitly
  * Fix assert() condition in evbuffer_drain() for IOCP
  * fix incorrect unlock of the buffer mutex (for deferred callbacks)
  * Fix wrong assert in evbuffer_drain()
  * Port `event_rpcgen.py` and `test/check-dumpevents.py` to Python 3.
- rename python2-shebang.patch -&gt; python3-shebang.patch following port</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Fix name of library package (bsc#1138369)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="ddiss@suse.com" date="1566302400">- Update to 2.1.11 stable
  * Fix ABI breakage that had been introduced in 2.1.10. Strictly speaking
    this release breaks ABI again to make it compatible with &lt;= 2.1.9.
    + See git commit 18104973 for more details
  * evdns: add new options -- so-rcvbuf/so-sndbuf
  * various autotools and cmake build changes
  * buffer: fix possible NULL dereference in evbuffer_setcb() on ENOMEM
  * Warn if forked from the event loop during event_reinit()
  * evutil: set the have_checked_interfaces in evutil_check_interfaces()
  * https-client: correction error checking</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569326400">- Add upstream patches with the feature of "prepare" and "check"
  watchers. That feature is needed by envoy-proxy:
  * 0001-evwatch-Add-prepare-and-check-watchers.patch
  * 0002-evwatch-fix-race-condition.patch</changelog>
  <changelog author="ddiss@suse.com" date="1595937600">- Update to 2.1.12 stable
  * buffer: do not pass NULL to memcpy() from evbuffer_pullup()
  * http: fix undefined-shift in EVUTIL_IS*_ helpers
  * Check error code of evhttp_add_header_internal() in
    evhttp_parse_query_impl()
  * http: fix EVHTTP_CON_AUTOFREE in case of timeout
  * evdns: Add additional validation for values of dns options
  * Fix memory corruption in EV_CLOSURE_EVENT_FINALIZE with debug enabled
  * increase segment refcnt only if evbuffer_add_file_segment() succeeds
  * evdns: fix a crash when evdns_base with waiting requests is freed
  * event_base_once: fix potential null pointer threat
  * http: do not assume body for CONNECT
  * evbuffer_add_file: fix freeing of segment in the error path
  * Fix checking return value of the evdns_base_resolv_conf_parse()
  * Support EV_CLOSED on linux for poll(2)
  * Parse IPv6 scope IDs.
  * evutil_time: detect and use _gmtime64_s()/_gmtime64()
  * bufferevent: allow setting priority on socket and openssl type
  * Fix EV_CLOSED detection/reporting
  * Revert "Warn if forked from the event loop during event_reinit()"</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Drop insserv_prereq and fillup_prereq macros: there are no
  pre-scripts that would justify these dependencies.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1673784000">- Disable the select backend, this can be easily done by lying
  to configure. This is done due to:
  * using fd number &gt; 1024 on an fd_set results in a runtime
    fortify source assertion, preventing further doom.
  * select will not be changed to handle fd &gt; 1024.
  * this limit is unreasonable low for this century.</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="f02186a61aba0f9f6198d5c65b26f239b5d66cf3e058725ea08f127e0ca2e9661b7c11251a1d34e952f023a4327688645164c4dfbfcb7e5e5a6f4ceb259d4d1a" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="160000.5.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
  <changelog author="david.anes@suse.com" date="1774526400">- security update:
  * CVE-2026-32776: expat: libexpat: NULL pointer dereference when
    processing empty external parameter entities inside an entity
    declaration value (bsc#1259726)
  - Added patch expat-CVE-2026-32776.patch
  * CVE-2026-32777: expat: libexpat: denial of service due to
    infinite loop in DTD content parsing (bsc#1259711)
  - Added patch expat-CVE-2026-32777.patch
  * CVE-2026-32778: expat: libexpat: NULL pointer dereference in
    `setContext` on retry after an out-of-memory condition (bsc#1259729)
  - Added patch expat-CVE-2026-32778.patch</changelog>
</package>
<package pkgid="d6cacba764f5393eb7f97e8bd6cdf8e7f9eecf4d1466cddd3a0f86e4ae16b2265632ef63a62aa218bdb0e2606b786d7a7cf6e2f8276fd39ea9f60ce3a70b252b" name="libexslt0" arch="x86_64">
  <version epoch="0" ver="1.1.43" rel="160000.4.1"/>
  <changelog author="christophe@krop.fr" date="1716552000">- Add upstream build fix:
  * 0001-tests-Fix-build-with-older-libxml2.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1726833600">- Add libxslt-reproducible.patch to make xml output deterministic (boo#1062303)</changelog>
  <changelog author="pmonreal@suse.com" date="1737115200">- Update to 1.1.42:
  * Regressions:
  - extensions: Readd call to xmlCheckFilename with older libxml2
  * Improvments:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  * Build systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option (Don Olmstead)
  - cmake: Fix HAVE_GCRYPT check
- Update to 1.1.41:
  * Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  * Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  * Build systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems (Daniel E)
  * Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members
- Update to 1.1.40:
  * Removals:
  - xsltproc: remove maxparserdepth option (Mike Dalessio)
  * Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  * Build systems:
  - build: Remove mem-debug option
  * Remove patches upstream:
  - gcc14-runtest-no-const.patch
  - 0001-tests-Fix-build-with-older-libxml2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1737201600">- Allow building with older libxml2 versions:
  * tests: Make runtest compile with older libxml2 versions
  * https://gitlab.gnome.org/GNOME/libxslt/issues/125
  * Add libxslt-test-compile-with-older-libxml2-versions.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1737201601">- Remove the test_bad regression test that fails with old libxml2
  as suggested by upstream devs:
  * https://gitlab.gnome.org/GNOME/libxslt/-/issues/126</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Update to 1.1.43:
  * Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default. These features can be
    enabled by passing --with-crypto or --with-plugins to configure.
    In a future release, these features will be removed.
  - Debug output and the debugger are disabled by default and can be
    enabled by passing --with-debug or --with-debugger.
  * Security:
  - [bsc#1239625, CVE-2025-24855] Fix use-after-free of XPath context node
  - [bsc#1239637, CVE-2024-55549] Fix UAF related to excluded namespaces
  * Bug fixes:
  - variables: Fix non-deterministic generated IDs
  * libxml2 related cleanup:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: always include stdlib.h (Hugo Beauzée-Luyssen)
  - extensions: Don't use libxml2's "modules" feature
  * Code cleanup:
  - numbers: Make static variables const
  - variables: Remove debug code
  * Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  * Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config (Alessandro Astone)
  * Remove patches fixed in the update:
  - libxslt-reproducible.patch
  - libxslt-test-compile-with-older-libxml2-versions.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752753600">- security update
- added patches
  CVE-2025-7424 [bsc#1246360], Type confusion in xmlNode.psvi between stylesheet and source nodes
  + libxslt-CVE-2025-7424.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]
- deleted patches
  * libxslt-CVE-2025-10911.patch</changelog>
</package>
<package pkgid="2b045c41269d44ffbcef509d0ee35b78be5f0cc846e3fec89e3ea8c6948a7e2a939f71d292327ed656cc1dba0ddd7922c48f5bcff4dfe6b1dadc2dea4e2923f2" name="libext2fs2" arch="x86_64">
  <version epoch="0" ver="1.47.0" rel="160000.3.2"/>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="lhenriques@suse.com" date="1705060800">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck:
  Suppress "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="4fc50194870e8b375c53d1bc5a3671ce1ce8393d645250fa12fb35886f48c96946e9c11c6f3ebfa37584ab32cee990fac766f6ea7950265c4190df4ebae1312b" name="libfa1" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="a751cffa0b64b3e3768f29edc8bbd722802623293c31156f47751b89437bfe420fdc7a6f9b870902f9e85ec8a4f70a38305310588e1172849f9bad96f471284d" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.41.1" rel="160000.3.1"/>
  <changelog author="sbrabec@suse.com" date="1744027200">- Update to version 2.41:
  * agetty: Fixed an issue where issue files were not being printed
    from additional locations, such as /run or /usr/lib. This
    change now allows for the use of local information from /etc,
    in addition to generated files from /run and
    distribution-specific files from /usr/lib.
  * cfdisk and sfdisk: Added support for the --sector-size command
    line option.
  * sfdisk: Added a new option, --discard-free.
  * fdisk: Added a new command, 'T', to discard sectors.
  * chrt: The --sched-runtime now supports SCHED_{OTHER,BATCH}
    policies.
  * column: Can now handle ANSI SGR colors inside OSC 8 hyperlink
    escape codes and sequences.
  * enosys: Can now dump defined filters.
  * libmount:
  * Added experimental support for statmount() and listmount()
    syscalls.
  * This new functionality can be accessed using "findmnt
  - -kernel=listmount".
  * Added a new mount option,
    X-mount.nocanonicalize[=source|target].
  * Added new mount extensions to the "ro" flag (ro[=vfs,fs]).
  * Added a new option, X-mount.noloop, to disable automatic loop
    device creation.
  * Now supports bind symlinks over symlinks.
  * Reads all kernel info/warning/error messages from new API
    syscalls (and mount(8) prints them).
  * libuuid: Now supports RFC9562 UUIDs.
  * findmnt, lsblk, and lsfd: Added a new --hyperlink command line
    option to print paths as terminal hyperlinks.
  * findmnt: Can now address filesystems using --id and --uniq-id
    (requires listmount() kernel support).
  * flock: Added support for the --fcntl command line option.
  * hardlink: Can now prioritize specified trees on the command
    line using --prioritize-trees.
  * Can exclude sub-trees using --exclude-subtree or keep them in
    the current mount using --mount.
  * Duplicates can now be printed using --list-duplicates.
  * hwclock: Added a new --param-index option to address position
    for RTC_PARAM_{GET,SET} ioctls.
  * kill: Can now decode signal masks (e.g. as used in /proc) to
    signal names.
  * libblkid: Made many changes to improve detection, including
    exfat, GPT, LUKS2, bitlocker, etc.
  * login: Added support for LOGIN_ENV_SAFELIST in /etc/login.def.
  * lsfd: Now supports pidfs and AF_VSOCK sockets.
  * lsipc, ipcmk, ipcrm: Now supports POSIX ipc.
  * lslogins: Now supports lastlog2.
  * lsns: Added support for the --filter option.
  * build by meson: Now supports translated man pages and has fixed
    many bugs.
  * mkswap: The option --file should now be usable on btrfs.
  * nsenter: Improved support for pidfd and can now join target
    process's socket net namespace.
  * scriptlive: Added a new option, --echo &lt;never|always|auto&gt;.
  * zramctl: Now supports COMP-RATIO and --algorithm-params.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41-ReleaseNotes
- Update util-linux-login_defs-check.sh:
  * Make instructions up to date.
  * Update checksum reflecting the shadow update.
- Refresh libmount-print-a-blacklist-hint-for-unknown-filesyst.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1744891200">- Enable mountfd support again (jsc#PED-9752).
  BREAKING CHANGE
  Mountfd is nearly completely compatible with the old mount. There
  is a special case that cannot be handled by mountfd, and it needs
  to be handled by applications:
  Mountfd discriminates between physical mount layer and virtual
  mount layer. Once the physical mount layer is read-only,
  read-write mount on the virtual layer is not possible.
  If the first mount is read only, then the physical filesystem is
  mounted read-only, and later mount of the same file system as
  read-write is not possible. To solve this problem, the first
  mount needs to be read-only only on the virtual layer, keeping
  the physical layer read-write.
  The user space fix is simple:
  Instead of
    mount -oro
  use
    mount -oro=vfs
  This will keep the physical layer read-write, but the virtual
  file system layer (and the user space access) will be read-only.</changelog>
  <changelog author="sbrabec@suse.com" date="1747742400">- Fix segfault of findmnt (boo#1242705,
  gh#util-linux/util-linux#3574,
  util-linux-libblkid-econf-parse.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1748520000">- Add ul_ prefix to functions with common names. Fixes btrfsprogs
  build failure (gh#util-linux/util-linux#3603,
  util-linux-rename-common-symbols-1.patch,
  util-linux-rename-common-symbols-2.patch,
  util-linux-rename-common-symbols-3.patch,
  util-linux-rename-common-symbols-4.patch).</changelog>
  <changelog author="nicolas@belouin.fr" date="1749556800">- Fix libmount --no-canonicalize regression (boo#1244251,
  gh#util-linux/util-linux#3479,
  libmount-fix-no-canonicalize-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1750766400">- Update to version 2.41.1:
  * cfdisk: fix memory leak and possible NULL dereference
  * fdisk: fix possible memory leak
  * findmnt: fix -k option parsing regression (boo#1242705,
    drop util-linux-libblkid-econf-parse.patch)
  * hardlink: fix performance regression
  * include/cctype: fix string comparison
  * libblkid:
  * Fix crash while parsing config with libeconf
  * befs fix underflow
  * avoid strcasecmp() for ASCII-only strings
  * libblkid/src/topology/dm: fix fscanf return value check to
    match expected number of parsed items
  * libmount:
  * (subdir) restrict for real mounts only
  * (subdir) remove unused code
  * avoid calling memset() unnecessarily
  * fix --no-canonicalize regression (boo#1244251,
    drop libmount-fix-no-canonicalize-regression.patch)
  * lsblk:
  * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE
  * avoid strcasecmp() for ASCII-only strings
  * lscpu:
  * fix possible buffer overflow in cpuinfo parser
  * Fix loongarch op-mode output with recent kernel
  * lsfd:
  * scan the protocol field of /proc/net/packet as a hex number
  * fix the description for PACKET.PROTOCOL column
  * lsns:
  * enhance compilation without USE_NS_GET_API
  * fix undefined reference to add_namespace_for_nsfd #3483
  * more:
  * fix broken ':!command' command key
  * fix implicit previous shell_line execution #3508
  * tests: (test_mkfds::mapped-packet-socket) add a new parameter,
    protocol
  * treewide:
  * add ul_ to parse_timestamp() function name
    (drop util-linux-rename-common-symbols-4.patch)
  * add ul_ to parse_switch() function name
    (drop util-linux-rename-common-symbols-3.patch)
  * add ul_ to parse_size() function name
    (drop util-linux-rename-common-symbols-2.patch)
  * add ul_ to parse_range() function name
    (drop util-linux-rename-common-symbols-1.patch)
  * fix optional arguments usage
  * avoid strcasecmp() for ASCII-only strings
  * Wipefs: improve --all descriptions for whole-disks
  * Misc: Do not call exit() on code ending in shared libraries
  * Other fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes
- Fix problem with uname26 listed twice.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
</package>
<package pkgid="b6b6dea317b46317e71e52bcee6aa275b7a0d88486969008d1939be882d2394d2a344bda9b42cbcf71b8ca0f87daaa15554fc9e8dd0b7ac8b1a5732fbbc9319f" name="libfdt1" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="160000.2.2"/>
  <changelog author="mliska@suse.cz" date="1575806400">- Use %make_build and recpect %optflags.</changelog>
  <changelog author="dmueller@suse.com" date="1579003200">- add dtc-no-common-conflict.patch (bsc#1160388)</changelog>
  <changelog author="info@paolostivanin.com" date="1583841600">- Update to 1.6.0 (no changelog)
- Removed dtc-no-common-conflict.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- explicitly pass -pie in CFLAGS, since the build system explicitly passes
  - fPIC, which breaks our gcc-PIE profile. This makes all packaged binaries
  PIE-executables (bsc#1184122).</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 1.6.1:
  * A number of bugfixes
  * Fix many warnings with -Wsign-compare
  * Add compilation with meson (not used by default so far)
  * Yet another revamp of how we handle unaligned accesses
  * Added a number of extra checks for common tree errors
  * Checks for interrupt providers
  * i2c reg properties
  * Tighten checking of gpio properties
  * Reduce dependencies when building libfdt only
  * Allow libfdt.h header to be used from C++ more easily
  * Accept .dtbo extension for overlays
  * Update valid node and property characters to match current devicetree spec
  * Add several checks for root node sanity in fdt_check_full()
  * Somewhat more robust type labelling for the benefit of yaml output</changelog>
  <changelog author="schwab@suse.de" date="1664193600">- makefile-bison-rule.patch: Makefile: fix infinite recursion by dropping
  non-existent `%.output`</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682424000">- update to 1.7.0:
  * dtc
  * Fix -Oasm output on PA-RISC by avoiding ';' separators
  * Put symbolic label references in -Odts output when possible
  * Add label relative path references
  * Don't incorrectly attempt to create fixups for reference to path
    in overlays
  * Warning rather than hard error if integer expression results are
    truncated due to cell size
  * libfdt
  * Add fdt_get_property_by_offset_w() function
  * pylibfdt
  * Fixed to work with Python 3.10
  * A number of extra methods
  * Fix out of tree build
  * fdtget
  * Add raw bytes output mode
  * General
  * Fixes for mixed-signedness comparison warnings
  * Assorted other warning fixes
  * Assorted updates to checks
  * Assorted bugfixes
  * Fix scripts to work with dash as well as bash
  * Allow static builds
  * Formalize Signed-off-by usage
- Update dtc.keyring
- Drop upstream patch:
  * makefile-bison-rule.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729598400">- Update to 1.7.1:
  * dtc
  * Fix check for 10-bit I2C addresses
  * Improve documentation of -@ option
  * Update to libyaml &gt;= 0.2.3
  * Improvements &amp; fixes for device graph checks
  * Add -L / --local-fixups option
  * Add check for length of interrupt-map properties
  * libfdt
  * Add fdt_path_getprop_namelen()
  * Add fdt_get_symbol() and fdt_get_symbol_namelen()
  * Correct documentation of fdt_path_offset()
  * Correct documentation of fdt_appendprop_addrrange()
  * Validate aliases is fdt_get_alias_namelen()
  * Don't overwrite phandles when applying overlays
  * Require Python 3
  * pylibfdt
  * Support boolean properties
  * Fixes for current Python versions
  * General
  * Assorted bugfixes
  * Assorted build improvements
  * Assorted typo fixes in docs
  * Some additional testcases
  * Move to GitHub Actions based CI</changelog>
  <changelog author="schwab@suse.de" date="1738670400">- Mark assembler output as noexecstack</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1738929600">- Update to 1.7.2:
  * pylibfdt: Don't emit warnings from swig generate C code
  * fdtoverlay: provide better error message for missing /__symbols__
  * pylibfdt/libfdt.i: Use SWIG_AppendOutput
  * Escape spaces in depfile with backslashes.
  * libfdt.h: whitespace consistency fixups
  * libfdt.h: typo and consistency fixes
- Revert previous commit and use upstream fix for glibc 2.41:
  * ce1d858.patch</changelog>
</package>
<package pkgid="9167564ab501a85ef7f9e3d82ea4d0e99d66ab39c82864999279d7e2a4bdcead5df3c758e55fda2ade44fb3c8687fab63311d5423234099ae659ca5cb170dfe8" name="libffi8" arch="x86_64">
  <version epoch="0" ver="3.4.6" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1568808000">- Update to commit c2a6859
- gccbug.patch: Update check for gccbug target flag
- stdcall.patch: Fix FFI_STDCALL ABI
- libffi-riscv.patch: Removed
- libffi-include-location.patch: Removed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1570795200">- Workaround aarch64 bug (boo#1153573) with upstream patch
  https://github.com/libffi/libffi/pull/499 updated to apply
  on current sources (upstream will probably rework this patch
  so we need to monitor the issue for the proper fix):
  * aarch64.patch</changelog>
  <changelog author="rguenther@suse.com" date="1583841600">- Update to commit b844a9c7f1ca based on libffi 3.3 with the
  following changes:
    Add RISC-V support.
    New API in support of GO closures.
    Add IEEE754 binary128 long double support for 64-bit Power
    Default to Microsoft's 64 bit long double ABI with Visual C++.
    GNU compiler uses 80 bits (128 in memory) FFI_GNUW64 ABI.
    Add Windows on ARM64 (WOA) support.
    Add Windows 32-bit ARM support.
    Raw java (gcj) API deprecated.
    Add pre-built PDF documentation to source distribution.
    Many new test cases and bug fixes.
- SONAME change to libffi.so.8
- stdcall.patch is now upstream
- Adjust baselibs.conf for SONAME change
- Adjust aarch64.patch for upstream changes
- Drop gccbug.patch XFAILing testcases that now PASS with fixed
  GCC 9.3</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 3.4.2:
  * Add static trampoline support for Linux on x86_64 and ARM64.
  * Add support for Alibaba's CSKY architecture.
  * Add support for Kalray's KVX architecture.
  * Add support for Intel Control-flow Enforcement Technology (CET).
  * Add support for ARM Pointer Authentication (PA).
  * Fix 32-bit PPC regression.
  * Fix MIPS soft-float problem.
  * Enable tmpdir override with the $LIBFFI_TMPDIR environment variable.
  * Enable compatibility with MSVC runtime stack checking.
  * Reject float and small integer argument in ffi_prep_cif_var().
  * Callers must promote these types themselves.
- drop aarch64.patch: fixed upstream differently
- drop info dependency, uses file triggers now</changelog>
  <changelog author="dmueller@suse.com" date="1638360000">- disable static trampolines (bsc#1193272)</changelog>
  <changelog author="rguenther@suse.com" date="1663934400">- update to 3.4.3:
  * All struct args are passed by value, regardless of size, as per ABIs.
  * Enable static trampolines for Cygwin.
  * Add support for Loongson's LoongArch64 architecture.
  * Fix x32 static trampolines.
  * Fix 32-bit x86 stdcall stack corruption.
  * Fix ILP32 aarch64 support.
- includes fix for RISCV64
- disable LTO due to (ffi#733)</changelog>
  <changelog author="dmueller@suse.com" date="1665403200">- add riscv64-handle-big-structures.patch</changelog>
  <changelog author="schwab@suse.de" date="1666612800">- Update to libffi 3.4.4
  * Important aarch64 fixes, including support for linux builds
    with Link Time Optimization (-flto).
  * Fix x86 stdcall stack alignment.
  * Fix x86 Windows msvc assembler compatibility.
  * Fix moxie and or1k small structure args.
- drop riscv64-handle-big-structures.patch
- reenable LTO</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701864000">- Add upstream patches to fix BTI on aarch64:
  * 808.patch
  * 810.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1710849600">- Add patches to fix BTI on aarch64:
  * 830.patch
- Update to 3.4.6:
  * Fix long double regression on mips64 and alpha.
- Update to 3.4.5:
  * Add support for wasm32.
  * Add support for aarch64 branch target identification (bti).
  * Add support for ARCv3: ARC32 &amp; ARC64.
  * Add support for HPPA64, and many HPPA fixes.
  * Add support for Haikuos on PowerPC.
  * Fixes for AIX, loongson, MIPS, power, sparc64, and x86 Darwin.
- Drop upstreamed patches:
  * 808.patch
  * 810.patch</changelog>
</package>
<package pkgid="44105bcd165e9b71936eb9d3f93622ebf67782726d97cdc7b0629643ba408205e82df2fe7256e14451b38644d3082e801552563964112c140d98224d93aa2f76" name="libfido2-1" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="160000.3.2"/>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
  <changelog author="dmueller@suse.com" date="1700308800">- update to 1.14.0:
  * fido2-cred -M, fido2-token -G: support raw client data
    via -w flag.
  * New API calls:
  * * fido_assert_authdata_raw_len;
  * * fido_assert_authdata_raw_ptr;
  * * fido_assert_set_winhello_appid.
- add keyring for gpg validation</changelog>
  <changelog author="dmueller@suse.com" date="1725105600">- update to 1.15.0:
  * bio, credman: improved CTAP 2.1 support.
  * hid_osx: fix issue where fido_hid_read() may block
    unnecessarily; gh#757.
  * fido2-token -I: print maxcredbloblen.
  * hid_linux: improved support for uhid devices.
  * New API calls:
  - fido_cred_set_attobj;
  - fido_cred_x5c_list_count;
  - fido_cred_x5c_list_len;
  - fido_cred_x5c_list_ptr.</changelog>
</package>
<package pkgid="8bfdc00cb4a97d4814a2465a1be95a6350eef8667bf0d9c70289f79e6199c0f53952142b12b6467ab17cabf8e960ffe69eeb6d6423cd5c7bcb6dfb0eabfc01c2" name="libfile1_0" arch="x86_64">
  <version epoch="0" ver="2022.10.16" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="20d58e52d11dfe4734b4bb5759b3c2ad5848857ac41ea74022880af43534ac5984f6c993429cecd82c99ebe07ff1ab8f627b165988ff86eef996e2c484b55b6a" name="libfind4_0" arch="x86_64">
  <version epoch="0" ver="1.8" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="72415de889f32f464b2d30aa805ca5ef131014c73a48f83c1d954c945d6ac4a9dd109576a77e7074ebc9167e21b288a7e1bee7ee44bce717f4c6556a2b7ef7c4" name="libflashrom1" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="160000.2.2"/>
  <changelog author="glin@suse.com" date="1469534400">- Update to 0.9.9
  * Enable the dediprog module by default, add support for Dediprog
    SF600 and the new communication protocol of the SF100 with
    newer firmware
  * Add support to update the firmware of Promise UltraATA
    controllers
  * Support new programers: WCH CH341A, VIA VT8251
  * Support new chips:
    + ESI ES25P40, ES25P80, ES25P16
    + GigaDevice GD25VQ41B, GD25Q128C, GD25VQ21B, GD25VQ40C,
    GD25VQ80C and GD25VQ16C, GD25LQ40, GD25LQ80, GD25LQ16,
    GD25LQ64(B), GD25LQ128
    + PMC Pm25LQ020, Pm25LQ040, Pm25LQ080, Pm25LQ016, Pm25LQ032C
    + Sanyo LE25FU406C/LE25U40CMC
    + SST SST25WF020A, SST25WF040B, SST25WF080B
    + Winbond W29C512A/W29EE512
  * Allow to link flashrom statically (with make CONFIG_STATIC=yes)
  * Ease debugging of build problems with libraries
  * Ignore 0x00 as a flash chip manufacturer ID in the generic
    match to avoid ambiguous messages
  * Various improvements for serprog-based programmers
  * Add support for libftdi1
  * Add infrastructure for libusb1 and use it for new programmers
  * Rigorously check integrity of I/O stream data
  * Add make parameters for easier disabling/enabling of various
    classes of programmers</changelog>
  <changelog author="agraf@suse.com" date="1493208000">- Enable build for ARM</changelog>
  <changelog author="mardnh@gmx.de" date="1514980800">- Update to version 1.0
  * Support layouts for read and erase commands
  * New command line switch --noverify-all (-N) allows flashing of
    individual regions without reading the whole flash chip
    (particular useful with locked down Intel ME firmware)
  * New command line switch --ifd to read the layout from an
    Intel Firmware Descriptor on flash
  * We got rid of the delay-loop calibration (if the OS provides an
    accurate timer through clock_gettime())
  * Reading speed of USB programmers should have increased (reading
    bigger chunks at once, we reduce the overhead)
  * Support Intel 100 series PCHs (Sunrise Point, coupled with
    Skylake and Kaby Lake) and C620 series PCHs (Lewisburg paired
    with Workstation/Server versions of the former)
  * New programmers
    + Intel 100 series / C620 series PCHs
    + Intel I210 NICs (EEPROM and SPI)
    + AMD Merlin Falcon (FP4)
  * New chips
    + W25Q128.W
- Specfile cleanup
- Verify source signature</changelog>
  <changelog author="mardnh@gmx.de" date="1554033600">- Update to version 1.0.1
  * linux_spi: Reduce maximum read chunksize
  * Hardcode default spispeed of 2MHz
    Default speed of kernel drivers isn't always sane (any more).
  * Fix dmi_match string for ThinkPad X201
  * verification with sparse layouts
  * Fix erasing of unaligned regions</changelog>
  <changelog author="mardnh@gmx.de" date="1561291200">- Update to version 1.1
  New major user-visible features
  * 4-byte address support for many SPI programmers
  * New option to use a reference file for flash contents
    (--flash-contents)
  * Layout support for coreboot's FMAP format (--fmap, --fmap-file)
  * BAUD rate selection for Buspirate SPI
  * Support for the ENE Embedded Debug Interface (EDI), probably
    our first non-jedec SPI target
  * On Intel ME enabled systems, internal flashing is allowed by
    default
  New programmers
  * ENE Embedded Debug Interface EDI
  * Linux' MTD interface
  * Digilent SPI for the iCEblink40 development board
  * Developerbox/CP2104 bit banging
  * J-Link SPI
  * Dediprog firmwares &gt;= 7.2.30
  * Dediprog SF200
  * Intel Kabylake PCHs
  Support for lots of new chips</changelog>
  <changelog author="mardnh@gmx.de" date="1582200000">- Update to version 1.2
  - Meson support
  - Layout improvements/fixes and many, many code cleanups.
  - New chips: MX25U25635F, MX25L51245G, GD25Q256D, M95M02-A125,
    N25Q/MT25Q variants, W25Q128JW_DTR, AT25SF321, S25FL512S
  - New programmers: National Instruments USB-845x, Tin Can Tools
    Flyswatter/Flyswatter 2, STLINK V3, more Intel PCHs (Apollo
    Lake, Cannon Lake variants, Ice Lake U)
  - Reduced dependency on libusb0
  - Syntax: Added --flash-name and --flash-size arguments to print
    information about the flash chip</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606478400">- Fix build on aarch64 with upstream patch:
  * fix_aarch64.patch</changelog>
  <changelog author="schwab@suse.de" date="1631188800">- Enable build on riscv64
- Drop requires on dmidecode, no longer needed</changelog>
  <changelog author="mgorse@suse.com" date="1658664000">- Switch to meson
- Add flashrom-install-man-file.patch: install the man file when
  using meson.
- Add flashrom-j-link-spi.patch: Add missing meson option for
  J-Link SPI.
- Drop fix_aarch64.patch: no longer relevant.
- Package the library and headers.</changelog>
  <changelog author="adam@mizerski.pl" date="1695384000">- Update to 1.3.0
  - See changelog at https://www.flashrom.org/Flashrom/1.3
- Removed patches (merged upstream):
  - flashrom-install-man-file.patch
  - flashrom-j-link-spi.patch</changelog>
</package>
<package pkgid="897958d85d62ed8ff67cb4b6293142c4dab2d8525534c22bfa56c82547f07eae7dc48ac3baef4b722b416995fc7685c0628b32ddbd47a3597e918702499b8049" name="libfontconfig1" arch="x86_64">
  <version epoch="0" ver="2.16.0" rel="160000.2.2"/>
  <changelog author="badshah400@gmail.com" date="1549713600">- Add fontconfig-do-not-remove-UUID-file.patch: Removing .uuid
  files caused frequent rescanning of all system fonts causing
  intermittent CPU usage surges, for example, when browsing using
  firefox; patch taken from upstream commit (boo#1124816,
  https://gitlab.freedesktop.org/fontconfig/fontconfig/merge_requests/8).</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- adding bug reference to this changelog [bsc#1172301]</changelog>
  <changelog author="dmueller@suse.com" date="1650024000">- update to 2.14.0:
  * Fix endianness on generating MD5 cache name
  * Fix a typo in the description of FcWeightFromOpenTypeDouble
  * fc-validate: returns an error code when missing some glyphs
  * Fallback uuid-based name to read a cache if no MD5-based cache
  * fc-cache: Show font directories to generate cache with -v
  * Replace UUID file mechanism with per-directory 'map' attribute [v2]
  * memleak fixes
- drop fontconfig-do-not-remove-UUID-file.patch (obsolete)
- add skip-network-test.patch</changelog>
  <changelog author="sflees@suse.de" date="1651147200">- Seems we now need python3 for building</changelog>
  <changelog author="dmueller@suse.com" date="1667908800">- update to 2.14.1:
  * Bump the cache version to 8 in doc/fontconfig-user.sgm
  * Enable 10-sub-pixel-rgb.conf by default
  * build fixes and translation updates
  * Avoid misuse of ctype</changelog>
  <changelog author="dmueller@suse.com" date="1674907200">- update to 2.14.2:
  * Adjust indentation between programlisting in fontconfig-user.sgml
  * Add some missing constant names for weight
  * Report more detailed logs instead of assertion
  * Fix a typo in description for HAVE_STDATOMIC_PRIMITIVES
  * Ignore LC_CTYPE if set to "UTF-8"
  * add --with-default-sub-pixel-rendering option
  * Add FC_DESKTOP_NAME property</changelog>
  <changelog author="tiwai@suse.com" date="1701172800">- Run autoreconf for Leap 15.x to fix build breakage</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 2.15.0:
  * Do not change the order of orth files
  * Convert tabs to spaces
  * Convert more tabs to spaces in docs
  * Report more detailed logs instead of assertion.
  * Add some missing constant names for weight.
  * Adujst indentation between programlisting in fontconfig-user.sgml
  * Add another test case for flatpak
  * Update 65-nonlatin.conf for macOS
  * Change the order of the properties to the order of fontconfig
    cache format
  * Add missing property descriptions
  * Add namedinstance property
  * Remove the problematic language from code and doc
  * Use 'outline' instead of 'scalable' for bitmaps
  * Add more docs about selectfont
  * Rework CI implementation
  * Fix uninitialized memory access when failing memory allocation.
  * Create a symlink with relative path
  * Fix an error of "initializer element is not constant"
  * Update CaseFolding.txt to Unicode 15.1
  * Update the encoding table for Simplified Chinese
  * Retry to decode strings in the name table as UTF-16BE in some
    cases.
  * Work around decoding strings in Macintosh encoding for the
    name table.
  * Use memmove instead of memcpy
  * Rename README to NEWS and add README.md
  * Update so version
  * Fix leak of `reason` in _FcConfigParse when not complaining</changelog>
  <changelog author="foss@grueninger.de" date="1721131200">- Run autoreconf unconditionally to allow newer versions
  of Automake.</changelog>
  <changelog author="i@marguerite.su" date="1739793600">- update to 2.16.0:
  * Fix misleading-indentation warning
  * Deal with glob string properly
  * Allow comma as a delimiter in postscriptname and ignore it on matching
  * Refactor exclusive language logic into separate file
  * Use proper postscriptname for named instance if any
  * Remove redundant leaf assignment in fcfreetype.c
  * Ensure lock/unlock symmetry
  * Ensure config is locked during retry in FcConfigReference
  * Unlock on allocation failure in FcCacheInsert
  * Fix FcSerialize undefined behavior with null pointer usage
  * Fix undefined behavior issue on qsort call
  * Add cop.orth for Coptic language
  * Add got.orth for Gothic language
  * Fix a memory leak in fc-list/fc-query/fc-scan
  * mark _FcPatternIter as may_alias
  * Accept integer for pixelsize
  * Improve hinting detection for fonthashint object
  * Add FcConfigSetFontSetFilter
  * Fix some code found by SAST
  * Set FcTypeVoid if no valid types to convert
  * Fix a memory leak in _get_real_paths_from_prefix
  * Fix double slashes in path
  * More information when no writable cache directories
  * Fix test case for reproducible builds
  * Fix invalid escape character \s
  * Sort out bitmap related config files
  * Clean up .uuid files with fc-cache -f too
- add fontconfig-autoconf269.patch to start leap build</changelog>
</package>
<package pkgid="80253b1b8d1ca484fd95173d4c9216415618ff352169d5b512d9a2d545b82e51fc8466a1ebd3bb8177bd27a16088018d966baec9d6bd9e73721e440d89cf5a90" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.112" rel="160000.2.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="6dd0094e86f1973da46dafb2359d81330c03cb522f8883d85b940d1160095341d7ff6ddebccceac0d3ffb54761e8f94b1ec18f6591f8be69e3e246c0a85e6ab1" name="libfreeipmi17" arch="x86_64">
  <version epoch="0" ver="1.6.15" rel="160000.3.1"/>
  <changelog author="trenn@suse.de" date="1625745600">- Fix: W: name-repeated-in-summary C FreeIPMI
- Fix: freeipmi-bmc-watchdog.x86_64:
  W: non-etc-or-var-file-marked-as-conffile /usr/share/fillup-templates/sysconfig.bmc-watchdog
  Declaring fillup files as conffile is not needed
- freeipmi 1.6.8
  * Fix incorrect sensor read corner case on BMCs that use non-default LUNs (LP#1926299).
  * Remove hard coded paths from system config files (i.e. mostly files
    in /etc).  Have paths updated based on options to configure.</changelog>
  <changelog author="kkaempf@suse.com" date="1642680000">- freeipmi 1.6.9
  * Support --with-systemconfigdir build option.
  * Fix build issue on musl where putmsg/getmsg are not available.
  * Fix build issue when inb/outb are not available on some systems.
  * Fix static build issues with gcrypt.
  * Add conserver documentation in faq.
  * Minor documentation updates.</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- Remove obsolete ExclusiveArch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676635200">- freeipmi 1.6.10
  * Support IPv6 Lan configuration in ipmi-config
    IPv6 configuration is supported in the new Lan6_Conf section
- add upstream signing key and source signature</changelog>
  <changelog author="kkaempf@suse.com" date="1686571200">- freeipmi 1.6.11
  * Fix double free corner case in ipmiseld.
  * Support ISO 8601 date inputs to date range options in ipmi-sel.
  * Support Xilinx OEM FRU records.
  * Fix corner case in libipmimonitoring, support sensor if units
    is "RPM per minute", but just return "RPM" as the units.
  * Fix portability compilation on cygwin.
  * Fix typo in fiid template field that could lead to packet
    interpretation errors.</changelog>
  <changelog author="kkaempf@suse.com" date="1706529600">- freeipmi 1.6.14
  * Fix build issue common to non-x86 systems.
- freeipmi 1.6.13
  * Fix build issues on systems where inb/outb are declared with inline
    assembly.
  * Add additional sensor/event interpretations.
- freeipmi 1.6.12
  * Use poll() over select() to avoid fd limit in openipmi driver.
  * Fix potential portability problems on systems without cbrt().
  * Minor documentation updates.</changelog>
  <changelog author="kkaempf@suse.com" date="1709812800">- fix gcc-14 build: gcc-14.patch (bsc#1220476)</changelog>
  <changelog author="kkaempf@suse.com" date="1717416000">- use %autosetup
- apply patches with -p1</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1737028800">- freeimpi 1.6.15:
  * In ipmi-config, fix incorrect output of
    IPv6_Dynamic_Address_Source_Type
  * In ipmi-oem, increase precision of Dell cumulative energy
    output
  * Do not advertise options that are only available when special
    debugging is compiled into FreeIPMI
  * libfreeipmi: remove unnecessary / duplicate parameter checks
  * Minor documentation updates
- drop gcc-14.patch</changelog>
  <changelog author="trenn@suse.com" date="1774440000">- bsc#1260414 - CVE-2026-33554:
  freeipmi: improper memory handling and data validation can lead
  A ipmi-oem-fix-several-memory-out-of-bounds-errors.patch</changelog>
</package>
<package pkgid="23282ae06d5fa3f8046e50c484a7099d45ee84f1a8257305bba7bd700f6a16c98d66eb6f58fe5aa32f3a099f4a963492723e357557a7c8b01f26894fd6de36d3" name="libfreetype6" arch="x86_64">
  <version epoch="0" ver="2.13.3" rel="160000.3.1"/>
  <changelog author="coolo@suse.com" date="1660305600">- Move ftpdump from ft2demos to freetype - it's required by other
  packages and doesn't require any of the toolkits, so move its
  build early</changelog>
  <changelog author="dmueller@suse.com" date="1660305601">- spec-cleaner</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="meissner@suse.com" date="1677758400">- add devel requires to devel-32bit for brotli and bzip2 (indirect
  for Wine)</changelog>
  <changelog author="dmueller@suse.com" date="1678276800">- update to 2.13.0:
  * The 'COLR' v1 API is now considered as stable.
    https://learn.microsoft.com/en-us/typography/opentype/spec/colr
  * For  OpenType  Variable Fonts,  `avar`  table  format 2.0  is  now
    supported.  The code was contributed by Behdad Esfahbod.
    Note that this is an extension supported on recent Apple platforms
    and by HarfBuzz, but not yet in the OpenType standard!  See
    https://github.com/harfbuzz/boring-expansion-spec/blob/main/avar2.md
    for the specification.  To deactivate it, define the configuration
    macro 'TT_CONFIG_OPTION_NO_BORING_EXPANSION'.
  * A new API  `FT_GlyphSlot_Slant` to slant a glyph by  a given angle
    has been added.   Note that this function is  part of `ftsynth.h`,
    which is still considered to be in alpha stage.
  * TrueType interpreter version 38  (also known as 'Infinality') that
    was first introduced about 10 years  ago in FreeType 2.4.11 is now
    deprecated and slated to be removed in the next version.  TrueType
    interpreter version 40 has been FreeType's default version for six
    years now and provides an excellent alternative.  This is the last
    FreeType     version     with    TT_INTERPRETER_VERSION_38     and
    TT_INTERPRETER_VERSION_40 treated differently.
  * The  only  referenced  but never  documented  configuration  macro
    `FT_CONFIG_OPTION_NO_GLYPH_NAMES` has been removed.
  * To  avoid  reserved identifiers  that  are  globally defined,  the
    auto-hinter  debugging   macros  (which  are  only   available  if
    `FT_DEBUG_AUTOFIT` is defined)
    ```
    _af_debug_disable_horz_hints
    _af_debug_disable_vert_hints
    _af_debug_disable_blue_hints
    _af_debug_hints
    ```
    have been renamed to
    ```
    af_debug_disable_horz_hints_
    af_debug_disable_vert_hints_
    af_debug_disable_blue_hints_
    af_debug_hints_
    ```</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to FTL and GPL-2.0-only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1685016000">- Do not limit ftdump conflict to &lt; version-release, but only to
  version. Ftdump is built in a second build flavor and as such the
  release counters are not guaranteed to be in sync.</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 2.13.1:
  * New function  `FT_Get_Default_Named_Instance` to get the
    index of the default named instance of an OpenType Variation
    Font. A new load flag `FT_LOAD_NO_SVG` to make FreeType ignore
    glyphs in an 'SVG ' table.
  * New function  `FT_GlyphSlot_AdjustWeight` to adjust
    the glyph weight either  horizontally or  vertically.
    This is part of the `ftsynth.h` header file
  * TrueType interpreter  version 38 (also known  as
    'Infinality') has been deactivated; the value  of
    `TT_INTERPRETER_VERSION_38` is now the same as
    `TT_INTERPRETER_VERSION_40`.
  * Switching named instances on and  off in Variation Fonts
    was buggy if the design coordinates didn't change.
- drop enable-infinality-subpixel-hinting.patch (obsolete, infinality
  is deactivated)</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Update to version 2.13.2:
  - Better support for CFF2 variation fonts.
  - TrueType interpreter  version 38 (also known  as 'Infinality')
    has been removed.
  - Improved OpenVMS support.</changelog>
  <changelog author="dmueller@suse.com" date="1740484800">- update to 2.13.3:
  * Some  fields in the `FT_Outline` structure have been changed
    from signed to unsigned type, which better reflects the actual
    usage. It is also an additional means to protect against
    malformed input.
  * Rare double-free crashes in the cache subsystem have been fixed.
  * Excessive stack allocation in the autohinter has been fixed.
  * The B/W  rasterizer has received a major upkeep that results in
    large performance improvements.  The rendering speed has
    increased and even doubled for very complex glyphs.</changelog>
</package>
<package pkgid="95743f97105c4875ec0b6f74cf032755fe3d43c5e80538eaefbbb7bbbbf208f7a0733f6a88bddc03c776828089266575e1a93f6371a89702cda61361a0b90fe2" name="libfribidi0" arch="x86_64">
  <version epoch="0" ver="1.0.15" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="dmueller@suse.com" date="1636804800">- update to 1.0.11:
  * Updated Unicode tables to version 14.
  * Skip isolates in fribidi_get_par_direction().
  * Various fuzzing fixes.
  * Various build fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 1.0.12:
  * Various fuzzing fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- update to 1.0.13:
  * Adding missing man pages to the tar release file.</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- update to 1.0.14:
  * Updated Unicode tables to version 15.1</changelog>
  <changelog author="dmueller@suse.com" date="1719748800">- update to 1.0.15:
  * Fixed the bad tarball from 1.0.14 with stall include files.
    There are no other changes</changelog>
</package>
<package pkgid="03572e2b266b2ea4c79be7b97c799f6a6be15427e79f3149486259367912c36a5adf083db814501238105139649835f1508cdfbc55fa87a99c736baaef1fe1ab" name="libftdi1-2" arch="x86_64">
  <version epoch="0" ver="1.5.42+git.de9f01e" rel="160000.3.2"/>
  <changelog author="mpluskal@suse.com" date="1510056000">- Update to version 1.4:
  * New ftdi_usb_open_bus_addr() open function
  * Use BM/R series baud rate computation for FT230X
  * ftdi_get_error_string() now returns const char*
  * C++ API: Ability to open devices with empty descriptor strings
  * C++ API: Fix enumerations for buffer purge and modem controls
  * small build fixes and improvements in the python examples
  * ftdi_eeprom / eeprom handling:
    + New API function: ftdi_eeprom_get_strings()
    + Fix USE_SERIAL handling for 230X type chips
    + Make ftdi_read_eeprom_location() endianness independent
    + Fix flashing of FT245R
- Build python3 version of bindings on Factory
- Rename python bindings subpackage to match singlespec conventions
- Run spec-cleaner</changelog>
  <changelog author="foss@grueninger.de" date="1523102400">- Added patch libftdi-cmake.patch from upstream to make package
  compatible with CMake 3.11</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Smash libftdi-cmake.patch to make it work with cmake-3.11
  * Not to upstream the changes I did are pretty ugly</changelog>
  <changelog author="msuchanek@suse.com" date="1528804800">- Fix Leap 42.3 build - do not apply cmake 3.11 compat patch.</changelog>
  <changelog author="mpluskal@suse.com" date="1585137600">- Cleanup spec file - drop obsolete conditionals and use modern
  macros
- Run tests
- Dont build static libraries</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1610712000">- Update to version 1.5:
  * Implement tc[io]flush methods &amp; deprecate broken
    purge_buffers methods
  * Add program to test buffer flush (purge) functionality
  * Add kernel driver auto attach/detach.
    See new AUTO_DETACH_REATACH_SIO_MODULE option
  * Add ftdi_setflowctrl_xonxoff()
  * ftdi_eeprom / eeprom handling:
    + Unify handling of all boolean eeprom flags
    + Add device release number support
    + Add channel_a_driver support for type xxR chips
    + Add support for group0 drive levels on x232H chips
    + Fix handling of high_current_drive parameter
    + Fix inverted handling of VCP driver field for TYPE_R chips
    + New --verbose option for eeprom decode operation
  * Add example code for async mode
  * Add SPDX license identifiers to the core library &amp;
    ftdi_eeprom
  * Various python SWIG wrapper improvements
  * Various cmake file improvements
  * Fix small bugs in error code paths
- Drop upstream libftdi-cmake.patch
- Correct License, the library is LGPL-2.1-only (see SPDX headers),
  while various other parts are GPL-2.0-only (with and without
  linking exceptions).
- Add Fix-building-unit-tests-without-FTDIPP.patch</changelog>
  <changelog author="trenn@suse.de" date="1632744000">- Update to version 1.5.12+git.0684c1b:
  * Don't set EEPROM serial when it's not used.
  * Remove legacy EEPROM fields from FT4232H.
  * Don't fail reading missing strings.
  * Don't spam stderr when flashing FT232H eeprom
  * examples/bitbang_cbus.c: Check return value of fgets()
  ...
- Integrated mainline:
  D Fix-building-unit-tests-without-FTDIPP.patch</changelog>
  <changelog author="fvogt@suse.com" date="1678968000">- Add patch to fix random build failures:
  * 0001-Fix-race-during-build-of-python-bindings.patch</changelog>
  <changelog author="trenn@suse.de" date="1715601600">- Update to version 1.5.42+git.de9f01e:
  * CMake: bump the minimal required version to 3.5
  * python: move from distutils to sysconfig
  * CMake: use ${PC_LIBUSB_LIBRARIES} instead of a library name
  * CMake: fix multiarch support
  * CMake: make the project compatible with building as a subproject
  * ftdipp/CMakeLists.txt: remove VIM modline settings
  * CMake: rework subdirectory handling
  * CMake: rework findlibusb module
  * CMake: report CMake version
  * CMake: use dedicated recipe for documentation generation
  D 0001-Fix-race-during-build-of-python-bindings.patch
  Patch got integrated mainline</changelog>
  <changelog author="ana.guerrero@suse.com" date="1730894400">- Fix for SWIG 4.3.0, add patch swig-4.3.patch</changelog>
</package>
<package pkgid="d40c72ac068b031222c5236115a3e19942bdb90d21b1bbe7113849b7d5fcd412bc946aba5518fb6354004959412bb7fcee9d8cfbd15b6114d8301d76279d718e" name="libfuse2" arch="x86_64">
  <version epoch="0" ver="2.9.9" rel="160000.2.2"/>
  <changelog author="avindra@opensuse.org" date="1532779200">- fuse 2.9.8
  * SECURITY UPDATE: In previous versions of libfuse it was possible
    to for unprivileged users to specify the allow_other option even
    when this was forbidden in /etc/fuse.conf. The vulnerability is
    present only on systems where SELinux is active (including in
    permissive mode).
  * libfuse no longer segfaults when fuse_interrupted() is called
    outside the event loop.
  * The fusermount binary has been hardened in several ways to
    reduce potential attack surface. Most importantly, mountpoints
    and mount options must now match a hard-coded whitelist. It is
    expected that this whitelist covers all regular use-cases.
- cleanup with spec-cleaner
- update wiki urls to new location</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133101).</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.9.9:
  * Added OpenAFS to whitelist (so users can now mount FUSE filesystems on mountpoints within OpenAFS filesystems).
  * Added a test of seekdir to test_syscalls.
  * Fixed readdir bug when non-zero offsets are given to filler and the
  filesystem client, after reading a whole directory, re-reads it from a
  non-zero offset e. g. by calling seekdir followed by readdir.</changelog>
  <changelog author="lnussel@suse.de" date="1605009600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Modernize some older specfile constructs. Rediff patch4 as -p1.
- Update descriptions.</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133101) and use -ffat-lto-objects.</changelog>
  <changelog author="jengelh@inai.de" date="1629720000">- Add closefrom.patch [boo#1189086]</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="73efa601b5d45b3c55c7407655de3530c80055742a90501eca897c21fba21df6b4924c7f59fbbb3af8cc4634d7862435e80232572d64aab218ff55e280ea1a87" name="libfuse3-3" arch="x86_64">
  <version epoch="0" ver="3.16.2" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1662638400">- Update to release 3.12.0
  * The max_idle_threads parameter has been deprecated in favor
    of the new max_threads* parameter
  * struct fuse_loop_config is now private and has to be
    constructed using fuse_loop_cfg_create()
  * fuse_session_loop_mt() now accepts struct fuse_loop_config *
    as NULL pointer.
  * fuse_parse_cmdline() now accepts a max_threads option.</changelog>
  <changelog author="jengelh@inai.de" date="1673611200">- Update to release 3.13
  * There is a new low-level API function fuse_session_custom_io
    that allows to implement a daemon with a custom io. This can
    be used to create a daemon that can process incoming FUSE
    requests to other destinations than /dev/fuse.
  * A deadlock when resolving paths in the high-level API has
    been fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1675684800">- Update to release 3.13.1
  * Fixed an issue that resulted in errors when attempting to
    compile against installed libfuse headers (because libc
    symbol versioning support was not detected correctly in this
    case).
- Add 0001-Split-config.h-into-private-and-public-config.patch
  to fix doubly-defined macros and build failure elsewhere.</changelog>
  <changelog author="jengelh@inai.de" date="1676635200">- Update to release 3.14
  * Split config.h into private and public config
- Delete 0001-Split-config.h-into-private-and-public-config.patch
  (merged).</changelog>
  <changelog author="jengelh@inai.de" date="1679832000">- Update to release 3.14.1
  * The extended attribute name passed to the setxattr() handler
    is no longer truncated at the beginning.
  * The additional setattr() flags introduced in 3.14 are no
    longer available for now. They will hopefully be reintroduced
    in the next release.</changelog>
  <changelog author="jsrain@suse.com" date="1684411200">- update the license tag matching the code (LGPL-2.1-only and
  GPL-2.0-only)</changelog>
  <changelog author="jengelh@inai.de" date="1686312000">- Update to release 3.15.0
  * Improved support for some less common systems (32-bit,
    alternative libcs)
  * Unsupported mount options are no longer silently accepted.
  * auto_unmount is now compatible with allow_other.</changelog>
  <changelog author="jengelh@inai.de" date="1688558400">- Update to release 3.15.1
  * Reduce default write size by half</changelog>
  <changelog author="jengelh@inai.de" date="1691496000">- Update to release 3.16.1
  * Readdir kernel cache can be enabled from high-level API.</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 3.16.2
  * Various minor bugfixes and improvements.</changelog>
</package>
<package pkgid="c5df6ed242fdba6e4a571d3366ca77a352526632ef6ad2f852352dc01a50169d81e1801794c4a04d8c54738c921178f9fb5fbcec3e6fc6531cee39f9d799098f" name="libfwupd3" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1757505600">- Update to version 2.0.15:
  + This release adds the following features:
  - Allow child devices to use the parent name as a prefix
  + This release fixes the following bugs:
  - Add newer commands and options for Fish completion
  - Allow installing archives named as .CAB rather than .cab
  - Erase Firehose modem devices correctly
  - Fix Goodix enumeration issues
  - Fix sending firmware reports without --force
  - Fix the FreeBSD build
  - Fix version number of BnR MTD devices
  - Require additional requirements for the default PS5512 devboard
  - Require a full system shutdown for all Micron NVMe updates
  - Use a better name for Elan touchpad and Intel PCH SPI devices
  + This release adds support for the following hardware:
  - Foxconn SDX61 Modem
  - Jabra Evolve2 child devices
  - NVIDIA ConnectX-6, ConnectX-7 and ConnectX-8 NICs</changelog>
  <changelog author="dimstar@opensuse.org" date="1757678400">- Update to version 2.0.16:
  + This release adds the following features:
  - Add a 'search' feature to fwupdtool and fwupdmgr
  + This release fixes the following bugs:
  - Fix missing release locations when loading from artifact
  - Fix remaining issues to make updates on FreeBSD work</changelog>
  <changelog author="schwab@suse.de" date="1759406400">- Fix file list</changelog>
  <changelog author="dimstar@opensuse.org" date="1762344000">- Update to version 2.0.17:
  + This release adds the following features:
  - Add support for client-side phased update deployment
  - Add support for post-quantum signatures
  - Allow clearing the cache dirirectory
  - Allow fwupdtpmevlog to dump the raw eventlog data
  - Build a NVMe GUID derived from the serial number
  - Make fwupdtool extract work with deeply nested images
  - Parse VSS and FTW variable stores from EFI volumes
  - Reintroduce the FreeBSD CI target
  - Support very old versions of UDisks
  + This release fixes the following bugs:
  - Add 'fwupdmgr hwids' by exposing another daemon property
  - Add offline hashes for the Microsoft 20250902 dbx
  - Add the Framework-specific KEK and db hashes
  - Allow updating IFD BIOS region via parent MTD
  - Avoid showing reinstall prompts for composite devices
  - Clean up the fwupdtool lock file in all cases
  - Correctly match the correct historical composite component
  - Do not allow PK or KEK updates when system has a test key installed
  - Do not allow reinstalling when using ONLY_VERSION_UPGRADE
  - Do not require AC power to run the installed tests
  - Do not scan EFI volumes when constructing MTD BIOS devices
  - Ensure REGION is always set for MTD IFD children
  - Ensure SCSI instance IDs are valid ASCII values
  - Fix a critical warning when parsing invalid Jabra firmware
  - Fix an Ilitek parsing crash found when fuzzing
  - Fix an inotify race when refreshing metadata
  - Fix a pending-activation problem with Dell docking stations
  - Fix a potential hang when creating a chunk array with aligned sizes
  - Fix MTD emulation recording for PCI-backed devices
  - Fix the device order when the parent specifies install-parent-first
  - Fix the FLMSTR layout when reading IFD partitions
  - Fix the thunderbolt controller rushing to finalize before onlining retimers
  - Fix writing Intel GPU OptionROM data and OptionROM code
  - Flush stale events to make the Logitech Rallybar more reliable
  - Ignore all the Intel GPU MTD devices
  - Ignore errors when writing the last page of Dell dock firmware
  - Make an error message more specific
  - Modify the Dell dock needs-activation flag after updates are installed
  - Only add one devlink device for each PCI card
  - Parse the FMAP SBOM area as uSWID when required
  - Relax the USI dock DMC child device checks for new firmware
  - Revert back to the flashrom deprecated API as the new API is unusable
  - Rewrite the fwupdmgr manpage to be more useful
  - Use higher delay when update status for Logitech peripheral devices
  + This release adds support for the following hardware:
  - ASUS CX9406 (touch controller)
  - Framework Copilot keyboard
  - Genesys GL352530 and GL352360
  - Huddly C1
  - Lexar and Maxio NVMe SSDs
  - Primax Ryder mouse 2
- Add pkgconfig(libmnl) BuildRequires: new dependency.</changelog>
  <changelog author="mgorse@suse.com" date="1762862400">- Do not try to load i2c_dev kernel module on s390x. S390x has no
  native i2c devices and does not have the module (bsc#1253138).</changelog>
  <changelog author="dimstar@opensuse.org" date="1764590400">- Update to version 2.0.18:
  + This release adds the following features:
  - Add a MOTD message for devices needing reboot after staged updates
  - Create the reboot-required file when a firmware update requires reboot
  - Record the system state for each composite emulation
  - Update USI docking station firmware without requiring a manual replug
  + This release fixes the following bugs:
  - Add a MTD device problem if the Intel SPI BIOS lock is set
  - Allow changing the child name when using PARENT_NAME_PREFIX
  - Allow UpdateCapsule to work on systems that do not support SecureBoot
  - Correctly parse the EFI_CAPSULE_RESULT_VARIABLE_HEADER
  - Fall back to the SMBIOS version for BIOS MTD devices
  - Fix a crash when trying to record an i2c emulation
  - Fixed Huddly upgrade problems with major version changes
  - Fix man page compatibility with apropos and whatis
  - Fix parsing USB BOS descriptors
  - Fix up the x86_64-specific capsule flags when deploying UEFI firmware
  - Improve firmware stream searching speed by a huge amount
  - Only convert the release uint32_t to device version format for UEFI devices
  - Only handle SIGINT in fwupdtool when required
  - Refactor the hypervisor and container detection to be usable from plugins
  - Set PlatformArchitecture as the CPU architecture for RISC-V machines
  - Use a sensible timeout when doing qc-s5gen2 HID requests
  + This release adds support for the following hardware:
  - HP Portable USB-C 4K HDMI Hub
  - Lenovo Legion Go 2 (as a HID device)
  - Synaptics HapticsPad
- Rebase fwupd-bsc1130056-change-shim-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1766145600">- Update to version 2.0.19:
  + This release adds the following features:
  - Add two commands to fwupdtool to calculate and find CRCs
  - Allow systems to use the udev event source without using systemd
  + This release fixes the following bugs:
  - Always show the correct new firmware version in 'fwupdmgr get-history'
  - Fix an integer underflow when parsing a malicious PE file
  - Fix a regression when enumerating the dell-dock status component
  - Fix the fuzzer timeout when parsing a synaptics-rmi SBL container
  - Fix updating the Intel GPU FWDATA section
  - Respect 'fwupdmgr --force' when installing firmware
  + This release adds support for the following hardware:
  - Lenovo Sapphire Folio Keyboard</changelog>
  <changelog author="holden@opensuse.org" date="1767441600">- Actually build and install manpages:
  * These were originally removed because including them would
    have required pulling a nasty set of ghc/pandocs build
    dependencies directly into Ring 1
  * fwupd upstream quickly reverted this change in 1.8.13, but
    the conditional to block building/installing the manpages by
    default was never removed from the specfile
  * This restores the fwupd manpages, which have been sorely
    missing in openSUSE for a couple years</changelog>
  <changelog author="dimstar@opensuse.org" date="1768305600">- Add 0001-Allow-systemd-service-to-access-block-sr-cdrom-devic.patch:
  allow fwupd.service to interact with cdrom (boo#1256507)</changelog>
  <changelog author="dimstar@opensuse.org" date="1772107200">- Update to version 2.0.20:
  + This release adds the following features:
  - Add support for changing AMD UMA carveout size
  - Warn the user if they are using the blocked-firmware
    functionality
  + This release fixes the following bugs:
  - Disable the UEFI plugins on 32bit x86
  - Do not hang when parsing an invalid USB descriptor
  - Do not return an error if the fastboot property is not
    provided
  - Fix a CCGX DMC regression when installing on the HP G5 dock
  - Fix a harmless heap OOB read in AMD kria SOM EEPROM parser
  - Fix a potential fastboot string over-read
  - Fix a regression causing MBIM QDU updates to fail
  - Honor polkit auth for emulation tag modify device
  - Speed up calculating the cab checksum by ~21%
  - Verify the uncompressed size when decompressing CAB files
  + This release adds support for the following hardware:
  - HP Engage One G2 Advanced Hub
  - PixArt PJP274 (Framework Laptop)
  - Several new Jabra GNP devices</changelog>
</package>
<package pkgid="26508e84c734e488579049dc385adaa0e680b8bb20c6ded67fd6f708ca465ddf7f1821c47de8f110e12ac323b0e53177e7b0ca7e9b7b189f5cc75c6690acf169" name="libgbm1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="5bca97a1f0967de0da153b0c69a94adba67a26ee16d34c7dd356069e4064196ce9c043f086e38b767d280d49b4c5d844415c1e16446009e07e718993c0104b12" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="75b17e4097ea5b977c80c359b0b77c5d3a04b2a2c8caea658395a715d101dffdf0a78a66b2dbf536f995be42ca9e06c7eeda5718b716353438e2226b9f995237" name="libgcrypt20" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1710936000">- FIPS: Make sure that Libgcrypt makes use of the built-in Jitter RNG
  for the whole length entropy buffer in FIPS mode. [bsc#1220893]
  * Add libgcrypt-FIPS-jitter-whole-entropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1718884800">- Update to 1.11.0:
  * New and extended interfaces:
  - Add an API for Key Encapsulation Mechanism (KEM). [T6755]
  - Add Streamlined NTRU Prime sntrup761 algorithm. [rCcf9923e1a5]
  - Add Kyber algorithm according to FIPS 203 ipd 2023-08-24. [rC18e5c0d268]
  - Add Classic McEliece algorithm. [rC003367b912]
  - Add One-Step KDF with hash and MAC. [T5964]
  - Add KDF algorithm HKDF of RFC-5869. [T5964]
  - Add KDF algorithm X963KDF for use in CMS. [rC3abac420b3]
  - Add GMAC-SM4 and Poly1305-SM4. [rCd1ccc409d4]
  - Add ARIA block cipher algorithm. [rC316c6d7715]
  - Add explicit FIPS indicators for MD and MAC algorithms. [T6376]
  - Add support for SHAKE as MGF in RSA. [T6557]
  - Add gcry_md_read support for SHAKE algorithms. [T6539]
  - Add gcry_md_hash_buffers_ext function. [T7035]
  - Add cSHAKE hash algorithm. [rC065b3f4e02]
  - Support internal generation of IV for AEAD cipher mode. [T4873]
  * Performance:
  - Add SM3 ARMv8/AArch64/CE assembly implementation. [rCfe891ff4a3]
  - Add SM4 ARMv8/AArch64 assembly implementation. [rCd8825601f1]
  - Add SM4 GFNI/AVX2 and GFI/AVX512 implementation. [rC5095d60af4,rCeaed633c16]
  - Add SM4 ARMv9 SVE CE assembly implementation. [rC2dc2654006]
  - Add PowerPC vector implementation of SM4. [rC0b2da804ee]
  - Optimize ChaCha20 and Poly1305 for PPC P10 LE. [T6006]
  - Add CTR32LE bulk acceleration for AES on PPC. [rC84f2e2d0b5]
  - Add generic bulk acceleration for CTR32LE mode (GCM-SIV) for SM4
    and Camellia. [rCcf956793af]
  - Add GFNI/AVX2 implementation of Camellia. [rC4e6896eb9f]
  - Add AVX2 and AVX512 accelerated implementations for GHASH (GCM)
    and POLYVAL (GCM-SIV). [rCd857e85cb4, rCe6f3600193]
  - Add AVX512 implementation for SHA512. [rC089223aa3b]
  - Add AVX512 implementation for Serpent. [rCce95b6ec35]
  - Add AVX512 implementation for Poly1305 and ChaCha20. [rCcd3ed49770, rC9a63cfd617]
  - Add AVX512 accelerated implementation for SHA3 and Blake2. [rCbeaad75f46,rC909daa700e]
  - Add VAES/AVX2 accelerated i386 implementation for AES. [rC4a42a042bc]
  - Add bulk processing for XTS mode of Camellia and SM4. [rC32b18cdb87, rCaad3381e93]
  - Accelerate XTS and ECB modes for Twofish and Serpent. [rCd078a928f5,rC8a1fe5f78f]
  - Add AArch64 crypto/SHA512 extension implementation for SHA512. [rCe51d3b8330]
  - Add AArch64 crypto-extension implementation for Camellia. [rC898c857206]
  - Accelerate OCB authentication on AMD with AVX2. [rC6b47e85d65]
  * Bug fixes:
  - For PowerPC check for missing optimization level for vector register usage. [T5785]
  - Fix EdDSA secret key check. [T6511]
  - Fix decoding of PKCS#1-v1.5 and OAEP padding. [rC34c2042792]
  - Allow use of PKCS#1-v1.5 with SHA3 algorithms. [T6976]
  - Fix AESWRAP padding length check. [T7130]
  * Other:
  - Allow empty password for Argon2 KDF. [rCa20700c55f]
  - Various constant time operation imporvements.
  - Add "bp256", "bp384", "bp512" aliases for Brainpool curves.
  - Support for the random server has been removed. [T5811]
  - The control code GCRYCTL_ENABLE_M_GUARD is deprecated and not
    supported any more.  Please use valgrind or other tools. [T5822]
  - Logging is now done via the libgpg-error logging functions. [rCab0bdc72c7]
  * Remove patches fixed upstream:
  - libgcrypt-no-deprecated-grep-alias.patch
  - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch
  - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch
  * Rebase patches:
  - libgcrypt-FIPS-jitter-errorcodes.patch
  - libgcrypt-FIPS-jitter-whole-entropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733140800">- Remove unrecognized option: --enable-m-guard</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- Fix redefinition error of 'rol64'. Remove not used rol64()
  definition after removing the built-in jitter rng.
  * Add libgcrypt-rol64-redefinition.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1744545600">- Differentiate use of SHA1 in the service level indicator [jsc#PED-12227]
  * Include upstream SLI revamp and fips certification fixes
  * Add patches:
  - libgcrypt-fips-Introduce-an-internal-API-for-FIPS-service-indicator.patch
  - libgcrypt-fips-Introduce-GCRYCTL_FIPS_SERVICE_INDICATOR-and-the-macro.patch
  - libgcrypt-fips-kdf-Implement-new-FIPS-service-indicator-for-gcry_kdf_derive.patch
  - libgcrypt-fips-md-Implement-new-FIPS-service-indicator-for-gcry_md_hash_.patch
  - libgcrypt-fips-tests-Add-t-digest.patch
  - libgcrypt-fips-Change-the-internal-API-for-new-FIPS-service-indicator.patch
  - libgcrypt-fips-md-Implement-new-FIPS-service-indicator-for-gcry_md_open-API.patch
  - libgcrypt-fips-tests-Add-tests-for-md_open-write-read-close-for-t-digest.patch
  - libgcrypt-fips-mac-Implement-new-FIPS-service-indicator-for-gcry_mac_open.patch
  - libgcrypt-fips-cipher-Implement-new-FIPS-service-indicator-for-cipher_open.patch
  - libgcrypt-tests-fips-Add-gcry_mac_open-tests.patch
  - libgcrypt-tests-fips-Rename-t-fips-service-ind.patch
  - libgcrypt-tests-fips-Move-KDF-tests-to-t-fips-service-ind.patch
  - libgcrypt-tests-fips-Add-gcry_cipher_open-tests.patch
  - libgcrypt-fips-md-gcry_md_copy-should-care-about-FIPS-service-indicator.patch
  - libgcrypt-fips-cipher-Implement-FIPS-service-indicator-for-gcry_pk_hash_-API.patch
  - libgcrypt-fips-Introduce-GCRYCTL_FIPS_REJECT_NON_FIPS.patch
  - libgcrypt-Fix-the-previous-change.patch
  - libgcrypt-fips-Rejection-by-GCRYCTL_FIPS_REJECT_NON_FIPS-not-by-open-flags.patch
  - libgcrypt-fips-cipher-Add-behavior-not-to-reject-but-mark-non-compliant.patch
  - libgcrypt-fips-ecc-Add-rejecting-or-marking-for-gcry_pk_get_curve.patch
  - libgcrypt-tests-Add-more-tests-to-tests-t-fips-service-ind.patch
  - libgcrypt-fips-ecc-Check-DATA-in-gcry_pk_sign-verify-in-FIPS-mode.patch
  - libgcrypt-fips-cipher-Fix-memory-leak-for-gcry_pk_hash_sign.patch
  - libgcrypt-build-Improve-__thread-specifier-check.patch
  - libgcrypt-cipher-Check-and-mark-non-compliant-cipher-modes-in-the-SLI.patch
  - libgcrypt-cipher-Rename-_gcry_cipher_is_mode_fips_compliant.patch
  - libgcrypt-cipher-Don-t-differentiate-GCRY_CIPHER_MODE_CMAC-in-FIPS-mode.patch
  - libgcrypt-cipher-rsa-Mark-reject-SHA1-unknown-with-RSA-signature-generation.patch
  - libgcrypt-md-Fix-gcry_md_algo_info-to-mark-reject-under-FIPS-mode.patch
  - libgcrypt-md-Use-check_digest_algo_spec-in-_gcry_md_selftest.patch
  - libgcrypt-tests-Update-t-fips-service-ind-using-GCRY_MD_SHA256-for-KDF-tests.patch
  - libgcrypt-fips-cipher-Do-the-computation-when-marking-non-compliant.patch
  - libgcrypt-tests-Allow-tests-with-USE_RSA.patch
  - libgcrypt-cipher-Add-KAT-for-non-rfc6979-ECDSA-with-fixed-k.patch
  - libgcrypt-cipher-Differentiate-use-of-label-K-in-the-SLI.patch
  - libgcrypt-cipher-Differentiate-igninvflag-in-the-SLI.patch
  - libgcrypt-cipher-Differentiate-no-blinding-flag-in-the-SLI.patch
  - libgcrypt-fips-cipher-Add-GCRY_FIPS_FLAG_REJECT_PK_FLAGS.patch
  - libgcrypt-cipher-ecc-Fix-for-supplied-K.patch
  - libgcrypt-cipher-visibility-Differentiate-use-of-random-override-in-the-SLI.patch
  - libgcrypt-cipher-fips-Fix-for-random-override.patch
  - libgcrypt-md-Make-SHA-1-non-FIPS-internally-for-1.12-API.patch
  - libgcrypt-fips-Fix-GCRY_FIPS_FLAG_REJECT_MD.patch
  - libgcrypt-doc-Add-about-GCRYCTL_FIPS_SERVICE_INDICATOR.patch
  - libgcrypt-doc-Fix-syntax-error.patch
  * Rebase patches:
  - libgcrypt-FIPS-SLI-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1746532800">- CSHAKE basic regression test failure in s390x [bsc#1242419]
  * Disable SHA3 s390x acceleration for CSHAKE [rC2486d9b5ae01]
  * Add libgcrypt-Disable-SHA3-s390x-acceleration-for-CSHAKE.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1746705600">- Update to 1.11.1: [jsc#PED-12227]
  * Bug fixes:
  - Fix Kyber secret-dependent branch introduced by recent versions of Clang. [rCf765778e82]
  - Fix build regression due to the use of AVX512 in Blake. [T7184]
  - Do not build i386 asm on amd64 and vice versa. [T7220]
  - Fix build regression on armhf with gcc-14. [T7226]
  - Return the proper error code on malloc failure in hex2buffer. [rCc51151f5b0]
  - Fix long standing bug for PRIME % 2 == 0. [rC639b0fca15]
  * Performance:
  - Add AES Vector Permute intrinsics implementation for AArch64. [rC94a63aedbb]
  - Add GHASH AArch64/SIMD intrinsics implementation. [rCfec871fd18]
  - Add RISC-V vector permute AES. [rCb24ebd6163]
  - Add GHASH RISC-V Zbb+Zbc implementation. [rC0f1fec12b0]
  - Add ChaCha20 RISC-V vector intrinsics implementation. [rC8dbee93ac2]
  - Add SHA3 acceleration for RISC-V Zbb extension. [rC1a660068ba]
  * Other:
  - Add CET support for i386 and amd64 assembly. [T7220]
  - Add PAC/BTI support for AArch64 asm. [T7220]
  - Apply changes to Kyber from upstream for final FIPS 203. [rCcc95c36e7f]
  - Introduce an internal API for a revampled FIPS service indicator. [T7340]
  - Several improvements for constant time operation by the introduction of
    Least Leak Intended (LLI) variants of internal functions. [T7519,T7490]
  * Add libgcrypt-1.11.1-public-SLI-API.patch
  * Rebase patches:
  - libgcrypt-FIPS-SLI-hash-mac.patch
  - libgcrypt-FIPS-SLI-pk.patch
  - libgcrypt-FIPS-jitter-standalone.patch
  * Remove patches:
  - libgcrypt-fips-Introduce-an-internal-API-for-FIPS-service-indicator.patch
  - libgcrypt-fips-Introduce-GCRYCTL_FIPS_SERVICE_INDICATOR-and-the-macro.patch
  - libgcrypt-fips-kdf-Implement-new-FIPS-service-indicator-for-gcry_kdf_derive.patch
  - libgcrypt-fips-md-Implement-new-FIPS-service-indicator-for-gcry_md_hash_.patch
  - libgcrypt-fips-tests-Add-t-digest.patch
  - libgcrypt-fips-Change-the-internal-API-for-new-FIPS-service-indicator.patch
  - libgcrypt-fips-md-Implement-new-FIPS-service-indicator-for-gcry_md_open-API.patch
  - libgcrypt-fips-tests-Add-tests-for-md_open-write-read-close-for-t-digest.patch
  - libgcrypt-fips-mac-Implement-new-FIPS-service-indicator-for-gcry_mac_open.patch
  - libgcrypt-fips-cipher-Implement-new-FIPS-service-indicator-for-cipher_open.patch
  - libgcrypt-tests-fips-Add-gcry_mac_open-tests.patch
  - libgcrypt-tests-fips-Rename-t-fips-service-ind.patch
  - libgcrypt-tests-fips-Move-KDF-tests-to-t-fips-service-ind.patch
  - libgcrypt-tests-fips-Add-gcry_cipher_open-tests.patch
  - libgcrypt-fips-md-gcry_md_copy-should-care-about-FIPS-service-indicator.patch
  - libgcrypt-fips-cipher-Implement-FIPS-service-indicator-for-gcry_pk_hash_-API.patch
  - libgcrypt-fips-Introduce-GCRYCTL_FIPS_REJECT_NON_FIPS.patch
  - libgcrypt-Fix-the-previous-change.patch
  - libgcrypt-fips-Rejection-by-GCRYCTL_FIPS_REJECT_NON_FIPS-not-by-open-flags.patch
  - libgcrypt-fips-cipher-Add-behavior-not-to-reject-but-mark-non-compliant.patch
  - libgcrypt-fips-ecc-Add-rejecting-or-marking-for-gcry_pk_get_curve.patch
  - libgcrypt-tests-Add-more-tests-to-tests-t-fips-service-ind.patch
  - libgcrypt-fips-ecc-Check-DATA-in-gcry_pk_sign-verify-in-FIPS-mode.patch
  - libgcrypt-fips-cipher-Fix-memory-leak-for-gcry_pk_hash_sign.patch
  - libgcrypt-build-Improve-__thread-specifier-check.patch
  - libgcrypt-cipher-Check-and-mark-non-compliant-cipher-modes-in-the-SLI.patch
  - libgcrypt-cipher-Rename-_gcry_cipher_is_mode_fips_compliant.patch
  - libgcrypt-cipher-Don-t-differentiate-GCRY_CIPHER_MODE_CMAC-in-FIPS-mode.patch
  - libgcrypt-cipher-rsa-Mark-reject-SHA1-unknown-with-RSA-signature-generation.patch
  - libgcrypt-md-Fix-gcry_md_algo_info-to-mark-reject-under-FIPS-mode.patch
  - libgcrypt-md-Use-check_digest_algo_spec-in-_gcry_md_selftest.patch
  - libgcrypt-tests-Update-t-fips-service-ind-using-GCRY_MD_SHA256-for-KDF-tests.patch
  - libgcrypt-fips-cipher-Do-the-computation-when-marking-non-compliant.patch
  - libgcrypt-tests-Allow-tests-with-USE_RSA.patch
  - libgcrypt-cipher-Add-KAT-for-non-rfc6979-ECDSA-with-fixed-k.patch
  - libgcrypt-cipher-Differentiate-use-of-label-K-in-the-SLI.patch
  - libgcrypt-cipher-Differentiate-igninvflag-in-the-SLI.patch
  - libgcrypt-cipher-Differentiate-no-blinding-flag-in-the-SLI.patch
  - libgcrypt-fips-cipher-Add-GCRY_FIPS_FLAG_REJECT_PK_FLAGS.patch
  - libgcrypt-cipher-ecc-Fix-for-supplied-K.patch
  - libgcrypt-cipher-visibility-Differentiate-use-of-random-override-in-the-SLI.patch
  - libgcrypt-cipher-fips-Fix-for-random-override.patch
  - libgcrypt-md-Make-SHA-1-non-FIPS-internally-for-1.12-API.patch
  - libgcrypt-fips-Fix-GCRY_FIPS_FLAG_REJECT_MD.patch
  - libgcrypt-doc-Add-about-GCRYCTL_FIPS_SERVICE_INDICATOR.patch
  - libgcrypt-doc-Fix-syntax-error.patch
  - libgcrypt-Disable-SHA3-s390x-acceleration-for-CSHAKE.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1749470400">- Security fix [bsc#1221107, CVE-2024-2236]
  * Add --enable-marvin-workaround to spec to enable workaround
  * Fix  timing based side-channel in RSA implementation ( Marvin attack )
  * Add libgcrypt-CVE-2024-2236.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1770033600">- Update to 1.12.0 (jsc#PED-15059)
  * New and extended interfaces:
  - Allow access to the FIPS service indicator via the new
    GCRYCTL_FIPS_SERVICE_INDICATOR control code.
  - Make SHA-1 non-FIPS internally for the 1.12 API
  - Add Dilithium (ML-DSA) support
  - Support optional random-override and support byte string data
  * Bug fixes:
  - Use secure MPI in _gcry_mpi_assign_limb_space.
  - Use CSIDL_COMMON_APPDATA instead of /etc on Windows.
  - Apply a Kyber patch from upstream.
  - Fix an edge case in Jent initialization.
  - mceliece6688128f: Fix stack overflow crash on win64/wine
  * Performance:
  - Many performance improvements, new AVX512 implementations for modern CPUs.
  - Add RISC-V Zbb+Zbc implementation of CRC.
  - Add RISC-V vector cryptography implementation of GHASH, AES, SHA256 and SHA512
  - Add AVX2 and AVX512 code paths to improve CRC.
  For a full changelog, see:
  https://dev.gnupg.org/source/libgcrypt/history/master/;libgcrypt-1.12.0
  * Dropped libgcrypt-1.11.1-public-SLI-API.patch - applied upstream
  * Rebased libgcrypt-CVE-2024-2236.patch
  * Rebased libgcrypt-FIPS-SLI-hash-mac.patch
  * Rebased libgcrypt-FIPS-SLI-kdf-leylength.patch
  * Rebased libgcrypt-FIPS-SLI-pk.patch
  * Rebased libgcrypt-FIPS-jitter-standalone.patch
  * Rebased libgcrypt-FIPS-rndjent_poll.patch
  * Rebased libgcrypt-nobetasuffix.patch
  * Rebased libgcrypt-rol64-redefinition.patch
  * Added libgcrypt-1.12.0-ec_regression.patch
  * libgcrypt 1.12.0: gcry_mpi_ec_curve_point corrupts point</changelog>
  <changelog author="angel.yankov@suse.com" date="1771588800">- Update to 1.12.1 (jsc#PED-15059)
  * Various fixes
  - Drop libgcrypt-1.12.0-ec_regression.patch as it's upstreamed</changelog>
</package>
<package pkgid="073e863d2a6c5c35e64db606bb96bbe456630c01f3bd090ea273d89a6a11cfccdfba87b7b1aad35a29c04953e592e3c50e5b31bf28e073c1a32cb8afd2a09e27" name="libgdbm6" arch="x86_64">
  <version epoch="0" ver="1.24" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1540987200">- update to 1.18.1:
  * Fix debian bug 910911: This restores backward compatibility with
    databases created by version 1.8 (and some later versions, with
    mmapped I/O disabled).</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- added patches
  Build with -no-common, [bsc#1160872]
  + gdbm-no-common.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582372800">- No longer recommend -lang: supplements are in use. Also add a
  explicit %%{name] = %%{version} Provides to aid supplements to do
  the right thing. We will lose the lang package Recommends for the
  compat package, but normally nobody will have only the compat
  package installed without the current package.</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 1.19
  * Pre-read the memory mapped regions on systems that support it.
  This speeds up operations on big databases.
  * gdbmtool: tagged initialization of structured data
  Initializers for structured data can be given in tagged form, e.g.:
    store somekey { status=2, id={a,u,x}, name="foo" }
  * Bugfixes:
  * * Preserve locking type during database reorganization
- modified patches
  % gdbm-no-build-date.patch (refreshed)
- deleted patches
  - gdbm-no-common.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1628510400">- version update to 1.20
  * New bucket cache
    The bucket cache support has been rewritten from scratch.  The new
    bucket cache code provides for significant speed up of search
    operations.
  * Change mmap prereading strategy
    Pre-reading of the memory mapper regions, introduced in version 1.19
    can be advantageous only when doing intensive look-ups on a read-only
    database.  It degrades performance otherwise, especially if doing
    multiple inserts.  Therefore, this version introduces a new flag
    to gdbm_open: GDBM_PREREAD.  When given, it enables pre-reading of
    memory mapped regions.
- modified patches
  % gdbm-no-build-date.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 1.22
  * Fix file header validation
  * Fix key verification in sequential access
  * Fix testing with DejaGNU 1.6.3
  * Fix stack overflow in print_usage
  * Fix a leak of avail entry on pushing a new avail block
  * New gdbmtool variables: errorexit, errormask, trace, timing
  * etc. see CHANGES
- modified patches
  % gdbm-no-build-date.patch (refreshed)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644148800">- update to 1.23:
  * Bucket cache switched from balanced tree to hash table
  * Speed up flushing the changed buckets on disk
  * New option codes for gdbm_setopt
  * Enable or disable automatic cache adjustment
- remove obsolete texinfo packaging macros</changelog>
  <changelog author="danilo.spinella@suse.com" date="1691496000">- Fix bsc#1209583, gdbm_load and gdbm_dump receive a SEGFAULT if
  run without arguments
  bsc1209583.patch</changelog>
  <changelog author="kukuk@suse.com" date="1701864000">- libgdbm_compat4: Fix libgdbm version of Conflicts [bsc#1217727]</changelog>
  <changelog author="pgajdos@suse.com" date="1725969600">- version update to 1.24
  * New gdbm_load option: --update
  * Fix semantics of gdbm_load -r
  * Use getline in gdbmtool shell.
  * New function: gdbm_load_from_file_ext
  * Bugfixes
  * * Fix binary dump format for key and/or data of zero size.
    (see https://puszcza.gnu.org.ua/bugs/?565)
  * * Fix location tracking and recover command in gdbtool.
    (see https://puszcza.gnu.org.ua/bugs/?566)
  * * Fix possible buffer underflow in gdbmload.
  * * Ensure any padding bytes in avail_elem structure are filled with 0.
    (fixes https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031276)
  * * Improve the documentation.
- modified patches
  % gdbm-no-build-date.patch (refreshed)
- deleted patches
  - bsc1209583.patch (upstreamed)</changelog>
</package>
<package pkgid="dd652c62e908db387004fc3337142af7510d25197a0c0faaa15f3aa98c1403a142d77556ddb25a3d961d17a738642606a7651fc4b6d8e0b682f92a9049887194" name="libgdbm_compat4" arch="x86_64">
  <version epoch="0" ver="1.24" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1540987200">- update to 1.18.1:
  * Fix debian bug 910911: This restores backward compatibility with
    databases created by version 1.8 (and some later versions, with
    mmapped I/O disabled).</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- added patches
  Build with -no-common, [bsc#1160872]
  + gdbm-no-common.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582372800">- No longer recommend -lang: supplements are in use. Also add a
  explicit %%{name] = %%{version} Provides to aid supplements to do
  the right thing. We will lose the lang package Recommends for the
  compat package, but normally nobody will have only the compat
  package installed without the current package.</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 1.19
  * Pre-read the memory mapped regions on systems that support it.
  This speeds up operations on big databases.
  * gdbmtool: tagged initialization of structured data
  Initializers for structured data can be given in tagged form, e.g.:
    store somekey { status=2, id={a,u,x}, name="foo" }
  * Bugfixes:
  * * Preserve locking type during database reorganization
- modified patches
  % gdbm-no-build-date.patch (refreshed)
- deleted patches
  - gdbm-no-common.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1628510400">- version update to 1.20
  * New bucket cache
    The bucket cache support has been rewritten from scratch.  The new
    bucket cache code provides for significant speed up of search
    operations.
  * Change mmap prereading strategy
    Pre-reading of the memory mapper regions, introduced in version 1.19
    can be advantageous only when doing intensive look-ups on a read-only
    database.  It degrades performance otherwise, especially if doing
    multiple inserts.  Therefore, this version introduces a new flag
    to gdbm_open: GDBM_PREREAD.  When given, it enables pre-reading of
    memory mapped regions.
- modified patches
  % gdbm-no-build-date.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 1.22
  * Fix file header validation
  * Fix key verification in sequential access
  * Fix testing with DejaGNU 1.6.3
  * Fix stack overflow in print_usage
  * Fix a leak of avail entry on pushing a new avail block
  * New gdbmtool variables: errorexit, errormask, trace, timing
  * etc. see CHANGES
- modified patches
  % gdbm-no-build-date.patch (refreshed)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644148800">- update to 1.23:
  * Bucket cache switched from balanced tree to hash table
  * Speed up flushing the changed buckets on disk
  * New option codes for gdbm_setopt
  * Enable or disable automatic cache adjustment
- remove obsolete texinfo packaging macros</changelog>
  <changelog author="danilo.spinella@suse.com" date="1691496000">- Fix bsc#1209583, gdbm_load and gdbm_dump receive a SEGFAULT if
  run without arguments
  bsc1209583.patch</changelog>
  <changelog author="kukuk@suse.com" date="1701864000">- libgdbm_compat4: Fix libgdbm version of Conflicts [bsc#1217727]</changelog>
  <changelog author="pgajdos@suse.com" date="1725969600">- version update to 1.24
  * New gdbm_load option: --update
  * Fix semantics of gdbm_load -r
  * Use getline in gdbmtool shell.
  * New function: gdbm_load_from_file_ext
  * Bugfixes
  * * Fix binary dump format for key and/or data of zero size.
    (see https://puszcza.gnu.org.ua/bugs/?565)
  * * Fix location tracking and recover command in gdbtool.
    (see https://puszcza.gnu.org.ua/bugs/?566)
  * * Fix possible buffer underflow in gdbmload.
  * * Ensure any padding bytes in avail_elem structure are filled with 0.
    (fixes https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031276)
  * * Improve the documentation.
- modified patches
  % gdbm-no-build-date.patch (refreshed)
- deleted patches
  - bsc1209583.patch (upstreamed)</changelog>
</package>
<package pkgid="090e22cc11c5e3726e0787c314fc112fbad1d19f0b56cf98d6cb9921261fd6a0c9531372a1fb7ccc1c7006db73d357d79bd0fdc0b0f410e245888fefd8277c32" name="libgdk_pixbuf-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
  <changelog author="mgorse@suse.com" date="1775736000">- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).</changelog>
</package>
<package pkgid="e1801b8c69494c17cf7db29a3ef62bc0cc35c8a28a58a27315019622306a8a2bb4d9b94e4c68a4163cf27e47e5b480a1f0e866c4494b0404691f69a4f0ff1df2" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.84.4" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1740052800">- Update to version 2.83.4 (Unstable):
  + Fix Python shebang paths so they work on Windows again
  + Fix refcounting semantics of
    `g_dbus_connection_register_object_with_closures()` by adding a
    replacement API
  + Support static vfuncs in GIRepository
  + Add support for QNX8.0
  + Add a soft dependency on C11 — if your toolchain doesn’t
    support C11, you have six months to tell us before this becomes
    a hard dependency
  + Port from `net.hadess.PowerProfiles` to
    `org.freedesktop.UPower.PowerProfiles` for
    `GPowerProfileMonitorDBus`
  + Various bugs fixed.
  + Updated translations.
  + gdatetime: Fix integer overflow when parsing very long ISO8601 inputs.
  (CVE-2025-3360, bsc#1240897)
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.83.5 (Unstable):
  + A few improvements for when GLib is used as a subproject
  + Fix out-of-order parameters in a marshaller generated by
    `gdbus-codegen`
  + Various bugs fixed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.84.0:
  + Bugs fixed:
  - tests: Minor fixes to reference and stream-rw_all tests
  - gdebugcontrollerdbus: Fix a minor typo in a code example in
    the docs
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743681600">- Update to version 2.84.1:
  + Fix test failure when building against gobject-introspection
    ≥1.83.4
  + Bugs fixed:
  - 2.84.0 build failure on Linux:
    ../gio/gnetworkmonitornetlink.c:47:10: fatal error:
    netlink/netlink_route.h: No such file or directory
  - test failure with gobject-introspection 1.83.4: warning:
    element doc:format from state 3 is unknown, ignoring
  - gio/trash does not handle special characters well
  - `g_cancellable_connect()` documentation incorrect
  - g_cancellable_connect(): is it safe to unref cancellable from
    callback?
  - Crash with some registry key values in GWin32AppInfo
  - Memory sanitizer fixes
  - gobject: Be consistent in using atomic logic to handle the
    GParamSpecPool
  - gsettings: Port docs to gi-docgen format, add missing
    annotations and make various improvements
  - tests: Don't install runner scripts without installed_tests
  - docs: Document GSignalFlags members added after 2.0
  - tests: Add a test for g_object_freeze_notify() being called
    too often
  - gfileinfo: Slightly expand docs for
    g_file_info_get_attribute_as_string()
  - gi: Dynamically set doc-format
  - tests: Various fixes to create temporary files in /tmp rather
    than the build directory
  - gdbusnameowning: Convert docs to gi-docgen linking syntax
  - giounix-private: Fix macro for checking for epoll_create1()
  - Fix LGPL in header
  - gutils: make documentation of g_set_prgname() clearer
  - docs: Add some detail
  - gspawn-win32: Fix potential integer overflows in argv
    handling
  - gvarianttype: Improve docs on type validation
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747828800">- Update to version 2.84.2:
  + Bugs fixed:
  - gclosure: fix ATOMIC_CHANGE_FIELD to read vint atomically
  - Windows: fix wrong typelib path
  - gstring: carefully handle gssize parameters
  - Update macOS job for new CI runner
  - gdate: Call tzset before localtime_r
  - Backport -Wsign-conversion fixes for g_get_locale_variants()
  - glocalfile: Disable faccessat()-based query_exists on Android</changelog>
  <changelog author="dimstar@opensuse.org" date="1749816000">- Update to version 2.84.3:
  + Bug fixed: gstring: Fix overflow check when expanding the
    string (CVE-2025-6052, boo#1244596).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1754654400">- Update to version 2.84.4 (bsc#1249055):
  + Bugs fixed:
  - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib
    through glib/gfileutils.c via get_tmp_file()
  - GFile leak in g_local_file_set_display_name during error
    handling
  - Incorrect output parameter handling in closure helper of
    g_settings_bind_with_mapping_closures
  - gfileutils: fix computation of temporary file name
  - Fix GFile leak in  g_local_file_set_display_name()
  - gthreadpool: Catch pool_spawner creation failure
  - gio/filenamecompleter: Fix leaks
  - gfilenamecompleter: Fix g_object_unref() of undefined value</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="12dcdaf7e65ece20d109cdd1daff7efc40d2bec37c28b96e487d3941180a961638ff1f9402d4633c3a16bde799d41088a2bd9a867bdb143ddf3dd9a5a2c2ccda" name="libgirepository-1_0-1" arch="x86_64">
  <version epoch="0" ver="1.84.0" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1714392000">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725364800">- Update to version 1.81.2:
  * Add strict mode warning for enumeration members starting with a
    number
  * Set deprecation message for signals and properties
  * Fix HTML definition lists in the documentation generator
  * Catch up with Python-Markdown 3.4 extension API changes
  * Propagate scanner errors
  * Do not break when parsing ARM SVE types in system headers
  * Pair pointer GTypes with their opaque structure
  * Fix property accessor pairing
  * Handle pid_t, etc. as their own top-level types
  * Add warning for closure annotation
  * Warn on invalid callback annotations
  * Make sure to set a GError with an invalid introspect-dump
    string
  * Move gobject-introspection tests to a submodule
  * Remove dependency on distutils.msvccompiler
  * Be more thorough about applying -Wl,--no-as-needed option
  * Documentation and build fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725364801">- Update to version 1.81.4:
  + Add rpath when building the type dumper on macOS
  + Fix regression in the installation of GIRepository-2.0.typelib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726228800">- Update to version 1.82.0:
  + Require GLib 2.82.0</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- Add python3-setuptools Requires: needed for python 3.13 which
  dropped distutils; setuptools now provides it.</changelog>
  <changelog author="adrian@suse.de" date="1733486400">- Fix dependency generation for loongarch64.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740830400">- Update to version 1.83.2:
  + Improve GType inspection helper
  + Parse C11's _Alignas
  + Respect custom Python binary
  + Fix build on the latest Windows SDK
  + Small performance improvement when looking up a signal
    information
  + Use standard imports in the JavaScript templates for
    g-ir-doctool
  + Ensure that enumeration members can be marked as deprecated
  + Add more test coverage for structured union types
  + Add an option to skip tests when building
  + Fix various MSVC compatibility issues
  + Add support for "static" virtual functions
  + Allow specifying the format of the documentation inside doc
    blocks
  + Handle C99's _Complex
  + Consider UCRT64 and CLANG64 as mingw32 compilers
  + Handle static NSString syntax
  + Add instance parameter checks to strict validation
  + Documentation improvements
  + Add documentation to the RelaxNG schema
  + tests: Fix compatibility with Python 3.5
  + gir: Include C header in cairo gir file
  + tests: Add functions using flat struct arrays</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741435200">- Update to version 1.83.4:
  + Revert support for "static" virtual functions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742040000">- Update to version 1.84.0:
  + No changes, stable version bump only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1749124800">- Add explicit python3-setuptools BuildRequires: this was already
  used in the past, but was pulled in by python3-Mako. As meson
  explicitly tests for it, it's our responsibility it's there.</changelog>
</package>
<package pkgid="cdea50d81f116ebf8c591ee829fa8ffb55b88f601a34fb06fdba69da0e5c9f3c3d99c02c229e2e5542dd0b66a81494536e55faab326835eaf1bc2f175c9f4a60" name="libgirepository-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.84.4" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1740052800">- Update to version 2.83.4 (Unstable):
  + Fix Python shebang paths so they work on Windows again
  + Fix refcounting semantics of
    `g_dbus_connection_register_object_with_closures()` by adding a
    replacement API
  + Support static vfuncs in GIRepository
  + Add support for QNX8.0
  + Add a soft dependency on C11 — if your toolchain doesn’t
    support C11, you have six months to tell us before this becomes
    a hard dependency
  + Port from `net.hadess.PowerProfiles` to
    `org.freedesktop.UPower.PowerProfiles` for
    `GPowerProfileMonitorDBus`
  + Various bugs fixed.
  + Updated translations.
  + gdatetime: Fix integer overflow when parsing very long ISO8601 inputs.
  (CVE-2025-3360, bsc#1240897)
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.83.5 (Unstable):
  + A few improvements for when GLib is used as a subproject
  + Fix out-of-order parameters in a marshaller generated by
    `gdbus-codegen`
  + Various bugs fixed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.84.0:
  + Bugs fixed:
  - tests: Minor fixes to reference and stream-rw_all tests
  - gdebugcontrollerdbus: Fix a minor typo in a code example in
    the docs
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743681600">- Update to version 2.84.1:
  + Fix test failure when building against gobject-introspection
    ≥1.83.4
  + Bugs fixed:
  - 2.84.0 build failure on Linux:
    ../gio/gnetworkmonitornetlink.c:47:10: fatal error:
    netlink/netlink_route.h: No such file or directory
  - test failure with gobject-introspection 1.83.4: warning:
    element doc:format from state 3 is unknown, ignoring
  - gio/trash does not handle special characters well
  - `g_cancellable_connect()` documentation incorrect
  - g_cancellable_connect(): is it safe to unref cancellable from
    callback?
  - Crash with some registry key values in GWin32AppInfo
  - Memory sanitizer fixes
  - gobject: Be consistent in using atomic logic to handle the
    GParamSpecPool
  - gsettings: Port docs to gi-docgen format, add missing
    annotations and make various improvements
  - tests: Don't install runner scripts without installed_tests
  - docs: Document GSignalFlags members added after 2.0
  - tests: Add a test for g_object_freeze_notify() being called
    too often
  - gfileinfo: Slightly expand docs for
    g_file_info_get_attribute_as_string()
  - gi: Dynamically set doc-format
  - tests: Various fixes to create temporary files in /tmp rather
    than the build directory
  - gdbusnameowning: Convert docs to gi-docgen linking syntax
  - giounix-private: Fix macro for checking for epoll_create1()
  - Fix LGPL in header
  - gutils: make documentation of g_set_prgname() clearer
  - docs: Add some detail
  - gspawn-win32: Fix potential integer overflows in argv
    handling
  - gvarianttype: Improve docs on type validation
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747828800">- Update to version 2.84.2:
  + Bugs fixed:
  - gclosure: fix ATOMIC_CHANGE_FIELD to read vint atomically
  - Windows: fix wrong typelib path
  - gstring: carefully handle gssize parameters
  - Update macOS job for new CI runner
  - gdate: Call tzset before localtime_r
  - Backport -Wsign-conversion fixes for g_get_locale_variants()
  - glocalfile: Disable faccessat()-based query_exists on Android</changelog>
  <changelog author="dimstar@opensuse.org" date="1749816000">- Update to version 2.84.3:
  + Bug fixed: gstring: Fix overflow check when expanding the
    string (CVE-2025-6052, boo#1244596).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1754654400">- Update to version 2.84.4 (bsc#1249055):
  + Bugs fixed:
  - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib
    through glib/gfileutils.c via get_tmp_file()
  - GFile leak in g_local_file_set_display_name during error
    handling
  - Incorrect output parameter handling in closure helper of
    g_settings_bind_with_mapping_closures
  - gfileutils: fix computation of temporary file name
  - Fix GFile leak in  g_local_file_set_display_name()
  - gthreadpool: Catch pool_spawner creation failure
  - gio/filenamecompleter: Fix leaks
  - gfilenamecompleter: Fix g_object_unref() of undefined value</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="6b474810448379fb1c89c6da499944a35e864493e8b9babf283ac9a0fdd2a4ac4737b636e9364a4d82336166eb011342c18cf7f99e36a48507929dad31b5f077" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.84.4" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1740052800">- Update to version 2.83.4 (Unstable):
  + Fix Python shebang paths so they work on Windows again
  + Fix refcounting semantics of
    `g_dbus_connection_register_object_with_closures()` by adding a
    replacement API
  + Support static vfuncs in GIRepository
  + Add support for QNX8.0
  + Add a soft dependency on C11 — if your toolchain doesn’t
    support C11, you have six months to tell us before this becomes
    a hard dependency
  + Port from `net.hadess.PowerProfiles` to
    `org.freedesktop.UPower.PowerProfiles` for
    `GPowerProfileMonitorDBus`
  + Various bugs fixed.
  + Updated translations.
  + gdatetime: Fix integer overflow when parsing very long ISO8601 inputs.
  (CVE-2025-3360, bsc#1240897)
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.83.5 (Unstable):
  + A few improvements for when GLib is used as a subproject
  + Fix out-of-order parameters in a marshaller generated by
    `gdbus-codegen`
  + Various bugs fixed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.84.0:
  + Bugs fixed:
  - tests: Minor fixes to reference and stream-rw_all tests
  - gdebugcontrollerdbus: Fix a minor typo in a code example in
    the docs
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743681600">- Update to version 2.84.1:
  + Fix test failure when building against gobject-introspection
    ≥1.83.4
  + Bugs fixed:
  - 2.84.0 build failure on Linux:
    ../gio/gnetworkmonitornetlink.c:47:10: fatal error:
    netlink/netlink_route.h: No such file or directory
  - test failure with gobject-introspection 1.83.4: warning:
    element doc:format from state 3 is unknown, ignoring
  - gio/trash does not handle special characters well
  - `g_cancellable_connect()` documentation incorrect
  - g_cancellable_connect(): is it safe to unref cancellable from
    callback?
  - Crash with some registry key values in GWin32AppInfo
  - Memory sanitizer fixes
  - gobject: Be consistent in using atomic logic to handle the
    GParamSpecPool
  - gsettings: Port docs to gi-docgen format, add missing
    annotations and make various improvements
  - tests: Don't install runner scripts without installed_tests
  - docs: Document GSignalFlags members added after 2.0
  - tests: Add a test for g_object_freeze_notify() being called
    too often
  - gfileinfo: Slightly expand docs for
    g_file_info_get_attribute_as_string()
  - gi: Dynamically set doc-format
  - tests: Various fixes to create temporary files in /tmp rather
    than the build directory
  - gdbusnameowning: Convert docs to gi-docgen linking syntax
  - giounix-private: Fix macro for checking for epoll_create1()
  - Fix LGPL in header
  - gutils: make documentation of g_set_prgname() clearer
  - docs: Add some detail
  - gspawn-win32: Fix potential integer overflows in argv
    handling
  - gvarianttype: Improve docs on type validation
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747828800">- Update to version 2.84.2:
  + Bugs fixed:
  - gclosure: fix ATOMIC_CHANGE_FIELD to read vint atomically
  - Windows: fix wrong typelib path
  - gstring: carefully handle gssize parameters
  - Update macOS job for new CI runner
  - gdate: Call tzset before localtime_r
  - Backport -Wsign-conversion fixes for g_get_locale_variants()
  - glocalfile: Disable faccessat()-based query_exists on Android</changelog>
  <changelog author="dimstar@opensuse.org" date="1749816000">- Update to version 2.84.3:
  + Bug fixed: gstring: Fix overflow check when expanding the
    string (CVE-2025-6052, boo#1244596).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1754654400">- Update to version 2.84.4 (bsc#1249055):
  + Bugs fixed:
  - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib
    through glib/gfileutils.c via get_tmp_file()
  - GFile leak in g_local_file_set_display_name during error
    handling
  - Incorrect output parameter handling in closure helper of
    g_settings_bind_with_mapping_closures
  - gfileutils: fix computation of temporary file name
  - Fix GFile leak in  g_local_file_set_display_name()
  - gthreadpool: Catch pool_spawner creation failure
  - gio/filenamecompleter: Fix leaks
  - gfilenamecompleter: Fix g_object_unref() of undefined value</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="d63d2c5ff36c12d0366b58674572ee9aeb3959c7f0746db4cf72edb90af3564e9c7bd84a04a6d25569c63c465a54ff1b45b281b1169b6871a3793cd3de9e5969" name="libglvnd" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="160000.3.2"/>
  <changelog author="sndirsch@suse.com" date="1634731200">- libglvnd.rpmlintrc
  * workaround for future buildcheck (boo#1191763)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637150400">- Disable asm on aarch64 Tumbleweed due to issue with BTI - boo#1188928</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 1.4.0:
  * tests cleanups
  * Update bin/symbols-check.py from mesa/mesa@6f854145
  * Remove extra paragraph from license text.
  * Add one more missing dep_x11_headers
  * Update uthash to v2.3.0
  * EGL: Add support for eglQueryDisplayAttribKHR and NV.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1642766400">- Re-enable asm on aarch64
- Add patch to fix run with BTI enabled on aarch64:
  * libglvnd-add-bti.patch - boo#1188928</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1645704000">- Update libglvnd-add-bti.patch from latest upstream submission</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- provide/obsolete Mesa-libGLESv1_CM1 and Mesa-libGLESv2-2 packages
  (bsc#1196576)</changelog>
  <changelog author="sndirsch@suse.com" date="1657800000">- let libglvnd require Mesa-dri so GL drivers are available on
  Wayland-only desktop installations (boo#1201474)</changelog>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 1.5.0:
  * Add BTI landing pads for aarch64
  * Set current thread state to NULL in teardown
  * Moving setspecific to before DestroyThreadState
  * Fix a memory leak in libGLdispatch
  * Use assembly stubs on armv6
- drop libglvnd-add-bti.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 1.6.0:
  * Read gl.symbols when generating stubs for libGL.so
  * Update GL headers and XML files
  * Add support for loongarch64
  * GLX: Fix assembly stubs for x32
  * Fix pthreads lookup on FreeBSD</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697025600">- Update to 1.7.0:
  * meson.build: error out on unsupported OSes
  * Update bin/symbols-check.py from mesa/mesa@9d42e31b
  * EGL/libeglcurrent: fix crash on library unload
  * HGL: add Haiku libGL.so implementation based on EGL
  * symbols-check: Add Haiku platform symbols
  * tests/egl: Fix LIBRARY_PATH on Haiku</changelog>
</package>
<package pkgid="c8117bfb888d7b1dc347c12d60a8de9434cbf06c7de5d934c20ff52810282665912a55f57433261100a4fe6d5134ef955718c498aa80bb4c7ef600e65c775d62" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.84.4" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1740052800">- Update to version 2.83.4 (Unstable):
  + Fix Python shebang paths so they work on Windows again
  + Fix refcounting semantics of
    `g_dbus_connection_register_object_with_closures()` by adding a
    replacement API
  + Support static vfuncs in GIRepository
  + Add support for QNX8.0
  + Add a soft dependency on C11 — if your toolchain doesn’t
    support C11, you have six months to tell us before this becomes
    a hard dependency
  + Port from `net.hadess.PowerProfiles` to
    `org.freedesktop.UPower.PowerProfiles` for
    `GPowerProfileMonitorDBus`
  + Various bugs fixed.
  + Updated translations.
  + gdatetime: Fix integer overflow when parsing very long ISO8601 inputs.
  (CVE-2025-3360, bsc#1240897)
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.83.5 (Unstable):
  + A few improvements for when GLib is used as a subproject
  + Fix out-of-order parameters in a marshaller generated by
    `gdbus-codegen`
  + Various bugs fixed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.84.0:
  + Bugs fixed:
  - tests: Minor fixes to reference and stream-rw_all tests
  - gdebugcontrollerdbus: Fix a minor typo in a code example in
    the docs
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743681600">- Update to version 2.84.1:
  + Fix test failure when building against gobject-introspection
    ≥1.83.4
  + Bugs fixed:
  - 2.84.0 build failure on Linux:
    ../gio/gnetworkmonitornetlink.c:47:10: fatal error:
    netlink/netlink_route.h: No such file or directory
  - test failure with gobject-introspection 1.83.4: warning:
    element doc:format from state 3 is unknown, ignoring
  - gio/trash does not handle special characters well
  - `g_cancellable_connect()` documentation incorrect
  - g_cancellable_connect(): is it safe to unref cancellable from
    callback?
  - Crash with some registry key values in GWin32AppInfo
  - Memory sanitizer fixes
  - gobject: Be consistent in using atomic logic to handle the
    GParamSpecPool
  - gsettings: Port docs to gi-docgen format, add missing
    annotations and make various improvements
  - tests: Don't install runner scripts without installed_tests
  - docs: Document GSignalFlags members added after 2.0
  - tests: Add a test for g_object_freeze_notify() being called
    too often
  - gfileinfo: Slightly expand docs for
    g_file_info_get_attribute_as_string()
  - gi: Dynamically set doc-format
  - tests: Various fixes to create temporary files in /tmp rather
    than the build directory
  - gdbusnameowning: Convert docs to gi-docgen linking syntax
  - giounix-private: Fix macro for checking for epoll_create1()
  - Fix LGPL in header
  - gutils: make documentation of g_set_prgname() clearer
  - docs: Add some detail
  - gspawn-win32: Fix potential integer overflows in argv
    handling
  - gvarianttype: Improve docs on type validation
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747828800">- Update to version 2.84.2:
  + Bugs fixed:
  - gclosure: fix ATOMIC_CHANGE_FIELD to read vint atomically
  - Windows: fix wrong typelib path
  - gstring: carefully handle gssize parameters
  - Update macOS job for new CI runner
  - gdate: Call tzset before localtime_r
  - Backport -Wsign-conversion fixes for g_get_locale_variants()
  - glocalfile: Disable faccessat()-based query_exists on Android</changelog>
  <changelog author="dimstar@opensuse.org" date="1749816000">- Update to version 2.84.3:
  + Bug fixed: gstring: Fix overflow check when expanding the
    string (CVE-2025-6052, boo#1244596).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1754654400">- Update to version 2.84.4 (bsc#1249055):
  + Bugs fixed:
  - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib
    through glib/gfileutils.c via get_tmp_file()
  - GFile leak in g_local_file_set_display_name during error
    handling
  - Incorrect output parameter handling in closure helper of
    g_settings_bind_with_mapping_closures
  - gfileutils: fix computation of temporary file name
  - Fix GFile leak in  g_local_file_set_display_name()
  - gthreadpool: Catch pool_spawner creation failure
  - gio/filenamecompleter: Fix leaks
  - gfilenamecompleter: Fix g_object_unref() of undefined value</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="ad3a14ae386e4afb85f8512e51488351c083fcfb79ecebd273acac2559278fe21fc9166af693332bbc5cac7ea20a30c78412fbe5de75c1bae24c637412d7233f" name="libgmp10" arch="x86_64">
  <version epoch="0" ver="6.3.0" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1590494400">- correct license statement (library itself is no GPL-3.0)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606996800">- GMP 6.2.1:
  * A possible overflow of type int is avoided for mpz_cmp on huge
    operands
  * Overflows are more carefully detected and reported for
    mpz_pow_ui
  * Fix a bug in longlong.h for aarch64 sub_ddmmss
  * mini-gmp: mpz_out_str and mpq_out_str now correctly handle out
    of range bases
  * C90 compliance
  * Support for more processors</changelog>
  <changelog author="rguenther@suse.com" date="1607515200">- Add gmp-6.2.1-arm64-invert_limb.patch [bsc#1179751]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1618056000">- do not break SLE 12 build when applying spec-cleaner</changelog>
  <changelog author="rguenther@suse.com" date="1618920000">- Compute FIPS hmac for libgmp.so.10 [bsc#1184555]</changelog>
  <changelog author="rguenther@suse.com" date="1637064000">- Add gmp-6.2.1-CVE-2021-43618.patch to fix buffer overflow on
  malformed input to mpz_inp_raw.  [bsc#1192717, CVE-2021-43618]</changelog>
  <changelog author="rguenther@suse.com" date="1691150400">- GMP 6.3.0
  * A possible overflow of type int is avoided for mpz_cmp on huge operands.
  * A possible error condition when a malformed file is read with mpz_inp_raw
    is now correctly handled.
  * New public function mpz_prevprime, companion of the existing mpz_nextprime.
  * New documented pointer types mpz_ptr, mpz_srcptr, and similar for other
    GMP types. Refer to the manual for full list and suggested usage. These
    types have been present in gmp.h at least since GMP-4.0, but previously
    not advertised to users.
  * Support for 64-bit Arm under Macos.
  * Support for the loongarch64 CPU family.
  * Support for building with LTO, link-time optimisations.
  * New special code for base = 2 in mpz_powm reduces the average time for
    the functions that test primality.
  * Speedup for the function mpz_nextprime on large operands.
  * Speedup for multiplications (some sizes only) thanks to new internal
    functions to compute small negacyclic products.
  * Special assembly code for IBM z13 and later "mainframe" CPUs, resulting
    in a huge speedup.
  * Improved assembly for several 64-bit x86 CPUs, Risc-V, 64-bit Arm.
- Removed gmp-6.2.1-CVE-2021-43618.patch which is included in the
  new release.</changelog>
  <changelog author="rguenther@suse.com" date="1692705600">- Add gmp-6.3.0-s390x-fix.patch to fix s390x optimized code on z13.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1740657600">- Manually select the z13/z14 architecture level specific assembly routines
  for s390x and SLFO since GMP lacks fat binary support there and also lacks
  a way to auto-detect the architecture level used at compile-time.
  [jsc#PED-3270]</changelog>
</package>
<package pkgid="7fa402ab7496e1e6e686c9ab64d91a30e92d1ca1fb7f950723f05ef4232e5d5a177a25606b328ebe3b7b1e5ceefd3c4f5d1cf5f2aec66f91c3af065df868158f" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="160000.2.1"/>
  <changelog author="angel.yankov@suse.com" date="1742817600">- FIPS: Mark SHA-1 as non-approved in the SLI for all operations. [jsc#PED-12224]
  * Add gnutls-FIPS-disable-mac-sha1.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1743681600">- Disable liboqs on armv6</changelog>
  <changelog author="angel.yankov@suse.com" date="1745841600">- Fix FIPS mode running on Tumbleweed [bsc#1237101]
  * When nettle or libhogweed are installed with glbic-hwcaps for x86_64-v3,
    some paths differ and we are unable to match the hmac file for the lib.
  * Add gnutls-FIPS-HMAC-x86_64-v3-opt.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1752408000">- enable ktls support
- enable brotli and zstd compression support</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Update to 3.8.10:
  * libgnutls: Fix NULL pointer dereference when 2nd Client Hello omits PSK
    Reported by Stefan Bühler. [GNUTLS-SA-2025-07-07-4, CVSS: medium]
    [bsc#1246299, CVE-2025-6395]
  * libgnutls: Fix heap read buffer overrun in parsing X.509 SCTS timestamps
    Spotted by oss-fuzz and reported by OpenAI Security Research Team,
    and fix developed by Andrew Hamilton. [GNUTLS-SA-2025-07-07-1,
    CVSS: medium] [bsc#1246233, CVE-2025-32989]
  * libgnutls: Fix double-free upon error when exporting otherName in SAN
    Reported by OpenAI Security Research Team. [GNUTLS-SA-2025-07-07-2,
    CVSS: low] [bsc#1246232, CVE-2025-32988]
  * certtool: Fix 1-byte write buffer overrun when parsing template
    Reported by David Aitel. [GNUTLS-SA-2025-07-07-3,
    CVSS: low] [bsc#1246267, CVE-2025-32990]
  * libgnutls: PKCS#11 modules can now be used to override the default
    cryptographic backend. Use the [provider] section in the system-wide config
    to specify path and pin to the module (see system-wide config Documentation).
  * libgnutls: Linux kernel version 6.14 brings a Kernel TLS (kTLS) key update
    support. The library running on the aforementioned version now utilizes the
    kernel’s key update mechanism when kTLS is enabled, allowing uninterrupted
    TLS session. The --enable-ktls configure option as well as the system-wide
    kTLS configuration(see GnuTLS Documentation) are still required to enable
    this feature.
  * libgnutls: liboqs support for PQC has been removed
    For maintenance purposes, support for post-quantum cryptography
    (PQC) is now only provided through leancrypto. The experimental key
    exchange algorithm, X25519Kyber768Draft00, which is based on the
    round 3 candidate of Kyber and only supported through liboqs has
    also been removed altogether.
  * libgnutls: TLS certificate compression methods can now be set with
    cert-compression-alg configuration option in the gnutls priority file.
  * libgnutls: All variants of ML-DSA private key formats are supported
    While the previous implementation of ML-DSA was based on
    draft-ietf-lamps-dilithium-certificates-04, this updates it to
    draft-ietf-lamps-dilithium-certificates-12 with support for all 3
    variants of private key formats: "seed", "expandedKey", and "both".
  * libgnutls: ML-DSA signatures can now be used in TLS
    The ML-DSA signature algorithms, ML-DSA-44, ML-DSA-65, and
    ML-DSA-87, can now be used to digitally sign TLS handshake
    messages.
  * API and ABI modifications:
  - GNUTLS_PKCS_MLDSA_SEED: New enum member of gnutls_pkcs_encrypt_flags_t
  - GNUTLS_PKCS_MLDSA_EXPANDED: New enum member of gnutls_pkcs_encrypt_flags_t
- Add patch gnutls-3.8.10-disable-ktls_test.patch
- Rebased patches:
  * gnutls-FIPS-140-3-references.patch
  * gnutls-FIPS-disable-mac-sha1.patch
  * gnutls-disable-flaky-test-dtls-resume.patch
  * gnutls-skip-pqx-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752580800">- Build with TPM 2.0 support via tpm2-0-tss.</changelog>
  <changelog author="pmonreal@suse.com" date="1752580801">- Build with leancrypto. The liboqs support for post-quantum
  cryptography (PQC) has been removed and is only provided through
  leancrypto.</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="a8141fb6e3996a3bc863509e0c6b9c105335ef2c5b9d7c80ff91814f201def492b75985415daaa0f8cfbb2d1f86872f9494c31330ea16f918cd8e7f945eecf65" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.84.4" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1740052800">- Update to version 2.83.4 (Unstable):
  + Fix Python shebang paths so they work on Windows again
  + Fix refcounting semantics of
    `g_dbus_connection_register_object_with_closures()` by adding a
    replacement API
  + Support static vfuncs in GIRepository
  + Add support for QNX8.0
  + Add a soft dependency on C11 — if your toolchain doesn’t
    support C11, you have six months to tell us before this becomes
    a hard dependency
  + Port from `net.hadess.PowerProfiles` to
    `org.freedesktop.UPower.PowerProfiles` for
    `GPowerProfileMonitorDBus`
  + Various bugs fixed.
  + Updated translations.
  + gdatetime: Fix integer overflow when parsing very long ISO8601 inputs.
  (CVE-2025-3360, bsc#1240897)
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.83.5 (Unstable):
  + A few improvements for when GLib is used as a subproject
  + Fix out-of-order parameters in a marshaller generated by
    `gdbus-codegen`
  + Various bugs fixed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.84.0:
  + Bugs fixed:
  - tests: Minor fixes to reference and stream-rw_all tests
  - gdebugcontrollerdbus: Fix a minor typo in a code example in
    the docs
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743681600">- Update to version 2.84.1:
  + Fix test failure when building against gobject-introspection
    ≥1.83.4
  + Bugs fixed:
  - 2.84.0 build failure on Linux:
    ../gio/gnetworkmonitornetlink.c:47:10: fatal error:
    netlink/netlink_route.h: No such file or directory
  - test failure with gobject-introspection 1.83.4: warning:
    element doc:format from state 3 is unknown, ignoring
  - gio/trash does not handle special characters well
  - `g_cancellable_connect()` documentation incorrect
  - g_cancellable_connect(): is it safe to unref cancellable from
    callback?
  - Crash with some registry key values in GWin32AppInfo
  - Memory sanitizer fixes
  - gobject: Be consistent in using atomic logic to handle the
    GParamSpecPool
  - gsettings: Port docs to gi-docgen format, add missing
    annotations and make various improvements
  - tests: Don't install runner scripts without installed_tests
  - docs: Document GSignalFlags members added after 2.0
  - tests: Add a test for g_object_freeze_notify() being called
    too often
  - gfileinfo: Slightly expand docs for
    g_file_info_get_attribute_as_string()
  - gi: Dynamically set doc-format
  - tests: Various fixes to create temporary files in /tmp rather
    than the build directory
  - gdbusnameowning: Convert docs to gi-docgen linking syntax
  - giounix-private: Fix macro for checking for epoll_create1()
  - Fix LGPL in header
  - gutils: make documentation of g_set_prgname() clearer
  - docs: Add some detail
  - gspawn-win32: Fix potential integer overflows in argv
    handling
  - gvarianttype: Improve docs on type validation
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747828800">- Update to version 2.84.2:
  + Bugs fixed:
  - gclosure: fix ATOMIC_CHANGE_FIELD to read vint atomically
  - Windows: fix wrong typelib path
  - gstring: carefully handle gssize parameters
  - Update macOS job for new CI runner
  - gdate: Call tzset before localtime_r
  - Backport -Wsign-conversion fixes for g_get_locale_variants()
  - glocalfile: Disable faccessat()-based query_exists on Android</changelog>
  <changelog author="dimstar@opensuse.org" date="1749816000">- Update to version 2.84.3:
  + Bug fixed: gstring: Fix overflow check when expanding the
    string (CVE-2025-6052, boo#1244596).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1754654400">- Update to version 2.84.4 (bsc#1249055):
  + Bugs fixed:
  - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib
    through glib/gfileutils.c via get_tmp_file()
  - GFile leak in g_local_file_set_display_name during error
    handling
  - Incorrect output parameter handling in closure helper of
    g_settings_bind_with_mapping_closures
  - gfileutils: fix computation of temporary file name
  - Fix GFile leak in  g_local_file_set_display_name()
  - gthreadpool: Catch pool_spawner creation failure
  - gio/filenamecompleter: Fix leaks
  - gfilenamecompleter: Fix g_object_unref() of undefined value</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="1ac0e4a7004bd9f9a2eaa7a6536e9abbf2dbb04e93b5aef5479e50f2e6e81d96be216c8ce1a98c63fcdb2c1a50d085c4beaea24d9b2545a786fe56f88414df25" name="libgomp1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="eeaf5fba937732b7c2020d0bab63c6d67fd6a9f89f447222c836bd5c74ab7584f8d7e9da3bc46f2647ca5d6907ca1a1d172f42baf9738a288c87830d73599375" name="libgpg-error0" arch="x86_64">
  <version epoch="0" ver="1.58" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Update to 1.46:
  * Support for bidirectional pipes under Windows.
  * REG_DWORD types are now support in the Windows Registry.
  * Added ES_SYSHD_SOCK support for gpgrt_sysopen under Windows.
  * Fixed gpgrt_log_get_fd for the file case.
  * Avoids header problem with C11 and "noreturn".
  * The gpg-error-config command is not installed by default, because
    it is now replaced by use of pkg-config/gpgrt-config with
    gpg-error.pc.  Supply --enable-install-gpg-error-config configure
    option, if it's really needed.
  * Fixed support of posix-lock for FreeBSD.
  * Build fixes for some Mingw tool chain versions.
  * Removed remaining support for WindowsCE.
  * Updated config.guess, config.sub, and config.rpath.
  * gpg-error-config is now only installed when enabled.
  * System paths are now stripped from --cflags --and --libs.</changelog>
  <changelog author="pmonreal@suse.com" date="1681300800">- Update to 1.47:
  * New error codes for PUKs and reset codes. [T6421]
  * Avoid segv in logging with improper use of the "socket://".
  * Fixed translation of argparse's internal option --help.
  * Interface changes relative to the 1.46 release:
  - GPG_ERR_SOURCE_TKD             NEW.
  - GPG_ERR_BAD_PUK                NEW.
  - GPG_ERR_NO_RESET_CODE          NEW.
  - GPG_ERR_BAD_RESET_CODE         NEW.
  - GPGRT_SPAWN_KEEP_STDIN         NEW.
  - GPGRT_SPAWN_KEEP_STDOUT        NEW.
  - GPGRT_SPAWN_KEEP_STDERR        NEW.
  - GPGRT_SPAWN_INHERIT_FILE       NEW.
  * Release-info: https://dev.gnupg.org/T6231</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add libgpg-error-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1708948800">- Update to 1.48:
  * New configure option --with-libtool-modification.  [T6619]
  * New option parser flag to detect commands given without a double
    dash.  There is also the new meta command "command-mode" to set
    this flag via a config file.  [T6978]
  * Added an es_fopen mode flag "sequential" with support on Windows.
    [rE7a42ff0ec9]
  * Added an es_fopen mode flag "wipe" to cleanup internal buffers at
    close time.  [T6954]
  * New function gpgrt_wipememory.  [T6964]
  * Improvements to setenv on Windows.  [rE89e53ad90f]
  * Fixed call to estream-printf string filters.  [T6737]
  * Many improvements to the yat2m tool.
  * Updates to the build system.
  * Interface changes relative to the 1.47 release:
  - ARGPARSE_FLAG_COMMAND          NEW.
  - gpgrt_wipememory               NEW.
  * Release-info: https://dev.gnupg.org/T6441
  * Update upstream libgpg-error.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to 1.49:
  * Two new functions to improve the logging interface. The
    gpgrt_logv_domain is currently the same as gpgrt_logv_prefix but
    allows to pass a domain string so that in future we will be able to
    select log output by domain. It also provide a non yet functional
    feature to include a hex dump.
  * Add a "trunc" keyword to gpgrt_log_printhex. [rE0a39fbefcb]
  * Avoid an endless loop in the argparser due to a conf file read
    error. [rE2dc93cfecc]
  * Interface changes relative to the 1.48 release:
  - gpgrt_add_post_log_func        NEW.
  - gpgrt_logv_domain              NEW.
  * Release-info: https://dev.gnupg.org/T7012</changelog>
  <changelog author="pmonreal@suse.com" date="1718884800">- Update to 1.50:
  * New set of process spawn functions. [T6249]
  * Fixed return type for gpgrt_b64dec_proc and gpgrt_b64dec_finish
    to gpg_err_code_t.  This enum return type is in almost all cases
    compatible to the formerly used gpg_error_t (i.e. unsigned int).
  * Interface changes relative to the 1.49 release:
    gpgrt_process_t                     CHANGED (never used).
    gpgrt_spawn_actions_t               NEW type.
    gpgrt_process_requests              NEW enum.
    gpgrt_process_spawn                 NEW.
    gpgrt_process_terminate             NEW.
    gpgrt_process_get_streams           NEW.
    gpgrt_process_ctl                   NEW.
    gpgrt_process_wait                  NEW.
    gpgrt_process_release               NEW.
    gpgrt_spawn_actions_new             NEW.
    gpgrt_spawn_actions_release         NEW.
    gpgrt_spawn_actions_set_redirect    NEW.
    gpgrt_spawn_actions_set_environ     NEW (posix only).
    gpgrt_spawn_actions_set_inherit_fds NEW (posix only).
    gpgrt_spawn_actions_set_atfork      NEW (posix only).
    gpgrt_spawn_actions_set_envvars     NEW (w32 only).
    gpgrt_spawn_actions_set_inherit_handles NEW (w32 only).
    GPGRT_PROCESS_DETACHED              NEW.
    GPGRT_PROCESS_NO_CONSOLE            NEW.
    GPGRT_PROCESS_NO_EUID_CHECK         NEW.
    GPGRT_PROCESS_STDIN_PIPE            NEW.
    GPGRT_PROCESS_STDOUT_PIPE           NEW.
    GPGRT_PROCESS_STDERR_PIPE           NEW.
    GPGRT_PROCESS_STDINOUT_SOCKETPAIR   NEW.
    GPGRT_PROCESS_STDIN_KEEP            NEW.
    GPGRT_PROCESS_STDOUT_KEEP           NEW.
    GPGRT_PROCESS_STDERR_KEEP           NEW.
    GPGRT_PROCESS_STDFDS_SETTING        NEW.
    GPGRT_SPAWN_INHERIT_FILE            REMOVED (never used).
    GPGRT_SPAWN_NONBLOCK                REMOVED (never used).
    GPGRT_SPAWN_RUN_ASFW                REMOVED (never used).
    GPGRT_SPAWN_DETACHED                REMOVED (never used).
    GPGRT_SPAWN_KEEP_STDIN              REMOVED (never used).
    GPGRT_SPAWN_KEEP_STDOUT             REMOVED (never used).
    GPGRT_SPAWN_KEEP_STDERR             REMOVED (never used).
  * Release-info: https://dev.gnupg.org/T7102</changelog>
  <changelog author="pmonreal@suse.com" date="1731499200">- Update to 1.51:
  * Add GPGRT_PROCESS_ALLOW_SET_FG for gpgrt_process_spawn. [rEb79d4206f4]
  * Add new spawn function to modify the environment. [T7307]
  * Fix missing environ var for macOS and others. [T7169,T7307]
  * Fix forgotten _gpgrt_post_syscall on create pipe failure. [rEbcab96484d]
  * Let gpgrt_poll return an error for a closed fd. [rE4a3dc85f69]
  * Fix build error introduced by C-committee stupidity. [T7344]
  * Interface changes relative to the 1.50 release:
  - _gpg_w32_gettext_use_utf8           EXTN (new value 2).
  - gpgrt_spawn_actions_set_env_rev     NEW.
  - GPGRT_PROCESS_ALLOW_SET_FG          NEW.
  * Release-info: https://dev.gnupg.org/T7164
  * Rebase libgpg-error-nobetasuffix.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 1.53:
  * Fix regression in 1.52.
  * Rebase libgpg-error-nobetasuffix.patch
- Update to 1.52:
  * The KEY_WOW64_xxKEY flags can now be passed to the Registry read
    functions. [rE652328c786]
  * In the spawn functions care about closefrom/close call is
    interrupted. [T7478]
  * New simple string list API. [rE47097806f1]
  * New API for name value files. [rE7ec1f27b60]
  * Interface changes relative to the 1.51 release:
  - gpgrt_w32_reg_query_string          NEW (Windows only).
  - gpgrt_strlist_t                     NEW type.
  - gpgrt_strlist_free                  NEW.
  - gpgrt_strlist_add                   NEW.
  - gpgrt_strlist_tokenize              NEW.
  - gpgrt_strlist_copy                  NEW.
  - gpgrt_strlist_rev                   NEW.
  - gpgrt_strlist_prev                  NEW.
  - gpgrt_strlist_last                  NEW.
  - gpgrt_strlist_pop                   NEW.
  - gpgrt_strlist_find                  NEW.
  - GPGRT_STRLIST_APPEND                NEW const.
  - GPGRT_STRLIST_WIPE                  NEW const.
  - gpgrt_nvc_t                         NEW type.
  - gpgrt_nve_t                         NEW type.
  - gpgrt_nvc_new                       NEW.
  - gpgrt_nvc_release                   NEW.
  - gpgrt_nvc_get_flag                  NEW.
  - gpgrt_nvc_add                       NEW.
  - gpgrt_nvc_set                       NEW.
  - gpgrt_nve_set                       NEW.
  - gpgrt_nvc_delete                    NEW.
  - gpgrt_nvc_lookup                    NEW.
  - gpgrt_nvc_parse                     NEW.
  - gpgrt_nvc_write                     NEW.
  - gpgrt_nve_next                      NEW.
  - gpgrt_nve_name                      NEW.
  - gpgrt_nve_value                     NEW.
  - gpgrt_nvc_get_string                NEW.
  - gpgrt_nvc_get_bool                  NEW.
  - GPGRT_NVC_WIPE                      NEW const.
  - GPGRT_NVC_PRIVKEY                   NEW const.
  - GPGRT_NVC_SECTION                   NEW const.
  - GPGRT_NVC_MODIFIED                  NEW const.</changelog>
  <changelog author="pmonreal@suse.com" date="1745236800">- Update to 1.54:
  * Fix a regression in 1.52 which did not allow to open UNC
    specified files on Windows. [rE28ae4ee194]
  * Ignore log file specification from the Registry in the gpg-error
    tool.</changelog>
  <changelog author="angel.yankov@suse.com" date="1770033600">- Update to 1.58
  * New src/gpg-error.c (main): New command "fconcat".
  * Rename src/spawn-posix.c (struct gpgrt_spawn_actions): Rename the field to
    ENVP.
  * argparse: Use SYSCONFDIR for /etc.
  * Update translations for Portugese, German
  * src/estream.c (parse_mode): Fix parsing of "share". Set sysopen
    flag.
  * syscfg: Add 64-bit Android arch.</changelog>
</package>
<package pkgid="18ef4857a87410f7d3a2934d2c72fb9e79eea4290be88604480f02372e4848c1e75bc9a11e498715338eceb29d5cb1fd89f4dfaf2d2ecf142a7aae31f6a76da0" name="libgpgme11" arch="x86_64">
  <version epoch="0" ver="1.24.3" rel="160000.3.1"/>
  <changelog author="pmonreal@suse.com" date="1731499200">- Update to 1.24.0:
  * Extended gpgme_op_decrypt* and gpgme_op_verify* to allow writing the
    output directly to a file. [T6550]
  * Extended gpgme_op_encrypt*, gpgme_op_encrypt_sign*, and gpgme_op_sign*
    to allow reading the input data directly from a file. [T6550]
  * Add information about designated revocation keys. [T7118]
  * New context flag "import-options". [T7152]
  * New context flag "proc-all-sigs". [T7261]
  * New context flag "known-notations". [T4060]
  * New info flags "beta_compliance". [rM1a7bc88ee7]
  * New function gpgme_op_setownertrust to make changing the owner trust
    easier and to allow enabling/disabling of keys (requires GnuPG 2.4.6). [T7239]
  * New flag to re-encrypt OpenPGP data (requires GnuPG 2.5.1). [T1825]
  * cpp: Provide information about designated revocation keys for a Key. [T7118]
  * cpp: Add safer member function returning text describing an error. [T5960]
  * cpp: Add support for setting the owner trust of keys and for enabling
    and disabling keys. [T7239]
  * qt: Build QGpgME for Qt 5 and Qt 6 simultaneously. [T7205]
  * qt: Install headers for Qt 5 and Qt 6 in separate folders. [T7161]
  * qt: Allow reading the data to decrypt/encrypt/sign/verify directly from
    files. [T6550]
  * qt: Allow writing the decrypted/encrypted/signed/verified data directly
    to files. [T6550]
  * qt: Allow specifying import options when importing keys. [T7152]
  * qt: Allow appending a detached signature to an existing file. [T6867]
  * qt: Add support for enabling and disabling keys. [T7239]
  * qt: Add support for new context flag "proc-all-sigs" to the jobs that
    verify data signatures.
  * Interface changes relative to the 1.23.2 release:
  - GPGME_ENCRYPT_FILE                      NEW.
  - GPGME_SIG_MODE_FILE                     NEW.
  - GPGME_ENCRYPT_ADD_RECP                  NEW.
  - GPGME_ENCRYPT_CHG_RECP                  NEW.
  - gpgme_key_t                             EXT: New field 'revkeys'.
  - gpgme_revocation_key_t                  NEW.
  - gpgme_set_ctx_flag                      EXT: New flag 'import-options'.
  - gpgme_set_ctx_flag                      EXT: New flag 'proc-all-sigs'.
  - gpgme_set_ctx_flag                      EXT: New flag 'known-notation'.
  - gpgme_op_setownertrust_start            NEW.
  - gpgme_op_setownertrust                  NEW.
  - gpgme_subkey_t                          EXT: New field 'beta_compliance'.
  - gpgme_signature_t                       EXT: New field 'beta_compliance'.
  - gpgme_decrypt_result_t                  EXT: New field 'beta_compliance'.
  - cpp: Context::EncryptFile               NEW.
  - cpp: Context::setOwnerTrust             NEW.
  - cpp: Context::startSetOwnerTrust        NEW.
  - cpp: Context::setKeyEnabled             NEW.
  - cpp: Context::startSetKeyEnabled        NEW.
  - cpp: SignatureMode::SignFile            NEW.
  - cpp: RevocationKey                      NEW.
  - cpp: Key::revocationKey                 NEW.
  - cpp: Key::numRevocationKeys             NEW.
  - cpp: Key::revocationKeys                NEW.
  - cpp: Key::isBetaCompliance              NEW.
  - cpp: Subkey::isBetaCompliance           NEW.
  - cpp: Error::asStdString                 NEW.
  - cpp: Error::asString                    DEPRECATED.
  - cpp: DecryptionResult::isBetaCompliance NEW.
  - cpp: Signature::isBetaCompliance        NEW.
  - qt: DecryptVerifyArchiveJob::setProcessAllSignatures NEW.
  - qt: DecryptVerifyArchiveJob::processAllSignatures    NEW.
  - qt: DecryptVerifyJob::setInputFile      NEW.
  - qt: DecryptVerifyJob::inputFile         NEW.
  - qt: DecryptVerifyJob::setOutputFile     NEW.
  - qt: DecryptVerifyJob::outputFile        NEW.
  - qt: DecryptVerifyJob::setProcessAllSignatures NEW.
  - qt: DecryptVerifyJob::processAllSignatures    NEW.
  - qt: EncryptJob::setRecipients           NEW.
  - qt: EncryptJob::recipients              NEW.
  - qt: EncryptJob::setInputFile            NEW.
  - qt: EncryptJob::inputFile               NEW.
  - qt: EncryptJob::setOutputFile           NEW.
  - qt: EncryptJob::outputFile              NEW.
  - qt: EncryptJob::setEncryptionFlags      NEW.
  - qt: EncryptJob::encryptionFlags         NEW.
  - qt: SignEncryptJob::setSigners          NEW.
  - qt: SignEncryptJob::signers             NEW.
  - qt: SignEncryptJob::setRecipients       NEW.
  - qt: SignEncryptJob::recipients          NEW.
  - qt: SignEncryptJob::setInputFile        NEW.
  - qt: SignEncryptJob::inputFile           NEW.
  - qt: SignEncryptJob::setOutputFile       NEW.
  - qt: SignEncryptJob::outputFile          NEW.
  - qt: SignEncryptJob::setEncryptionFlags  NEW.
  - qt: SignEncryptJob::encryptionFlags     NEW.
  - qt: SignJob::setSigners                 NEW.
  - qt: SignJob::signers                    NEW.
  - qt: SignJob::setInputFile               NEW.
  - qt: SignJob::inputFile                  NEW.
  - qt: SignJob::setOutputFile              NEW.
  - qt: SignJob::outputFile                 NEW.
  - qt: SignJob::setSigningFlags            NEW.
  - qt: SignJob::signingFlags               NEW.
  - qt: SignJob::setAppendSignature         NEW.
  - qt: SignJob::appendSignatureEnabled     NEW.
  - qt: VerifyDetachedJob::setSignatureFile NEW.
  - qt: VerifyDetachedJob::signatureFile    NEW.
  - qt: VerifyDetachedJob::setSignedFile    NEW.
  - qt: VerifyDetachedJob::signedFile       NEW.
  - qt: VerifyDetachedJob::setProcessAllSignatures NEW.
  - qt: VerifyDetachedJob::processAllSignatures    NEW.
  - qt: VerifyOpaqueJob::setInputFile       NEW.
  - qt: VerifyOpaqueJob::inputFile          NEW.
  - qt: VerifyOpaqueJob::setOutputFile      NEW.
  - qt: VerifyOpaqueJob::outputFile         NEW.
  - qt: VerifyOpaqueJob::setProcessAllSignatures NEW.
  - qt: VerifyOpaqueJob::processAllSignatures    NEW.
  - qt: ImportJob::setImportOptions         NEW.
  - qt: ImportJob::importOptions            NEW.
  - qt: QuickJob::startSetKeyEnabled        NEW.
  * Release-info: https://dev.gnupg.org/T7376
  * Rebase gpgme-suse-nobetasuffix.patch python313.patch
  * Remove patch upstream: gpgme-D545-obsolete-distutils.patch</changelog>
  <changelog author="christophe@krop.fr" date="1731931200">- Fix file list on Leap 15</changelog>
  <changelog author="pmonreal@suse.com" date="1732104000">- Move the gpg python bindings out of the egg directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732881600">- Add gpgme-fix-python-install.patch: Fix the installation of the
  python bindings without having to move them around manually.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1733918400">- Update to 1.24.1:
  * Support the Kyber algorithm in key listings.
  * Allow building on some older Linux platforms.  [rM4a62318422]
  * Interface changes relative to the 1.24.0 release:
    GPGME_PK_KYBER                          NEW enum value.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1739188800">- Update to 1.24.2:
  * Fix regression for RSA in gpgme_pubkey_algo_string
  * Prevent failing tests after 2027-05-15
- drop python313.patch, is included</changelog>
  <changelog author="mcepl@cepl.eu" date="1740052800">- Don't own content of all common-lisp directories, just own the
  directories themselves (adding %dir in front of them). Prevents
  duplicate ownership of the Common Lisp files.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1748001600">- update to 1.24.3:
  * cpp: Ensure that all transitions go from one state to a different
    state
  * cpp: Ensure correct expiration time on 32-bit arch with 64-bit
    time_t</changelog>
  <changelog author="alarrosa@suse.com" date="1748520000">- Do not build the qt5 flavor in SLE16 where Qt5 won't be
  available.</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="12795c047eb6f367e33ccde07a6ce21b1f0c5ea347f4e7c1bd22d5b506dfb54d713ab614a902c3354b5e90988f7498ebe5e90feda212cc90575e66a52bb1af84" name="libgraphene-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="160000.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1519387200">- Update to version 1.8.0:
  + No new API, this cycle, but it's time to spin a new stable
    release.
  + The major news for this release is that we dropped the
    Autotools build from the repository; Graphene is now built
    exclusively with Meson.
  + We've added various fixes to the build on macOS, in order to
    maintain compatibility with the old Autotools build.
  + The variables in the pkg-config file that expose the SIMD
    functionality built inside Graphene have been updated, to
    ensure that they can be easily consumed by other projects;
    instead of a single string that needs to be split, we now
    expose boolean variables for all SIMD implementations.
  + We've also improved the ability to use Graphene as a Meson
    sub-project; this allows Meson to check out, build, and depend
    on Graphene when building complex projects, like GTK. This is
    really useful inside CI pipelines, as it minimises the amount
    of separate steps needed when setting up the build.
- Update options passed to meson, following upstream changes:
  gtk_doc=true, gobject_types=true, introspection=true,
  gcc_vector=true, sse2=true, arm-neon=true, tests=true and
  benchmarks=true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1528977600">- Update to version 1.8.2:
  + The main change is that we've now disabled SIMD optimisations
    on 32 bit Intel architectures; there aren't many of those left,
    and in general compilers have been less than stellar when
    supporting SIMD types on them. This is especially problematic
    when it comes to using Graphene types inside other allocated
    structures, where SIMD alignment rules break system allocators
    on platforms like Windows. To avoid introducing weird bugs, if
    you're on 32 bit IA, you're only going to have access to the
    scalar SIMD implementation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553515200">- Update to version 1.8.6:
  + Bug fixes, bug fixes everywhere! Also: documentation changes to
    clarify what we do behind the veil of the various matrix
    multiplication functions. Hopefully, this should help people
    using Graphene especially when it comes to integration with
    other libraries.
  + Fix matrix multiplication when the result matrix is also one of
    the operands.
  + Fix check when converting a 4x4 matrix into an affine
    transformation matrix.
  + Fix interpolation between matrices with a perspective
    component.
  + Documentation fixes for matrix/matrix and matrix/vector
    multiplication operators.
- Changes from version 1.8.4:
  + Mostly a bug fixing release, with an especially glaring bug fix
    in the point transformation function of graphene_matrix_t that
    was found thanks to GTK 4. Now the function is covered by the
    test suite, so it should not regress.
  + Another major fix is the ensuring that we have a description of
    the SIMD types through introspection, which means that language
    bindings can finally know how big every other structure using
    them is. The SIMD API is still not available through
    introspection, as it's a pure C convenience.
  + Require Meson ≥ 0.48.0.
  + Fix matrix/point transformation.
  + Build fixes for MSVC.
  + Introspection fixes for bool.
  + Fix the InitOnce checks on Windows.
  + Correctly parse SIMD types for introspection.
  + Build fixes for the pkg-config file.
  + Documentation fixes:
  - Clarify matrix/vector/point multiplication.
  - Clarify plane description.
  - Clarify the units for the matrix skew factors.
  - Document use of graphene-gobject with Meson.</changelog>
  <changelog author="luke@ljones.dev" date="1567771200">- Update to version 1.9.6:
  + Add radians based initialisers for graphene_euler_t.
  + Use pragma once for the header inclusion guard.
  + Remove unused function (#159)
  + Add multiply(), scale(), and add() operators to
    graphene_quaternion_t.
  + Add lerp() operator to all vector types.
  + Add graphene_plane_transform()
  + Documentation updates for graphene_ray_t.
  + Fix graphene_box_get_center() and.
    graphene_box_get_bounding_sphere() (#165)
  + Ensure that we detect empty or infinite boxes in the.
    graphene_box_t API.
- Changes from version 1.9.4:
  + Graphene now uses an ancillary library called µTest for its
    test suite; this means it's possible to build and run the test
    suite without necessarily depending on GLib.
  + the conversion of the Euler angles type to and from matrices and.
    quaternions has been rewritten from scratch, and should not only
    be finally correct, but it should also cover more use cases—namely
    the "proper" Euler angles as well as the Tait–Bryan angles.
  + the ARM NEON implementation of the SIMD types has been improved,
    fixed, and tested, so it's not marked as experimental any more.
  + Require Meson ≥ 0.50.1.
  + Fix graphene_quaternion_equal() to consider the orientation, not
    just the component equality.
  + Fix graphene_quaternion_slerp() to always interpolate along the
    shortest path.
  + Re-implement the conversion of graphene_euler_t to and from
    graphene_matrix_t and graphene_quaternion_t.
  + Add graphene_rectangle_get_area()
  + Document restrictions of graphene_rect_round(), and deprecate the function.
  + Add graphene_rect_round_extents()
  + Port the test suite from GLib's testing utilities to µTest.
  + Remove internal floating point comparisons.
  + Improve the NEON extensions detection code.
  + Fix comparison operators for graphene_simd4f_t on ARM using the
    NEON extensions.
  + Remove the "experimental" compiler warning from the ARM NEON
    implementation of graphene_simd4f_t.
- Changes from version 1.9.2:
  + Add graphene_rect_scale() method.
  + Fix warning from Meson by dropping unnecessary argument to.
    configure_file()
  + Clean up arguments of pkgconfig.generate()
  + Add equality operators to graphene_matrix_t.
  + Add getters for translation components of a graphene_matrix_t.
  + Use darwin_versions argument instead of rolling our own.
  + Add GRAPHENE_RECT_INIT_ZERO</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 1.10.0:
  + API additions, mostly driven by Gthree:
  - Add graphene_matrix_decompose().
  - Add intersection methods to graphene_ray_t.
  - graphene_triangle_init_from_float().
  - graphene_triangle_get_uv().
  + Fix graphene_ray_transform().
  + Documentation fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_libexecdir} instead of %{_prefix}/lib: follow the package
  installer definition.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1592913600">- Update to version 1.10.2:
  + Disable SSE on 32bit builds on Windows with MSVC
  + Add more documentation on the conventions used by matrix
    operations
  + Fix Euler angles/matrix conversion
  + Various bugs fixed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611835200">- Pass conditional Darm_neon=false instead of Darm-neon=true to
  meson, fix build for armv7.
- Stop passing Dbenchmarks=true, no longer recognized nor used.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618488000">- Update to version 1.10.6:
  + Hide GRAPHENE_SIMD_S from the introspection data.
  + Nudge ray axis when intersecting a box.
- Changes from version 1.10.4:
  + Add ARM NEON support when building with Visual Studio.
  + Build fix on ARM64 Windows.
  + Drop deprecated "python3" Meson module.
  + Fix detection of non-intersecting boxes.
  + Only enable SSE2 on x86_64.
  + Use the compiler-appropriate alignment attributes.
  + Change introspection option to a yielding feature.
- Change -Dintrospection=true meson parameter to
  - Dintrospection=enabled: follow upstream build system changes.
- Wrap -Dsse2=true meson parameter into %ifarch x86_64: 32bit
  builds for example do not support sse2 (likely boo#1184678).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 1.10.8:
  + ray:
  - simplify NaN checking.
  - Improve intersection
  + Build fixes.
  + SIMD:
  - Make reciprocal operations 0-safe.
  - Add simplified scalar reciprocal.
  + tests:
  - Fix installed introspection test.
  - Add ray intersection unit.
  + Fix detection of AArch64.
  + Documentation fixes.</changelog>
</package>
<package pkgid="c612a1368b640876424e0b6d6cb7b1414a0c12cdebb48db2dddcfb227acc65f58cb12dc7d7cee043b257a96362ee42f5b1fd42d45eebcf34af976f0dc41b06ab" name="libgraphite2-3" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1518696000">- gcc8.patch: return correct value from stream operator</changelog>
  <changelog author="pgajdos@suse.com" date="1520856000">- Update to 1.3.11:
- removed patches (upstreamed or not needed)
  * gcc8.patch (code commeted out)
  * graphite-nonvoid-return.patch (code commented out)
  * graphite2-python3_tests.patch (upstreamed)
  * graphite2-python3_tests_cornercases.patch (upstreamed
- refreshed patch
  * link-gcc-shared.diff
- fixes security issue: CVE-2018-7999 [bsc#1084850]
  + graphite2-CVE-2018-7999.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Use python3 everywhere
- Drop fonttools test dep as it pulls TON of py3 packages</changelog>
  <changelog author="pgajdos@suse.com" date="1540468800">- Update to 1.3.12:
    . Graphite no longer does dumb rendering for fonts with no smarts
    . Segment caching code removed. Anything attempting to use the
    segment cache gets given a regular face instead
    . Add libfuzzer support
    . Builds now require C++11
    . Improvements to Windows 64 bit builds
    . Support different versions of python including 32 bit and python 3
    . Various minor bug fixes
- refreshed patch
  % link-gcc-shared.diff
- removed patch
  - graphite2-CVE-2018-7999.patch (upstreamed)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576411200">- BuildIgnore shared-mime-info, pulled in by libglib-2_0-0. Required
  by gvfs to do mime detection, but not required for building.</changelog>
  <changelog author="elimat@opensuse.org" date="1597233600">- Update to 1.3.13:
  * Resolve minor spacing issue in rtl non-overlap kerning
  * python3 for graphite.py
  * Better fuzzing
  * Better building on windows</changelog>
  <changelog author="elimat@opensuse.org" date="1597233601">- Update to 1.3.14:
  * Bug fixes
  * Allow features to be hidden (for aliases)
  * Move to python3
  * Rename doc files from .txt to .asc
- Run spec-cleaner
  * Remove rpm groups
  * Use make macros
  * Use license macro
- Refresh patches:
  * link-gcc-shared.diff
  * graphite2-1.2.0-cmakepath.patch</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
  <changelog author="fstrba@suse.com" date="1643284800">- Fix license header so that it corresponds to SPDX abbreviation</changelog>
  <changelog author="pgajdos@suse.com" date="1695643200">- fixed license string [bsc#1207676]:
  LGPL-2.1-or-later OR MPL-2.0 OR GPL-2.0-or-later</changelog>
</package>
<package pkgid="ee3b46036ef57be5d254c321f86dc23a86aa233f502d3b35f40396b620aedd2b2d60ffa831ea52a7b588031c83e14c2bab79a48ecf4c976011b0e8f6355978b6" name="libgstallocators-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 1.24.12:
  + oggdemux: fixes seeking in some cases by not overwriting a
    valid duration with CLOCK_TIME_NONE
  + video-overlay-composition: Declare the video/size/orientation
    tags for the meta &amp; implement scale transformation
  + Various fixes found from adding extra warning flags</changelog>
  <changelog author="alarrosa@suse.com" date="1741780800">- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    &amp; PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + Some other changes include:
  - New AV1 caps utility functions for AV1 Codec Configuration
    Record codec_data handling
  - The GstEncodingProfile (de)serialization functions are now
    public
  - GstEncodingProfile gained a way to specify a factory-name
    when specifying caps. In some cases you want to ensure that
    a specific element factory is used while requiring some
    specific caps, but this was not possible so far. You can now
    do e.g. qtmux:video/x-prores,variant=standard|factory-name=avenc_prores_ks
    to ensure that the avenc_prores_ks factory is used to produce
    the variant of prores video stream.
  + For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.26/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1746014400">- Update to version 1.26.1:
  + Ensure properties are freed before (re)setting with
    g_value_dup_string() and during cleanup
  + alsadeviceprovider: Fix leak of Alsa longname
  + audioaggregator: fix error added in !8416 when chaining up
  + audiobasesink: Fix custom slaving driftsamples calculation and
    add custom audio clock slaving callback example
  + decodebin3:
  - Don't avoid parsebin even if we have a matching decoder
  - Doesn't plug parsebin for AAC from tsdemux
  + gl: eglimage: warn the reason of export failure
  + glcolorconvert:
  - Fix YUVA&lt;-&gt;RGBA conversions
  - Regression when rendering alpha vp9
  + gldownload: Unref glcontext after usage
  + meson.build: test for and link against libatomic if it exists
  + oggdemux: Don't push new packets if there is a pending seek
  + urisourcebin:
  - Make parsebin activation more reliable
  - Deadlock between parsebin and typefind
  + videoencoder: Use the correct segment and buffer timestamp in
    the chain function
  + videotimecode: Fix conversion of timecode to datetime with
    drop-frame timecodes and handle 119.88 fps correctly in all
    places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748779200">- Update to version 1.26.2:
  + alsa: Avoid infinite loop in DSD rate detection
  + gl: Implement basetransform meta transform function
  + glshader: free shader on stop
  + glupload: Only add texture-target field to GL caps
  + gstaudioutilsprivate: Fix gcc 15 compiler error with function
    pointer
  + mikey: Avoid infinite loop while parsing MIKEY payload with
    unhandled payload types
  + properties: add G_PARAM_STATIC_STRINGS where missing
  + riff-media: fix MS and DVI ADPCM av_bps calculations
  + subtitleoverlay: Remove 0.10 hardware caps handling
  + subtitleoverlay: Missing support for DMABuf(?)
  + tests: opus: Update channel support and add to meson
  + textoverlay: fix shading for RGBx / RGBA pixel format variants
  + textoverlay background is wrong while cropping
  + uridecodebin3: Don't hold play items lock while releasing pads
  + uridecodebin3: deadlock on PLAY_ITEMS_LOCK
  + Fix new warnings on Fedora 42, various meson warnings, and
    other small meson build/wrap fixes
  + Fix Qt detection in various places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751371200">- Update to version 1.26.3:
  + GstAudioAggregator: fix structure unref in peek_next_sample()
  + audioconvert: Fix setting mix-matrix when input caps changes
  + encodebasebin: Duplicate encoding profile in property setter
  + gl: simplify private
    gst_gl_gst_meta_api_type_tags_contain_only()
  + osxvideosink: Use gst_pad_push_event() and post navigation
    messages
  + playsink: Fix race condition in stream synchronizer pad cleanup
    during state changes
  + python: Fix pulling events from appsink
  + streamsynchronizer: Consider streams having received
    stream-start as waiting
  + urisourcebin: Text tracks are no longer set as sparse stream in
    urisourcebin's multiqueue</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753358400">- Update to version 1.26.4:
  + Revert "streamsynchronizer: Consider streams having received
    stream-start as waiting"
  + alsa: free conf cache under valgrind
  + gst-device-monitor: Fix caps filter splitting
  + Fix various valgrind/test errors when GST_DEBUG is enabled
  + More valgrind and test fixes
  + Various ASAN fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755000000">- Update to version 1.26.5:
  + audioconvert: mix-matrix causes caps negotiation failure
  + decodebin3: Don't error on an incoming ONVIF metadata stream
  + gloverlay: Recompute geometry when caps change, and load
    texture after stopping and starting again
  + uridecodebin3: Add missing locking and NULL checks when adding
    URIs to messages
  + uridecodebin3: segfault in update_message_with_uri() if no
    decoder available
  + videorate, imagefreeze: add support for JPEG XS
  + gst-device-monitor-1.0: Add shell quoting for launch lines
  + gst-device-monitor-1.0: Fix criticals, and also accept utf8 in
    launch lines
  + gst-device-monitor-1.0: Use gst_print instead of g_print</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757937600">- Update to version 1.26.6:
  + decodebin3: Update stream tags
  + rtpbasedepayload: Avoid potential use-after free
  + rtspconnection: Add get_url and get_ip return value annotation
  + gst_rtsp_connection_get_url return value transfer annotation
    missing
  + videometa: Fix valgrind warning when deserializing video meta
  + videorate: don't hold the reference to the buffer in drop-only
    mode
  + gst-device-monitor-1.0: Fix device-path regression on Windows
  + gst-device-monitor-1.0: Add quoting for powershell and cmd
  + Monorepo: opengl, vorbis, plugins require explicit enablement
    now for a build using the Meson subproject fallback</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760616000">- Update to version 1.26.7:
  + discoverer: Mark gst_discoverer_stream_info_list_free() as
    transfer full
  + riff: Add channel reorder maps for 3 and 7 channel audio
  + sdp: proper usage of gst_buffer_append
  + videorate: fix assert fail due to invalid buffer duration
  + Fix build error with glib &lt; 2.68</changelog>
</package>
<package pkgid="da7c8d50e4a1f5c8b8e7776f4a8b37b62f70806fc27b6ff8f09db83256a55b9e791df1e00b39fd4fc597d38133580794f821073eb861d2afa5c37709077141fd" name="libgstapp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 1.24.12:
  + oggdemux: fixes seeking in some cases by not overwriting a
    valid duration with CLOCK_TIME_NONE
  + video-overlay-composition: Declare the video/size/orientation
    tags for the meta &amp; implement scale transformation
  + Various fixes found from adding extra warning flags</changelog>
  <changelog author="alarrosa@suse.com" date="1741780800">- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    &amp; PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + Some other changes include:
  - New AV1 caps utility functions for AV1 Codec Configuration
    Record codec_data handling
  - The GstEncodingProfile (de)serialization functions are now
    public
  - GstEncodingProfile gained a way to specify a factory-name
    when specifying caps. In some cases you want to ensure that
    a specific element factory is used while requiring some
    specific caps, but this was not possible so far. You can now
    do e.g. qtmux:video/x-prores,variant=standard|factory-name=avenc_prores_ks
    to ensure that the avenc_prores_ks factory is used to produce
    the variant of prores video stream.
  + For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.26/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1746014400">- Update to version 1.26.1:
  + Ensure properties are freed before (re)setting with
    g_value_dup_string() and during cleanup
  + alsadeviceprovider: Fix leak of Alsa longname
  + audioaggregator: fix error added in !8416 when chaining up
  + audiobasesink: Fix custom slaving driftsamples calculation and
    add custom audio clock slaving callback example
  + decodebin3:
  - Don't avoid parsebin even if we have a matching decoder
  - Doesn't plug parsebin for AAC from tsdemux
  + gl: eglimage: warn the reason of export failure
  + glcolorconvert:
  - Fix YUVA&lt;-&gt;RGBA conversions
  - Regression when rendering alpha vp9
  + gldownload: Unref glcontext after usage
  + meson.build: test for and link against libatomic if it exists
  + oggdemux: Don't push new packets if there is a pending seek
  + urisourcebin:
  - Make parsebin activation more reliable
  - Deadlock between parsebin and typefind
  + videoencoder: Use the correct segment and buffer timestamp in
    the chain function
  + videotimecode: Fix conversion of timecode to datetime with
    drop-frame timecodes and handle 119.88 fps correctly in all
    places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748779200">- Update to version 1.26.2:
  + alsa: Avoid infinite loop in DSD rate detection
  + gl: Implement basetransform meta transform function
  + glshader: free shader on stop
  + glupload: Only add texture-target field to GL caps
  + gstaudioutilsprivate: Fix gcc 15 compiler error with function
    pointer
  + mikey: Avoid infinite loop while parsing MIKEY payload with
    unhandled payload types
  + properties: add G_PARAM_STATIC_STRINGS where missing
  + riff-media: fix MS and DVI ADPCM av_bps calculations
  + subtitleoverlay: Remove 0.10 hardware caps handling
  + subtitleoverlay: Missing support for DMABuf(?)
  + tests: opus: Update channel support and add to meson
  + textoverlay: fix shading for RGBx / RGBA pixel format variants
  + textoverlay background is wrong while cropping
  + uridecodebin3: Don't hold play items lock while releasing pads
  + uridecodebin3: deadlock on PLAY_ITEMS_LOCK
  + Fix new warnings on Fedora 42, various meson warnings, and
    other small meson build/wrap fixes
  + Fix Qt detection in various places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751371200">- Update to version 1.26.3:
  + GstAudioAggregator: fix structure unref in peek_next_sample()
  + audioconvert: Fix setting mix-matrix when input caps changes
  + encodebasebin: Duplicate encoding profile in property setter
  + gl: simplify private
    gst_gl_gst_meta_api_type_tags_contain_only()
  + osxvideosink: Use gst_pad_push_event() and post navigation
    messages
  + playsink: Fix race condition in stream synchronizer pad cleanup
    during state changes
  + python: Fix pulling events from appsink
  + streamsynchronizer: Consider streams having received
    stream-start as waiting
  + urisourcebin: Text tracks are no longer set as sparse stream in
    urisourcebin's multiqueue</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753358400">- Update to version 1.26.4:
  + Revert "streamsynchronizer: Consider streams having received
    stream-start as waiting"
  + alsa: free conf cache under valgrind
  + gst-device-monitor: Fix caps filter splitting
  + Fix various valgrind/test errors when GST_DEBUG is enabled
  + More valgrind and test fixes
  + Various ASAN fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755000000">- Update to version 1.26.5:
  + audioconvert: mix-matrix causes caps negotiation failure
  + decodebin3: Don't error on an incoming ONVIF metadata stream
  + gloverlay: Recompute geometry when caps change, and load
    texture after stopping and starting again
  + uridecodebin3: Add missing locking and NULL checks when adding
    URIs to messages
  + uridecodebin3: segfault in update_message_with_uri() if no
    decoder available
  + videorate, imagefreeze: add support for JPEG XS
  + gst-device-monitor-1.0: Add shell quoting for launch lines
  + gst-device-monitor-1.0: Fix criticals, and also accept utf8 in
    launch lines
  + gst-device-monitor-1.0: Use gst_print instead of g_print</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757937600">- Update to version 1.26.6:
  + decodebin3: Update stream tags
  + rtpbasedepayload: Avoid potential use-after free
  + rtspconnection: Add get_url and get_ip return value annotation
  + gst_rtsp_connection_get_url return value transfer annotation
    missing
  + videometa: Fix valgrind warning when deserializing video meta
  + videorate: don't hold the reference to the buffer in drop-only
    mode
  + gst-device-monitor-1.0: Fix device-path regression on Windows
  + gst-device-monitor-1.0: Add quoting for powershell and cmd
  + Monorepo: opengl, vorbis, plugins require explicit enablement
    now for a build using the Meson subproject fallback</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760616000">- Update to version 1.26.7:
  + discoverer: Mark gst_discoverer_stream_info_list_free() as
    transfer full
  + riff: Add channel reorder maps for 3 and 7 channel audio
  + sdp: proper usage of gst_buffer_append
  + videorate: fix assert fail due to invalid buffer duration
  + Fix build error with glib &lt; 2.68</changelog>
</package>
<package pkgid="5db56c36d70e9bbb1fc810ae9f3ee4f66c1017ad06c5a5495d61fd8db36b039934a628be3eb2e1fc731e04c2970229c616e72bb5625870295c81042c04d2d141" name="libgstaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 1.24.12:
  + oggdemux: fixes seeking in some cases by not overwriting a
    valid duration with CLOCK_TIME_NONE
  + video-overlay-composition: Declare the video/size/orientation
    tags for the meta &amp; implement scale transformation
  + Various fixes found from adding extra warning flags</changelog>
  <changelog author="alarrosa@suse.com" date="1741780800">- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    &amp; PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + Some other changes include:
  - New AV1 caps utility functions for AV1 Codec Configuration
    Record codec_data handling
  - The GstEncodingProfile (de)serialization functions are now
    public
  - GstEncodingProfile gained a way to specify a factory-name
    when specifying caps. In some cases you want to ensure that
    a specific element factory is used while requiring some
    specific caps, but this was not possible so far. You can now
    do e.g. qtmux:video/x-prores,variant=standard|factory-name=avenc_prores_ks
    to ensure that the avenc_prores_ks factory is used to produce
    the variant of prores video stream.
  + For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.26/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1746014400">- Update to version 1.26.1:
  + Ensure properties are freed before (re)setting with
    g_value_dup_string() and during cleanup
  + alsadeviceprovider: Fix leak of Alsa longname
  + audioaggregator: fix error added in !8416 when chaining up
  + audiobasesink: Fix custom slaving driftsamples calculation and
    add custom audio clock slaving callback example
  + decodebin3:
  - Don't avoid parsebin even if we have a matching decoder
  - Doesn't plug parsebin for AAC from tsdemux
  + gl: eglimage: warn the reason of export failure
  + glcolorconvert:
  - Fix YUVA&lt;-&gt;RGBA conversions
  - Regression when rendering alpha vp9
  + gldownload: Unref glcontext after usage
  + meson.build: test for and link against libatomic if it exists
  + oggdemux: Don't push new packets if there is a pending seek
  + urisourcebin:
  - Make parsebin activation more reliable
  - Deadlock between parsebin and typefind
  + videoencoder: Use the correct segment and buffer timestamp in
    the chain function
  + videotimecode: Fix conversion of timecode to datetime with
    drop-frame timecodes and handle 119.88 fps correctly in all
    places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748779200">- Update to version 1.26.2:
  + alsa: Avoid infinite loop in DSD rate detection
  + gl: Implement basetransform meta transform function
  + glshader: free shader on stop
  + glupload: Only add texture-target field to GL caps
  + gstaudioutilsprivate: Fix gcc 15 compiler error with function
    pointer
  + mikey: Avoid infinite loop while parsing MIKEY payload with
    unhandled payload types
  + properties: add G_PARAM_STATIC_STRINGS where missing
  + riff-media: fix MS and DVI ADPCM av_bps calculations
  + subtitleoverlay: Remove 0.10 hardware caps handling
  + subtitleoverlay: Missing support for DMABuf(?)
  + tests: opus: Update channel support and add to meson
  + textoverlay: fix shading for RGBx / RGBA pixel format variants
  + textoverlay background is wrong while cropping
  + uridecodebin3: Don't hold play items lock while releasing pads
  + uridecodebin3: deadlock on PLAY_ITEMS_LOCK
  + Fix new warnings on Fedora 42, various meson warnings, and
    other small meson build/wrap fixes
  + Fix Qt detection in various places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751371200">- Update to version 1.26.3:
  + GstAudioAggregator: fix structure unref in peek_next_sample()
  + audioconvert: Fix setting mix-matrix when input caps changes
  + encodebasebin: Duplicate encoding profile in property setter
  + gl: simplify private
    gst_gl_gst_meta_api_type_tags_contain_only()
  + osxvideosink: Use gst_pad_push_event() and post navigation
    messages
  + playsink: Fix race condition in stream synchronizer pad cleanup
    during state changes
  + python: Fix pulling events from appsink
  + streamsynchronizer: Consider streams having received
    stream-start as waiting
  + urisourcebin: Text tracks are no longer set as sparse stream in
    urisourcebin's multiqueue</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753358400">- Update to version 1.26.4:
  + Revert "streamsynchronizer: Consider streams having received
    stream-start as waiting"
  + alsa: free conf cache under valgrind
  + gst-device-monitor: Fix caps filter splitting
  + Fix various valgrind/test errors when GST_DEBUG is enabled
  + More valgrind and test fixes
  + Various ASAN fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755000000">- Update to version 1.26.5:
  + audioconvert: mix-matrix causes caps negotiation failure
  + decodebin3: Don't error on an incoming ONVIF metadata stream
  + gloverlay: Recompute geometry when caps change, and load
    texture after stopping and starting again
  + uridecodebin3: Add missing locking and NULL checks when adding
    URIs to messages
  + uridecodebin3: segfault in update_message_with_uri() if no
    decoder available
  + videorate, imagefreeze: add support for JPEG XS
  + gst-device-monitor-1.0: Add shell quoting for launch lines
  + gst-device-monitor-1.0: Fix criticals, and also accept utf8 in
    launch lines
  + gst-device-monitor-1.0: Use gst_print instead of g_print</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757937600">- Update to version 1.26.6:
  + decodebin3: Update stream tags
  + rtpbasedepayload: Avoid potential use-after free
  + rtspconnection: Add get_url and get_ip return value annotation
  + gst_rtsp_connection_get_url return value transfer annotation
    missing
  + videometa: Fix valgrind warning when deserializing video meta
  + videorate: don't hold the reference to the buffer in drop-only
    mode
  + gst-device-monitor-1.0: Fix device-path regression on Windows
  + gst-device-monitor-1.0: Add quoting for powershell and cmd
  + Monorepo: opengl, vorbis, plugins require explicit enablement
    now for a build using the Meson subproject fallback</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760616000">- Update to version 1.26.7:
  + discoverer: Mark gst_discoverer_stream_info_list_free() as
    transfer full
  + riff: Add channel reorder maps for 3 and 7 channel audio
  + sdp: proper usage of gst_buffer_append
  + videorate: fix assert fail due to invalid buffer duration
  + Fix build error with glib &lt; 2.68</changelog>
</package>
<package pkgid="3eba8449ed01c9667ab672c99303b51ce852c22348d054f6555c82179684bde8a885db79b56b6c6744298fd2e4b98f4a94dc17619041093131de67aa9b1cd637" name="libgstgl-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 1.24.12:
  + oggdemux: fixes seeking in some cases by not overwriting a
    valid duration with CLOCK_TIME_NONE
  + video-overlay-composition: Declare the video/size/orientation
    tags for the meta &amp; implement scale transformation
  + Various fixes found from adding extra warning flags</changelog>
  <changelog author="alarrosa@suse.com" date="1741780800">- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    &amp; PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + Some other changes include:
  - New AV1 caps utility functions for AV1 Codec Configuration
    Record codec_data handling
  - The GstEncodingProfile (de)serialization functions are now
    public
  - GstEncodingProfile gained a way to specify a factory-name
    when specifying caps. In some cases you want to ensure that
    a specific element factory is used while requiring some
    specific caps, but this was not possible so far. You can now
    do e.g. qtmux:video/x-prores,variant=standard|factory-name=avenc_prores_ks
    to ensure that the avenc_prores_ks factory is used to produce
    the variant of prores video stream.
  + For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.26/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1746014400">- Update to version 1.26.1:
  + Ensure properties are freed before (re)setting with
    g_value_dup_string() and during cleanup
  + alsadeviceprovider: Fix leak of Alsa longname
  + audioaggregator: fix error added in !8416 when chaining up
  + audiobasesink: Fix custom slaving driftsamples calculation and
    add custom audio clock slaving callback example
  + decodebin3:
  - Don't avoid parsebin even if we have a matching decoder
  - Doesn't plug parsebin for AAC from tsdemux
  + gl: eglimage: warn the reason of export failure
  + glcolorconvert:
  - Fix YUVA&lt;-&gt;RGBA conversions
  - Regression when rendering alpha vp9
  + gldownload: Unref glcontext after usage
  + meson.build: test for and link against libatomic if it exists
  + oggdemux: Don't push new packets if there is a pending seek
  + urisourcebin:
  - Make parsebin activation more reliable
  - Deadlock between parsebin and typefind
  + videoencoder: Use the correct segment and buffer timestamp in
    the chain function
  + videotimecode: Fix conversion of timecode to datetime with
    drop-frame timecodes and handle 119.88 fps correctly in all
    places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748779200">- Update to version 1.26.2:
  + alsa: Avoid infinite loop in DSD rate detection
  + gl: Implement basetransform meta transform function
  + glshader: free shader on stop
  + glupload: Only add texture-target field to GL caps
  + gstaudioutilsprivate: Fix gcc 15 compiler error with function
    pointer
  + mikey: Avoid infinite loop while parsing MIKEY payload with
    unhandled payload types
  + properties: add G_PARAM_STATIC_STRINGS where missing
  + riff-media: fix MS and DVI ADPCM av_bps calculations
  + subtitleoverlay: Remove 0.10 hardware caps handling
  + subtitleoverlay: Missing support for DMABuf(?)
  + tests: opus: Update channel support and add to meson
  + textoverlay: fix shading for RGBx / RGBA pixel format variants
  + textoverlay background is wrong while cropping
  + uridecodebin3: Don't hold play items lock while releasing pads
  + uridecodebin3: deadlock on PLAY_ITEMS_LOCK
  + Fix new warnings on Fedora 42, various meson warnings, and
    other small meson build/wrap fixes
  + Fix Qt detection in various places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751371200">- Update to version 1.26.3:
  + GstAudioAggregator: fix structure unref in peek_next_sample()
  + audioconvert: Fix setting mix-matrix when input caps changes
  + encodebasebin: Duplicate encoding profile in property setter
  + gl: simplify private
    gst_gl_gst_meta_api_type_tags_contain_only()
  + osxvideosink: Use gst_pad_push_event() and post navigation
    messages
  + playsink: Fix race condition in stream synchronizer pad cleanup
    during state changes
  + python: Fix pulling events from appsink
  + streamsynchronizer: Consider streams having received
    stream-start as waiting
  + urisourcebin: Text tracks are no longer set as sparse stream in
    urisourcebin's multiqueue</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753358400">- Update to version 1.26.4:
  + Revert "streamsynchronizer: Consider streams having received
    stream-start as waiting"
  + alsa: free conf cache under valgrind
  + gst-device-monitor: Fix caps filter splitting
  + Fix various valgrind/test errors when GST_DEBUG is enabled
  + More valgrind and test fixes
  + Various ASAN fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755000000">- Update to version 1.26.5:
  + audioconvert: mix-matrix causes caps negotiation failure
  + decodebin3: Don't error on an incoming ONVIF metadata stream
  + gloverlay: Recompute geometry when caps change, and load
    texture after stopping and starting again
  + uridecodebin3: Add missing locking and NULL checks when adding
    URIs to messages
  + uridecodebin3: segfault in update_message_with_uri() if no
    decoder available
  + videorate, imagefreeze: add support for JPEG XS
  + gst-device-monitor-1.0: Add shell quoting for launch lines
  + gst-device-monitor-1.0: Fix criticals, and also accept utf8 in
    launch lines
  + gst-device-monitor-1.0: Use gst_print instead of g_print</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757937600">- Update to version 1.26.6:
  + decodebin3: Update stream tags
  + rtpbasedepayload: Avoid potential use-after free
  + rtspconnection: Add get_url and get_ip return value annotation
  + gst_rtsp_connection_get_url return value transfer annotation
    missing
  + videometa: Fix valgrind warning when deserializing video meta
  + videorate: don't hold the reference to the buffer in drop-only
    mode
  + gst-device-monitor-1.0: Fix device-path regression on Windows
  + gst-device-monitor-1.0: Add quoting for powershell and cmd
  + Monorepo: opengl, vorbis, plugins require explicit enablement
    now for a build using the Meson subproject fallback</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760616000">- Update to version 1.26.7:
  + discoverer: Mark gst_discoverer_stream_info_list_free() as
    transfer full
  + riff: Add channel reorder maps for 3 and 7 channel audio
  + sdp: proper usage of gst_buffer_append
  + videorate: fix assert fail due to invalid buffer duration
  + Fix build error with glib &lt; 2.68</changelog>
</package>
<package pkgid="8bac4e680f4c1df15df509c114a78c40ebb2add83cda59af7998192040c1416f7c0e58cce5aa3ac6ef0104a75913b3dfda341d321cbb6e45f2a0ebe7dface329" name="libgstpbutils-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 1.24.12:
  + oggdemux: fixes seeking in some cases by not overwriting a
    valid duration with CLOCK_TIME_NONE
  + video-overlay-composition: Declare the video/size/orientation
    tags for the meta &amp; implement scale transformation
  + Various fixes found from adding extra warning flags</changelog>
  <changelog author="alarrosa@suse.com" date="1741780800">- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    &amp; PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + Some other changes include:
  - New AV1 caps utility functions for AV1 Codec Configuration
    Record codec_data handling
  - The GstEncodingProfile (de)serialization functions are now
    public
  - GstEncodingProfile gained a way to specify a factory-name
    when specifying caps. In some cases you want to ensure that
    a specific element factory is used while requiring some
    specific caps, but this was not possible so far. You can now
    do e.g. qtmux:video/x-prores,variant=standard|factory-name=avenc_prores_ks
    to ensure that the avenc_prores_ks factory is used to produce
    the variant of prores video stream.
  + For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.26/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1746014400">- Update to version 1.26.1:
  + Ensure properties are freed before (re)setting with
    g_value_dup_string() and during cleanup
  + alsadeviceprovider: Fix leak of Alsa longname
  + audioaggregator: fix error added in !8416 when chaining up
  + audiobasesink: Fix custom slaving driftsamples calculation and
    add custom audio clock slaving callback example
  + decodebin3:
  - Don't avoid parsebin even if we have a matching decoder
  - Doesn't plug parsebin for AAC from tsdemux
  + gl: eglimage: warn the reason of export failure
  + glcolorconvert:
  - Fix YUVA&lt;-&gt;RGBA conversions
  - Regression when rendering alpha vp9
  + gldownload: Unref glcontext after usage
  + meson.build: test for and link against libatomic if it exists
  + oggdemux: Don't push new packets if there is a pending seek
  + urisourcebin:
  - Make parsebin activation more reliable
  - Deadlock between parsebin and typefind
  + videoencoder: Use the correct segment and buffer timestamp in
    the chain function
  + videotimecode: Fix conversion of timecode to datetime with
    drop-frame timecodes and handle 119.88 fps correctly in all
    places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748779200">- Update to version 1.26.2:
  + alsa: Avoid infinite loop in DSD rate detection
  + gl: Implement basetransform meta transform function
  + glshader: free shader on stop
  + glupload: Only add texture-target field to GL caps
  + gstaudioutilsprivate: Fix gcc 15 compiler error with function
    pointer
  + mikey: Avoid infinite loop while parsing MIKEY payload with
    unhandled payload types
  + properties: add G_PARAM_STATIC_STRINGS where missing
  + riff-media: fix MS and DVI ADPCM av_bps calculations
  + subtitleoverlay: Remove 0.10 hardware caps handling
  + subtitleoverlay: Missing support for DMABuf(?)
  + tests: opus: Update channel support and add to meson
  + textoverlay: fix shading for RGBx / RGBA pixel format variants
  + textoverlay background is wrong while cropping
  + uridecodebin3: Don't hold play items lock while releasing pads
  + uridecodebin3: deadlock on PLAY_ITEMS_LOCK
  + Fix new warnings on Fedora 42, various meson warnings, and
    other small meson build/wrap fixes
  + Fix Qt detection in various places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751371200">- Update to version 1.26.3:
  + GstAudioAggregator: fix structure unref in peek_next_sample()
  + audioconvert: Fix setting mix-matrix when input caps changes
  + encodebasebin: Duplicate encoding profile in property setter
  + gl: simplify private
    gst_gl_gst_meta_api_type_tags_contain_only()
  + osxvideosink: Use gst_pad_push_event() and post navigation
    messages
  + playsink: Fix race condition in stream synchronizer pad cleanup
    during state changes
  + python: Fix pulling events from appsink
  + streamsynchronizer: Consider streams having received
    stream-start as waiting
  + urisourcebin: Text tracks are no longer set as sparse stream in
    urisourcebin's multiqueue</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753358400">- Update to version 1.26.4:
  + Revert "streamsynchronizer: Consider streams having received
    stream-start as waiting"
  + alsa: free conf cache under valgrind
  + gst-device-monitor: Fix caps filter splitting
  + Fix various valgrind/test errors when GST_DEBUG is enabled
  + More valgrind and test fixes
  + Various ASAN fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755000000">- Update to version 1.26.5:
  + audioconvert: mix-matrix causes caps negotiation failure
  + decodebin3: Don't error on an incoming ONVIF metadata stream
  + gloverlay: Recompute geometry when caps change, and load
    texture after stopping and starting again
  + uridecodebin3: Add missing locking and NULL checks when adding
    URIs to messages
  + uridecodebin3: segfault in update_message_with_uri() if no
    decoder available
  + videorate, imagefreeze: add support for JPEG XS
  + gst-device-monitor-1.0: Add shell quoting for launch lines
  + gst-device-monitor-1.0: Fix criticals, and also accept utf8 in
    launch lines
  + gst-device-monitor-1.0: Use gst_print instead of g_print</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757937600">- Update to version 1.26.6:
  + decodebin3: Update stream tags
  + rtpbasedepayload: Avoid potential use-after free
  + rtspconnection: Add get_url and get_ip return value annotation
  + gst_rtsp_connection_get_url return value transfer annotation
    missing
  + videometa: Fix valgrind warning when deserializing video meta
  + videorate: don't hold the reference to the buffer in drop-only
    mode
  + gst-device-monitor-1.0: Fix device-path regression on Windows
  + gst-device-monitor-1.0: Add quoting for powershell and cmd
  + Monorepo: opengl, vorbis, plugins require explicit enablement
    now for a build using the Meson subproject fallback</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760616000">- Update to version 1.26.7:
  + discoverer: Mark gst_discoverer_stream_info_list_free() as
    transfer full
  + riff: Add channel reorder maps for 3 and 7 channel audio
  + sdp: proper usage of gst_buffer_append
  + videorate: fix assert fail due to invalid buffer duration
  + Fix build error with glib &lt; 2.68</changelog>
</package>
<package pkgid="d933842cac41991c56f8bafdf6daecbdbd160024da1d87d33fb9fb12a0368b48ea57835d406cd8d53cbd81caabadd4ad77f8658894e619080891bf6508a51833" name="libgstreamer-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1736251200">- Update to version 1.24.11:
  + Highlighted bugfixes:
  - playback: Fix SSA/ASS subtitles with embedded fonts
  - decklink: add missing video modes and fix 8K video modes
  - matroskamux: spec compliance fixes for audio-only files
  - onnx: disable onnxruntime telemetry
  - qtdemux: Fix base offset update when doing segment seeks
  - srtpdec: Fix a use-after-free issue
  - (uri)decodebin3: Fix stream change scenarios, possible
    deadlock on shutdown
  - video: fix missing alpha flag in AV12 format description
  - avcodecmap: Add some more channel position mappings
  - cerbero bootstrap fixes for Windows 11
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - No changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 1.24.12:
  + Highlighted bugfixes:
  - d3d12: Fix shaders failing to compile with newer dxc versions
  - decklinkvideosink: Fix handling of caps framerate in auto
    mode; also a decklinkaudiosink fix
  - devicemonitor: Fix potential crash macOS when a device is
    unplugged
  - gst-libav: Fix crash in audio encoders like avenc_ac3 if
    input data has insufficient alignment
  - gst-libav: Fix build against FFmpeg 4.2 as in Ubuntu 20.04
  - gst-editing-services: Fix Python library name fetching on
    Windows
  - netclientclock: Don't store failed internal clocks in the
    cache, so applications can re-try later
  - oggdemux: Seeking and duration fixes
  - osxaudiosrc: Fixes for failing init/no output on recent iOS
    versions
  - qtdemux: Use mvhd transform matrix and support for flipping
  - rtpvp9pay: Fix profile parsing
  - splitmuxsrc: Fix use with decodebin3 which would occasionally
    fail with an assertion when seeking
  - tsdemux: Fix backwards PTS wraparound detection with
    ignore-pcr=true
  - video-overlay-composition: Declare the video/size/orientation
    tags for the meta and implement scale transformations
  - vtdec: Fix seeks occasionally hanging on macOS due to a race
    condition when draining
  - webrtc: Fix duplicate payload types with RTX and multiple
    video codecs
  - win32-pluginoader: Make sure not to create any windows when
    inspecting plugins
  - wpe: Various fixes for re-negotiation, latency reporting,
    progress messages on startup
  - x264enc: Add missing data to AvcDecoderConfigurationRecord in
    codec_data for high profile variants
  - cerbero: Support using ccache with cmake if enabled
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - device: Fix racy nullptr deref on macOS when a device is
    unplugged
  - iterator: Added error handling to filtered iterators
  - netclientclock: Don't ever store failed internal clocks in
    the cache
  - netclock-replay: use gst_c_args when building, fixing build
    failure on Solaris
  - pluginloader-win32: create no window
  - pluginloader-win32: fix use after free in
    find_helper_bin_location
  - sparsefile: ensure error is set when read_buffer() returns 0
  - basetransform: fix incorrect logging inside
    gst_base_transform_query_caps</changelog>
  <changelog author="alarrosa@suse.com" date="1741780800">- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    &amp; PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + Possibly Breaking Changes
  - qroverlay: the "pixel-size" property has been removed in
    favour of a new "size" property with slightly different
    semantics, where the size of the square is expressed in
    percent of the smallest of width and height.
  - svtav1enc: The SVT-AV1 3.0.0 API exposes a different
    mechanism to configure the level of parallelism when
    encoding, which has been exposed as a new
    "level-of-parallelism" property. The old "logical-processors"
    property is no longer functional if the plugin has been
    compiled against the new API, which might affect encoder
    performance if application code setting it is not updated.
  - udpsrc: now disables allocated port reuse for unicast to
    avoid unexpected side-effects of SO_REUSEADDR where the
    kernel allocates the same listening port for multiple udpsrc.
  - uridecodebin3 remove non-functional "source" property that
    doesn't make sense and always returned NULL anyway.
  + Known Issues
  - GstBuffer now uses C11 atomics for 64 bit atomic operations
    if available, which may require linking to libatomic on some
    systems, but this is not done automatically yet, see issue
    glfo#gstreamer/gstreamer#4177.
  + For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.26/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1746014400">- Update to version 1.26.1:
  + Highlighted bugfixes:
  - awstranslate and speechmatics plugin improvements
  - decodebin3 fixes and urisourcebin/playbin3 stability
    improvements
  - Closed captions: CEA-708 generation and muxing fixes, and
    H.264/H.265 caption extractor fixes
  - dav1d AV1 decoder: RGB support, plus colorimetry,
    renegotiation and buffer pool handling fixes
  - Fix regression when rendering VP9 with alpha
  - H.265 decoder base class and caption inserter SPS/PPS
    handling fixes
  - hlssink3 and hlsmultivariantsink feature enhancements
  - Matroska v4 support in muxer, seeking fixes in demuxer
  - macOS: framerate guessing for cameras or capture devices
    where the OS reports silly framerates
  - MP4 demuxer uncompressed video handling improvements and
    sample table handling fixes
  - oggdemux: seeking improvements in streaming mode
  - unixfdsrc: fix gst_memory_resize warnings
  - Plugin loader fixes, especially for Windows
  - QML6 GL source renegotiation fixes
  - RTP and RTSP stability fixes
  - Thread-safety improvements for the Media Source Extension
    (MSE) library
  - v4l2videodec: fix A/V sync issues after decoding errors
  - Various improvements and fixes for the fragmented and
    non-fragmented MP4 muxers
  - Video encoder base class segment and buffer timestamp
    handling fixes
  - Video time code support for 119.88 fps and
    drop-frames-related conversion fixes
  - WebRTC: Retransmission entry creation fixes and better audio
    level header extension compatibility
  - YUV4MPEG encoder improvments
  - dots-viewer: make work locally without network access
  - gst-python: fix compatibility with PyGObject &gt;= 3.52.0
  - Cerbero: recipe updates, compatibility fixes for Python &lt;
    3.10; Windows Android cross-build improvements
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - Correctly handle whitespace paths when executing
    gst-plugin-scanner
  - Ensure properties are freed before (re)setting with
    g_value_dup_string() and during cleanup
  - cmake: Fix PKG_CONFIG_PATH formatting for Windows
    cross-builds
  - macos: Move macos function documentation to the .h so the
    introspection has the information
  - meson.build: test for and link against libatomic if it exists
  - pluginloader-win32: Fix helper executable path under devenv
  - pluginloader: fix pending_plugins Glist use-after-free issue
  - unixfdsrc: Complains about resize of memory area
  - tracers: dots: fix debug log</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748692800">- Update to version 1.26.2:
  + Highlighted bugfixes:
  - Various security fixes and playback fixes
  - aggregator base class fixes to not produce buffers too early
    in live mode
  - AWS translate element improvements
  - D3D12 video decoder workarounds for crashes on NVIDIA cards
    on resolution changes
  - dav1d AV1-decoder performance improvements
  - fmp4mux: tfdt and composition time offset fixes, plus AC-3 /
    EAC-3 audio support
  - GStreamer editing services fixes for sources with non-1:1
    aspect ratios
  - MIDI parser improvements for tempo changes
  - MP4 demuxer atom parsing improvements and security fixes
  - New skia-based video compositor element
  - Subtitle parser security fixes
  - Subtitle rendering and seeking fixes
  - Playbin3 and uridecodebin3 stability fixes
  - GstPlay stream selection improvements
  - WAV playback regression fix
  - GTK4 paintable sink colorimetry support and other
    improvements
  - WebRTC: allow webrtcsrc to wait for a webrtcsink producer to
    initiate the connection
  - WebRTC: new Janus Video Room WebRTC source element
  - vah264enc profile decision making logic fixes
  - Python bindings gained support for handling mini object
    writability (buffers, caps, etc.)
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - aggregator: Various state related fixes
  - element: ref-sink the correct pad template when replacing an
    existing one
  - pipeline: Store the actual latency even if no static latency
    was configured
  - structure: Add gst_structure_is_writable() API to allow
    python bindings to be able to handle writability of
    MiniObjects
  - tracerutils: Do not warn on empty string as tracername
  - tracerutils: Fix leak in gst_tracer_utils_create_tracer()
  - Ensure properties are freed before (re)setting with
    g_value_dup_object() or g_value_dup_boxed() and during
    cleanup
  - Fix new warnings on Fedora 42, various meson warnings, and
    other small meson build/wrap fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751371200">- Update to version 1.26.3:
  + Highlighted bugfixes in 1.26.3:
  - Security fix for the H.266 video parser
  - Fix regression for WAV files with acid chunks
  - Fix high memory consumption caused by a text handling
    regression in uridecodebin3 and playbin3
  - Fix panic on late GOP in fragmented MP4 muxer
  - Closed caption conversion, rendering and muxing improvements
  - Decklink video sink preroll frame rendering and clock drift
    handling fixes
  - MPEG-TS demuxing and muxing fixes
  - MP4 muxer fixes for creating very large files with faststart
    support
  - New thread-sharing 1:N inter source and sink elements, and a
    ts-rtpdtmfsrc
  - New speech synthesis element around ElevenLabs API
  - RTP H.265 depayloader fixes and improvements, as well as TWCC
    and GCC congestion control fixes
  - Seeking improvements in DASH client for streams with gaps
  - WebRTC sink and source fixes and enhancements, including to
    LiveKit and WHIP signallers
  - The macOS osxvideosink now posts navigation messages
  - QtQML6GL video sink input event handling improvements
  - Overhaul detection of hardware-accelerated video codecs on
    Android
  - Video4Linux capture source fixes and support for BT.2100 PQ
    and 1:4:5:3 colorimetry
  - Vulkan buffer upload and memory handling regression fixes
  - gst-python: fix various regressions introduced in 1.26.2
  - cerbero: fix text relocation issues on 32-bit Android and fix
    broken VisualStudio VC templates
  - packages: ship pbtypes plugin and update openssl to 3.5.0 LTS
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - aggregator: Do not set event seqnum to INVALID
  - baseparse: test: Fix race on test start
  - pad: Only remove TAG events on STREAM_START if the stream-id
    actually changes
  - utils: Mark times array as static to avoid symbol conflict
    with the POSIX function
  - vecdeque: Use correct index type gst_vec_deque_drop_struct()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753358400">- Update to version 1.26.4:
  + Highlighted bugfixes in 1.26.4:
  - adaptivedemux2: Fixed reverse playback
  - d3d12screencapture: Add support for monitor add/remove in
    device provider
  - rtmp2src: various fixes to make it play back AWS medialive
    streams
  - rtph265pay: add profile-id, tier-flag, and level-id to output
    rtp caps
  - vp9parse: Fix handling of spatial SVC decoding
  - vtenc: Fix negotiation failure with profile=main-422-10
  - gtk4paintablesink: Add YCbCr memory texture formats and other
    improvements
  - livekit: add room-timeout
  - mp4mux: add TAI timestamp muxing support
  - rtpbin2: fix various race conditions, plus other bug fixes
    and performance improvements
  - threadshare: add a ts-rtpdtmfsrc element, implement run-time
    input switching in ts-intersrc
  - webrtcsink: fix deadlock on error setting remote description
    and other fixes.
  - cerbero: WiX installer: fix missing props files in the MSI
    packages
  - smaller macOS/iOS package sizes
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - tracers: Fix deadlock in latency tracer
  - Fix various valgrind/test errors when GST_DEBUG is enabled
  - More valgrind and test fixes
  - Various ASAN fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755000000">- Update to version 1.26.5:
  + Highlighted bugfixes:
  - audioconvert: Fix caps negotiation regression when using a
    mix matrix
  - cea608overlay, cea708overlay: Accept GPU memory buffers if
    downstream supports the overlay composition meta
  - d3d12screencapture source element and device provider fixes
  - decodebin3: Don't error on an incoming ONVIF metadata stream
  - uridecodebin3: Fix potential crash when adding URIs to
    messages, e.g. if no decoder is available
  - v4l2: Fix memory leak for dynamic resolution change
  - VA encoder fixes
  - videorate, imagefreeze: Add support for JPEG XS
  - Vulkan integration fixes
  - wasapi2 audio device monitor improvements
  - threadshare: Many improvements and fixes to the generic
    threadshare and RTP threadshare elements
  - rtpbin2 improvements and fixes
  - gst-device-monitor-1.0 command line tool improvements
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - aggregator: add sub_latency_min to pad queue size
  - build: Disable C5287 warning on MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757937600">- Update to version 1.26.6:
  + Highlighted bugfixes in 1.26.6:
  - analytics GstTensorMeta handling changes (see note below)
  - closed caption combiner and transcriberbin stability fixes
  - decklinkvideosrc: fix unrecoverable state after failing to
    start streaming because device is busy
  - decodebin3 tag handling improvements
  - fallbacksrc: Fix sources only being restarted once, as well
    as some deadlocks and race conditions on shutdown
  - gtk4paintablesink: Try importing dmabufs withouth DMA_DRM
    caps
  - hlsdemux2: Fix parsing of byterange and init map directives
  - rtpmp4gdepay2: allow only constantduration with neither
    constantsize nor sizelength set
  - spotifysrc: update to librespot 0.7 to make work after recent
    Spotify changes
  - threadshare: new blocking adapter element for use in front of
    block elements such as sinks that sync to the clock
  - threadshare: various other threadshare element fixes and
    improvements
  - v4l2: Add support for WVC1 and WMV3
  - videorate: possible performance improvements when operating
    in drop-only mode
  - GstBaseParse fixes
  - Vulkan video decoder fixes
  - Fix gst-device-monitor-1.0 tool device-path regression on
    Windows
  - Monorepo development environment builds fewer plugins using
    subprojects by default, those require explicit enablement now
  - Python bindings: Handle buffer PTS, DTS, duration, offset,
    and offset-end as unsigned long long (regression fix)
  - Cerbero: Reduce recipe parallelism in various cases and dump
    cerbero and recipe versions into datadir during packaging
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + Possibly breaking behavioural changes:
  - Previously it was guaranteed that there is only ever up to
    one GstTensorMeta per buffer. This is no longer true and code
    working with GstTensorMeta must be able to handle multiple
    GstTensorMeta now.
  + gstreamer:
  - baseparse: Try harder to fixate caps based on upstream in
    default negotiation
  - gst-discoverer reports 1x1 dimensions for "valid" MP4 files
  - baseparse: don't clear most sticky events after a FLUSH_STOP
    event
  - gstreamer: Disable miniobject inline functions for
    gobject-introspection for non-subprojects too
  - gstreamer: Make sure to zero-initialize the GValue before
    G_VALUE_COLLECT_INIT
  - ptp: Fix a new Rust 1.89 compiler warning on Windows
  - ptp: Fix new compiler warning with Rust 1.89
  - Segmentation fault when compiled with
    "-ftrivial-auto-var-init=pattern". Use of unitialized GValue</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760616000">- Update to version 1.26.7:
  + Highlighted bugfixes in 1.26.7:
  - cea608overlay: improve handling of non-system memory
  - cuda: Fix runtime kernel compile with CUDA 13.0
  - d3d12: Fix crop meta support in converter and passthrough
    handling in deinterlacer
  - fallbacksrc: source handling improvements; no-more-pads
    signal for streams-unaware parents
  - inter: add properties to fine tune the inner elements
  - qtdemux: surround sound channel layout handling fixes and
    performance improvements for GoPro videos
  - rtp: Add linear audio (L8, L16, L24) RTP payloaders /
    depayloaders
  - rtspsrc: Send RTSP keepalives in TCP/interleaved modes
  - rtpamrpay2: frame quality indicator flag related fixes
  - rtpbasepay2: reuse last PTS when possible, to work around
    problems with NVIDIA Jetson AV1 encoder
  - mpegtsmux, tsdemux: Opus audio handling fixes
  - threadshare: latency related improvements and many other
    fixes
  - matroskamux, tsmux, flvmux, cea608mux: Best pad determination
    fixes at EOS
  - unixfd: support buffers with a big payload
  - videorate unknown buffer duration assertion failure with
    variable framerates
  - editing services: Make GESTimeline respect
    SELECT_ELEMENT_TRACK signal discard decision; memory leak
    fixes
  - gobject-introspection annotation fixes
  - cerbero: Update meson to 1.9.0 to enable Xcode 26
    compatibility
  - Various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - controller: Fix get_all() return type annotation
  - gst-launch: Do not assume error messages have a src element
  - multiqueue: Fix object reference handling in signal callbacks
  - netclientclock: Fix memory leak in error paths</changelog>
</package>
<package pkgid="e835357e6714edaac27c8653f853aa87c52e1801e545effee27d54e7a216af5b2e85c69f5340a6b8a517a2a819a6a001121c7cc14444372d2ae4c88eedb5b8e0" name="libgstriff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 1.24.12:
  + oggdemux: fixes seeking in some cases by not overwriting a
    valid duration with CLOCK_TIME_NONE
  + video-overlay-composition: Declare the video/size/orientation
    tags for the meta &amp; implement scale transformation
  + Various fixes found from adding extra warning flags</changelog>
  <changelog author="alarrosa@suse.com" date="1741780800">- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    &amp; PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + Some other changes include:
  - New AV1 caps utility functions for AV1 Codec Configuration
    Record codec_data handling
  - The GstEncodingProfile (de)serialization functions are now
    public
  - GstEncodingProfile gained a way to specify a factory-name
    when specifying caps. In some cases you want to ensure that
    a specific element factory is used while requiring some
    specific caps, but this was not possible so far. You can now
    do e.g. qtmux:video/x-prores,variant=standard|factory-name=avenc_prores_ks
    to ensure that the avenc_prores_ks factory is used to produce
    the variant of prores video stream.
  + For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.26/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1746014400">- Update to version 1.26.1:
  + Ensure properties are freed before (re)setting with
    g_value_dup_string() and during cleanup
  + alsadeviceprovider: Fix leak of Alsa longname
  + audioaggregator: fix error added in !8416 when chaining up
  + audiobasesink: Fix custom slaving driftsamples calculation and
    add custom audio clock slaving callback example
  + decodebin3:
  - Don't avoid parsebin even if we have a matching decoder
  - Doesn't plug parsebin for AAC from tsdemux
  + gl: eglimage: warn the reason of export failure
  + glcolorconvert:
  - Fix YUVA&lt;-&gt;RGBA conversions
  - Regression when rendering alpha vp9
  + gldownload: Unref glcontext after usage
  + meson.build: test for and link against libatomic if it exists
  + oggdemux: Don't push new packets if there is a pending seek
  + urisourcebin:
  - Make parsebin activation more reliable
  - Deadlock between parsebin and typefind
  + videoencoder: Use the correct segment and buffer timestamp in
    the chain function
  + videotimecode: Fix conversion of timecode to datetime with
    drop-frame timecodes and handle 119.88 fps correctly in all
    places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748779200">- Update to version 1.26.2:
  + alsa: Avoid infinite loop in DSD rate detection
  + gl: Implement basetransform meta transform function
  + glshader: free shader on stop
  + glupload: Only add texture-target field to GL caps
  + gstaudioutilsprivate: Fix gcc 15 compiler error with function
    pointer
  + mikey: Avoid infinite loop while parsing MIKEY payload with
    unhandled payload types
  + properties: add G_PARAM_STATIC_STRINGS where missing
  + riff-media: fix MS and DVI ADPCM av_bps calculations
  + subtitleoverlay: Remove 0.10 hardware caps handling
  + subtitleoverlay: Missing support for DMABuf(?)
  + tests: opus: Update channel support and add to meson
  + textoverlay: fix shading for RGBx / RGBA pixel format variants
  + textoverlay background is wrong while cropping
  + uridecodebin3: Don't hold play items lock while releasing pads
  + uridecodebin3: deadlock on PLAY_ITEMS_LOCK
  + Fix new warnings on Fedora 42, various meson warnings, and
    other small meson build/wrap fixes
  + Fix Qt detection in various places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751371200">- Update to version 1.26.3:
  + GstAudioAggregator: fix structure unref in peek_next_sample()
  + audioconvert: Fix setting mix-matrix when input caps changes
  + encodebasebin: Duplicate encoding profile in property setter
  + gl: simplify private
    gst_gl_gst_meta_api_type_tags_contain_only()
  + osxvideosink: Use gst_pad_push_event() and post navigation
    messages
  + playsink: Fix race condition in stream synchronizer pad cleanup
    during state changes
  + python: Fix pulling events from appsink
  + streamsynchronizer: Consider streams having received
    stream-start as waiting
  + urisourcebin: Text tracks are no longer set as sparse stream in
    urisourcebin's multiqueue</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753358400">- Update to version 1.26.4:
  + Revert "streamsynchronizer: Consider streams having received
    stream-start as waiting"
  + alsa: free conf cache under valgrind
  + gst-device-monitor: Fix caps filter splitting
  + Fix various valgrind/test errors when GST_DEBUG is enabled
  + More valgrind and test fixes
  + Various ASAN fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755000000">- Update to version 1.26.5:
  + audioconvert: mix-matrix causes caps negotiation failure
  + decodebin3: Don't error on an incoming ONVIF metadata stream
  + gloverlay: Recompute geometry when caps change, and load
    texture after stopping and starting again
  + uridecodebin3: Add missing locking and NULL checks when adding
    URIs to messages
  + uridecodebin3: segfault in update_message_with_uri() if no
    decoder available
  + videorate, imagefreeze: add support for JPEG XS
  + gst-device-monitor-1.0: Add shell quoting for launch lines
  + gst-device-monitor-1.0: Fix criticals, and also accept utf8 in
    launch lines
  + gst-device-monitor-1.0: Use gst_print instead of g_print</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757937600">- Update to version 1.26.6:
  + decodebin3: Update stream tags
  + rtpbasedepayload: Avoid potential use-after free
  + rtspconnection: Add get_url and get_ip return value annotation
  + gst_rtsp_connection_get_url return value transfer annotation
    missing
  + videometa: Fix valgrind warning when deserializing video meta
  + videorate: don't hold the reference to the buffer in drop-only
    mode
  + gst-device-monitor-1.0: Fix device-path regression on Windows
  + gst-device-monitor-1.0: Add quoting for powershell and cmd
  + Monorepo: opengl, vorbis, plugins require explicit enablement
    now for a build using the Meson subproject fallback</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760616000">- Update to version 1.26.7:
  + discoverer: Mark gst_discoverer_stream_info_list_free() as
    transfer full
  + riff: Add channel reorder maps for 3 and 7 channel audio
  + sdp: proper usage of gst_buffer_append
  + videorate: fix assert fail due to invalid buffer duration
  + Fix build error with glib &lt; 2.68</changelog>
</package>
<package pkgid="de54039533ecdd05aad04569c01071e8221957b88eebe779768df26f9be1ac51deaf656a1f14a9ffd561e12c3ea95e547b4d47e49b590ab736756a153c277fe8" name="libgsttag-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 1.24.12:
  + oggdemux: fixes seeking in some cases by not overwriting a
    valid duration with CLOCK_TIME_NONE
  + video-overlay-composition: Declare the video/size/orientation
    tags for the meta &amp; implement scale transformation
  + Various fixes found from adding extra warning flags</changelog>
  <changelog author="alarrosa@suse.com" date="1741780800">- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    &amp; PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + Some other changes include:
  - New AV1 caps utility functions for AV1 Codec Configuration
    Record codec_data handling
  - The GstEncodingProfile (de)serialization functions are now
    public
  - GstEncodingProfile gained a way to specify a factory-name
    when specifying caps. In some cases you want to ensure that
    a specific element factory is used while requiring some
    specific caps, but this was not possible so far. You can now
    do e.g. qtmux:video/x-prores,variant=standard|factory-name=avenc_prores_ks
    to ensure that the avenc_prores_ks factory is used to produce
    the variant of prores video stream.
  + For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.26/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1746014400">- Update to version 1.26.1:
  + Ensure properties are freed before (re)setting with
    g_value_dup_string() and during cleanup
  + alsadeviceprovider: Fix leak of Alsa longname
  + audioaggregator: fix error added in !8416 when chaining up
  + audiobasesink: Fix custom slaving driftsamples calculation and
    add custom audio clock slaving callback example
  + decodebin3:
  - Don't avoid parsebin even if we have a matching decoder
  - Doesn't plug parsebin for AAC from tsdemux
  + gl: eglimage: warn the reason of export failure
  + glcolorconvert:
  - Fix YUVA&lt;-&gt;RGBA conversions
  - Regression when rendering alpha vp9
  + gldownload: Unref glcontext after usage
  + meson.build: test for and link against libatomic if it exists
  + oggdemux: Don't push new packets if there is a pending seek
  + urisourcebin:
  - Make parsebin activation more reliable
  - Deadlock between parsebin and typefind
  + videoencoder: Use the correct segment and buffer timestamp in
    the chain function
  + videotimecode: Fix conversion of timecode to datetime with
    drop-frame timecodes and handle 119.88 fps correctly in all
    places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748779200">- Update to version 1.26.2:
  + alsa: Avoid infinite loop in DSD rate detection
  + gl: Implement basetransform meta transform function
  + glshader: free shader on stop
  + glupload: Only add texture-target field to GL caps
  + gstaudioutilsprivate: Fix gcc 15 compiler error with function
    pointer
  + mikey: Avoid infinite loop while parsing MIKEY payload with
    unhandled payload types
  + properties: add G_PARAM_STATIC_STRINGS where missing
  + riff-media: fix MS and DVI ADPCM av_bps calculations
  + subtitleoverlay: Remove 0.10 hardware caps handling
  + subtitleoverlay: Missing support for DMABuf(?)
  + tests: opus: Update channel support and add to meson
  + textoverlay: fix shading for RGBx / RGBA pixel format variants
  + textoverlay background is wrong while cropping
  + uridecodebin3: Don't hold play items lock while releasing pads
  + uridecodebin3: deadlock on PLAY_ITEMS_LOCK
  + Fix new warnings on Fedora 42, various meson warnings, and
    other small meson build/wrap fixes
  + Fix Qt detection in various places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751371200">- Update to version 1.26.3:
  + GstAudioAggregator: fix structure unref in peek_next_sample()
  + audioconvert: Fix setting mix-matrix when input caps changes
  + encodebasebin: Duplicate encoding profile in property setter
  + gl: simplify private
    gst_gl_gst_meta_api_type_tags_contain_only()
  + osxvideosink: Use gst_pad_push_event() and post navigation
    messages
  + playsink: Fix race condition in stream synchronizer pad cleanup
    during state changes
  + python: Fix pulling events from appsink
  + streamsynchronizer: Consider streams having received
    stream-start as waiting
  + urisourcebin: Text tracks are no longer set as sparse stream in
    urisourcebin's multiqueue</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753358400">- Update to version 1.26.4:
  + Revert "streamsynchronizer: Consider streams having received
    stream-start as waiting"
  + alsa: free conf cache under valgrind
  + gst-device-monitor: Fix caps filter splitting
  + Fix various valgrind/test errors when GST_DEBUG is enabled
  + More valgrind and test fixes
  + Various ASAN fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755000000">- Update to version 1.26.5:
  + audioconvert: mix-matrix causes caps negotiation failure
  + decodebin3: Don't error on an incoming ONVIF metadata stream
  + gloverlay: Recompute geometry when caps change, and load
    texture after stopping and starting again
  + uridecodebin3: Add missing locking and NULL checks when adding
    URIs to messages
  + uridecodebin3: segfault in update_message_with_uri() if no
    decoder available
  + videorate, imagefreeze: add support for JPEG XS
  + gst-device-monitor-1.0: Add shell quoting for launch lines
  + gst-device-monitor-1.0: Fix criticals, and also accept utf8 in
    launch lines
  + gst-device-monitor-1.0: Use gst_print instead of g_print</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757937600">- Update to version 1.26.6:
  + decodebin3: Update stream tags
  + rtpbasedepayload: Avoid potential use-after free
  + rtspconnection: Add get_url and get_ip return value annotation
  + gst_rtsp_connection_get_url return value transfer annotation
    missing
  + videometa: Fix valgrind warning when deserializing video meta
  + videorate: don't hold the reference to the buffer in drop-only
    mode
  + gst-device-monitor-1.0: Fix device-path regression on Windows
  + gst-device-monitor-1.0: Add quoting for powershell and cmd
  + Monorepo: opengl, vorbis, plugins require explicit enablement
    now for a build using the Meson subproject fallback</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760616000">- Update to version 1.26.7:
  + discoverer: Mark gst_discoverer_stream_info_list_free() as
    transfer full
  + riff: Add channel reorder maps for 3 and 7 channel audio
  + sdp: proper usage of gst_buffer_append
  + videorate: fix assert fail due to invalid buffer duration
  + Fix build error with glib &lt; 2.68</changelog>
</package>
<package pkgid="c2c5ab2f6e5447d7d37e2408958d399cbb759fb7649a54083d4e70eae0b01d976fb1ac4ec86d659ec70cd477649f8517ced6970b683ab55532af71b3fc7a3332" name="libgstvideo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 1.24.12:
  + oggdemux: fixes seeking in some cases by not overwriting a
    valid duration with CLOCK_TIME_NONE
  + video-overlay-composition: Declare the video/size/orientation
    tags for the meta &amp; implement scale transformation
  + Various fixes found from adding extra warning flags</changelog>
  <changelog author="alarrosa@suse.com" date="1741780800">- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    &amp; PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + Some other changes include:
  - New AV1 caps utility functions for AV1 Codec Configuration
    Record codec_data handling
  - The GstEncodingProfile (de)serialization functions are now
    public
  - GstEncodingProfile gained a way to specify a factory-name
    when specifying caps. In some cases you want to ensure that
    a specific element factory is used while requiring some
    specific caps, but this was not possible so far. You can now
    do e.g. qtmux:video/x-prores,variant=standard|factory-name=avenc_prores_ks
    to ensure that the avenc_prores_ks factory is used to produce
    the variant of prores video stream.
  + For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.26/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1746014400">- Update to version 1.26.1:
  + Ensure properties are freed before (re)setting with
    g_value_dup_string() and during cleanup
  + alsadeviceprovider: Fix leak of Alsa longname
  + audioaggregator: fix error added in !8416 when chaining up
  + audiobasesink: Fix custom slaving driftsamples calculation and
    add custom audio clock slaving callback example
  + decodebin3:
  - Don't avoid parsebin even if we have a matching decoder
  - Doesn't plug parsebin for AAC from tsdemux
  + gl: eglimage: warn the reason of export failure
  + glcolorconvert:
  - Fix YUVA&lt;-&gt;RGBA conversions
  - Regression when rendering alpha vp9
  + gldownload: Unref glcontext after usage
  + meson.build: test for and link against libatomic if it exists
  + oggdemux: Don't push new packets if there is a pending seek
  + urisourcebin:
  - Make parsebin activation more reliable
  - Deadlock between parsebin and typefind
  + videoencoder: Use the correct segment and buffer timestamp in
    the chain function
  + videotimecode: Fix conversion of timecode to datetime with
    drop-frame timecodes and handle 119.88 fps correctly in all
    places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748779200">- Update to version 1.26.2:
  + alsa: Avoid infinite loop in DSD rate detection
  + gl: Implement basetransform meta transform function
  + glshader: free shader on stop
  + glupload: Only add texture-target field to GL caps
  + gstaudioutilsprivate: Fix gcc 15 compiler error with function
    pointer
  + mikey: Avoid infinite loop while parsing MIKEY payload with
    unhandled payload types
  + properties: add G_PARAM_STATIC_STRINGS where missing
  + riff-media: fix MS and DVI ADPCM av_bps calculations
  + subtitleoverlay: Remove 0.10 hardware caps handling
  + subtitleoverlay: Missing support for DMABuf(?)
  + tests: opus: Update channel support and add to meson
  + textoverlay: fix shading for RGBx / RGBA pixel format variants
  + textoverlay background is wrong while cropping
  + uridecodebin3: Don't hold play items lock while releasing pads
  + uridecodebin3: deadlock on PLAY_ITEMS_LOCK
  + Fix new warnings on Fedora 42, various meson warnings, and
    other small meson build/wrap fixes
  + Fix Qt detection in various places</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751371200">- Update to version 1.26.3:
  + GstAudioAggregator: fix structure unref in peek_next_sample()
  + audioconvert: Fix setting mix-matrix when input caps changes
  + encodebasebin: Duplicate encoding profile in property setter
  + gl: simplify private
    gst_gl_gst_meta_api_type_tags_contain_only()
  + osxvideosink: Use gst_pad_push_event() and post navigation
    messages
  + playsink: Fix race condition in stream synchronizer pad cleanup
    during state changes
  + python: Fix pulling events from appsink
  + streamsynchronizer: Consider streams having received
    stream-start as waiting
  + urisourcebin: Text tracks are no longer set as sparse stream in
    urisourcebin's multiqueue</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753358400">- Update to version 1.26.4:
  + Revert "streamsynchronizer: Consider streams having received
    stream-start as waiting"
  + alsa: free conf cache under valgrind
  + gst-device-monitor: Fix caps filter splitting
  + Fix various valgrind/test errors when GST_DEBUG is enabled
  + More valgrind and test fixes
  + Various ASAN fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755000000">- Update to version 1.26.5:
  + audioconvert: mix-matrix causes caps negotiation failure
  + decodebin3: Don't error on an incoming ONVIF metadata stream
  + gloverlay: Recompute geometry when caps change, and load
    texture after stopping and starting again
  + uridecodebin3: Add missing locking and NULL checks when adding
    URIs to messages
  + uridecodebin3: segfault in update_message_with_uri() if no
    decoder available
  + videorate, imagefreeze: add support for JPEG XS
  + gst-device-monitor-1.0: Add shell quoting for launch lines
  + gst-device-monitor-1.0: Fix criticals, and also accept utf8 in
    launch lines
  + gst-device-monitor-1.0: Use gst_print instead of g_print</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757937600">- Update to version 1.26.6:
  + decodebin3: Update stream tags
  + rtpbasedepayload: Avoid potential use-after free
  + rtspconnection: Add get_url and get_ip return value annotation
  + gst_rtsp_connection_get_url return value transfer annotation
    missing
  + videometa: Fix valgrind warning when deserializing video meta
  + videorate: don't hold the reference to the buffer in drop-only
    mode
  + gst-device-monitor-1.0: Fix device-path regression on Windows
  + gst-device-monitor-1.0: Add quoting for powershell and cmd
  + Monorepo: opengl, vorbis, plugins require explicit enablement
    now for a build using the Meson subproject fallback</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760616000">- Update to version 1.26.7:
  + discoverer: Mark gst_discoverer_stream_info_list_free() as
    transfer full
  + riff: Add channel reorder maps for 3 and 7 channel audio
  + sdp: proper usage of gst_buffer_append
  + videorate: fix assert fail due to invalid buffer duration
  + Fix build error with glib &lt; 2.68</changelog>
</package>
<package pkgid="5e34fa5e2d50c7e8adb717fd31b4810538fe02d6a6db57098969bb959d3c81bd8083cf3918b027105bdfc512700f5925b26037b4c178caa64a7f6331980afc08" name="libgtk-3-0" arch="x86_64">
  <version epoch="0" ver="3.24.49+14" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1705579200">- Update to version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Update to version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Update to version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1720699200">- Update to version 3.24.43:
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729166400">- Eliminate usage of update-alternatives: GTK2 no longer provides
  gtk-update-icon-cache, thus eliminating the need for this extra
  complexity.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1737806400">- Update to version 3.24.48:
  + GtkFileChooser: Stop replacing : (colon) with U+2236 (ratio)
  + GtkEmojiChooser: Update to Unicode 16 / CLDR 46
  + GtkSpinButton:
  - Use semantically appropriate icon names
  - Make numeric spin buttons always LTR
  + GtkEntry:
  - Stop guessing text direction from keyboard layout
  - Add a shortcut and context menu item to change text direction
  + GtkEventControllerMotion: Make enter and leave signals work
  + Accessibility: Use message dialog titles as names
  + GDK: Fix portal handling of gvfs files
  + Wayland:
  - Support the xdg_foreign_v2 protocol
  - Try to fix monitor geometry on sway
  - Improve font setting fallback
  - Use a better default cursor size
  - Fix a crash during DND
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738584000">- Fix %filetriggerpostun for icon cache: ensure the icons that have
  just been removed are also cleared from the cache. We can't
  shortcut on upgrades, even though this would be nice. In context
  of RPM 4.20 this started breaking (boo#1236740).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 3.24.49:
  + Fix a crash in GtkIMContext
  + Fix crashes in DND with GtkPlug/GtkSocket
  + Wayland:
  - Fix erroneous crossing events, causing menus to malfunction
  - Support the cursor-shape protocol
  + X11: Enforce size limits on windows, preventing lockups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1743422400">- Update to version 3.24.49+14:
  + widget: Explicitly annotate visible's getter.</changelog>
</package>
<package pkgid="4ba6195724401de97ffc3cb2814a2c60ac8f704008bc07d1bd3bfe8669b2df410ef498981121364f99f2f6dfcc82f7929d2388afa576783aee390a1e058c6533" name="libgudev-1_0-0" arch="x86_64">
  <version epoch="0" ver="238" rel="160000.3.2"/>
  <changelog author="fbui@suse.com" date="1458648000">- Import libgudev from Factory to SLE (fate#320658):
  new versions of systemd doesn't ship libgudev anymore and a
  dedicated package has been created and should be used instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 231:
  + Fix a bug in the enumerator to ensure that client subsystems
    are implicitly matched.
  + Require a newer GLib to simplify some code.
- Add disabled pkgconfig(umockdev-1.0) BuildRequires, new
  optional dependency, that is enabled by default upstream, but
  unfortunatly not yet available in openSUSE.
- Following the above: pass --disable-umockdev to configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 232:
  + Fix crash on plenty of architectures in the test suite.
  + Add g_autoptr automatic clean up for libgudev objects.
- Tweak package description a bit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564833600">- Update to version 233:
  + Require glib 2.38.
  + Small documentation updates.
  + Remove gnome-common build dependency.
- Use modern macros.</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 234:
  * Clarify that _get_sysfs_attr() functions are cached
  * Add functions to get uncached sysfs attributes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629028800">- Update to version 237:
  + Fix reading double precision floats from sysfs attributes in
    locales that use comma as a separator
  + Fix compilation warning
  + Fix headers to help with build reproducibility
  + Clarify licensing information
- Changes from version 236:
  + Fix meson project name to match autotools.
- Changes from version 235:
  + Port build system to meson and remove autotools
  + Fix conversion of sysfs attributes to boolean.
- Add meson BuildRequires and macros following upstreams port.
- Enable pkgconfig(umockdev-1.0) BuildRequires and test macro.
- Update Licence tag to LGPL-2.1-or-later.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- add explicit glibc-locale buildrequires for passing the testsuite (bsc#1195390)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Add 2 upstream bug fix patches:
  * 71b2fda04dd71c637361e8ead103980ad6f27ed5.patch: gudev: Fix
    newline stripping by always reading using udev.
  * 4216ecd4513bd4c8af73543817a51d6f72f166cc.patch: build: let
    meson handle gir, vala, gtk-doc dependencies
- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 238:
  * Fix newline stripping
  * Add g_udev_device_get_current_tags()
  * Add a number of tests, and devel docs
  * Fix devhelp not being able to find the docs
  * Skip locale test with locale isn't available
- Drop patches fixed upstream:
  * 71b2fda04dd71c637361e8ead103980ad6f27ed5.patch
  * 4216ecd4513bd4c8af73543817a51d6f72f166cc.patch</changelog>
</package>
<package pkgid="bee9d08c15a0bd27fdbfa7f8267f5d66012b293c47a619439ade4651b0e0b5a4232d3a5e752308fe29208a78cd1086dde9fe43d247d7a2fe10835614af57719c" name="libguestfs" arch="x86_64">
  <version epoch="0" ver="1.56.1" rel="160000.2.2"/>
  <changelog author="carnold@suse.com" date="1746014400">- bsc#1242082 - libguestfs: migration to fuse 3 and deprecation of
  fuse (1)
  use-fuse3-for-build.patch
- Update to version 1.55.10 (jsc#PED-8910)
  * mltools: decouple and simplify osinfo device support checks
  * mlcustomize: disable `--inject-virtio-win osinfo`
  * mltools: Fix de-oUnit-ized tests
  * mltools: Unreference various objects
  * Revert "mltools: Unreference various objects"
  * generator: Implement struct FDevice type
  * mltools: Fix memory leak in OCaml binding of libosinfo
  * mlstdutils: Implement String.implode
  * daemon: Rewrite {pvs,vgs,lvs}-full APIs in OCaml
  * daemon: inspect: Resolve Ubuntu 22+ /dev/disk/by-id/dm-uuid-LVM-... in fstab
  * Various build improvements
  * daemon/fstrim.c: Issue sync_disks after fstri</changelog>
  <changelog author="dimstar@opensuse.org" date="1747051200">- Use FUSE3 starting with suse_version 1600 (aka CODE16): Release
  CODE16 from the beginning without relying on FUSE 2.
- Do not add the patch conditionally to the .src.rpm, but only
  apply the patch conditionally: allows to reuse src.rpm across
  codestreams.</changelog>
  <changelog author="carnold@suse.com" date="1747137600">- Update to version 1.55.11 (jsc#PED-12706)
  * daemon/fstrim.c: Run the fstrim command twice
  * lib/create.c: Fix check after BLKDISCARD
  * daemon: inspect: Remove duplicate root mountpoints in /etc/fstab</changelog>
  <changelog author="carnold@suse.com" date="1747828800">- Update to version 1.55.13 (jsc#PED-12706)
  * appliance: Remove zfs-fuse
  * Various updates to common submodule
  * ocaml-dep.sh.in: Remove mlgettext subdirectory
  * New API: Replace btrfs-fsck with btrfs-scrub-full
  * daemon: Implement e2fsck -n flag (as FORCENO option)</changelog>
  <changelog author="carnold@suse.com" date="1748347200">- bsc#1243351 - guestfs-appliance still requires ISC dhcp
  Conditionally replace usage of dhcp-client with dhcpcd in
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1748433600">- Upstream bug fix for BTRFS based images (SLES and openSUSE)
  004-Add-more-debugging-to-list_filesystems.patch
  005-Pipeline-style-when-mapping-and-filtering-filesystems.patch
  007-inspection-Ignore-btrfs-snapshots-of-roots.patch
- Adjustment to use fusermount3 when fuse3 is required by distro.
  use-fuse3-for-build.patch</changelog>
  <changelog author="carnold@suse.com" date="1749211200">- Update to version 1.55.14 (jsc#PED-12706)
  * lib/create.c: Capture and raise qemu-img stderr
  * inspection: Ignore btrfs snapshots of roots
- Drop patches contained in new tarball
  004-Add-more-debugging-to-list_filesystems.patch
  005-Pipeline-style-when-mapping-and-filtering-filesystems.patch
  007-inspection-Ignore-btrfs-snapshots-of-roots.patch</changelog>
  <changelog author="carnold@suse.com" date="1749643200">- Update to version 1.56.0 (jsc#PED-12706)
  * Add support for Windows 2025 (thanks Ming Xie).
  * Add support for TencentOS (Denise Cheng).
  * Inspection of Ubuntu 22+ guests that use a split /usr
    configuration now works properly (thanks Jaroslav Spanko,
    Daniel Berrange).
  * Inspecting guests that have duplicated root mountpoints now
    works.
  * Inspection of SUSE Linux guests using btrfs snapshots now
    ignores snapshots that mirror content in the root filesystem
    (thanks Ming Xie).
  * Inspection of SUSE Linux &gt;= 15 now returns the correct osinfo
    short name (eg. "sle15") (thanks Ming Xie).
  * New command_out and sh_out APIs which allow you to capture
    output from guest commands that generate more output than the
    protocol limit allows.
  * New btrfs_scrub_full API which runs a full Btrfs scrub,
    synchronously. It works more like fsck for other filesystems.
  * The fstrim API has been modified to work around several issues
    in upstream and RHEL 9 kernels related to XFS support (Eric
    Sandeen, Dave Chinner).
  * The existing e2fsck API has a new FORCENO option enabling use
    of the command line -n flag.
  * json-c is now required. This replaces Jansson which was
    previously used for parsing JSON input files.
  * OCaml ≥ 4.08 is now required.
  * When using ./configure --disable-daemon we no longer require
    augeas and hivex (thanks Mohamed Akram).
  * zfs-fuse support has been dropped. The project is unmaintained
    upstream (thanks Paul Bolle, Gwyn Ciesla, Timothée Ravier).
  * Fix compatibility with GNU gettext 0.25.
  * Fix dhcpcd failing on systemd-resolved stub (Thomas Wouters).
  * Add support for dhcpcd and sfdisk on Debian (Daniel Gomez).
  * Print the kernel utsname in debug output.
  * We no longer emit a false warning about BLKDISCARD when
    creating a block device.
  * If qemu-img(1) commands fail during snapshot creation, make
    sure we capture and print stderr from the qemu command (Cole
    Robinson).
  * For a complete list of changes and bug fixes see,
    https://libguestfs.org/guestfs-release-notes-1.56.1.html
- bsc#1216986 - libguestfs: embeds /etc/hosts
  reproducible-builds.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749816000">- Drop gzip mtime from base.tar.gz (bsc#1216986)</changelog>
  <changelog author="carnold@suse.com" date="1750766400">- Update to version 1.56.1 (jsc#PED-12706)
  * lib: Enable ACPI for the libvirt backend for x86_64 and arm
- Only build the inspect-icons RPM for Tumbleweed. Tumbleweed is
  the only place where icoutils package exists which it requires.</changelog>
</package>
<package pkgid="1485cad7a7926229005b448498a21b34511785947dbf1eb4cda22362a96dd04dd534b272826199755253b4b5334e8b53036fdad614da1ac966cca4ea7b2ec201" name="libguestfs-appliance" arch="x86_64">
  <version epoch="0" ver="1.56.1" rel="160000.2.2"/>
  <changelog author="carnold@suse.com" date="1746014400">- bsc#1242082 - libguestfs: migration to fuse 3 and deprecation of
  fuse (1)
  use-fuse3-for-build.patch
- Update to version 1.55.10 (jsc#PED-8910)
  * mltools: decouple and simplify osinfo device support checks
  * mlcustomize: disable `--inject-virtio-win osinfo`
  * mltools: Fix de-oUnit-ized tests
  * mltools: Unreference various objects
  * Revert "mltools: Unreference various objects"
  * generator: Implement struct FDevice type
  * mltools: Fix memory leak in OCaml binding of libosinfo
  * mlstdutils: Implement String.implode
  * daemon: Rewrite {pvs,vgs,lvs}-full APIs in OCaml
  * daemon: inspect: Resolve Ubuntu 22+ /dev/disk/by-id/dm-uuid-LVM-... in fstab
  * Various build improvements
  * daemon/fstrim.c: Issue sync_disks after fstri</changelog>
  <changelog author="dimstar@opensuse.org" date="1747051200">- Use FUSE3 starting with suse_version 1600 (aka CODE16): Release
  CODE16 from the beginning without relying on FUSE 2.
- Do not add the patch conditionally to the .src.rpm, but only
  apply the patch conditionally: allows to reuse src.rpm across
  codestreams.</changelog>
  <changelog author="carnold@suse.com" date="1747137600">- Update to version 1.55.11 (jsc#PED-12706)
  * daemon/fstrim.c: Run the fstrim command twice
  * lib/create.c: Fix check after BLKDISCARD
  * daemon: inspect: Remove duplicate root mountpoints in /etc/fstab</changelog>
  <changelog author="carnold@suse.com" date="1747828800">- Update to version 1.55.13 (jsc#PED-12706)
  * appliance: Remove zfs-fuse
  * Various updates to common submodule
  * ocaml-dep.sh.in: Remove mlgettext subdirectory
  * New API: Replace btrfs-fsck with btrfs-scrub-full
  * daemon: Implement e2fsck -n flag (as FORCENO option)</changelog>
  <changelog author="carnold@suse.com" date="1748347200">- bsc#1243351 - guestfs-appliance still requires ISC dhcp
  Conditionally replace usage of dhcp-client with dhcpcd in
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1748433600">- Upstream bug fix for BTRFS based images (SLES and openSUSE)
  004-Add-more-debugging-to-list_filesystems.patch
  005-Pipeline-style-when-mapping-and-filtering-filesystems.patch
  007-inspection-Ignore-btrfs-snapshots-of-roots.patch
- Adjustment to use fusermount3 when fuse3 is required by distro.
  use-fuse3-for-build.patch</changelog>
  <changelog author="carnold@suse.com" date="1749211200">- Update to version 1.55.14 (jsc#PED-12706)
  * lib/create.c: Capture and raise qemu-img stderr
  * inspection: Ignore btrfs snapshots of roots
- Drop patches contained in new tarball
  004-Add-more-debugging-to-list_filesystems.patch
  005-Pipeline-style-when-mapping-and-filtering-filesystems.patch
  007-inspection-Ignore-btrfs-snapshots-of-roots.patch</changelog>
  <changelog author="carnold@suse.com" date="1749643200">- Update to version 1.56.0 (jsc#PED-12706)
  * Add support for Windows 2025 (thanks Ming Xie).
  * Add support for TencentOS (Denise Cheng).
  * Inspection of Ubuntu 22+ guests that use a split /usr
    configuration now works properly (thanks Jaroslav Spanko,
    Daniel Berrange).
  * Inspecting guests that have duplicated root mountpoints now
    works.
  * Inspection of SUSE Linux guests using btrfs snapshots now
    ignores snapshots that mirror content in the root filesystem
    (thanks Ming Xie).
  * Inspection of SUSE Linux &gt;= 15 now returns the correct osinfo
    short name (eg. "sle15") (thanks Ming Xie).
  * New command_out and sh_out APIs which allow you to capture
    output from guest commands that generate more output than the
    protocol limit allows.
  * New btrfs_scrub_full API which runs a full Btrfs scrub,
    synchronously. It works more like fsck for other filesystems.
  * The fstrim API has been modified to work around several issues
    in upstream and RHEL 9 kernels related to XFS support (Eric
    Sandeen, Dave Chinner).
  * The existing e2fsck API has a new FORCENO option enabling use
    of the command line -n flag.
  * json-c is now required. This replaces Jansson which was
    previously used for parsing JSON input files.
  * OCaml ≥ 4.08 is now required.
  * When using ./configure --disable-daemon we no longer require
    augeas and hivex (thanks Mohamed Akram).
  * zfs-fuse support has been dropped. The project is unmaintained
    upstream (thanks Paul Bolle, Gwyn Ciesla, Timothée Ravier).
  * Fix compatibility with GNU gettext 0.25.
  * Fix dhcpcd failing on systemd-resolved stub (Thomas Wouters).
  * Add support for dhcpcd and sfdisk on Debian (Daniel Gomez).
  * Print the kernel utsname in debug output.
  * We no longer emit a false warning about BLKDISCARD when
    creating a block device.
  * If qemu-img(1) commands fail during snapshot creation, make
    sure we capture and print stderr from the qemu command (Cole
    Robinson).
  * For a complete list of changes and bug fixes see,
    https://libguestfs.org/guestfs-release-notes-1.56.1.html
- bsc#1216986 - libguestfs: embeds /etc/hosts
  reproducible-builds.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749816000">- Drop gzip mtime from base.tar.gz (bsc#1216986)</changelog>
  <changelog author="carnold@suse.com" date="1750766400">- Update to version 1.56.1 (jsc#PED-12706)
  * lib: Enable ACPI for the libvirt backend for x86_64 and arm
- Only build the inspect-icons RPM for Tumbleweed. Tumbleweed is
  the only place where icoutils package exists which it requires.</changelog>
</package>
<package pkgid="fe660f29fcad5236ddadc4acc25246f5262439b74115269df6edb3b798e6d583cafdd4c20af9410432e1ad69323e34f96417472e8a783787c36171d0ddf8b6df" name="libguestfs0" arch="x86_64">
  <version epoch="0" ver="1.56.1" rel="160000.2.2"/>
  <changelog author="carnold@suse.com" date="1746014400">- bsc#1242082 - libguestfs: migration to fuse 3 and deprecation of
  fuse (1)
  use-fuse3-for-build.patch
- Update to version 1.55.10 (jsc#PED-8910)
  * mltools: decouple and simplify osinfo device support checks
  * mlcustomize: disable `--inject-virtio-win osinfo`
  * mltools: Fix de-oUnit-ized tests
  * mltools: Unreference various objects
  * Revert "mltools: Unreference various objects"
  * generator: Implement struct FDevice type
  * mltools: Fix memory leak in OCaml binding of libosinfo
  * mlstdutils: Implement String.implode
  * daemon: Rewrite {pvs,vgs,lvs}-full APIs in OCaml
  * daemon: inspect: Resolve Ubuntu 22+ /dev/disk/by-id/dm-uuid-LVM-... in fstab
  * Various build improvements
  * daemon/fstrim.c: Issue sync_disks after fstri</changelog>
  <changelog author="dimstar@opensuse.org" date="1747051200">- Use FUSE3 starting with suse_version 1600 (aka CODE16): Release
  CODE16 from the beginning without relying on FUSE 2.
- Do not add the patch conditionally to the .src.rpm, but only
  apply the patch conditionally: allows to reuse src.rpm across
  codestreams.</changelog>
  <changelog author="carnold@suse.com" date="1747137600">- Update to version 1.55.11 (jsc#PED-12706)
  * daemon/fstrim.c: Run the fstrim command twice
  * lib/create.c: Fix check after BLKDISCARD
  * daemon: inspect: Remove duplicate root mountpoints in /etc/fstab</changelog>
  <changelog author="carnold@suse.com" date="1747828800">- Update to version 1.55.13 (jsc#PED-12706)
  * appliance: Remove zfs-fuse
  * Various updates to common submodule
  * ocaml-dep.sh.in: Remove mlgettext subdirectory
  * New API: Replace btrfs-fsck with btrfs-scrub-full
  * daemon: Implement e2fsck -n flag (as FORCENO option)</changelog>
  <changelog author="carnold@suse.com" date="1748347200">- bsc#1243351 - guestfs-appliance still requires ISC dhcp
  Conditionally replace usage of dhcp-client with dhcpcd in
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1748433600">- Upstream bug fix for BTRFS based images (SLES and openSUSE)
  004-Add-more-debugging-to-list_filesystems.patch
  005-Pipeline-style-when-mapping-and-filtering-filesystems.patch
  007-inspection-Ignore-btrfs-snapshots-of-roots.patch
- Adjustment to use fusermount3 when fuse3 is required by distro.
  use-fuse3-for-build.patch</changelog>
  <changelog author="carnold@suse.com" date="1749211200">- Update to version 1.55.14 (jsc#PED-12706)
  * lib/create.c: Capture and raise qemu-img stderr
  * inspection: Ignore btrfs snapshots of roots
- Drop patches contained in new tarball
  004-Add-more-debugging-to-list_filesystems.patch
  005-Pipeline-style-when-mapping-and-filtering-filesystems.patch
  007-inspection-Ignore-btrfs-snapshots-of-roots.patch</changelog>
  <changelog author="carnold@suse.com" date="1749643200">- Update to version 1.56.0 (jsc#PED-12706)
  * Add support for Windows 2025 (thanks Ming Xie).
  * Add support for TencentOS (Denise Cheng).
  * Inspection of Ubuntu 22+ guests that use a split /usr
    configuration now works properly (thanks Jaroslav Spanko,
    Daniel Berrange).
  * Inspecting guests that have duplicated root mountpoints now
    works.
  * Inspection of SUSE Linux guests using btrfs snapshots now
    ignores snapshots that mirror content in the root filesystem
    (thanks Ming Xie).
  * Inspection of SUSE Linux &gt;= 15 now returns the correct osinfo
    short name (eg. "sle15") (thanks Ming Xie).
  * New command_out and sh_out APIs which allow you to capture
    output from guest commands that generate more output than the
    protocol limit allows.
  * New btrfs_scrub_full API which runs a full Btrfs scrub,
    synchronously. It works more like fsck for other filesystems.
  * The fstrim API has been modified to work around several issues
    in upstream and RHEL 9 kernels related to XFS support (Eric
    Sandeen, Dave Chinner).
  * The existing e2fsck API has a new FORCENO option enabling use
    of the command line -n flag.
  * json-c is now required. This replaces Jansson which was
    previously used for parsing JSON input files.
  * OCaml ≥ 4.08 is now required.
  * When using ./configure --disable-daemon we no longer require
    augeas and hivex (thanks Mohamed Akram).
  * zfs-fuse support has been dropped. The project is unmaintained
    upstream (thanks Paul Bolle, Gwyn Ciesla, Timothée Ravier).
  * Fix compatibility with GNU gettext 0.25.
  * Fix dhcpcd failing on systemd-resolved stub (Thomas Wouters).
  * Add support for dhcpcd and sfdisk on Debian (Daniel Gomez).
  * Print the kernel utsname in debug output.
  * We no longer emit a false warning about BLKDISCARD when
    creating a block device.
  * If qemu-img(1) commands fail during snapshot creation, make
    sure we capture and print stderr from the qemu command (Cole
    Robinson).
  * For a complete list of changes and bug fixes see,
    https://libguestfs.org/guestfs-release-notes-1.56.1.html
- bsc#1216986 - libguestfs: embeds /etc/hosts
  reproducible-builds.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749816000">- Drop gzip mtime from base.tar.gz (bsc#1216986)</changelog>
  <changelog author="carnold@suse.com" date="1750766400">- Update to version 1.56.1 (jsc#PED-12706)
  * lib: Enable ACPI for the libvirt backend for x86_64 and arm
- Only build the inspect-icons RPM for Tumbleweed. Tumbleweed is
  the only place where icoutils package exists which it requires.</changelog>
</package>
<package pkgid="40834e428ef19c1acd098b6a575984a442d940fedea85813a5b49af3bb76ba2db99b1d23ae273f9f868cca3b3a3d7e74ba09d8b66891ad19919b9eb6624c52d1" name="libharfbuzz-gobject0" arch="x86_64">
  <version epoch="0" ver="11.4.5" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1744891200">- Update to version 11.1.0:
  + Include bidi mirroring variants of the requested codepoints
    when subsetting. The new HB_SUBSET_FLAGS_NO_BIDI_CLOSURE can be
    used to disable this behaviour.
  + Various bug fixes.
  + Various build fixes and improvements.
  + Various test suite improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747051200">- Update to version 11.2.1:
  + Various build improvements.
  + Fix build with HB_NO_DRAW and HB_NO_PAINT.
  + Add an optional harfruzz shaper that uses HarfRuzz; an ongoing
    Rust port of HarfBuzz shaping. This shaper is mainly used for
    testing the output of the Rust implementation.
  + Fix regression that caused applying unsafe_to_break() to the
    whole buffer to be ignored.
  + Update USE data files.
  + Fix getting advances of out-of-rage glyph indices in
    DirectWrite font functions.
- Changes from version 11.2.0:
  + Painting of COLRv1 fonts without clip boxes is now about 10
    times faster.
  + Synthetic bold/slant of a sub font is now respected, instead of
    using the parent’s.
  + Glyph extents for fonts synthetic bold/slant are now accurately
    calculated.
  + Various build fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753099200">- Update to version 11.3.2:
  + Fix build with non-compliant C++11 compilers that don't
    recognize the "and" keyword.
- Changes from version 11.3.1:
  + Fix crasher in the glyph_v_origin function introduced in
    11.3.0.
- Changes from version 11.3.0:
  + Speed up handling fonts with very large number of variations.
  + Speed up getting horizontal and vertical glyph advances by up
    to 24%.
  + Significantly speed up vertical text shaping.
  + Various documentation improvements.
  + Various build improvements.
  + Various subsetting improvements.
  + Various improvements to Rust font functions (fontations
    integration) and shaper (HarfRust integration).
  + Rename harfruzz option and shaper to harfrust following
    upstream rename.
  + Implement hb_face_reference_blob() for DirectWrite font
    functions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753704000">- Update to version 11.3.3:
  + Fix bug in vertical shaping of fonts without the vmtx table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755172800">- Update to version 11.4.1:
  + Fix clang compiler warnings.
- Changes from version 11.4.0:
  + General shaping and subsetting speedups.
  + Fix in Graphite shaping backend when glyph advances became
    negative.
  + Subsetting improvements, pruning empty mark-attachment lookups.
  + Don't use the macro name _S, which is reserved by system
    liberaries.
  + Build fixes and speedup.
  + Add a kbts shaping backend that calls into the kb_text_shape
    single-header shaping library. This is purely for testing and
    performance evaluation and we do NOT recommend using it for any
    other purposes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755777600">- Update to version 11.4.2:
  + Various performance and memory usage improvements.
  + The hb-shape command line tool can now be built with the
    amalgamated harfbuzz.cc source.
  + Fix regression in handling version 2 of avar table.
  + Increase various buffer length limits for better handling of
    fonts that generate huge number of glyphs per codepoint (e.g.
    Noto Sans Duployan).
  + Improvements to the harfrust shaper for more accurate testing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755950400">- Update to version 11.4.3:
  + Make shaping fail much faster for certain malformed fonts
    (e.g., those that trigger infinite recursion).
  + Fix undefined behaviour introduced in 11.4.2.
  + Fix detection of the “Cambria Math” font when fonts are scaled,
    so the workaround for the bad MATH table constant is applied.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1756123200">- Update to version 11.4.4:
  + Fix a shaping regression affecting mark glyphs in certain
    fonts.
  + Fix pruning of mark filtering sets when subsetting fonts, which
    caused changes in shaping behaviour.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1756555200">- Update to version 11.4.5:
  + Bug fixes for “AAT” shaping, and other shaping micro
    optimizations.</changelog>
  <changelog author="mgorse@suse.com" date="1768564800">- Add harfbuzz-CVE-2026-22693.patch: fix a NULL pointer dereference
  (bsc#1256459 CVE-2026-22693).</changelog>
</package>
<package pkgid="a1a439a49e7b4afda905285225bf21add21164cc3d55ec26af00310e977bd0cfd2ab588ae877d2e53f1d491b6bc64f509cdcc63bb809d6bb11a61c7c51048a9e" name="libharfbuzz0" arch="x86_64">
  <version epoch="0" ver="11.4.5" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1744891200">- Update to version 11.1.0:
  + Include bidi mirroring variants of the requested codepoints
    when subsetting. The new HB_SUBSET_FLAGS_NO_BIDI_CLOSURE can be
    used to disable this behaviour.
  + Various bug fixes.
  + Various build fixes and improvements.
  + Various test suite improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747051200">- Update to version 11.2.1:
  + Various build improvements.
  + Fix build with HB_NO_DRAW and HB_NO_PAINT.
  + Add an optional harfruzz shaper that uses HarfRuzz; an ongoing
    Rust port of HarfBuzz shaping. This shaper is mainly used for
    testing the output of the Rust implementation.
  + Fix regression that caused applying unsafe_to_break() to the
    whole buffer to be ignored.
  + Update USE data files.
  + Fix getting advances of out-of-rage glyph indices in
    DirectWrite font functions.
- Changes from version 11.2.0:
  + Painting of COLRv1 fonts without clip boxes is now about 10
    times faster.
  + Synthetic bold/slant of a sub font is now respected, instead of
    using the parent’s.
  + Glyph extents for fonts synthetic bold/slant are now accurately
    calculated.
  + Various build fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753099200">- Update to version 11.3.2:
  + Fix build with non-compliant C++11 compilers that don't
    recognize the "and" keyword.
- Changes from version 11.3.1:
  + Fix crasher in the glyph_v_origin function introduced in
    11.3.0.
- Changes from version 11.3.0:
  + Speed up handling fonts with very large number of variations.
  + Speed up getting horizontal and vertical glyph advances by up
    to 24%.
  + Significantly speed up vertical text shaping.
  + Various documentation improvements.
  + Various build improvements.
  + Various subsetting improvements.
  + Various improvements to Rust font functions (fontations
    integration) and shaper (HarfRust integration).
  + Rename harfruzz option and shaper to harfrust following
    upstream rename.
  + Implement hb_face_reference_blob() for DirectWrite font
    functions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753704000">- Update to version 11.3.3:
  + Fix bug in vertical shaping of fonts without the vmtx table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755172800">- Update to version 11.4.1:
  + Fix clang compiler warnings.
- Changes from version 11.4.0:
  + General shaping and subsetting speedups.
  + Fix in Graphite shaping backend when glyph advances became
    negative.
  + Subsetting improvements, pruning empty mark-attachment lookups.
  + Don't use the macro name _S, which is reserved by system
    liberaries.
  + Build fixes and speedup.
  + Add a kbts shaping backend that calls into the kb_text_shape
    single-header shaping library. This is purely for testing and
    performance evaluation and we do NOT recommend using it for any
    other purposes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755777600">- Update to version 11.4.2:
  + Various performance and memory usage improvements.
  + The hb-shape command line tool can now be built with the
    amalgamated harfbuzz.cc source.
  + Fix regression in handling version 2 of avar table.
  + Increase various buffer length limits for better handling of
    fonts that generate huge number of glyphs per codepoint (e.g.
    Noto Sans Duployan).
  + Improvements to the harfrust shaper for more accurate testing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755950400">- Update to version 11.4.3:
  + Make shaping fail much faster for certain malformed fonts
    (e.g., those that trigger infinite recursion).
  + Fix undefined behaviour introduced in 11.4.2.
  + Fix detection of the “Cambria Math” font when fonts are scaled,
    so the workaround for the bad MATH table constant is applied.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1756123200">- Update to version 11.4.4:
  + Fix a shaping regression affecting mark glyphs in certain
    fonts.
  + Fix pruning of mark filtering sets when subsetting fonts, which
    caused changes in shaping behaviour.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1756555200">- Update to version 11.4.5:
  + Bug fixes for “AAT” shaping, and other shaping micro
    optimizations.</changelog>
  <changelog author="mgorse@suse.com" date="1768564800">- Add harfbuzz-CVE-2026-22693.patch: fix a NULL pointer dereference
  (bsc#1256459 CVE-2026-22693).</changelog>
</package>
<package pkgid="c463abb6ca1e0a3c9a3b1182440a088676d45cafeb8497528b66f7ecdf1874f97878946edc2f12b1cf1b70060facdecf1ef0265a5e8ee4dabf1cd3e8e4fa7504" name="libhd25" arch="x86_64">
  <version epoch="0" ver="25.1" rel="160000.1.1"/>
  <changelog author="wfeldt@opensuse.org" date="1744804800">- merge gh#openSUSE/hwinfo#158
- capture more x86 fields from /proc/cpuinfo (bsc#1241295)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744804801">- merge gh#openSUSE/hwinfo#159
- update pci, usb, and sdio data  (bsc#1241295)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744804802">- merge gh#openSUSE/hwinfo#160
- add touchpad class (bsc#1241295)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744804803">- merge gh#openSUSE/hwinfo#161
- fix aarch64 cpu detection (bsc#1241295)
- 24.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1751889600">- merge gh#openSUSE/hwinfo#167
- fix usb network card detection (bsc#1245950)
- 24.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1752494400">- merge gh#openSUSE/hwinfo#169
- add nvmeof and iscsi info (jsc#PED-13261, jsc#PED-13209)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1752494401">- merge gh#openSUSE/hwinfo#164
- feat: capture usb alternate setting
- feat: capture usb interface association
- feat: use interface association descriptor first when classifying
  usb devices
- USB improvements</changelog>
  <changelog author="wfeldt@opensuse.org" date="1752494402">- merge gh#openSUSE/hwinfo#165
- Fix memory leaks in block device name handling</changelog>
  <changelog author="wfeldt@opensuse.org" date="1752494403">- merge gh#openSUSE/hwinfo#170
- Makefile: fix build for ARCH=i686
- 25.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1769428800">- merge gh#openSUSE/hwinfo#175
- include package spec file in git repo
- adjust spec file for immutable mode: switch to using
  systemd-tmpfiles (jsc#PED-14832)
- update git2log script
- 25.1</changelog>
</package>
<package pkgid="376bc0264cf265395613b9f8bebfd15e4f77469d43085007d4221fc60c20cfcc09ef5c8a95f4f429464cf44a438234dd0cb8f4462e4cafd61907763b90f210ca" name="libhidapi-hidraw0" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="160000.3.2"/>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1623240000">- Add 0001-configure.ac-remove-duplicate-AC_CONFIG_MACRO_DIR-22.patch:
  fix boo#1187056</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 0.11.0:
  * hidraw: (explicit) workaround to allow build with kernels older than 2.6.39
  * libusb: stabilize device path (uses same semantic as Linux kernel)
  * libusb: add platform-specific hid_libusb_wrap_sys_device
  * general: lots of documentation improvements
  * general: (Windows) DDK build files are obsolete
  * general: add CMake build system
  * general: deprecated Autotools build scripts
  * lots of other small fixes and improvements
- remove 0001-configure.ac-remove-duplicate-AC_CONFIG_MACRO_DIR-22.patch (obsolete)</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.12.0:
  * libusb: improved CMake dependency on Iconv (#405) - as a result, better support for NetBSD;
  * general: documentation improvements;
  * general: small code cleanups/improvements;
  * many windows specific fixes
- spec-cleaner cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1673179200">- update to 0.13.0:
  * general: add hid_get_device_info (#432);
  * general: Meson build script (as a wrapper over CMake) (#410);
  * general: add HID Bus Type in hid_device_info (#308);
  * libusb: primary usage_page/usage is now available with hid_get_device_info
    regardless of the compilation flags;
  * hidraw: Open files with O_CLOEXEC to not leak fds to child processes (#446);
  * hidraw: add support for HID over SPI (#486);
  * cmake: libusb: Ensure Iconv is found when provided via CFLAGS/LDFLAGS (#430);</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- update to 0.13.1:
  * hidraw: fix invalid read past the UDEV buffer</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 0.14.0:
  * general: add `hid_get_report_descriptor` API function (#451)
  * libusb: fix crash in hid_enumerate() caused by a stale device
    handle (#526)
  * fixes (mostly error handling) of issues found by
    Coverity Scan (#552/#554/#555/#559/#560/#561)
  * various fixes and improvements</changelog>
</package>
<package pkgid="d1e441946aacd5486e875706cf18b9275a642b30a375b3a9ff54c128f45b680e5d3d9ba6b271907e3510bd41a456a390df3bd80237c654967389e26814447397" name="libhivex0" arch="x86_64">
  <version epoch="0" ver="1.3.24" rel="160000.3.2"/>
  <changelog author="ohering@suse.de" date="1572609600">- Fix bytecode build
- Remove defattr and BuildRoot
- disablement of lto comes via ocaml macros</changelog>
  <changelog author="steven.kowalik@suse.com" date="1580904000">- Switch to building using Python 3, as a consequence rename python
  binding package to python3-hivex.
- Drop unneeded Recommends and Group lines.
- Make use of python3_sitearch macro to drop pyver variable.
- Use python3-config to determine CFLAGS and libraries.
- Run spec-cleaner against the specfile.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 1.3.19
  * ocaml: Throw exception if malloc returns NULL
  * ocaml: Cast return from String_val to (char *)
  * ocaml: Use caml_alloc_initialized_string
  * Remove extra @LIBS@ from pkg-config file
  * Win::Hivex::Regedit: Ignore comments
  * Win::Hivex::Regedit: Accept CRLF line endings</changelog>
  <changelog author="ohering@suse.de" date="1619006400">- Remove ocaml_native_compiler conditional
  build native target unconditionally</changelog>
  <changelog author="carnold@suse.com" date="1620129600">- Update to version 1.3.20
  * Fixes bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds
    check within hivex_open()
  * Increase HIVEX_MAX_VALUES
  * Updated translations</changelog>
  <changelog author="carnold@suse.com" date="1628251200">- bsc#1189060 - VUL-0: CVE-2021-3622: hivex: hivex: stack overflow
  due to recursive call of _get_children. Update to version 1.3.21
  hivex-1.3.21.tar.gz
  hivex-1.3.21.tar.gz.sig</changelog>
  <changelog author="ohering@suse.de" date="1632657600">- move all ocaml libraries to devel package to align with our
  OCaml packaging</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="carnold@suse.com" date="1674648000">- Update hivex to version 1.3.23
  * jsc#PED-2113
  * Updated langauge files
  * Various build fixes
  * Improved windows support</changelog>
  <changelog author="olaf@aepfle.de" date="1725451200">- Update hivex to version 1.3.24
  * no changelog provided</changelog>
</package>
<package pkgid="72850a35cafbd6f6a5909d18cb0efbdf225da4bba75fa2940a368afe84ebe7dbefa79fc077b9ca18b928d9bc731021fac58c9f89693afa12e917261e2d976577" name="libhns1" arch="x86_64">
  <version epoch="0" ver="56.1" rel="160000.2.2"/>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="nicolas.morey@suse.com" date="1739966400">- Update to rdma-core v56.0 (jsc#PED11323)
  - No release notes available</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743681600">- Update to rdma-core v56.1 (jsc#PED-11289, jsc#PED-11323)
  - Bug fixes for all providers</changelog>
</package>
<package pkgid="1582cb34d841fffa34a90d3e1114b9011a5c20c77fd26a6a26f6d07605d8d5220caaf0235f244b4a6edc166129c88fb45ddeaf8ff1deb561be914d20b50108e7" name="libhogweed6" arch="x86_64">
  <version epoch="0" ver="3.10.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 3.8:
  This release includes a couple of new features, and many
  performance improvements. It adds assembly code for two more
  architectures: ARM64 and S390x.
  The new version is intended to be fully source and binary
  compatible with Nettle-3.6. The shared library names are
  libnettle.so.8.5 and libhogweed.so.6.5, with sonames
  libnettle.so.8 and libhogweed.so.6.
  New features:
  * AES keywrap (RFC 3394), contributed by Nicolas Mora.
  * SM3 hash function, contributed by Tianjia Zhang.
  * New functions cbc_aes128_encrypt, cbc_aes192_encrypt,
    cbc_aes256_encrypt.
    On processors where AES is fast enough, e.g., x86_64 with
    aesni instructions, the overhead of using Nettle's general
    cbc_encrypt can be significant. The new functions can be
    implemented in assembly, to do multiple blocks with reduced
    per-block overhead.
    Note that there's no corresponding new decrypt functions,
    since the general cbc_decrypt doesn't suffer from the same
    performance problem.
  Bug fixes:
  * Fix fat builds for x86_64 windows, these appear to never
    have worked.
  Optimizations:
  * New ARM64 implementation of AES, GCM, Chacha, SHA1 and
    SHA256, for processors supporting crypto extensions. Great
    speedups, and fat builds are supported. Contributed by
    Mamone Tarsha.
  * New s390x implementation of AES, GCM, Chacha, memxor, SHA1,
    SHA256, SHA512 and SHA3. Great speedups, and fat builds are
    supported. Contributed by Mamone Tarsha.
  * New PPC64 assembly for ecc modulo/redc operations,
    contributed by Amitay Isaacs, Martin Schwenke and Alastair
    D´Silva.
  * The x86_64 AES implementation using aesni instructions has
    been reorganized with one separate function per key size,
    each interleaving the processing of two blocks at a time
    (when the caller processes multiple blocks with each call).
    This gives a modest performance improvement on some
    processors.
  * Rewritten and faster x86_64 poly1305 assembly.
- drop libnettle-s390x-CPACF-SHA-AES-support.patch (included in 3.8)</changelog>
  <changelog author="dmueller@suse.com" date="1659009600">- update to 3.8.1:
  * Avoid non-posix m4 argument references in the chacha
    implementation for arm64, powerpc64 and s390x. Reported by
    Christian Weisgerber, fix contributed by Mamone Tarsha.
  * Use explicit .machine pseudo-ops where needed in s390x
    assembly files. Bug report by Andreas K. Huettel, fix
    contributed by Mamone Tarsha.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1684152000">- update to 3.9
  * rewrite of the C and plain x86_64 assembly implementations of
    GHASH to use precomputed tables in a different way, with tables
    always accessed in the same sequential manner. This should make
    Nettle's GHASH implementation side-channel silent on all
    platforms, but considerably slower on platforms without carry-
    less mul instructions. E.g., benchmarks of the C implementation
    on x86_64 showed a slowdown of 3 times.
  * Fix bug in ecdsa and gostdsa signature verify operation, for
    the unlikely corner case that point addition really is point
    duplication.
  * Fix for chacha on Power7, nettle's assembly used an instruction
    only available on later processors
  * Add support for the SM4 block cipher
  * Add support for the Balloon password hash
  * Add support for SIV-GCM authenticated encryption mode
  * Add support for OCB authenticated encryption mode.
  * New exported functions md5_compress, sha1_compress,
    sha256_compress, sha512_compress
  * multiple performance optimizations
  * Delete all arcfour assembly code. Affects 32-bit x86, 32-bit
    and 64-bit sparc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1686139200">- update to 3.9.1: [bsc#1212112, CVE-2023-36660]
  * Fix bug in the new OCB code may be exploitable for denial of
    service or worse due to memory corruption</changelog>
  <changelog author="pmonreal@suse.com" date="1686225600">- Include the nettle library manual in HTML and PDF formats in
  the devel package.</changelog>
  <changelog author="pmonreal@suse.com" date="1686312000">- Add the architecture specific READMEs as provided by upstream.</changelog>
  <changelog author="pmonreal@suse.com" date="1718625600">- Update to 3.10:
  * Bug fixes:
  - Add missing hash functions sha512_224 and sha512_256 to the
    nettle_get_hashes() list. The name values in the
    corresponding nettle_hash structs also changed to use
    underscore instead of dash, for consistency.
  - Fix a few cases of formally undefined calls to memcpy(dst,
    NULL, 0), resulting from valid calls to, e.g.,
    sha256_update(ctx, 0, NULL).
  * New features:
  - Support RSA-OAEP encryption. Contributed by Nicolas Mora and Daiki Ueno.
  - New function sha3_256_shake_output, new functions
    sha3_128_init, sha3_128_update, sha3_128_shake,
    sha3_128_shake_output. Contributed by Daiki Ueno.
  - Added DRBG-CTR with AES256, contributed by Simon Josefsson.
  * Optimizations:
  - New combined gcm-aes assembly for powerpc64, contributed by Danny Tsen.
  - New sha256 assembly for powerpc64, contributed by Eric Richter.
  - Improved performance for powerpc64 AES decrypt, by skipping
    subkey transformations that don't suit the vncipher instructions.
  - Add arm64 CPU feature detection for Android and for Apple systems,
    contributed by Foolbar and Tim Kosse, prespectively.
  * Miscellaneous:
  - New tests for side-channel silence, based on valgrind.
  - Delete all md5 assembly code. Delete all sparc32 assembly code.</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- ppcl64le: POWER10 performance enhancements for cryptography [jsc#PED-9904]
  * powerpc64/sha256: fix loading overreads by loading less and shifting
  * powerpc64/sha256: adjust stack offset for storing non-volatile registers
  * powerpc64: remove use of m4_unquote in the load step for sha256
  * Temporarily skip the gcm test: libnettle-powerpc64-skip-AES-GCM-test.patch
  * Add patches:
  - libnettle-powerpc64-sha256-fix-loading-overreads.patch
  - libnettle-powerpc64-sha256-adjust-stack-offset-for-non-volatile-registers.patch
  - libnettle-powerpc64-remove-m4_unquote-sha256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1735819200">- Update to nettle 3.10.1:
  * Bug fixes:
  - Fix buffer overread in the new sha256 assembly for
    powerpc64, as well as a stack alignment issue.
  - Added missing nettle_mac structs for hmac-gosthash.
  - Fix configure test for valgrind, to not attempt to run
    valgrind on executables built using memory sanitizers.
  * Enable back the gcm regression test:
  - Remove libnettle-powerpc64-skip-AES-GCM-test.patch
  * Remove patches upstream:
  - libnettle-powerpc64-sha256-fix-loading-overreads.patch
  - libnettle-powerpc64-sha256-adjust-stack-offset-for-non-volatile-registers.patch
  - libnettle-powerpc64-remove-m4_unquote-sha256.patch</changelog>
</package>
<package pkgid="f3413c71e882ed954f2d14359ca630ce8a7dc9869e0b9bb880b8a928fd49d938a48edea7a667de630b66959076f7a32fff3dc80d6aeece88de7efc8ade3ac79c" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="56.1" rel="160000.2.2"/>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="nicolas.morey@suse.com" date="1739966400">- Update to rdma-core v56.0 (jsc#PED11323)
  - No release notes available</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743681600">- Update to rdma-core v56.1 (jsc#PED-11289, jsc#PED-11323)
  - Bug fixes for all providers</changelog>
</package>
<package pkgid="6fe0a25718f0970cf801e2da1223a8b86fb93fa6a0ef5b7511e7a900e568dce930bb73bfaae828a36e6c035283de560f4bc1a550db9521501ed54ada312bf019" name="libibverbs1" arch="x86_64">
  <version epoch="0" ver="56.1" rel="160000.2.2"/>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="nicolas.morey@suse.com" date="1739966400">- Update to rdma-core v56.0 (jsc#PED11323)
  - No release notes available</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743681600">- Update to rdma-core v56.1 (jsc#PED-11289, jsc#PED-11323)
  - Bug fixes for all providers</changelog>
</package>
<package pkgid="669a6e32d61ed46c72ac92ce4a9115a75a8d5540f09facde14ea51b39fd9bbbf032c0fc839855d7d670227aec270c98bc7e6bcaac9f964d9d45ab35ed1ed4631" name="libidn2-0" arch="x86_64">
  <version epoch="0" ver="2.3.8" rel="160000.2.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1574164800">- update to 2.3.0:
  * Update the data tables from Unicode 6.3.0 to Unicode 11.0
  * Turn _idn2_punycode_encode, _idn2_punycode_decode into compat
    symbols</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582372800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="coolo@suse.com" date="1590494400">- Fix license entry of the library - it's different than the rest</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620820800">- libidn2 2.3.1:
  * Implement full roundtrip for lookup functionality
  * Fix domain too long error
  * Updated gnulib files and various build fixes
  * verify source signature again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 2.3.2:
  * Upgrade TR46 tables from Unicode 11 to Unicode 13.
- Refresh libidn2.keyring</changelog>
  <changelog author="coolo@suse.com" date="1653393600">- Refresh libidn2.keyring</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657627200">- update to 2.3.3:
  * Upgrade IDNA Tables from Unicode 11 to 12
  * Upgrade TR46 Tables from Unicode 13 to 14
  * Updated gnulib files and various build fixes
  * Add self-check for the idn2 command line tool</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666699200">- update to 2.3.4:
  * Support for Unicode 15.0.0
  * Uses IDNA2008 from tables from unicode.org rather than IANA
    for consistency with other implementation and support for
    Unicode versions 12 through 15. This breaks backwards-
    compatibility regarding U+19DA and recent releases</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1707134400">- update to 2.3.7:
  * Un-deprecate idn2_to_ascii_4i and make it NUL terminate output
  * Export punycode APIs
  * Developer visible code maintenance</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1741521600">- update to 2.3.8:
  * Unicode 15.1.0 table updates
  * Now U+19DA is DISALLOWED again
  * The idn2 tool now binds the "gnulib" domain for translations</changelog>
</package>
<package pkgid="92d1824b63d5c2a283bd2c0e1366c0fe58cb552a707bf848ec86eeb63710d9d52aa7a0ce3383d8449807175f5548ab0c7dbf8fdb3d1d968bfd7dbdedad36021e" name="libini_config5" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="160000.2.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="8885aae4ce24b30fea46e3478ccfe2e1153688ca7df3fb86c078556a6c9e423586b890aa20d8adcfe7b5a8511a30b8da2e35a5702a885e5f498411a6d5d8f662" name="libinih0" arch="x86_64">
  <version epoch="0" ver="58" rel="160000.2.2"/>
  <changelog author="marix@marix.org" date="1600430400">- Execute upstream tests during package build</changelog>
  <changelog author="marix@marix.org" date="1600516800">- Following packaging guidelines, exclude static libraries again.</changelog>
  <changelog author="marix@marix.org" date="1602763200">- Update to version 52
  * Add INI_CUSTOM_ALLOCATOR to allow using a custom memory
    allocator.
- Drop workaround for library name not matching its soname as this
  was fixed upstream.</changelog>
  <changelog author="marix@marix.org" date="1608811200">- Make package conform to spec-cleaner.</changelog>
  <changelog author="jgwang@suse.com" date="1615464000">￼
- Update to version 53
  * Add architecture ppc64le to travis build (#122)
  * enable distro settings by default (#125)
  * meson: optionally depend on c++ (#124)
  * meson: add static compile args to inih_dep (#126)</changelog>
  <changelog author="marix@marix.org" date="1648209600">- Update to version 54
  * Improve quality of shared objects by explicitly defining symbol
    visibility.</changelog>
  <changelog author="marix@marix.org" date="1648209601">- Update to version 55
  * Include proper version in installed pkgconfig files.</changelog>
  <changelog author="marix@marix.org" date="1657972800">- Update to version 56
  * Fix redundant cast-to-int when INI_USE_STACK!=0
  * Make inline comments work on subsequent lines of multiline values</changelog>
  <changelog author="marix@marix.org" date="1688731200">- Update to version 57
  * Added a GetUnsigned function for getting unsigned values.
  * Added GetInteger64 and GetUnsigned64 to read 64-bit integers.</changelog>
  <changelog author="marix@marix.org" date="1706184000">- Update to version 58
  * Add ini_ prefix even to static names so inih can be used as an
    [#]include.</changelog>
</package>
<package pkgid="50644e7ab470f83d1954f02318e580bc242d1f43fbac93a8eb8832419a468dcc5bf65146b2160ef5f76199191f17162e890d56d7cc23674ba249ad3d4f8dbe40" name="libiscsi9" arch="x86_64">
  <version epoch="0" ver="1.19.0+git.20230208" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1590494400">- Update to version 1.19.0+git.20200521:
  * test-tool, compare and write: Reduce maximum number of blocks from 256 to 255
  * test_compareandwrite_invalid_dataout_size: Simplify this test
  * test-tool: Use asprintf() in sg_send_scsi_cmd()
  * test-tool: Fix a comment in sg_send_scsi_cmd()
  * test-tool: Split send_scsi_command()
  * socket: fix rewrite cmdsn of immediate pdus
  * iser: eliminate unnecessary memory allocations
  * iser: use `login_resp_buf` until login is finished
  * init: free iscsi-&gt;opaque before check mallocs/frees counter
  * reconnect: collect mallocs/frees of the previous reconnection</changelog>
  <changelog author="mpluskal@suse.com" date="1597320000">- Update to version 1.19.0+git.20200812:
  * .travis.yml: Also build for the ppc64le architecture
  * iscsi-ls: Fix iser url scheme parsing
  * test-tool: Use block_size instead of hardcoded 512 bytes
  * examples/iscsi-dd: use common init function for src and dst endpoints
  * examples/iscsi-dd: use common iscsi_endpoint struct
  * iscsi-perf: Add explicit casts to avoid two warnings
  * socket: Make the pdu timeout handling aware of old iscsi context
  * libiscsi: Make the cancellation aware of the pdus in old iscsi context
  * pdu: Remove the checking for iscsi-&gt;is_loggedin in iscsi_cancel_pdus()
  * libiscsi: Avoid discontinuities in cmdsn ordering in some cases
  * test-tool: Use block_size instead of hardcoded 512 bytes
  * exclude ld_iscsi.so from RPM
  * include iser-private.h in make dist tarball</changelog>
  <changelog author="mpluskal@suse.com" date="1604577600">- Update to version 1.19.0+git.20201023:
  * test-tool: add COMPARE AND WRITE MiscompareSense test
  * lib: parse Information fixed sense field
  * lib: parse Information sense descriptor type
  * lib: check length for sense key specific sense data descriptors
  * lib: drop generic sense data descriptor VALID check
  * test-tool: add version descriptor checks for more SBC-3 versions
  * test-tool: Fix CmdSN tests
  * test-tool/test_async_lu_reset_simple: Move an assert statement
  * Remove an unused function from the iSER code
  * test-tool: add LogoutDuringIOAsync test case
  * test-tool: rename async write dispatch/complete counters
  * pdu: fix use after free during cancellation</changelog>
  <changelog author="mpluskal@suse.com" date="1609156800">- Update to version 1.19.0+git.20201217:
  * Revert "specify number of blocks in write_same command"
  * iser: fix segmentation fault when task management pdu is received
  * iser: fix segmentation fault when async message pdu is received</changelog>
  <changelog author="mpluskal@suse.com" date="1619092800">- Update to version 1.19.0+git.20210208:
  * test-tool: Change command_is_implemented from a global variable into an argument
  * test-tool: Move a logging statement into write_residuals_test()
  * test-tool: Add default clauses in recently modified switch statements
  * test-tool, residuals: Rename struct residuals_test_data members
  * test-tool: Add overwrite check for all test cases
  * test-tool: Change write residuals tests overwrite check according to FCP-4
  * test-tool: Refactoring residuals write tests
  * test-tool: Allow CHECK CONDITION in response to overflow/underflow
  * .travis.yml: Multiple changes
  * test-tool: add simple REPORT LUNS test
  * init: fix Wformat on 32-bit platforms</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version 1.19.0+git.20210523:
  * Port to MinGW
  * win32/win32_compat.c: Reformat this file
  * Enable -Wno-unused-parameter
  * Use __attribute__((format(printf, ...))) directly
  * build: Add -no-undefined where missing
  * build: Correct usage of LIBADD and LDADD
  * build: Remove bogus LDADD variables
  * Add header &lt;strings.h&gt; for strncasecmp</changelog>
  <changelog author="mpluskal@suse.com" date="1639051200">- Update to version 1.19.0+git.20210930:
  * iscsi-support: fix memory leak
  * add README.md to dist tarball
  * add libiscsi.syms.in to dist tarball
  * test-tool, xcopy: Fix target descriptor handling
  * iser: Fix a compiler warning triggered by the container_of() definition
  * configure: Remove -Wno-strict-aliasing
  * slist: Clean up the slist.h header file
  * slist: Make this header file compatible with C++
  * scsi-lowlevel.h: Include &lt;assert.h&gt;
  * examples/iscsi-dd: use stderr for all error text
  * examples/iscsi-dd: fix typos
  * ci: Add a github build action
  * test: fix ExtendedCopy.Large SKIPPED cases
  * configure.ac: Quote argument to m4_esyscmd() properly
  * Fixed several code style problems
  * test-tool: check that ReceiveCopyResults is implemented
  * lib: init version for 8Fh VPD page
  * ci: Enable MinGW
  * MinGW: Second step of porting to MinGW
  * configure.ac: Use AC_CONFIG_HEADERS() instead of AC_CONFIG_HEADER()
  * lib/libiscsi.syms: Sort alphabetically
  * ci: First phase of adding MingW support
  * configure.ac: Run autoupdate
  * README.md: Update
  * README: Rename into README.md
  * ci: Switch from Travis to AppVeyor
  * test-tool: Do not use empty initializers</changelog>
  <changelog author="mpluskal@suse.com" date="1647432000">- Update to version 1.19.0+git.20220303:
  * iscsi-command: Fix leak in iscsi_send_data_out
  * iscsi-pr: add persistent reservation tool
  * add iscsi_force_reconnect()
  * add libiscsi.syms to .gitignore</changelog>
  <changelog author="mpluskal@suse.com" date="1669636800">- Update to version 1.19.0+git.20221112:
  * ci/build.sh: Enable parallel compilation
  * ci: Fix the Appveyor Linux and Windows builds
  * ci: Add ci/install.bat
  * Add CodeQL workflow for GitHub code scanning
  * test-tool: remove a redundant semicolon
  * lib/scsi-lowlevel: Make the REPORT LUNS unmarshalling code more flexible
  * Fix segmentation fault problem.
  * Check return value of scsi_malloc in order to avoid dereferencing NULL return value.
  * fix iscsi-ls parameter parse
  * iscsi-swp: handle setting of debug_level correctly
  * Update iscsi-dd.c
  * iscsi-inq: handle setting of debug_level correctly
  * Retain the immediate data param during login processing</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Update to version 1.19.0+git.20230208:
  * iser: Remove unnecessary 'return;'
  * pdu: Remove temporary variables from functions
  * connect: Add check after malloc allocation
  * aros_compat: Add check after malloc allocation
- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
</package>
<package pkgid="dd37f168987fcd373cb0d25d03b2549115964114266b216ea615c351585075a02fc28ccdc4bce2db4fa7bc4a6ae9a58fe6eb42f6fc84b617af89f1e567a67c0e" name="libisoburn1" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="160000.3.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: -as mkisofs did not unescape "\=" in the source part
    of pathspecs
  * Bug fix: -boot_image "any" "system_area=/dev/zero" did not
    zeroize loaded data
  * Bug fix: -pathspecs "on" did not properly handle "\\="
  * Bug fix: HFS+ production could cause MBR partition of type 0xEE
    without GPT
  * Bug fix: HFS+ directories could announce more children than
    they actually have
  * Bug fix: The HFS+ filesystem was not marked by in GPT of GRUB2
    hybrid layout
  * Bug fix: When reading an ISO filesystem, the presence of
  - -protective-msdos-label was not recognized if a partition is
    appended
  * Bug fix: xorrisofs option --protective-msdos-label did not work
    if no system area data were given by option -G or alike
  * Bug fix: -modesty_on_drive properties timeout_sec, min_usec,
    max_usec read wrong numbers from the parameter text
  * Letting -as mkisofs --norock revoke the special effect of -r
  * Letting -blank on overwritable media invalidate UDF extended
    descriptors
  * New -pathspecs mode "as_mkisofs"
  * New -boot_image setting mbr_force_bootable=, -as mkisofs
  - -mbr-force-bootable
  * New -boot_image bootspecs appended_part_as=apm,
    part_like_isohybrid=on
  * New -as mkisofs options -appended_part_as_apm,
  - part_like_isohybrid
  * New command -scsi_dev_family, new -as cdrecord option
    drive_scsi_dev_family=</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: The default setting of -compliance did not apply
    rec_mtime to Joliet and ISO:1999. mkisofs emulation was not
    affected by this bug.
  * Bug fix: -file_size_limit did not increase ISO level if
    necessary. Thanks Mattias Schlenker.
  * New API calls isoburn_igopt_set_gpt_guid(),
    isoburn_igopt_get_gpt_guid()
  * New command -use_immed_bit, new -as cdrecord option
    use_immed_bit=
  * New -volume_date mode "all_file_dates"
  * New -as mkisofs option --set_all_file_dates
  * New bootspec "gpt_disk_guid=", new -as mkisofs option
  - -gpt_disk_guid
  * New -report_system_area modes "gpt_disk_guid", "make_guid"
  * New environment variable SOURCE_DATE_EPOCH
  * New -find action "set_to_mtime"</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1487419200">- Added new build requirement libjte-devel for Tumbleweed and
  Leap &gt;= 42.3.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488024000">- Use sle_version &gt;= 120300 instead of leap_version &gt;= 420300
  (leap_version does not work).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: -as mkisofs -no-emul-boot without -boot-load-size
    defaulted to size 4, instead of full boot image size
  * Bug fix: -read_fs "norock" did not prevent reading of root Rock
    Ridge info
  * Bug fix: Mix of absolute and relative disk paths could cause
    SIGSEGV with pattern expansion
  * Bug fix: --mbr-force-bootable did not get into effect with
  - append_partition
  * Bug fix: Exit value of failed -mount command was reported as 0
  * Bug fix: -boot_image actions "keep" and "patch" did not work
    any more. Regression by libisofs 1.4.4.
  * New -find tests -maxdepth and -mindepth
  * New commands -update_lxi and -update_li
  * New API calls isoburn_igopt_set_iso_mbr_part_type(),
    isoburn_igopt_get_iso_mbr_part_type()
  * New -boot_image bootspec iso_mbr_part_type=
  * New -as mkisofs option -iso_mbr_part_type
  * New -as mkisofs option -eltorito-platform
  * Properly refusing on Pseudo Overwritable formatted BD-R</changelog>
  <changelog author="dimstar@opensuse.org" date="1522756800">- Split out xorriso-tcltk from xorriso: The frontend is advertised
  as proof-of-concept by upstream. Additionally, we can save a
  dependency on Tcl/Tk on the main xorriso package.
- Cleanup using spec-cleaner:
  + use SPDX3 license string.
  + Package licence files as license, not doc (boo#1082318).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1541073600">- Update to 1.5.0:
  * Bug fix: Multi-session emulation was not recognized with
    non-zero partition offset
  * New bit10 of isoburn_drive_aquire() to accept all xattr
    namespaces
  * New -xattr mode "any" to process all xattr namespaces of local
    filesystem
  * New -as mkisofs option --xattr-any
  * New -as mkisofs options -uid and -gid</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.5.2:
  * Bug fix: -disk_pattern on -add ./ -- mistook "./" for the root directory
  * Bug fix: -disk_pattern on -add "" -- yielded SIGSEGV
  * Bug fix: -osirrox "concat_split_on" worked only together with -split_size
  larger than 0. Thanks William Willems.
  * New API calls isoburn_igopt_set_part_type_guid(),
    isoburn_igopt_get_part_type_guid(), isoburn_igopt_set_iso_type_guid(),
    isoburn_igopt_get_iso_type_guid()
  * Enabled GPT type GUIDs with -append_partition,
  - boot_image any iso_mbr_part_type=, and -as mkisofs -iso_mbr_part_type
  * Made libisoburn and GNU xorriso ready for building out-of-source.
    Thanks Ross Burton.</changelog>
  <changelog author="dmueller@suse.com" date="1614081600">- update to 1.5.4:
  * Bug fix: -report_system_area as_mkisofs misrepresented GPT with appended
    partition and forced boot flag as -part_like_isohybrid
  * Bug fix: Boot catalog could get a wrong name if cat_path= is explicitely
    given but not containing a slash character
  * New helper script xorriso-dd-target
  * New command -truncate_overwritable
  * Switched to usage of libjte-2.0.0
  * New -jigdo parameters "checksum_algorithm", "demand_checksum", "-checksum-list"
  * New -as mkisofs options "-jigdo-checksum-algorithm", "-checksum-list", "-jigdo-force-checksum"
  * New -read_speed prefixes "soft_force:" and "soft_corr:"
  * New -check_media option data_to="-" for standard output
  * New -zisofs parameters version_2=, block_size_v2=, max_bpt=, max_bpt_f=,
    bpt_target=, bpt_free_ratio=, by_magic=v2, susp_z2=
  * New -as mkisofs options --zisofs-version-2, --zisofs2-susp-z2,
  - -zisofs2-susp-zf
  * Enabled recognition of zisofs by magic without zlib support
  * New -osirrox option sparse= controls extraction into sparse files
  * New libisoburn extension options isoburn_ropt_map_joliet_stripped and
    isoburn_ropt_map_joliet_unmapped
  * New command -joliet_map
  * New command -extract_boot_images
  * New API call isoburn_ropt_get_tree_loaded()</changelog>
  <changelog author="adam.majer@suse.de" date="1693396800">- update to 1.5.6: (jsc#PED-5018)
  * Bug fix: False -status failure with -boot_image --interval:appended_partition
  * Bug fix: -no_rc prevented pre-scanning of arguments for stdio output and
    others. Introduced by mistake in a62f6af5, 2011.10.18.162119.
  * Bug fix: -not_leaf and -not_paths were not applied to -extract and alike
  * Bug fix: -report_system_area cmd misperceived -part_like_isohybrid with
  - isohybrid-gpt-basdat
  * Bug fix: -report_system_area cmd misperceived combination of isohybrid and
    appended partition in GPT
  * Bug fix: -as mkisofs option -part_like_isohybrid did not cause a MBR
    partition table if the partitions are data files in the ISO
    rather than appended
  * Bug fix: Split file directories (-split_size) were created with wrong
    permissions
  * Bug fix: libisofs did not mark clones of imported files as imported.
    This could cause that original and clone occupy data storage
    in the newly written session. Thanks to Ivan Shmakov.
  * Bug fix: Partition offset was preserved from -indev rather than from -outdev
  * Bug fix: libisofs could misrepresent Rock Ridge information if many
    symbolic links or AAIP data were recorded in a directory
  * Bug fix: Data files named /boot.catalog or ./boot.cat could be left out of
    the emerging ISO if the boot catalog was set to be hidden
  * Bug fix: -toc reported wrong track LBA with overwritable media with
    unrecognized content (pseudo-closed)
  * Bug fix: -find test -has_xattr matched "isofs." attributes
    in -xattr mode "any"
  * New API call isoburn_assess_written_features()
  * New API calls isoburn_igopt_set_max_ce_entries(),
    isoburn_igopt_get_max_ce_entries()
  * New flag bit12 with isoburn_read_iso_head():
    Read even if start of multi-session emulation is damaged
  * New -boot_image settings gpt_iso_bootable= and gpt_iso_not_ro=
  * New -as mkisofs options --gpt-iso-bootable and --gpt-iso-not-ro
  * New -as cdrecord option --obs_pad. Automatic no_emul_toc with -as cdrecord.
  * New parameters "obs_pad" and "bdr_obs_exempt" for -dvd_obs
  * New -as cdrecord option --bdr_obs_exempt
  * New command -assess_indev_features
  * New -find test -size
  * New -compliance rules max_ce_entries=, max_ce_drop=
  * Allowed lseekable device files with -cut_out.</changelog>
</package>
<package pkgid="7f7b205fa5358626cf3af1a9eea2ceba4dd7f1c9801c2b4cfa79428ca1646898d0c75de886efa0e80994506db72ad7fce1c484f40769fc652be5b480badcc2c9" name="libisobusfs0" arch="x86_64">
  <version epoch="0" ver="2025.01" rel="160000.2.2"/>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1598270400">- Update to version v2020.04.02
  * jcat: provide errqueue support
  * jcat: add repeat support
  * Add uds output functionality
  * cangw: add new command line option -X to handle CAN FD rules
  * cangw: add CAN FD support
- Drop 0001-fix-include-to-find-SIOCGSTAMP-with-latest-kernel.patch</changelog>
  <changelog author="jengelh@inai.de" date="1598961600">- Update to version 2020.04.02.g119 (ea844bdc5e)
  * Rename jcat et al to j1939cat
  * j1939cat: add broadcast support</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to snapshot 2020.04.02.g192 (4573e852f9)
  * isotpsend: add support for blocking write flag
  * add cansequence tool</changelog>
  <changelog author="jengelh@inai.de" date="1605614400">- Update to release 2020.11.0
  * No further changes to prior snapshot, just version bump.</changelog>
  <changelog author="jengelh@inai.de" date="1606737600">- Add "can-utils" provides, add documentation.</changelog>
  <changelog author="jengelh@inai.de" date="1609243200">- Update to release 2020.12.0
  * candump: Enable zero relative timestamps to be used in
    log files.
  * "-tz" and "-ta" are now valid options for the logfile format.</changelog>
  <changelog author="jengelh@inai.de" date="1629374400">- Update to release 2021.08.0
  * Support for new kernel features:
  * Add len8_dlc support for Classical CAN frames (Linux v5.11+)
  * Add ISOTP SF_BROADCAST support (Linux v5.11+)</changelog>
  <changelog author="jengelh@inai.de" date="1678881600">- Update to release 2023.03
  * cangen: add support for SO_TXTIME
  * canfdtest: Add extended frame format / message length / FD /
    BRS support
  * can-calc-bit-timing: add support for calculation of CAN-FD
    bit timings
  * cangen: new generation mode - partially randomized payload
    (-D)
  * cansniffer: add CAN FD support</changelog>
  <changelog author="pgajdos@suse.com" date="1739188800">- version update to 2025.01
  * Support of new kernel features:
  * Full CAN XL support for candump, canplayer, cangen, log2asc,
    asc2log, lib
  * cangen: support socket priority
  * Improvements and features:
  * ISOBUS (ISO11783-13) File Server Interface (isobusfs-srv,
    isobusfs-cli)
  * Add j1939_datatime_cli
  * cansequence: allow to bind on "any" interface
  * cansequence: add support to send and receive CAN-FD
  * canfdtest: add support for loopback testing
  * isotpdump: option to capture functional addressing traffic
  * isotpdump: add color support for functional addressing traffic
  * isotprecv: add option to enable dynamic flow control
    parameters (Linux 6.9+)
  * cangen: add missing long CAN frame view for len8_dlc and eff
  * canbusload: add auto detection of CAN interfaces
  * canbusload: show RX/TX direction in bargraph
  * canbusload: support busload statistic and busload visualization</changelog>
  <changelog author="jengelh@inai.de" date="1739880000">- Add 0001-build-give-libisobusfs-a-version.patch</changelog>
</package>
<package pkgid="597410e688348df7ec4a39f7dbf44d0a3c21aa32fae9e99c7339af9e2617197bb0ea0e7a820bae799a1c29437489fc90203445fb4075359e0b641bf0036c7e7b" name="libisofs6" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="160000.2.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: HFS+ production could cause MBR partition of type 0xEE
    without GPT.
  * Bug fix: Protective MBR was not produced if no System Area data
    are given.
  * Bug fix: Protective MBR was not recognized if partition is
    appended.
  * Bug fix: The HFS+ filesystem was not marked in GPT of GRUB2
    hybrid layout.
  * Bug fix: HFS+ directories could announce more children than
    they actually have.
  * Bug fix: At image loading time GRUB2 MBR was not recognized if
    the partition table is not the protective one as described by
    UEFI.
  * Bug fix: Oversized text in ISO_SYSAREA_REPORT_DOC_ALPHA.
  * New pseudo path for El Torito boot images:
  - -interval:appened_partition_N:all::
  * New bit15 with options of iso_write_opts_set_system_area() to
    enforce MBR bootable/active flag.
  * New API calls iso_write_opts_set_appended_as_apm(),
    iso_write_opts_set_part_like_isohybrid().
  * Introduced image size tolerance of 300 kB in order to recognize
    SUN Disk Label that was generated by genisoimage -B "...".
  * Added "extern C" to libisofs.h
  * Removed option --silent from libtool runs.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: SIGSEGV by NULL when a data file was larger than ISO
    level allows.
  * Bug fix: Interpretation of 17 digit timestamps was wrong.
  * New API calls iso_generate_gpt_guid() and
    iso_write_opts_set_gpt_guid().
  * Made several pseudo-random ids reproducible by overriding
    volume modification time.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1487419200">- Added new build requirement libjte-devel for Tumbleweed and
  Leap &gt;= 42.3.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488024000">- Use sle_version &gt;= 120300 instead of leap_version &gt;= 420300
  (leap_version does not work).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: iso_read_opts_set_no_rockridge() did not prevent
    reading of root SUSP.
  * Bug fix: Non-SUSP data in System Use Area prevented image
    loading if Rock Ridge was enabled.
  * Bug fix: Protective MBR for GPT could emerge with boot flag
    set.
  * Bug fix: Appended partitions of size &gt;= 4 GiB led to abort with
    error message "FATAL : ISO overwrite".
  * Bug fix: Bit 15 of iso_write_opts_set_system_area did not work
    with generic MBR.
  * Bug fix: Keeping and patching of loaded boot images failed.
    Regression by version 1.4.4.
  * Bug fix: Program crashes by intentionally wrong ISO image
    input. Debian bug reports: deb#872372, deb#872475, deb#872545,
    deb#872590, deb#872761.
  * New API calls el_torito_set_full_load(),
    el_torito_get_full_load().
  * New API call iso_write_opts_set_iso_mbr_part_type().</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to 1.5.0:
  * Bug fix: Multi-session emulation was not recognized with non-zero partition
  * New bit10 of isoburn_drive_acquire() to accept all xattr namespaces
  * New -xattr mode "any" to process all xattr namespaces of local filesystem
  * New -as mkisofs option --xattr-any
  * New -as mkisofs options -uid and -gid</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 1.5.2
  * New API calls iso_write_opts_set_part_type_guid(),
    iso_write_opts_set_iso_type_guid()
  * New API call iso_nowtime()
  * New flag bit2 of iso_node_set_acl_text() to be verbous about
    failures
  * Made libisofs ready for building out-of-source.
  * Bug fix: Appended GPT partitions were not covered by the
    protective MBR partition
  * Bug fix: Multi-session emulation spoiled GPT production.
    "GPT partitions ... overlap". Regression towards 1.4.8
  * Bug fix: Appending partitions 5 to 8 caused damaged ISO
    filesystems if not for SUN disk label
  * Bug fix: SIGSEGV happened if options bit 14 of
    iso_write_opts_set_system_area() is set and no El Torito
    boot image is defined
- Add signature and keyring as sources
- Spec cleanup</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 1.5.4:
  * Bug fix: Large amounts of AAIP data or many long file names could cause
    with zisofs an unreadable filesystem after the warning "Calculated and
    written ECMA-119 tree end differ" Bug fix: Big-Endian MIPS Volume Header
    boot file size was rounded up to full 2048.
  * Bug fix: El Torito production failed if no catalog path is given and the
    first boot image path contains no slash
  * Bug fix: zisofs production was wrong on big-endian machines
  * Bug fix: Apple Partition Map entries wrote uninitialized data
  * Bug fix: Appended APM partitions without HFS+ production had start
    and size 1
  * Switched to usage of libjte-2.0.0
  * Implemented production and reading of zisofs2 for files larger than
    4 GiB - 1
  * New struct iso_zisofs_ctrl version 2
  * New API call iso_stream_get_zisofs_par()
  * New API call iso_stream_zisofs_discard_bpt()
  * New API call iso_image_zisofs_discard_bpt()
  * New flag bits 8 to 15 in API call iso_node_zf_by_magic()
  * New API call iso_zisofs_ctrl_susp_z2()
  * New API call iso_read_opts_set_joliet_map(), new default
    joliet_map=stripped
  * New API calls iso_read_image_features_tree_loaded() and
    iso_read_image_features_rr_loaded()</changelog>
  <changelog author="dimstar@opensuse.org" date="1615377600">- Support building against libjte-1 or libjte-2.</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- update to 1.5.6 (jsc#PED-5018)
  * Bug fix: iso_write_opts_set_part_like_isohybrid() did not
    cause a MBR partition table if the partitions are data files
    in the ISO rather than appended
  * Bug fix: The lseek methods of IsoFileSource for local
    filesystem and loaded ISO returned libisofs error codes as
    positive off_t numbers
  * Bug fix: Freshly cloned data files from imported image were
    not marked as imported.
  * Bug fix: Size of further CE area was calculated wrong if its
    CE entry ended exactly at a block boundary
  * New iso_write_opts_set_system_area() option bits 16:
    GPT "Legacy BIOS bootable" and 17: GPT writable
  * New API calls iso_assess_written_features(),
    iso_read_image_feature_named(), iso_read_image_features_text()
  * Allowed lseekable device files with
    iso_tree_add_new_cut_out_node().
  * Proof-of-concept by Ivan Shmakov.
  * New API call iso_write_opts_set_max_ce_entries()</changelog>
</package>
<package pkgid="4bb2c7ac6375fd96010145eeaae5a17b317f755820d4b9edd91488adb2c528bcd5a7eb9fa5dd1b3c61b07c83e3e953513e54842776983c526cf56069e000e12a" name="libiw30" arch="x86_64">
  <version epoch="0" ver="30.pre9" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385640000">- install udev rules in _udevrulesdir.</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- Remove superfluous iwlagn module config (bnc#831819)
- Fix build with openSUSE 12.2 and SLE11</changelog>
  <changelog author="ledest@gmail.com" date="1413633600">- fix bashisms in install_*_scripts</changelog>
  <changelog author="ledest@gmail.com" date="1413633601">- update URL in install_intersil_firmware script</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1516622400">- improved install scripts (using install instead of mv and using $UID:
  * install_acx100_firmware
  * install_intersil_firmware
- updated URL in install_acx100_firmware script (bnc#1004577)
- improved spec file
  * removed obsolete openSUSE Versions checks
  * replaced bash variables with macros
  * removed obsolete tags and macros
  * cleaned spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1575115200">- Convert wireless-tools.changes to proper UTF-8 format: new
  version of RPM are getting strict in interpreting files.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files in %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mwilck@suse.com" date="1646740800">- Fix URLs (wireless-tools home page has been migrated to github.io)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e436ee30969e61c16f594a6502f126806ce5db996765c5474684c29fcc2023e92ecd06a17107dfa6d107d8a50d0f50e06ae7e73e19171513abc6d9957a6ad93b" name="libjansson4" arch="x86_64">
  <version epoch="0" ver="2.14" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- update to new upstream release 2.11
  * New features:
  - Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
  - Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
  - Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
  - Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Bug Fixes:
  - Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
  - Make json_equal() const-correct (#344).
  - Fix incomplete stealing of references by `json_pack()` (#374)
- changelog from 2.9
  * New features:
  - Add JSON_EMBED encoding flag allowing arrays and objects to
    be encoded into existing streams (#329).
  - Add `json_dumpb()` function for dumping to a pre-allocated
    buffer (#328).
  - Add `json_dumpfd()` and `json_loadfd()` functions for dumping
    to streaming file descriptors (#328).
  - Add support for parsing buffers larger than 2GB (#309).</changelog>
  <changelog author="info@paolostivanin.com" date="1548331200">- update to new upstream release 2.12
  * Bug fixes:
  - Fix error message in `json_pack()` for NULL object (#409).
  - Avoid invalid memory read in `json_pack()` (#421).
  - Call va_end after va_copy in `json_vsprintf()` (#427).
  - Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
  - Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).</changelog>
  <changelog author="info@paolostivanin.com" date="1588939200">- Update to 2.13.1
  * New Features:
  - Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
  - Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
  - Add json_object_update_recursive()
  * Bug fixes:
  - Add infinite loop check in json_deep_copy()
  - Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
  - Update version detection for sphinx-build
  * Documentation improvements</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1642507200">- Update to 2.14:
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
  * Fixes:
    + Handle `sprintf` corner cases.
  * Build:
    + Symbol versioning for all exported symbols (gh#akheron/jansson#523).
    + Fix compiler warnings.
  * Documentation:
    + Small fixes.
    + Sphinx 3 compatibility (gh#akheron/jansson#530).
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Cleanup with spec-cleaner.
- Add check section.</changelog>
</package>
<package pkgid="a04277ecaaede167cce2a59a35587d2299164ce092f0f266816251ca8dcf1c76487e41d3f15181cd32e7fe8cdff99176a554effc6abde300321e4360886d876b" name="libjbig2" arch="x86_64">
  <version epoch="0" ver="2.1" rel="160000.3.2"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- Makefile is not parallel-safe</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="54cb8c312577b24aba840eed64312f3e8aff47872b0ed96e74d42dd790484b521e878217cb20c06ebd1012808404087718e92b1f5542c225adbe0e386d2e6156" name="libjcat1" arch="x86_64">
  <version epoch="0" ver="0.2.3" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 0.1.10:
  - Add ED25519 support (Richard Hughes)
  - Define three more types used for the firmware transparency log (Richard Hughes)
  - Include the pkgconfig variables in the subproject dependency (Richard Hughes)
  - Drop the use of setuptools in the test script for regenerating ld version file (Eli Schwartz)
  - Use the correct lookup method for the python3 script interpreter (Eli Schwartz)</changelog>
  <changelog author="dmueller@suse.com" date="1650542400">- update to 0.1.11:
  - Allow the user to get the runtime library version (Richard Hughes)
  - Fix incorrect certtool being called on macOS (Richard Hughes)</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 0.1.12:
  * Correctly export the AliasIds in all cases (Richard Hughes)
  * Install installed-test firmware.bin.ed25519 (Jan Tojnar)
  * Predate test cert activation date by 1 day (David Bonner)</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 0.1.13:
  * Add support for SHA512 checksums (Richard Hughes)
  * Add the ability to add and remove support for blob types
  * Fix header includes for clang-tidy (Richard Hughes)
  * Show the expected SHA checksum in the error (Richard
    Hughes)</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- update to 0.1.14:
  * Fix header includes (Daisuke Fujimura)
  * Fix prefix of LIBJCAT_CHECK_VERSION (Richard Hughes)
  * Use project_source_root to fix building as a subproject</changelog>
  <changelog author="dimstar@opensuse.org" date="1704369600">- Update to version 0.2.0:
  + New Features:
  - Add support for verifying firmware transparency checkpoints
  - Add various bitcounting functions for future use
  - Allow creating and validating SHA512 checksums
  - Allow verifying the checksum of a payload
  + Bugfixes:
  - Sprinkle attribute((nonnull)) to give a little more
    compile-time safety</changelog>
  <changelog author="dimstar@opensuse.org" date="1704888000">- Do not install test files: pass -Dtest=false to meson instead of
  Dtest=true (aids with reproducible build, boo#1218715).
- Add check section and run meson test.</changelog>
  <changelog author="dimstar@opensuse.org" date="1705924800">- Update to version 0.2.1:
  + Do not dedupe sig and sig-of-checksum when loading.
  + Fix the installed tests.
  + Show the sig-of-checksum results clearer on the CLI.</changelog>
  <changelog author="dimstar@opensuse.org" date="1728907200">- Update to version 0.2.2:
  + New Features:
  - Add bt-logindex blob kind.
  + Bugfixes:
  - Increase test coverage for ED25519 support.
  - Save the auto-generated private key with 0600 file
    permissions.
  - Switch ED25519 support to not directly using Nettle.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738584000">- Update to version 0.2.3:
  + Do not close the base stream when using
    jcat_file_import_stream().
  + Skip ed25519 part of a test with -Ded25519=false.</changelog>
</package>
<package pkgid="1257c47a6fc897729a43ec80bfc73ec2917ed14a93a7c9d51d0518ea502375b1ec8e3727f6cda314356c684f90ae2bdfe38634c5bf9a0560858416333f6a8568" name="libjitterentropy3" arch="x86_64">
  <version epoch="0" ver="3.6.3" rel="160000.2.2"/>
  <changelog author="meissner@suse.com" date="1632225600">- add a userspace jitter entropy generator library</changelog>
  <changelog author="jengelh@inai.de" date="1632830400">- Trim conjecture from descriptions.</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- updated to 3.4.0
  * enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
  * fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
  It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
  * enhancement: add CMake support by Andrew Hopkins
- updated to 3.3.1
  * fix: bug fix in initialization logic by Vladis Dronov &lt;vdronov@redhat.com&gt;
  * fix: use __asm__ instead of asm to suit the C11 standard
- added a -devel-static package to be able to link it static.</changelog>
  <changelog author="meissner@suse.com" date="1662984000">- updated to 3.4.1
  * add FIPS 140 hints to man page
  * simplify the test tool to search for optimal configurations
  * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
  * enhancement: add ARM64 assembler code to read high-res timer</changelog>
  <changelog author="meissner@suse.com" date="1663070400">- jitterentropy-split-internal-header.patch:
  Hide the non-GNUC constructs that are library internal from the
  exported header. (bsc#1202870)</changelog>
  <changelog author="meissner@suse.com" date="1674734400">- jitterentropy-with-debug.patch: build with debuginfo (bsc#1207789)</changelog>
  <changelog author="pmonreal@suse.com" date="1679486400">- Fix a stack corruption on s390x: [bsc#1209627]
  * Output size of the STCKE command on s390x is 16 bytes, compared
    to 8 bytes of the STCK command. Fix a stack corruption in the
    s390x version of jent_get_nstime(). Add some more detailed
    information on the STCKE command.
  * github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
  * Add jitterentropy-fix-a-stack-corruption-on-s390x.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701864000">- Make use of distro flags with %set_build_flags</changelog>
  <changelog author="pmonreal@suse.com" date="1746014400">- Update to 3.6.3: [bsc#1242050]
  * Correct time stamp processing on AIX
  * Use high-resolution time stamp on Apple Silicon
  * GCD power-up test: consider OSR
  * Remove patches fixed in the update:
  - jitterentropy-fix-a-stack-corruption-on-s390x.patch
  * Rebase patches:
  - jitterentropy-split-internal-header.patch
  - jitterentropy-with-debug.patch
- Update to 3.6.2:
  * Fix RCT re-initialization in jent_read_entropy_safe
  * simplify test code
  * improve keyword portability
- Update to 3.6.1:
  * Add more test code
  * Add support for SunPRO compiler
  * Fix compilation on OpenBSD by replacing sed with tr
  * internal timer: Add support for Apple
  * Various small fixes to compilation to imporve portability
- Update to 3.6.0:
  * Remove bi-modal behavior of conditioning function
  * Make jent_read_entropy_safe safer by retrying the health test
  * Move the version information to make them available at compile time
- Update to 3.5.0:
  * add distinction between intermittent and permanent health failure
  * add compile time option to allow configuring a mask to reduce the
    size of the time stamp used for the APT</changelog>
</package>
<package pkgid="ebaab677c60df7d846180d25a8ae1bb9c97ff07ba8da81bdd9abe74e24594521a2fbd8861cd188d793a2508dcfeeb3aed073288956c5d6466e0f12590c4abfa2" name="libjpeg8" arch="x86_64">
  <version epoch="0" ver="8.3.2" rel="160000.3.2"/>
  <changelog author="opensuse@dstoecker.de" date="1671883200">- Add explicit provides for jpegtran, so it can be installed easier</changelog>
  <changelog author="info@paolostivanin.com" date="1676980800">- update to 2.1.5.1:
  * Fixed a regression introduced by 2.0 beta1[15] that caused a buffer
    overrun in the progressive Huffman encoder when attempting to transform
    a specially-crafted malformed 12-bit-per-component JPEG image into a
    progressive 12-bit-per-component JPEG image using a 12-bit-per-component
    build of libjpeg-turbo.
  * Fixed an issue whereby, when using a 12-bit-per-component build of
    libjpeg-turbo (-DWITH_12BIT=1), passing samples with values greater than 4095
    or less than 0 to jpeg_write_scanlines() caused a buffer overrun or
    underrun in the RGB-to-YCbCr color converter.
  * Fixed a floating point exception that occurred when attempting to use
    the jpegtran -drop and -trim options to losslessly transform a
    specially-crafted malformed JPEG image.
  * Fixed an issue in tjBufSizeYUV2() whereby it returned a bogus result,
    rather than throwing an error, if the align parameter was not a power of 2.
  * Fixed a similar issue in tjCompressFromYUV() whereby it generated a corrupt
    JPEG image in certain cases, rather than throwing an error,
    if the align parameter was not a power of 2.
  * Fixed an issue whereby tjDecompressToYUV2(), which is a wrapper for
    tjDecompressToYUVPlanes(), used the desired YUV image dimensions
    rather than the actual scaled image dimensions when computing the plane
    pointers and strides to pass to tjDecompressToYUVPlanes().
    This caused a buffer overrun and subsequent segfault if the desired
    image dimensions exceeded the scaled image dimensions.
  * Fixed an issue whereby, when decompressing a 12-bit-per-component JPEG
    image (-DWITH_12BIT=1) using an alpha-enabled output color space such as
    JCS_EXT_RGBA, the alpha channel was set to 255 rather than 4095.
  * Fixed an issue whereby the Java version of TJBench did not accept a range
    of quality values.
  * Fixed an issue whereby, when -progressive was passed to TJBench,
    the JPEG input image was not transformed into a progressive JPEG image
    prior to decompression.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="pgajdos@suse.com" date="1687521600">- merge two spec files into one</changelog>
  <changelog author="dmueller@suse.com" date="1704110400">- update to 3.0.1 (bsc#1211542, CVE-2023-2804):
  * The x86-64 SIMD functions now use a standard stack frame,
    prologue, and epilogue so that debuggers and profilers can
    reliably capture backtraces from within the functions.
  * Fixed two minor issues in the interblock smoothing algorithm
    that caused mathematical (but not necessarily perceptible)
    edge block errors when decompressing progressive JPEG images
    exactly two MCU blocks in width or that use vertical
    chrominance subsampling.
  * The TurboJPEG API now supports 4:4:1 (transposed 4:1:1)
    chrominance subsampling, which allows losslessly transposed or
    rotated 4:1:1 JPEG images to be losslessly cropped, partially
    decompressed, or decompressed to planar YUV images.
  * Fixed various segfaults and buffer overruns (CVE-2023-2804)
  * that occurred when attempting to decompress various
    specially-crafted malformed 12-bit-per-component and
    16-bit-per-component lossless JPEG images using color
    quantization or merged chroma upsampling/color conversion.  The
    underlying cause of these issues was that the color
    quantization and merged chroma upsampling/color conversion
    algorithms were not designed with lossless decompression
    in mind.  Since libjpeg-turbo explicitly does not support color
    conversion when compressing or decompressing lossless JPEG
    images, merged chroma upsampling/color conversion never should
    have been enabled for such images.  Color quantization is a
    legacy feature that serves little or no purpose with lossless
    JPEG images, so it is also now disabled when decompressing such
    images.  (As a result, djpeg can no longer decompress a
    lossless JPEG image into a GIF image.)
  * Fixed an oversight in 1.4 beta1[8] that caused various
    segfaults and buffer overruns when attempting to decompress
    various specially-crafted malformed 12-bit-per-component JPEG
    images using djpeg with both color quantization and RGB565
    color conversion enabled.
  * Fixed an issue whereby `jpeg_crop_scanline()` sometimes
    miscalculated the downsampled width for components with 4x2 or
    2x4 subsampling factors if decompression scaling was enabled.
    This caused the components to be upsampled incompletely, which
    caused the color converter to read from uninitialized memory.
    With 12-bit data precision, this caused a buffer overrun or
    underrun and subsequent segfault if the sample value read from
    uninitialized memory was outside of the valid sample range.
  * Fixed a long-standing issue whereby the `tj3Transform()`
    function, when used with the `TJXOP_TRANSPOSE`,
    `TJXOP_TRANSVERSE`, `TJXOP_ROT90`, or `TJXOP_ROT270` transform
    operation and without automatic JPEG destination buffer
    (re)allocation or lossless cropping, computed the worst-case
    transformed JPEG image size based on the source image
    dimensions rather than the transformed image dimensions.  If a
    calling program allocated the JPEG destination buffer based on
    the transformed image dimensions, as the API documentation
    instructs, and attempted to transform a specially-crafted
    4:2:2, 4:4:0, 4:1:1, or 4:4:1 JPEG source image containing a
    large amount of metadata, the issue caused `tj3Transform()` to
    overflow the JPEG destination buffer rather than fail
    gracefully.  The issue could be worked around by setting
    `TJXOPT_COPYNONE`.  Note that, irrespective of this issue,
    `tj3Transform()` cannot reliably transform JPEG source images
    that contain a large amount of metadata unless automatic JPEG
    destination buffer (re)allocation is used or `TJXOPT_COPYNONE`
    is set.
  * Significantly sped up the computation of optimal Huffman
    tables. This speeds up the compression of tiny images by as
    much as 2x and provides a noticeable speedup for images as
    large as 256x256 when using optimal Huffman tables.
  * All deprecated fields, constructors, and methods in the
    TurboJPEG Java API have been removed.
  * Arithmetic entropy coding is now supported with
    12-bit-per-component JPEG images.
  * Overhauled the TurboJPEG API to address long-standing
    limitations and to make the API more extensible and intuitive.</changelog>
  <changelog author="schwab@suse.de" date="1705320000">- Do not require SIMD support when it does not exist</changelog>
  <changelog author="mardnh@gmx.de" date="1707134400">- Update to version 3.0.2
  * Fixed a signed integer overflow in the tj3CompressFromYUV8(),
    tj3DecodeYUV8(), tj3DecompressToYUV8(), and tj3EncodeYUV8()
    functions, detected by the Clang and GCC undefined behavior
    sanitizers, that could be triggered by setting the align
    parameter to an unreasonably large value. This issue did not
    pose a security threat, but removing the warning made it
    easier to detect actual security issues, should they arise in
    the future.
  * Introduced a new parameter (TJPARAM_MAXMEMORY in the
    TurboJPEG C API and TJ.PARAM_MAXMEMORY in the TurboJPEG Java
    API) and a corresponding TJBench option (-maxmemory) for
    specifying the maximum amount of memory (in megabytes) that
    will be allocated for intermediate buffers, which are used
    with progressive JPEG compression and decompression, optimized
    baseline entropy coding, lossless JPEG compression, and
    lossless transformation. The new parameter and option serve
    the same purpose as the max_memory_to_use field in the
    jpeg_memory_mgr struct in the libjpeg API, the JPEGMEM
    environment variable, and the cjpeg/djpeg/jpegtran -maxmemory
    option.
  * Introduced a new parameter (TJPARAM_MAXPIXELS in the TurboJPEG
    C API and TJ.PARAM_MAXPIXELS in the TurboJPEG Java API) and a
    corresponding TJBench option (-maxpixels) for specifying the
    maximum number of pixels that the decompression, lossless
    transformation, and packed-pixel image loading
    functions/methods will process.
  * Fixed an error ("Unsupported color conversion request") that
    occurred when attempting to decompress a 3-component lossless
    JPEG image without an Adobe APP14 marker. The decompressor
    now assumes that a 3-component lossless JPEG image without an
    Adobe APP14 marker uses the RGB colorspace if its component
    IDs are 1, 2, and 3.</changelog>
  <changelog author="dmueller@suse.com" date="1725105600">- update to 3.0.3:
  * The x86-64 SIMD extensions now include support for Intel
    Control-flow Enforcement Technology (CET), which is enabled
    automatically if CET is enabled in the C compiler.
  * Fixed a regression introduced by 3.0 beta2[6] that made it
    impossible for calling applications to supply custom Huffman
    tables when generating 12-bit-per-component lossy JPEG images
    using the libjpeg API.
  * Fixed a segfault that occurred when attempting to use the
    jpegtran `-drop` option with a specially-crafted malformed
    input image or drop image (specifically an image in which all
    of the scans contain fewer components than the number of
    components specified in the Start Of Frame segment.)</changelog>
  <changelog author="dmueller@suse.com" date="1727524800">- update to 3.0.4:
  * Fixed an issue whereby the CPU usage of the default marker
    processor in the decompressor grew exponentially with the
    number of markers.  This caused an unreasonable slow-down in
    `jpeg_read_header()` if an application called `jpeg_save_markers()`
    to save markers of a particular type and then attempted to
    decompress a JPEG image containing an excessive number of markers
    of that type.
  * Hardened the default marker processor in the decompressor to guard
    against an issue (exposed by 3.0 beta2[6]) whereby attempting to
    decompress a specially-crafted malformed JPEG image (specifically
    an image with a complete 12-bit-per-sample Start Of Frame segment
    followed by an incomplete 8-bit-per-sample Start Of Frame segment)
    using buffered-image mode and input prefetching caused a segfault
    if the `fill_input_buffer()` method in the calling application's
    custom source manager incorrectly returned `FALSE` in response to a
    prematurely-terminated JPEG data stream.
  * Fixed an issue in cjpeg whereby, when generating a
    12-bit-per-sample or 16-bit-per-sample lossless JPEG image,
    specifying a point transform value greater than 7 resulted in an
    error ("Invalid progressive/lossless parameters") unless the
    `-precision` option was specified before the `-lossless` option.
  * Fixed a regression introduced by 3.0.3[3] that made it impossible
    for calling applications to generate 12-bit-per-sample
    arithmetic-coded lossy JPEG images using the TurboJPEG API.
  * Fixed an error ("Destination buffer is not large enough") that
    occurred when attempting to generate a full-color lossless JPEG
    image using the TurboJPEG Java API's `byte[]
    TJCompressor.compress()` method if the value of `TJ.PARAM_SUBSAMP`
    was not `TJ.SAMP_444`.
  * Fixed a segfault in djpeg that occurred if a negative width was
    specified with the `-crop` option.  Since the cropping region width
    was read into an unsigned 32-bit integer, a negative width was
    interpreted as a very large value.  With certain negative width and
    positive left boundary values, the bounds checks in djpeg and
    `jpeg_crop_scanline()` overflowed and did not detect the
    out-of-bounds width, which caused a buffer overrun in the
    upsampling or color conversion routine.  Both bounds checks now use
    64-bit integers to guard against overflow, and djpeg now checks for
    negative numbers when it parses the crop specification from the
    command line.
  * Fixed an issue whereby the TurboJPEG lossless transformation
    function and methods checked the specified cropping region against
    the source image dimensions and level of chrominance subsampling
    rather than the destination image dimensions and level of
    chrominance subsampling, which caused some cropping regions to be
    unduly rejected when performing 90-degree rotation, 270-degree
    rotation, transposition, transverse transposition, or grayscale
    conversion.
  * Fixed an issue whereby the TurboJPEG lossless transformation
    function and methods did not honor
    `TJXOPT_COPYNONE`/`TJTransform.OPT_COPYNONE` unless it was
    specified for all lossless transforms.</changelog>
</package>
<package pkgid="e45cb842140e6cbc68680c9a8b12fbf956965af7baaebaeeff5509f6776e2ad8e39521797c11b874c967dfb5f10eb341aa54d9e92d3eb36e2846e9e493a92208" name="libjq1" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- build without valgrind on riscv64 - does not exist (yet)</changelog>
  <changelog author="mardnh@gmx.de" date="1694088000">- Update to version 1.7
  * Make object key color configurable using JQ_COLORS environment
    variable.
  * Change the default color of null to Bright Black.
  * Respect NO_COLOR environment variable to disable color output.
  * Improved --help output. Now mentions all options and nicer
    order.
  * Fix multiple issues of exit code using --exit-code/-e option.
  * Add --raw-output0 for NUL (zero byte) separated output.
  * Fix assert crash and validate JSON for --jsonarg.
  * Remove deprecated --argfile option.
  Language changes
  * Use decimal number literals to preserve precision. Comparison
    operations respects precision but arithmetic operations might
    truncate.
  * Adds new builtin pick(stream) to emit a projection of the
    input object or array.
  * Adds new builtin debug(msgs) that works like debug but applies
    a filter on the input before writing to stderr.
  * Adds new builtin scan($re; $flags). Was documented but not
    implemented.
  * Adds new builtin abs to get absolute value. This potentially
    allows the literal value of numbers to be preserved as length
    and fabs convert to float.
  * Allow if without else-branch. When skipped the else-branch
    will be . (identity).
  * Allow use of $binding as key in object literals.
  * Allow dot between chained indexes when using .["index"]
  * Allow dot for chained value iterator .[], .[]?
  * Fix try/catch catches more than it should.
  * Speed up and refactor some builtins, also remove
    scalars_or_empty/0.
  * Now halt and halt_error exit immediately instead of continuing
    to the next input.
  * Fix issue converting string to number after previous convert
    error.
  * Fix issue representing large numbers on some platforms causing
    invalid JSON output.
  * Fix deletion using assigning empty against arrays.
  * Allow keywords to be used as binding name in more places.
  * Allow using nan as NaN in JSON.
  * Expose a module's function names in modulemeta.
  * Fix contains/1 to handle strings with NUL.
  * Fix stderr/0 to output raw text without any decoration.
  * Fix nth/2 to emit empty on index out of range.
  * Fix implode to not assert and instead replace invalid unicode
    codepoints.
  * Fix indices/1 and rindex/1 in case of overlapping matches in
    strings.
  * Fix sub/3 to resolve issues involving global search-and-replace
    (gsub) operations.
  * Fix empty regular expression matches.
  * Fix overflow exception of the modulo operator.
  * Fix string multiplication by 0 (and less than 1) to emit empty
    string.
  * Fix segfault when using libjq and threads.
  * Fix constant folding of division and reminder with zero
    divisor.
  * Fix error/0, error/1 to throw null error.
  * Simpler and faster transpose.
  * Simple and efficient implementation of walk/1.
  * Remove deprecated filters leaf_paths, recurse_down.
- Adjust URL/Source - new upstream
  https://github.com/stedolan/jq -&gt; https://github.com/jqlang</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1695816000">- switch to bootstrapped upstream tarball to fix version output
  [boo#1215737]</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- build with valgrind only on 64 bit architectures</changelog>
  <changelog author="mardnh@gmx.de" date="1702468800">- Update to version 1.7.1
  Security
  * Fix CVE-2023-50246 (boo#1218034)
    + Fix heap buffer overflow in jvp_literal_number_literal.
  * Fix CVE-2023-50268 (boo#1218038)
    fix stack-buffer-overflow if comparing nan with payload.
  CLI changes
  * Make the default background color more suitable for bright
    backgrounds.
  * Allow passing the inline jq script after --.
  * Fix possible uninitialised value dereference if jq_init() fails
  Language changes
  * Simplify paths/0 and paths/1.
  * Reject U+001F in string literals.
  * Remove unused nref accumulator in block_bind_library.
  * Remove a bunch of unused variables, and useless assignments.
  * main.c: Remove unused EXIT_STATUS_EXACT option.
  * Actually use the number correctly casted from double to int as
    index.
  * src/builtin.c: remove unnecessary jv_copy-s in
    type_error/type_error2.
  * Remove undefined behavior caught by LLVM 10 UBSAN.
  * Convert decnum to binary64 (double) instead of decimal64.
    This makes jq behave like the JSON specification suggests and
    more similar to other languages.
  * Fix memory leaks on invalid input for ltrimstr/1 and
    rtrimstr/1.
  * Fix memory leak on failed get for setpath/2.
  * Fix nan from json parsing also for nans with payload that
    start with 'n'.
  * Allow carriage return characters in comments.
  Documentation changes
  * Generate links in the man page.
  libjq
  * Add extern C for C++.</changelog>
  <changelog author="ncutler@suse.com" date="1747742400">- Add patch CVE-2024-53427.patch (CVE-2024-53427, bsc#1238078)</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
</package>
<package pkgid="5af55e5ee0b494e3a88c0e09fbb21c6f1fb50cd4555a4ff1012cf42029b13275ad27a5bf719fcdf42cf2e84bb0fe765665c085b1471796d35a62c29e50dfae71" name="libjson-c5" arch="x86_64">
  <version epoch="0" ver="0.17" rel="160000.2.2"/>
  <changelog author="mliska@suse.cz" date="1490270400">- Added gcc7-fix.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1514462400">- json-c 0.13
  + Deprecated and removed features:
  * Internal use of bits.h has been eliminated.
  * lh_abort() is deprecated
  + Behavior changes:
  * Tighten the number parsing algorithm to raise errors instead
    of truncating the results.  For example 12.3.4 or 2015-01-15,
    which now return null.
  * Use size_t for array length and size. Platforms where
    sizeof(size_t) != sizeof(int) may not be backwards compatible
  * Check for failue when allocating memory, returning NULL and
    errno=ENOMEM.
  * Change json_object_object_add() return type from void to int,
    and will return -1 on failures, instead of exiting. (Note:
    this is not an ABI change)
  + New features:
  * Aiming to follow RFC 7159 now.
  * Support for JSON pointer, RFC 6901 (see json_pointer.h)
  * Add a couple of additional option to json_object_to_json_string_ext:
  JSON_C_TO_STRING_PRETTY_TAB
  JSON_C_TO_STRING_NOSLASHESCAPE
  * json_object_object_add_ex() - better perf when certain
    constraints are known to be true
  * Serialization format of doubles now configurable
  * New functions
  - json_object_equal() - utility function for comparing
    json_objects
  - json_object_deep_copy() - a way to copy entire object
    trees
  - json_object_set_&lt;type&gt;() - modify the value of
    existing json_object's without the need to recreate them.
  Also add a json_object_int_inc function to adjust an int's'
  value.
  - json_util_get_last_err() - retrieve the string describing
    the cause of errors, instead of printing to stderr.
  - perllike hash function for strings
  * json_global_set_string_hash()
  * json_c_visit() - a way to iterate over a tree of json-c
    objects.
  + Notable bug fixes and other improvements:
  * Make reference increment and decrement atomic to allow
    passing json objects between threads.
  * Fix json_object_object_foreach to avoid uninitialized
    variable warnings.
  * Improve performance by removing unneeded data items from
    hashtable code and reducing duplicate hash computation.
  * Performance: store small strings inside json_object
  * Performance: of json_object_to_json_string by removing
    variadic printf
  * Fix parsing of "-Infinity", and avoid needlessly copying the
    input when doing so.
  * Fix stack buffer overflow in json_object_double_to_json_string_format()
  * Fix various potential null ptr deref and int32 overflows
  * Fix a long-standing bug in array_list_put_idx() where it
    would attempt to free previously free'd entries due to not
    checking the current array length.
  * use uselocale() instead of setlocale() in json_tokener to
    behave better in threaded environments.
  * Fix out of bounds read when handling unicode surrogate pairs.
  * Ensure doubles that happen to be a whole number are emitted
    with ".0"
  * Visual Studio: use a snprintf/vsnprintf wrapper that ensures
    the string is terminated.
  * Fix double to int cast overflow in json_object_get_int64.
  * Clamp double to int32 when narrowing in json_object_get_int.
  * Use strtoll() to parse ints - instead of sscanf
  * usual code linting
  + Build changes:
  * Add Appveyor and Travis build support
  * Support for MacOS and Windows through CMake
  * Silent build by default
  * Link against libm when needed
  * Add support for building with AddressSanitizer
  * Add support for building with Clang
  * Add a --enable-threading configure option, and only use the
    (slower) __sync_add_and_fetch()/__sync_sub_and_fetch()
    function when it is specified.
- cleanup with spec-cleaner
- remove fix-set-but-not-used.patch
  + fixed: https://github.com/json-c/json-c/issues/240
- remove gcc7-fix.patch
  + fixed in 014924ba899f659917bb64392bbff7d3c803afc2</changelog>
  <changelog author="avindra@opensuse.org" date="1520942400">- json-c 0.13.1
  * Add const size_t json_c_object_sizeof()
  * Avoid invalid free (and thus a segfault) when ref_count gets &lt; 0
  * Fix handling of custom double formats that include a ".0"
  * Avoid uninitialized variable warnings in json_object_object_foreach
  * Add a top level fuzz directory for fuzzers run by OSS-Fuzz
  * Fix build for certain uClibc based systems.
  * Bump sonum to 4.0 to avoid conflicts because some packagers made
    their own bump to ".so.3" for the older 0.12 release</changelog>
  <changelog author="info@paolostivanin.com" date="1588075200">- json-c 0.14:
  * bits.h has been removed
  * lh_abort() has been removed
  * lh_table_lookup() has been removed, use lh_table_lookup_ex() instead.
  * Remove TRUE and FALSE defines, use 1 and 0 instead.
  * Switch to cmake
  * Build fixes
  * Doc updates
  * Added a json_tokener_get_parse_end() function to replace
    direct access of tok-&gt;char_offset
  * json_tokener_parse_ex() now accepts a new JSON_TOKENER_VALIDATE_UTF8 flag
    to validate that input is UTF8
  * Add support for unsigned 64-bit integers
  * A total of 7 new functions were added:
  * json_object_get_uint64 ( struct json_object const* jso )
  * json_object_new_uint64 ( uint64_t i )
  * json_object_set_uint64 ( struct json_object* jso, uint64_t new_value )
  * json_parse_uint64 ( char const* buf, uint64_t* retval )
  * See description of uint64 support, above.
  * json_tokener_get_parse_end ( struct json_tokener* tok )
  * See details under "json_tokener changes", above.
  * json_object_from_fd_ex ( int fd, int in_depth )
  * Allows the max nesting depth to be specified.
  * json_object_new_null ( )
  * Simply returns NULL.  Its use is not recommended.
  * The size of struct json_object has decreased from 96 bytes to 88 bytes.</changelog>
  <changelog author="dcermak@suse.com" date="1592395200">- Add upstream fix for boo#1173022
  * Added patch 0001-Detect-broken-RDRAND-during-initialization.patch
  * use URL from the releases page on github
  * run spec-cleaner over the spec file</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 0.15:
  * Deprecate `array_list_new()` in favor of `array_list_new2()`
  * Remove the THIS_FUNCTION_IS_DEPRECATED define.
  * Remove config.h.win32
  * Add a `JSON_TOKENER_ALLOW_TRAILING_CHARS` flag to allow multiple objects
    to be parsed even when `JSON_TOKENER_STRICT` is set.
  * Add `json_object_new_array_ext(int)` and `array_list_new_2(int)` to allow
    arrays to be allocated with the exact size needed, when known.
  * Add `json_object_array_shrink()` (and `array_list_shrink()`) and use it in
    json_tokener to minimize the amount of memory used.
  * Add a json_parse binary, for use in testing changes (not installed, but
    available in the apps directory).
  * Split the internal json_object structure into several sub-types, one for
    each json_type (json_object_object, json_object_string, etc...).
    This improves memory usage and speed, with the benchmark under
    bench/ report 5.8% faster test time and 6%(max RSS)-12%(peak heap)
    less memory usage.
    Memory used just for json_object structures decreased 27%, so use cases
    with fewer arrays and/or strings would benefit more.
  * Minimize memory usage in array handling in json_tokener by shrinking
    arrays to the exact number of elements parsed.  On bench/ benchmark:
    9% faster test time, 39%(max RSS)-50%(peak heap) less memory usage.
    Add json_object_array_shrink() and array_list_shrink() functions.
  * #616 - Parsing of surrogate pairs in unicode escapes now properly handles
    incremental parsing.
  * Fix incremental parsing of numbers, especially those with exponents, e.g.
    so parsing "[0", "e+", "-]" now properly returns an error.
    Strict mode now rejects missing exponents ("0e").
  * Successfully return number objects at the top level even when they are
    followed by a "-", "." or "e".  This makes parsing things like "123-45"
    behave consistently with things like "123xyz".
  * #589 - Detect broken RDRAND during initialization; also, fix segfault
    in the CPUID check.
  * #592 - Fix integer overflows to prevert out of bounds write on large input.
  * Protect against division by zero in linkhash, when creaed with zero size.
  * #602 - Fix json_parse_uint64() internal error checking, leaving the retval
    untouched in more failure cases.
  * #614 - Prevent truncation when custom double formatters insert extra \0's
- remove 0001-Detect-broken-RDRAND-during-initialization.patch (upstream)</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Add -std=gnu99 to fix build with some gcc versions</changelog>
  <changelog author="info@paolostivanin.com" date="1650456000">- Update to 0.16:
  + Deprecated and removed features:
  * JSON_C_OBJECT_KEY_IS_CONSTANT is deprecated in favor of
    JSON_C_OBJECT_ADD_CONSTANT_KEY
  * Direct access to lh_table and lh_entry structure members is deprecated.
    Use access functions instead, lh_table_head(), lh_entry_next(), etc...
  * Drop REFCOUNT_DEBUG code.
  + Changes and bug fixes
  * Cap string length at INT_MAX to avoid various issues with very long strings.
  * json_object_deep_copy: fix deep copy of strings containing '\0'
  * Fix read past end of buffer in the "json_parse" command
  * Avoid out of memory accesses in the locally provided vasprintf() function
    (for those platforms that use it)
  * Handle allocation failure in json_tokener_new_ex
  * Fix use-after-free in json_tokener_new_ex() in the event of printbuf_new() returning NULL
  * printbuf_memset(): set gaps to zero - areas within the print buffer which
    have not been initialized by using printbuf_memset
  * printbuf: return -1 on invalid arguments (len &lt; 0 or total buffer &gt; INT_MAX)
  * sprintbuf(): propagate printbuf_memappend errors back to the caller
  * Validate size arguments in arraylist functions.
  * Use getrandom() if available; with GRND_NONBLOCK to allow use of json-c
    very early during boot, such as part of cryptsetup.
  * Use arc4random() if it's available.
  * random_seed: on error, continue to next method instead of exiting the process
  * Close file when unable to read from /dev/urandom in get_dev_random_seed()
  * Speed up parsing by replacing ctype functions with simplified, faster
    non-locale-sensitive ones in json_tokener and json_object_to_json_string.
  * Neither vertical tab nor formfeed are considered whitespace per the JSON spec
  * json_object: speed up creation of objects, calloc() -&gt; malloc() + set fields
  * Avoid needless extra strlen() call in json_c_shallow_copy_default() and
    json_object_equal() when the object is known to be a json_type_string.</changelog>
  <changelog author="info@paolostivanin.com" date="1699012800">- Update to 0.17:
  + New features:
  * json_patch: add first implementation only with patch application
  * Add --disable-static and --disable-dynamic options to the cmake-configure script.
  * Add -DBUILD_APPS=NO option to disable app build
  * Minimum cmake version is now 3.9
  + Significant changes and bug fixes:
  * When serializing with JSON_C_TO_STRING_PRETTY set, keep the opening and
    closing curly or square braces on same line for empty objects or arrays.
  * Disable locale handling when targeting a uClibc system due to problems
    with its duplocale() function.
  * When parsing with JSON_TOKENER_STRICT set, integer overflow/underflow
    now result in a json_tokener_error_parse_number. Without that flag
    values are capped at INT64_MIN/UINT64_MAX.
  * Fix memory leak with emtpy strings in json_object_set_string
  * json_object_from_fd_ex: fail if file is too large (&gt;=INT_MAX bytes)
  * Add back json_number_chars, but only because it's part of the public API.
  * Entirely drop mode bits from open(O_RDONLY) to avoid warnings on certain
    platforms.
  * Specify dependent libraries, including -lbsd, in a more consistent way so
    linking against a static json-c works better
  * Fix a variety of build problems and add &amp; improve tests
  * Update RFC reference to https://www.rfc-editor.org/rfc/rfc8259
- Remove deprecated suse_version checks</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701864000">- Drop unneeded -DCMAKE_C_FLAGS=-std=gnu99 to use distro CFLAGS</changelog>
</package>
<package pkgid="9fb90544d2e1dfe9457f2bf80131523f033d9785caa2161ff38e03e8aa82930c91a19ccb2b3d38e2ea5b9cc2282827dc0a71ca372920ff02ea63959cbe5dbfd6" name="libjson-glib-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="160000.3.2"/>
  <changelog author="daniel.molkentin@suse.com" date="1590148800">- Require pkgconfig to create pkgconfig() provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 1.5.2:
  + Add getters with default fallback for JsonObject.
  + Clarify some expections of the json_object_get_*_member APIs.
  + Fix getting immutable root nodes from empty input.
  + Add `--output` option to json-glib-format.
  + Support loading files via memory mapping.
  + Add a symbol version to all exported symbols.
- Pass -Dgtk_doc=disabled to meson: keep the gtk-doc disabled for
  now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1599825600">- Update to version 1.6.0:
  + docs: Add missing index for 1.6 symbols.
  + Updated translations.
- Add gtk-doc BuildRequires and build gtk-doc api documentation and
  manpages via passing man=true and gtk_doc=enabled to meson.
- Add check section and run meson_test macro during build.
- Drop obsolete nuking of .la files, no longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1612872000">- Update to version 1.6.2:
  + Fix build reproducibility.
  + Fix parsing of UTF-16 surrogate pairs.
  + Ignore UTF-8 BOM.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629547200">- Update to version 1.6.4:
  + Discover linker flags on all toolchains
  + Fix memory leak
  + Use gi-docgen instead of gtk-doc for generating the API
    reference
  + Build against newer versions of GLib
- Pass gtk_doc=disabled to meson, no longer build API
  documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629892800">- Update to version 1.6.6:
  + New release with the documentation and gi-docgen included in
    the archive.
- Drop gtk-doc BuildRequires, no longer needed, nor used.
- Add docbook-xsl-stylesheets and libxslt-tools BuildRequires,
  needed for building of manpages.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 1.8.0:
  + Build fixes
  + Add current node accessor to JsonReader
  + Make xgettext optional
  + Avoid leaking memory in error paths
  + Update test suite to conform with TAP
  + Ensure valid output for exponential notation of numbers
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725019200">- Update to version 1.10.0:
  + Allow disabling installed tests
  + Support parsing multiple root statements in non-strict mode
  + Allow loading files &gt;4GB with json-glib-validate
- Add docutils BuildRequires: New dependency (rst2man)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1733832000">- Update to version 1.10.6:
  + Allow single quoted strings when running in non-strict mode.
  + Allow escaped characters when running in non-strict mode.
  + Add missing nullable annotation.</changelog>
</package>
<package pkgid="c647b738555f64b9da52bdf51aeb0a3b6cfe87c9a877b72a2469264ededfcb82f65482b07891284b6f07cc8e1c71421ba38feea2ef100540cf3b542ca8f4b5a8" name="libjte2" arch="x86_64">
  <version epoch="0" ver="1.22" rel="160000.2.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1485777600">- Initial rpm release.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1486036800">- Change %{_bindir}/* to an explicit binary list.</changelog>
  <changelog author="jengelh@inai.de" date="1486209600">- Use text from upstream readme as description.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1614686400">- Update to version 1.22:
  * Add support for SHA256 checksums, using jigdo format v2
    + Changes to libjte to generate the new format as an option -
    still defaults to v1 for cmpatibility for now
    + libjte updated to major version 2
    + Add support for v2 in jigdump, jigit-mkimage etc. too
    + Add new jigsum-sha256 program, for the base64-like output
    with sha256 checksums
  * jigdump now also understands jigdo .iso.tmp files
  * Misc small cleanups
  From version 1.21:
  * parallel-sums:
    + New utility for calculating checksums in parallel
  * Misc code cleanups
  * Misc man page cleanups
  * jigit-mkimage:
    + Print missing file names correctly</changelog>
</package>
<package pkgid="83c50de61169e5c2b7036628264de79752268f21232abb3fc4ebe3346b1eeb1685a98e4885414d90d8de704c283743703072d116969aa0fa82cecdd301c37a59" name="libkbdfile1" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709294400">- fix conversion of lowercase f in de-e1 keymap (boo#1207841)</changelog>
  <changelog author="sbrabec@suse.com" date="1712577600">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)
- Stop requiring kbd-legacy. All YaST supported languages should
  now have its keymaps in kbd.
- Remove kbd-1.15.2-prtscr_no_sigquit.patch rejected by the
  upstream. The problem is fixed for a long time, this is an
  additional modification. (PED-7977,
  https://github.com/legionus/kbd/pull/111):
- Drop kbd_fonts.tar.bz2 containing just several 30 years old
  inferior fonts with an unknown author and uncertain license.
- Add structured comments to patches.</changelog>
  <changelog author="tobi.goergens@gmail.com" date="1725364800">- Build libkeymap and create additional subpackages.</changelog>
  <changelog author="sbrabec@suse.com" date="1729166400">- Fix subpackage names and their dependencies.
- Add missing ldconfig scriptlets.</changelog>
  <changelog author="jengelh@inai.de" date="1729598400">- Enable libkfont
- Rename libkeymap-devel to just kbd-devel (the recommendation is
  to reuse the SRPM base name)</changelog>
  <changelog author="sbrabec@suse.com" date="1735819200">- Remove obsolete parts of suse-add.tar.bz2 (jsc#PED-7977),
  possible BREAKING CHANGES for obscure configurations:
  * Replace consolefonts/Cyr_a8x*.psf with upstream instances.
  * Replace consolefonts/cp850-full-8x*.psfu with upstream
    instances.
  * Drop consolefonts/lat5--*.psfu in favor of upstream
    lat5-*.psfu, exactly the same fonts with a better unimap.
  * Drop consolefonts/lat7.psf as it is lat7a-16.psf in the
    upstream.
  * Drop consolefonts/lt-brim-8x14.psfu in favor of upstream
    lat7a-14.psfu, exactly the same fonts with a better unimap.
  * Drop keymaps/i386/qwerty/Pl02.map in favor of nearly equal
    upstream pl2.map.
  * Drop keymaps/i386/qwerty/br-abnt-alt.map in favor of nearly
    equal upstream br-abnt.map.
  * Drop keymaps/i386/qwerty/tj_alt-UTF8.map that is already
    upstreamed.
  * Drop unimaps/iso07*.uni that is already upstreamed.
- Remove broken KBD_DISABLE_CAPS_LOCK feature (sysconfig.keyboard,
  kbdsettings, boo#1179897, jsc#PED-7814).
  Can be replaced by KEYMAP="{my map} disable.capslock" in
  /etc/vconsole.conf.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164800">- sysconfig.keyboard: KBD_NUMLOCK="bios" works only on systems
  without Secure Boot. Document that. Change the default to
  KBD_NUMLOCK="no". (boo#1212141)
- kbdsettings-nox86.patch: Update and return missing chunk.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164801">- Update to version 2.7.1:
  * setfont: Fixed regression in argument parsing.
  * dumpkeys: Fixed dumpkeys on pc and non-pc architectures.
  * libkeymap: Add API to get/set keymap keywords.
    Export functions to convert the value to kernel code.
    Fix double kbdfile open.
    Dump action codes for keycode 0.
  * libkfont: Fix buffer allocation for doubled font.
    Check console mode.
  * keymaps:
    Add hcesar layout, for portuguese speaking countries.
    Update Colemak-DH keymaps with upstream changes.
    sv-latin1.map: make Ctrl+AltGr+9 act as Ctrl+].
  * fonts:
    Remove non-free Agafari fonts. (bnc#95915,
    remove repack_kbd.sh)
  * other:
    Update man pages.
    Remove deprecated startup scripts.
    (Refresh kbd-2.0.2-fix-bashisms.patch.)
    Remove outdated docs.
    (Drop kbd-1.15.2-docu-X11R6-xorg.patch.)
    Update translations.
- Drop upstreamed patches: kbd-1.15.2-sv-latin1-keycode10.patch,
  kbd-2.0.2-doshell-reference.patch.
- Refresh kbd-1.15.5-loadkeys-search-path.patch.
- Releases are signed, add kbd.keyring and the signature.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743249600">- Add kbd-2.7.1-reproducible-gzip.patch (bsc#1240348)</changelog>
</package>
<package pkgid="8b686bea034f56548b47e4b0b0c0155adaff80b6f014a3573c94fa8015c8fa201ebd7f2a03bd27f44db9049ac1b4be17953e5ebb27b516364e9e260791233432" name="libkcapi-tools" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="160000.2.2"/>
  <changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
  <changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569585600">- Remove docbook-utils BuildRequires, xmlto is sufficient
- Spec file cleanup, use license macro, drop defattr, drop BuildRoot</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Use %make_build and respect %optflags.</changelog>
  <changelog author="meissner@suse.com" date="1578484800">- updated to 1.1.5:
  - Fix invocation of ansi_cprng in FIPS mode during testing
  - Fix testing on kernels &gt;= 5.0
  - Add virtualization test for kernel 5.1
  - Fix the limit between vmsplice() and sendmsg() by Christophe Leroy
  - Fix remove code duplication by Ondrej MosnÃ¡Äek
  - Fix potential memleak in speed-test
- updated to 1.1.4:
  - Fix: use sendmsg when processing more than 1&lt;&lt;16 bytes input data which improves performance on some architectures
- updated to 1.1.3:
  - Fix: default location of FIPS 140-2 HMAC control file is .&lt;orig file&gt;.hmac (was accidentally moved to &lt;orig file&gt;.hmac with 1.1.0)
- updated to 1.1.2:
  - Fix: Bug fixes for GCC 8.1.0 regarding string length checks by Krzysztof Kozlowski
  - Enhancement: ensure that tests execute on architectures other than X86 by Ondrej MosnÃ¡Äek
  - Fix: Bug fix to initialize FDs at the correct time in kcapi-kernel-if.c by Ondrej MosnÃ¡Äek
  - Test fix: Support test execution outside build environment by Ondrej MosnÃ¡Äek
- updated to 1.1.1:
  - Fix: Bug fixes for kcapi_hasher by Ondrej MosnÃ¡Äek
- updated to 1.1.0:
  - API Enhancement: Addition of kcapi_handle_reinit
  - Fix: simplify code by removing the internal *_fd functions from kcapi-kernel-if.c
  - Test enhancement: add IIV speed testing
  - Fix: add a loop around the read system call to always obtain all generated data
  - Fix: use host compiler for compiling docproc (reported by Christophe LEROY, fixed by BjÃ¶rn Esser)
  - Fix: make error handling of hashing applications consistent with coreutils applications (reported by Christophe LEROY)
  - Fix: support for zero length files (patched by Ondrej MosnÃ¡Äek)
  - Fix: support for zero message hashes on kernels &lt;= 4.9 (patched by Ondrej MosnÃ¡Äek)
  - Fix: Add Travis CI test system provided by Ondrej MosnÃ¡Äek
  - Fix: Add several fixes to kcapi-hasher by Ondrej MosnÃ¡Äek
  - Fix: Add additional tests for kcapi-hasher by Ondrej MosnÃ¡Äek
  - Fix: Apply unpadding only to last block of data by Ondrej MosnÃ¡Äek
  - Fix: Fix resource leaks in error code paths suggested by Ondrej MosnÃ¡Äek
  - Enhancement: achieve hmaccalc CLI equivalence by Ondrej MosnÃ¡Äek
- updated to 1.0.3:
  - Fix: support STDIN and --tag of sha*sum applications
  - Enhancement: Add small enhancements to support integration with distros -- reported by BjÃ¶rn Esser
- updated to 1.0.2:
  - Fix: hasher-test.sh on 32-bit systems
  - Fix: AIO return code handling on large number of requests -- reported by Jonathan Cameron
  - Enhancement: disable coredumps of library
  - Fix: remove unchecked -fstack-protector-strong from Makefile -- reported by Mathieu Malaterre
  - Fix: document that kcapi_cipher_stream_op must be called in a loop to collect all data in a multhreaded environment.
  - Test Fix: Update symmetric multithreaded stream test to invoke kcapi_cipher_stream_op in a loop to collect all data.
  - Fix: Initialize the cipher handle on stack with zeros as the library expects a zero-initialized cipher handle. This fixes a possible segfault where free() is called on a non-initialized memory location.
  - Fix: port algif_kpp and algif_akcipher to 4.15-rc3
- updated to 1.0.1:
  - Fix: constify AEAD cipher input data
  - Fix: use GCC byte swapping acceleration if present
  - Fix: KDF counter handling on little endian systems when generating more than 255 blocks
  - Use LD_PRELOAD for execution of test cases to force using of the freshly compiled binaries
  - Fix: return code handling of _kcapi_common_vmsplice_chunk_fd as reported by Christophe Leroy
  - Fix: return code handling in _kcapi_md_update
  - Fix: kcapi-hasher now supports files larger than 2GB
  - Fix: kcapi-dgst now supports files larger than 2GB
  - Fix: use stack protector
  - Fix: rename header guards to remove leading underscore as pointed out by Markus Elfring
  - Test Fix: Allow compiing the test code without asymmetric and KPP support
- updated to 1.0.0:
  - Fix: Small compile fixes for new checks of GCC 7
  - API Change: Rename all LOG_* enums to KCAPI_LOG_* to prevent namespace poisoning
  - Fix: soname and file name of library now compiles with conventions (thanks to Marcus Meissner)
  - Fix: kcapi-rng.c: unify FD/syscall read code and fix __NR_getrandom resolution
  - Enhancement: add kcapi-enc application to access symmetric encryption on command line
  - Fix: consolidate duplicate code in kcapi-hasher
  - Enhancement: add kcapi-dgst application to access hashes on command line
  - Enhancement: add kcapi-rng man page
  - Enhancement: add kcapi-rng --hex command line option
  - Fix: enable full symmetric AIO support
  - Fix: consolidate all test code into test/ and invoke all tests with test-invocation.sh
  - Fix: fix memleaks in error code paths as reported by clang
  - Fix: reduce memory footprint by rearranging data structures
  - Fix: kcapi-hasher is now fully FIPS 140-2 compliant as it now includes the integrity test for libkcapi.so
  - Enhancement: Add speed tests for MV-CESA accelerated ciphers and hash algorithms (thanks to Bastian Stender)
  - Test Enhancement: add kcapi-enc-test-large.c test testing edge conditions of AF_ALG
  - Test Enhancement: add virttest.sh - use of test system based on eudyptula-boot to test on linux-4.3.6, linux-4.4.86, linux-4.5, linux-4.7, linux-4.10, linux-4.12
  - Test Enhancement: add kcapi-fuzz-test.sh to support fuzzing the AF_ALG interfaces
  - Enhancement: add RPM SPEC file (tested with Fedora 26)
  - API Change: replace --disable-lib-asym with --enable-lib-asym as the algif_akcipher.c kernel interface is not likely to be added to the kernel anytime soon
  - API Enhancement: add KPP API which is not compiled by default, use --enable-lib-kpp (the algif_kpp.c kernel interface is not likely to be added to the Linux kernel any time soon)
  - Test Enhancement: Add KPP tests
  - Enhancement: Re-enable AIO support for symmetric and AEAD ciphers down to Linux kernels 4.1 and 4.7, respectively. This is due to integrating a fix against a kernel crash when using AIO.
  - Fix: simply KDF code base
  - API Enhancement: add message digest convenience functions kcapi_md_*sha*
  - API Enhancement: add cipher convenience functions kcapi_cipher_*_aes_*
  - API Enhancement: add rng convenience function kcapi_rng_get_bytes
  - API Change: remove kcapi_aead_getdata, use kcapi_aead_getdata_input and kcapi_aead_getdata_output instead
  - API Change: remove kcapi_aead_outbuflen, use kcapi_aead_outbuflen_enc and kcapi_aead_outbuflen_dec instead
- updated to 0.14.0:
  - AIO: fix tracking of completed IOCBs
  - speed-test: fix AEAD handling
  - speed-test: fix time calculation
  - compiler now warns a user of deprecated API calls
  - AIO: handle kernel errors for algif_skcipher gracefully
  - AIO: using multiple IOCB if algif_aead interface supports it
  - ASYM: add PKCS1 tests
  - AIO: add ASYM AIO support
  - AIO: fix AEAD AIO fallback
  - AIO: add AIO fallback testing
  - replace enforcement of symmetric cipher limits with a log message only (the underlying kernel implementations should catch any errors)
  - add fuzzing tests
  - use autotools build system as provided by Georges Savoundararadj with additional considerations from Marcin Nowakowski (thanks a lot)
  - ALG_MAX_PAGES restriction is gone with current AF_ALG interface
  - add HKDF (RFC5869)
  - add apps/kcapi-rng
  - add support for multiple accepts where the caller maintains the opfd
  - fix memleak in error case in PBKDF
  - add multithreaded symmetric cipher tests
  - enable full AIO support for kernels 4.13 and higher (fallback AIO implementation using synchronous support for earlier kernels) -- this is due to the broken AIO support for earlier kernels
  - Add tests for the AAD copy operation to be supported for kernel 4.13
- dropped libkcapi-use-external-fipshmac.patch (done differently in upstream)
- dropped reproduciblesort.patch (done differently upstream)
- dropped reproducibledate.patch: merged upstream
- libkcapi.keyring imported</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- update to 1.2.0:
  * enhancement: kcapi-hasher: add madvise and 64 bit support by Brandur Simonsen
  * fix: fix clang warnding in KDF implementation by Khem Raj
  * fix: fix inverted logic in kcapi-main test logic reported by Ondrej Mosnáček
  * fix: return error when iteration count is zero for PBKDF as reported by
  Guido Vranken
  * enhancement: add function kcapi_cipher_stream_update_last to indicate the
  last block of a symmetric cipher stream operation
  * disable XTS multithreaded tests as it triggers a race discussed in
  https://github.com/smuellerDD/libkcapi/issues/92. The conclusion is
  the following: xts(aes) doesn't support chaining requests like for other
  ciphers such as CBC (at least as implemented in the kernel Crypto API).
  That can be seen in `crypto/testmgr.h` - the ciphers that are expected to
  return IVs usable for chaining have the `.iv_out` entries filled in in their
  test vectors (and those that don't support it do not). One can see that only
  CTR and CBC test vectors have them, not XTS.
  Looking again at how XTS is defined, it seems one could implement
  transparent chaining by simply decrypting the final tweak using the tweak
  key and return it as the output IV... but I believe this has never been
  mandated nor implemented in the Crypto API (likely because of the overhead
  of the final tweak decryption, which would be pointless if you're not going
  to use the output IV - and there is currently no way to signal to the driver
  that you are going to need it).
  * disable AIO parallel tests due to undefined behavior</changelog>
  <changelog author="asn@cryptomilk.org" date="1627387200">- Update to version 1.3.1
  * fix: fix -Wconversion warnings (by Ondrej Mosnacek)
  * fix: fix bad data types in _kcapi_common_send_meta (by Ondrej Mosnacek)
  * fix: Version symbols to maintain ABI compatibility (by Simo Sorce)
  * fix: disable io_getevents on systems that do not support it (by Khem Raj)
  * fix: remove prctl PR_SET_DUMPABLE to allow library to be debugged - as the
    library does not store any sensitive data in data structures it owns, such
    security precautions may not be necessary considering the benefit of
    allowing regular debugging
  * fix: ensure that sendmsg is always used as fallback when vmsplice cannot be
    used
  * enhancement: add kcapi_set_maxsplicesize and kcapi_get_maxsplicesize
  * enhancement: the variable types are changed from int32_t to ssize_t and
    from uint32_t to size_t to match common POSIX and Linux APIs
- Added libkcapi-fix-lto.patch</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- use https url</changelog>
  <changelog author="meissner@suse.com" date="1650974401">- Update to version 1.4.0
  * fix: ensure that LTO is supported (by Simo Sorce)
  * fix: add LTO regression testing (by Ondrej Mosnacek)
  * enhancement: add sm3sum, sm3hmac tools, add APIs kcapi_md_sm3, kcapi_md_hmac_sm3
  * enhancement: add SM4 convenience functions
  * fix: support AEAD encryption of arbitrary size with kcapi-enc
- removed libkcapi-fix-lto.patch (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1678104000">- libkcapi was actually signed by the wrong key (bsc#1207892)</changelog>
</package>
<package pkgid="68d2560ff2fa0e23a1ed98992f837e746d81d07d4468b6640d3821f84e683c97258a76aa42ef27ceb65e2a8c776749b801bbcf9ad0c241e16e7e10a690336a15" name="libkcapi1" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="160000.2.2"/>
  <changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
  <changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569585600">- Remove docbook-utils BuildRequires, xmlto is sufficient
- Spec file cleanup, use license macro, drop defattr, drop BuildRoot</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Use %make_build and respect %optflags.</changelog>
  <changelog author="meissner@suse.com" date="1578484800">- updated to 1.1.5:
  - Fix invocation of ansi_cprng in FIPS mode during testing
  - Fix testing on kernels &gt;= 5.0
  - Add virtualization test for kernel 5.1
  - Fix the limit between vmsplice() and sendmsg() by Christophe Leroy
  - Fix remove code duplication by Ondrej MosnÃ¡Äek
  - Fix potential memleak in speed-test
- updated to 1.1.4:
  - Fix: use sendmsg when processing more than 1&lt;&lt;16 bytes input data which improves performance on some architectures
- updated to 1.1.3:
  - Fix: default location of FIPS 140-2 HMAC control file is .&lt;orig file&gt;.hmac (was accidentally moved to &lt;orig file&gt;.hmac with 1.1.0)
- updated to 1.1.2:
  - Fix: Bug fixes for GCC 8.1.0 regarding string length checks by Krzysztof Kozlowski
  - Enhancement: ensure that tests execute on architectures other than X86 by Ondrej MosnÃ¡Äek
  - Fix: Bug fix to initialize FDs at the correct time in kcapi-kernel-if.c by Ondrej MosnÃ¡Äek
  - Test fix: Support test execution outside build environment by Ondrej MosnÃ¡Äek
- updated to 1.1.1:
  - Fix: Bug fixes for kcapi_hasher by Ondrej MosnÃ¡Äek
- updated to 1.1.0:
  - API Enhancement: Addition of kcapi_handle_reinit
  - Fix: simplify code by removing the internal *_fd functions from kcapi-kernel-if.c
  - Test enhancement: add IIV speed testing
  - Fix: add a loop around the read system call to always obtain all generated data
  - Fix: use host compiler for compiling docproc (reported by Christophe LEROY, fixed by BjÃ¶rn Esser)
  - Fix: make error handling of hashing applications consistent with coreutils applications (reported by Christophe LEROY)
  - Fix: support for zero length files (patched by Ondrej MosnÃ¡Äek)
  - Fix: support for zero message hashes on kernels &lt;= 4.9 (patched by Ondrej MosnÃ¡Äek)
  - Fix: Add Travis CI test system provided by Ondrej MosnÃ¡Äek
  - Fix: Add several fixes to kcapi-hasher by Ondrej MosnÃ¡Äek
  - Fix: Add additional tests for kcapi-hasher by Ondrej MosnÃ¡Äek
  - Fix: Apply unpadding only to last block of data by Ondrej MosnÃ¡Äek
  - Fix: Fix resource leaks in error code paths suggested by Ondrej MosnÃ¡Äek
  - Enhancement: achieve hmaccalc CLI equivalence by Ondrej MosnÃ¡Äek
- updated to 1.0.3:
  - Fix: support STDIN and --tag of sha*sum applications
  - Enhancement: Add small enhancements to support integration with distros -- reported by BjÃ¶rn Esser
- updated to 1.0.2:
  - Fix: hasher-test.sh on 32-bit systems
  - Fix: AIO return code handling on large number of requests -- reported by Jonathan Cameron
  - Enhancement: disable coredumps of library
  - Fix: remove unchecked -fstack-protector-strong from Makefile -- reported by Mathieu Malaterre
  - Fix: document that kcapi_cipher_stream_op must be called in a loop to collect all data in a multhreaded environment.
  - Test Fix: Update symmetric multithreaded stream test to invoke kcapi_cipher_stream_op in a loop to collect all data.
  - Fix: Initialize the cipher handle on stack with zeros as the library expects a zero-initialized cipher handle. This fixes a possible segfault where free() is called on a non-initialized memory location.
  - Fix: port algif_kpp and algif_akcipher to 4.15-rc3
- updated to 1.0.1:
  - Fix: constify AEAD cipher input data
  - Fix: use GCC byte swapping acceleration if present
  - Fix: KDF counter handling on little endian systems when generating more than 255 blocks
  - Use LD_PRELOAD for execution of test cases to force using of the freshly compiled binaries
  - Fix: return code handling of _kcapi_common_vmsplice_chunk_fd as reported by Christophe Leroy
  - Fix: return code handling in _kcapi_md_update
  - Fix: kcapi-hasher now supports files larger than 2GB
  - Fix: kcapi-dgst now supports files larger than 2GB
  - Fix: use stack protector
  - Fix: rename header guards to remove leading underscore as pointed out by Markus Elfring
  - Test Fix: Allow compiing the test code without asymmetric and KPP support
- updated to 1.0.0:
  - Fix: Small compile fixes for new checks of GCC 7
  - API Change: Rename all LOG_* enums to KCAPI_LOG_* to prevent namespace poisoning
  - Fix: soname and file name of library now compiles with conventions (thanks to Marcus Meissner)
  - Fix: kcapi-rng.c: unify FD/syscall read code and fix __NR_getrandom resolution
  - Enhancement: add kcapi-enc application to access symmetric encryption on command line
  - Fix: consolidate duplicate code in kcapi-hasher
  - Enhancement: add kcapi-dgst application to access hashes on command line
  - Enhancement: add kcapi-rng man page
  - Enhancement: add kcapi-rng --hex command line option
  - Fix: enable full symmetric AIO support
  - Fix: consolidate all test code into test/ and invoke all tests with test-invocation.sh
  - Fix: fix memleaks in error code paths as reported by clang
  - Fix: reduce memory footprint by rearranging data structures
  - Fix: kcapi-hasher is now fully FIPS 140-2 compliant as it now includes the integrity test for libkcapi.so
  - Enhancement: Add speed tests for MV-CESA accelerated ciphers and hash algorithms (thanks to Bastian Stender)
  - Test Enhancement: add kcapi-enc-test-large.c test testing edge conditions of AF_ALG
  - Test Enhancement: add virttest.sh - use of test system based on eudyptula-boot to test on linux-4.3.6, linux-4.4.86, linux-4.5, linux-4.7, linux-4.10, linux-4.12
  - Test Enhancement: add kcapi-fuzz-test.sh to support fuzzing the AF_ALG interfaces
  - Enhancement: add RPM SPEC file (tested with Fedora 26)
  - API Change: replace --disable-lib-asym with --enable-lib-asym as the algif_akcipher.c kernel interface is not likely to be added to the kernel anytime soon
  - API Enhancement: add KPP API which is not compiled by default, use --enable-lib-kpp (the algif_kpp.c kernel interface is not likely to be added to the Linux kernel any time soon)
  - Test Enhancement: Add KPP tests
  - Enhancement: Re-enable AIO support for symmetric and AEAD ciphers down to Linux kernels 4.1 and 4.7, respectively. This is due to integrating a fix against a kernel crash when using AIO.
  - Fix: simply KDF code base
  - API Enhancement: add message digest convenience functions kcapi_md_*sha*
  - API Enhancement: add cipher convenience functions kcapi_cipher_*_aes_*
  - API Enhancement: add rng convenience function kcapi_rng_get_bytes
  - API Change: remove kcapi_aead_getdata, use kcapi_aead_getdata_input and kcapi_aead_getdata_output instead
  - API Change: remove kcapi_aead_outbuflen, use kcapi_aead_outbuflen_enc and kcapi_aead_outbuflen_dec instead
- updated to 0.14.0:
  - AIO: fix tracking of completed IOCBs
  - speed-test: fix AEAD handling
  - speed-test: fix time calculation
  - compiler now warns a user of deprecated API calls
  - AIO: handle kernel errors for algif_skcipher gracefully
  - AIO: using multiple IOCB if algif_aead interface supports it
  - ASYM: add PKCS1 tests
  - AIO: add ASYM AIO support
  - AIO: fix AEAD AIO fallback
  - AIO: add AIO fallback testing
  - replace enforcement of symmetric cipher limits with a log message only (the underlying kernel implementations should catch any errors)
  - add fuzzing tests
  - use autotools build system as provided by Georges Savoundararadj with additional considerations from Marcin Nowakowski (thanks a lot)
  - ALG_MAX_PAGES restriction is gone with current AF_ALG interface
  - add HKDF (RFC5869)
  - add apps/kcapi-rng
  - add support for multiple accepts where the caller maintains the opfd
  - fix memleak in error case in PBKDF
  - add multithreaded symmetric cipher tests
  - enable full AIO support for kernels 4.13 and higher (fallback AIO implementation using synchronous support for earlier kernels) -- this is due to the broken AIO support for earlier kernels
  - Add tests for the AAD copy operation to be supported for kernel 4.13
- dropped libkcapi-use-external-fipshmac.patch (done differently in upstream)
- dropped reproduciblesort.patch (done differently upstream)
- dropped reproducibledate.patch: merged upstream
- libkcapi.keyring imported</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- update to 1.2.0:
  * enhancement: kcapi-hasher: add madvise and 64 bit support by Brandur Simonsen
  * fix: fix clang warnding in KDF implementation by Khem Raj
  * fix: fix inverted logic in kcapi-main test logic reported by Ondrej Mosnáček
  * fix: return error when iteration count is zero for PBKDF as reported by
  Guido Vranken
  * enhancement: add function kcapi_cipher_stream_update_last to indicate the
  last block of a symmetric cipher stream operation
  * disable XTS multithreaded tests as it triggers a race discussed in
  https://github.com/smuellerDD/libkcapi/issues/92. The conclusion is
  the following: xts(aes) doesn't support chaining requests like for other
  ciphers such as CBC (at least as implemented in the kernel Crypto API).
  That can be seen in `crypto/testmgr.h` - the ciphers that are expected to
  return IVs usable for chaining have the `.iv_out` entries filled in in their
  test vectors (and those that don't support it do not). One can see that only
  CTR and CBC test vectors have them, not XTS.
  Looking again at how XTS is defined, it seems one could implement
  transparent chaining by simply decrypting the final tweak using the tweak
  key and return it as the output IV... but I believe this has never been
  mandated nor implemented in the Crypto API (likely because of the overhead
  of the final tweak decryption, which would be pointless if you're not going
  to use the output IV - and there is currently no way to signal to the driver
  that you are going to need it).
  * disable AIO parallel tests due to undefined behavior</changelog>
  <changelog author="asn@cryptomilk.org" date="1627387200">- Update to version 1.3.1
  * fix: fix -Wconversion warnings (by Ondrej Mosnacek)
  * fix: fix bad data types in _kcapi_common_send_meta (by Ondrej Mosnacek)
  * fix: Version symbols to maintain ABI compatibility (by Simo Sorce)
  * fix: disable io_getevents on systems that do not support it (by Khem Raj)
  * fix: remove prctl PR_SET_DUMPABLE to allow library to be debugged - as the
    library does not store any sensitive data in data structures it owns, such
    security precautions may not be necessary considering the benefit of
    allowing regular debugging
  * fix: ensure that sendmsg is always used as fallback when vmsplice cannot be
    used
  * enhancement: add kcapi_set_maxsplicesize and kcapi_get_maxsplicesize
  * enhancement: the variable types are changed from int32_t to ssize_t and
    from uint32_t to size_t to match common POSIX and Linux APIs
- Added libkcapi-fix-lto.patch</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- use https url</changelog>
  <changelog author="meissner@suse.com" date="1650974401">- Update to version 1.4.0
  * fix: ensure that LTO is supported (by Simo Sorce)
  * fix: add LTO regression testing (by Ondrej Mosnacek)
  * enhancement: add sm3sum, sm3hmac tools, add APIs kcapi_md_sm3, kcapi_md_hmac_sm3
  * enhancement: add SM4 convenience functions
  * fix: support AEAD encryption of arbitrary size with kcapi-enc
- removed libkcapi-fix-lto.patch (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1678104000">- libkcapi was actually signed by the wrong key (bsc#1207892)</changelog>
</package>
<package pkgid="ebaa3916c8d6ecb18d3b957e389c682f64a49c1e6763038d48923682ab1f0534238e99eed1527746ff6ae0c8a4a470e0d78fc7e3cfd856f06f6ad3b2d15fd4b1" name="libkeymap1" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709294400">- fix conversion of lowercase f in de-e1 keymap (boo#1207841)</changelog>
  <changelog author="sbrabec@suse.com" date="1712577600">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)
- Stop requiring kbd-legacy. All YaST supported languages should
  now have its keymaps in kbd.
- Remove kbd-1.15.2-prtscr_no_sigquit.patch rejected by the
  upstream. The problem is fixed for a long time, this is an
  additional modification. (PED-7977,
  https://github.com/legionus/kbd/pull/111):
- Drop kbd_fonts.tar.bz2 containing just several 30 years old
  inferior fonts with an unknown author and uncertain license.
- Add structured comments to patches.</changelog>
  <changelog author="tobi.goergens@gmail.com" date="1725364800">- Build libkeymap and create additional subpackages.</changelog>
  <changelog author="sbrabec@suse.com" date="1729166400">- Fix subpackage names and their dependencies.
- Add missing ldconfig scriptlets.</changelog>
  <changelog author="jengelh@inai.de" date="1729598400">- Enable libkfont
- Rename libkeymap-devel to just kbd-devel (the recommendation is
  to reuse the SRPM base name)</changelog>
  <changelog author="sbrabec@suse.com" date="1735819200">- Remove obsolete parts of suse-add.tar.bz2 (jsc#PED-7977),
  possible BREAKING CHANGES for obscure configurations:
  * Replace consolefonts/Cyr_a8x*.psf with upstream instances.
  * Replace consolefonts/cp850-full-8x*.psfu with upstream
    instances.
  * Drop consolefonts/lat5--*.psfu in favor of upstream
    lat5-*.psfu, exactly the same fonts with a better unimap.
  * Drop consolefonts/lat7.psf as it is lat7a-16.psf in the
    upstream.
  * Drop consolefonts/lt-brim-8x14.psfu in favor of upstream
    lat7a-14.psfu, exactly the same fonts with a better unimap.
  * Drop keymaps/i386/qwerty/Pl02.map in favor of nearly equal
    upstream pl2.map.
  * Drop keymaps/i386/qwerty/br-abnt-alt.map in favor of nearly
    equal upstream br-abnt.map.
  * Drop keymaps/i386/qwerty/tj_alt-UTF8.map that is already
    upstreamed.
  * Drop unimaps/iso07*.uni that is already upstreamed.
- Remove broken KBD_DISABLE_CAPS_LOCK feature (sysconfig.keyboard,
  kbdsettings, boo#1179897, jsc#PED-7814).
  Can be replaced by KEYMAP="{my map} disable.capslock" in
  /etc/vconsole.conf.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164800">- sysconfig.keyboard: KBD_NUMLOCK="bios" works only on systems
  without Secure Boot. Document that. Change the default to
  KBD_NUMLOCK="no". (boo#1212141)
- kbdsettings-nox86.patch: Update and return missing chunk.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164801">- Update to version 2.7.1:
  * setfont: Fixed regression in argument parsing.
  * dumpkeys: Fixed dumpkeys on pc and non-pc architectures.
  * libkeymap: Add API to get/set keymap keywords.
    Export functions to convert the value to kernel code.
    Fix double kbdfile open.
    Dump action codes for keycode 0.
  * libkfont: Fix buffer allocation for doubled font.
    Check console mode.
  * keymaps:
    Add hcesar layout, for portuguese speaking countries.
    Update Colemak-DH keymaps with upstream changes.
    sv-latin1.map: make Ctrl+AltGr+9 act as Ctrl+].
  * fonts:
    Remove non-free Agafari fonts. (bnc#95915,
    remove repack_kbd.sh)
  * other:
    Update man pages.
    Remove deprecated startup scripts.
    (Refresh kbd-2.0.2-fix-bashisms.patch.)
    Remove outdated docs.
    (Drop kbd-1.15.2-docu-X11R6-xorg.patch.)
    Update translations.
- Drop upstreamed patches: kbd-1.15.2-sv-latin1-keycode10.patch,
  kbd-2.0.2-doshell-reference.patch.
- Refresh kbd-1.15.5-loadkeys-search-path.patch.
- Releases are signed, add kbd.keyring and the signature.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743249600">- Add kbd-2.7.1-reproducible-gzip.patch (bsc#1240348)</changelog>
</package>
<package pkgid="1a0a71f0a62e695c184c6034d652ab7a8d437b891a2f8ca046dec565a1b92d0d401b210d2c24fd05ba930344b1e249871aab65c8d7017426bb8c8ba30f944c40" name="libkeyutils1" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="160000.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1551700800">- Replace krb5-devel BuildRequires with pkgconfig(krb5): Allow OBS
  to shortcut the ring0 bootstrap cycle by also using krb5-mini.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1561982400">- updated to 1.6
  - Apply various specfile cleanups from Fedora.
  - request-key: Provide a command line option to suppress helper execution.
  - request-key: Find least-wildcard match rather than first match.
  - Remove the dependency on MIT Kerberos.
  - Fix some error messages
  - keyctl_dh_compute.3: Suggest /proc/crypto for list of available hashes.
  - Fix doc and comment typos.
  - Add public key ops for encrypt, decrypt, sign and verify (needs linux-4.20).
  - Add pkg-config support for finding libkeyutils.
- upstream isn't offering PGP signatures for the source tarballs anymore</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 1.6.3:
  * Revert the change notifications that were using /dev/watch_queue.
  * Apply the change notifications that use pipe2(O_NOTIFICATION_PIPE).
  * Allow "keyctl supports" to retrieve raw capability data.
  * Allow "keyctl id" to turn a symbolic key ID into a numeric ID.
  * Allow "keyctl new_session" to name the keyring.
  * Allow "keyctl add/padd/etc." to take hex-encoded data.
  * Add "keyctl watch*" to expose kernel change notifications on keys.
  * Add caps for namespacing and notifications.
  * Set a default TTL on keys that upcall for name resolution.
  * Explicitly clear memory after it's held sensitive information.
  * Various manual page fixes.
  * Fix C++-related errors.
  * Add support for keyctl_move().
  * Add support for keyctl_capabilities().
  * Make key=val list optional for various public-key ops.
  * Fix system call signature for KEYCTL_PKEY_QUERY.
  * Fix 'keyctl pkey_query' argument passing.
  * Use keyctl_read_alloc() in dump_key_tree_aux().
  * Various manual page fixes.
- spec-cleaner run (fixup failing homepage url)</changelog>
  <changelog author="meissner@suse.com" date="1609934400">- adjust the library license to be LPGL-2.1+ only (the tools are GPL2+,
  the library is just LGPL-2.1+) (bsc#1180603)</changelog>
  <changelog author="aplanas@suse.com" date="1624536000">- Add /etc/keys/ and /usr/etc/keys/ directory (bsc#1187654)</changelog>
  <changelog author="aplanas@suse.com" date="1655812800">- Add /etc/keys/evn and /usr/etc/keys/evm together with the IMA ones</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1679572800">- Drop pkgconfig(krb5) BuildRequires: this dependency was dropped
  upstream in commit f9c7b4e4 (2018-11-02).</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="598096278c364f385222872fe9ffb91e09227592594bf147b1653c3c61f42980ff0466181e73aa0327f6ad9b5067451d66e6cd5127bb900c7b321b744a90fa9c" name="libkfont0" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709294400">- fix conversion of lowercase f in de-e1 keymap (boo#1207841)</changelog>
  <changelog author="sbrabec@suse.com" date="1712577600">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)
- Stop requiring kbd-legacy. All YaST supported languages should
  now have its keymaps in kbd.
- Remove kbd-1.15.2-prtscr_no_sigquit.patch rejected by the
  upstream. The problem is fixed for a long time, this is an
  additional modification. (PED-7977,
  https://github.com/legionus/kbd/pull/111):
- Drop kbd_fonts.tar.bz2 containing just several 30 years old
  inferior fonts with an unknown author and uncertain license.
- Add structured comments to patches.</changelog>
  <changelog author="tobi.goergens@gmail.com" date="1725364800">- Build libkeymap and create additional subpackages.</changelog>
  <changelog author="sbrabec@suse.com" date="1729166400">- Fix subpackage names and their dependencies.
- Add missing ldconfig scriptlets.</changelog>
  <changelog author="jengelh@inai.de" date="1729598400">- Enable libkfont
- Rename libkeymap-devel to just kbd-devel (the recommendation is
  to reuse the SRPM base name)</changelog>
  <changelog author="sbrabec@suse.com" date="1735819200">- Remove obsolete parts of suse-add.tar.bz2 (jsc#PED-7977),
  possible BREAKING CHANGES for obscure configurations:
  * Replace consolefonts/Cyr_a8x*.psf with upstream instances.
  * Replace consolefonts/cp850-full-8x*.psfu with upstream
    instances.
  * Drop consolefonts/lat5--*.psfu in favor of upstream
    lat5-*.psfu, exactly the same fonts with a better unimap.
  * Drop consolefonts/lat7.psf as it is lat7a-16.psf in the
    upstream.
  * Drop consolefonts/lt-brim-8x14.psfu in favor of upstream
    lat7a-14.psfu, exactly the same fonts with a better unimap.
  * Drop keymaps/i386/qwerty/Pl02.map in favor of nearly equal
    upstream pl2.map.
  * Drop keymaps/i386/qwerty/br-abnt-alt.map in favor of nearly
    equal upstream br-abnt.map.
  * Drop keymaps/i386/qwerty/tj_alt-UTF8.map that is already
    upstreamed.
  * Drop unimaps/iso07*.uni that is already upstreamed.
- Remove broken KBD_DISABLE_CAPS_LOCK feature (sysconfig.keyboard,
  kbdsettings, boo#1179897, jsc#PED-7814).
  Can be replaced by KEYMAP="{my map} disable.capslock" in
  /etc/vconsole.conf.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164800">- sysconfig.keyboard: KBD_NUMLOCK="bios" works only on systems
  without Secure Boot. Document that. Change the default to
  KBD_NUMLOCK="no". (boo#1212141)
- kbdsettings-nox86.patch: Update and return missing chunk.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164801">- Update to version 2.7.1:
  * setfont: Fixed regression in argument parsing.
  * dumpkeys: Fixed dumpkeys on pc and non-pc architectures.
  * libkeymap: Add API to get/set keymap keywords.
    Export functions to convert the value to kernel code.
    Fix double kbdfile open.
    Dump action codes for keycode 0.
  * libkfont: Fix buffer allocation for doubled font.
    Check console mode.
  * keymaps:
    Add hcesar layout, for portuguese speaking countries.
    Update Colemak-DH keymaps with upstream changes.
    sv-latin1.map: make Ctrl+AltGr+9 act as Ctrl+].
  * fonts:
    Remove non-free Agafari fonts. (bnc#95915,
    remove repack_kbd.sh)
  * other:
    Update man pages.
    Remove deprecated startup scripts.
    (Refresh kbd-2.0.2-fix-bashisms.patch.)
    Remove outdated docs.
    (Drop kbd-1.15.2-docu-X11R6-xorg.patch.)
    Update translations.
- Drop upstreamed patches: kbd-1.15.2-sv-latin1-keycode10.patch,
  kbd-2.0.2-doshell-reference.patch.
- Refresh kbd-1.15.5-loadkeys-search-path.patch.
- Releases are signed, add kbd.keyring and the signature.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743249600">- Add kbd-2.7.1-reproducible-gzip.patch (bsc#1240348)</changelog>
</package>
<package pkgid="71dd5e76bea3f130f142d60d6dcd1ce56239cc6a1eec2fbc6ba309f4587a6d1b1a6ba5c45a30e352d32cb81f81e87f08e28934fdced9f8929e9a05b8ee79350e" name="libkmod2" arch="x86_64">
  <version epoch="0" ver="34.2" rel="160000.3.2"/>
  <changelog author="msuchanek@suse.de" date="1697544000">- Fix tests
  * refresh configure-Detect-openssl-sm3-support.patch
  * refresh kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch
  * refresh usr-lib-modules.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1701864000">- Add upstream fixes since v31
  * tools-depmod-fix-Walloc-size.patch
  * libkmod-remove-pkcs7-obj_to_hash_algo.patch
  * configure-Check-that-provided-paths-are-absolute.patch
- Refresh usrmerge patches to upstream version (cosmetic change only)</changelog>
  <changelog author="msuchanek@suse.de" date="1712232000">- Update to release 32
  * Drop python bindings
  * Remove unmaintained experimental tool
- Drop upstreamed patches
  * configure-Detect-openssl-sm3-support.patch
  * man-depmod.d-Fix-incorrect-usr-lib-search-path.patch
  * usr-lib-modprobe.patch
  * kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch
  * tools-depmod-fix-Walloc-size.patch
  * libkmod-remove-pkcs7-obj_to_hash_algo.patch
  * usr-lib-modules.patch
  * configure-Check-that-provided-paths-are-absolute.patch
- Refresh no-stylesheet-download.patch</changelog>
  <changelog author="jengelh@inai.de" date="1724241600">- Update to release 33
  * Add weak dependencies
  * Stop parsing .alias files from modprobe.d directories
- Delete no-stylesheet-download.patch (merged)
- Add 0001-testsuite-fix-path-for-test-user.patch</changelog>
  <changelog author="jengelh@inai.de" date="1740139200">- Update to release 34
  * modinfo now dlopens compression libraries, and only if needed.
    (insmod/modprobe exercises the kernel's built-in decompression
    anyway, so is unaffected).
  * depmod: add -m option for overriding the module directory at
    runtime.
  * depmod: deleted deprecated options --unresolved-error, --quiet,
  - root and --map.
  * rmmod: deleted deprecated option -w.
  * insmod: deleted deprecated options -p, -s.
- Delete 0001-testsuite-fix-path-for-test-user.patch (obsolete)</changelog>
  <changelog author="jengelh@inai.de" date="1741262400">- Update to release 34.1
  * Build fixes only</changelog>
  <changelog author="msuchanek@suse.de" date="1741780800">- tests: drop ppc64 workaround, print failed test results if any</changelog>
  <changelog author="jengelh@inai.de" date="1743163200">- Update to release 34.2
  * libkmod: fix buffer-overflow in weakdep_to_char
- Delete unused 0001-build-resolve-build-failure-due-to-missing-include.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1750939200">- Fix testsuite on Leap 16.0 (bsc#1240126)
  * Revert-build-check-for-__xstat-declarations.patch</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1755950400">- kmod-testsuite
  * BuildIgnore pesign-obs-integration (new runtime requirement
    of kernel-default-devel): we don't need it for the kmod
    testsuite, and it also breaks the build as we aren't
    producting any binaries. (bsc#1248108)</changelog>
</package>
<package pkgid="27b6caa1ff3a1e7dfab7681b8ec6a167cd4074a6d848079f8e0ee030a90cea9784a3b3fc1da18159eccd6ffaa644a1f1a3afa47528281b508fb812513608d678" name="libksba8" arch="x86_64">
  <version epoch="0" ver="1.6.7" rel="160000.2.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1617796800">- libksba 1.5.1:
  * Support Brainpool curves specified by ECDomainParameters</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- libksba 1.6.0:
  * Limited support for the Authenticated-Enveloped-Data
    content type.
  * Support password based decryption.
  * Silence warnings from static analyzers.
  * Interface changes relative to the 1.5.0 release:
  - KSBA_CT_AUTHENVELOPED_DATA       NEW.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1663502400">- libksba 1.6.1:
  * Allow an OCSP server not to return the sent nonce
- fix rpmlint warnings</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- libksba 1.6.2: [bsc#1204357, CVE-2022-3515]
  * Fix integer overflow in the CRL parser.</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 1.6.3 (bsc#1206579, CVE-2022-47629):
  * Fix another integer overflow in the CRL parser.
  Release-info: https://dev.gnupg.org/T6304</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.6.4:
  * Correctly detect CMS write errors. [rK9ced7706f2]
  * Release-info: https://dev.gnupg.org/T6543</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Run autoreconf for the added patch and add the build
    dependecies on autoconf, automake and libtool.
  * Add libksba-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 1.6.5:
  * Add Brainpool curve detection using parameters with compressed
    base point. [rKeb23f853f178]
  * New configure option --with-libtool-modification. [T6619]
  * Release-info: https://dev.gnupg.org/T6822</changelog>
  <changelog author="pmonreal@suse.com" date="1708948800">- Update to 1.6.6:
  * Fix a possible wrong error return from the DER builder. [T6992]
  * Release-info: https://dev.gnupg.org/T7009
  * Update upstream libksba.keyring</changelog>
  <changelog author="angel.yankov@suse.com" date="1720180800">- Update to 1.6.7:
  * Allow for an empty Subject in certs.  [T7171]
  * Release-info: https://dev.gnupg.org/T7173
  * Rebase libksba-nobetasuffix.patch</changelog>
</package>
<package pkgid="574c7b255e58d0101458c2c470ee0a52f61489c0392b93e21139cc2981ee78da6615b98d33bb4c4063555033d24a615a561914563b5ded9bd91e5203ed3b99f6" name="liblastlog2-2" arch="x86_64">
  <version epoch="0" ver="2.41.1" rel="160000.3.1"/>
  <changelog author="sbrabec@suse.com" date="1744027200">- Update to version 2.41:
  * agetty: Fixed an issue where issue files were not being printed
    from additional locations, such as /run or /usr/lib. This
    change now allows for the use of local information from /etc,
    in addition to generated files from /run and
    distribution-specific files from /usr/lib.
  * cfdisk and sfdisk: Added support for the --sector-size command
    line option.
  * sfdisk: Added a new option, --discard-free.
  * fdisk: Added a new command, 'T', to discard sectors.
  * chrt: The --sched-runtime now supports SCHED_{OTHER,BATCH}
    policies.
  * column: Can now handle ANSI SGR colors inside OSC 8 hyperlink
    escape codes and sequences.
  * enosys: Can now dump defined filters.
  * libmount:
  * Added experimental support for statmount() and listmount()
    syscalls.
  * This new functionality can be accessed using "findmnt
  - -kernel=listmount".
  * Added a new mount option,
    X-mount.nocanonicalize[=source|target].
  * Added new mount extensions to the "ro" flag (ro[=vfs,fs]).
  * Added a new option, X-mount.noloop, to disable automatic loop
    device creation.
  * Now supports bind symlinks over symlinks.
  * Reads all kernel info/warning/error messages from new API
    syscalls (and mount(8) prints them).
  * libuuid: Now supports RFC9562 UUIDs.
  * findmnt, lsblk, and lsfd: Added a new --hyperlink command line
    option to print paths as terminal hyperlinks.
  * findmnt: Can now address filesystems using --id and --uniq-id
    (requires listmount() kernel support).
  * flock: Added support for the --fcntl command line option.
  * hardlink: Can now prioritize specified trees on the command
    line using --prioritize-trees.
  * Can exclude sub-trees using --exclude-subtree or keep them in
    the current mount using --mount.
  * Duplicates can now be printed using --list-duplicates.
  * hwclock: Added a new --param-index option to address position
    for RTC_PARAM_{GET,SET} ioctls.
  * kill: Can now decode signal masks (e.g. as used in /proc) to
    signal names.
  * libblkid: Made many changes to improve detection, including
    exfat, GPT, LUKS2, bitlocker, etc.
  * login: Added support for LOGIN_ENV_SAFELIST in /etc/login.def.
  * lsfd: Now supports pidfs and AF_VSOCK sockets.
  * lsipc, ipcmk, ipcrm: Now supports POSIX ipc.
  * lslogins: Now supports lastlog2.
  * lsns: Added support for the --filter option.
  * build by meson: Now supports translated man pages and has fixed
    many bugs.
  * mkswap: The option --file should now be usable on btrfs.
  * nsenter: Improved support for pidfd and can now join target
    process's socket net namespace.
  * scriptlive: Added a new option, --echo &lt;never|always|auto&gt;.
  * zramctl: Now supports COMP-RATIO and --algorithm-params.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41-ReleaseNotes
- Update util-linux-login_defs-check.sh:
  * Make instructions up to date.
  * Update checksum reflecting the shadow update.
- Refresh libmount-print-a-blacklist-hint-for-unknown-filesyst.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1744891200">- Enable mountfd support again (jsc#PED-9752).
  BREAKING CHANGE
  Mountfd is nearly completely compatible with the old mount. There
  is a special case that cannot be handled by mountfd, and it needs
  to be handled by applications:
  Mountfd discriminates between physical mount layer and virtual
  mount layer. Once the physical mount layer is read-only,
  read-write mount on the virtual layer is not possible.
  If the first mount is read only, then the physical filesystem is
  mounted read-only, and later mount of the same file system as
  read-write is not possible. To solve this problem, the first
  mount needs to be read-only only on the virtual layer, keeping
  the physical layer read-write.
  The user space fix is simple:
  Instead of
    mount -oro
  use
    mount -oro=vfs
  This will keep the physical layer read-write, but the virtual
  file system layer (and the user space access) will be read-only.</changelog>
  <changelog author="sbrabec@suse.com" date="1747742400">- Fix segfault of findmnt (boo#1242705,
  gh#util-linux/util-linux#3574,
  util-linux-libblkid-econf-parse.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1748520000">- Add ul_ prefix to functions with common names. Fixes btrfsprogs
  build failure (gh#util-linux/util-linux#3603,
  util-linux-rename-common-symbols-1.patch,
  util-linux-rename-common-symbols-2.patch,
  util-linux-rename-common-symbols-3.patch,
  util-linux-rename-common-symbols-4.patch).</changelog>
  <changelog author="nicolas@belouin.fr" date="1749556800">- Fix libmount --no-canonicalize regression (boo#1244251,
  gh#util-linux/util-linux#3479,
  libmount-fix-no-canonicalize-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1750766400">- Update to version 2.41.1:
  * cfdisk: fix memory leak and possible NULL dereference
  * fdisk: fix possible memory leak
  * findmnt: fix -k option parsing regression (boo#1242705,
    drop util-linux-libblkid-econf-parse.patch)
  * hardlink: fix performance regression
  * include/cctype: fix string comparison
  * libblkid:
  * Fix crash while parsing config with libeconf
  * befs fix underflow
  * avoid strcasecmp() for ASCII-only strings
  * libblkid/src/topology/dm: fix fscanf return value check to
    match expected number of parsed items
  * libmount:
  * (subdir) restrict for real mounts only
  * (subdir) remove unused code
  * avoid calling memset() unnecessarily
  * fix --no-canonicalize regression (boo#1244251,
    drop libmount-fix-no-canonicalize-regression.patch)
  * lsblk:
  * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE
  * avoid strcasecmp() for ASCII-only strings
  * lscpu:
  * fix possible buffer overflow in cpuinfo parser
  * Fix loongarch op-mode output with recent kernel
  * lsfd:
  * scan the protocol field of /proc/net/packet as a hex number
  * fix the description for PACKET.PROTOCOL column
  * lsns:
  * enhance compilation without USE_NS_GET_API
  * fix undefined reference to add_namespace_for_nsfd #3483
  * more:
  * fix broken ':!command' command key
  * fix implicit previous shell_line execution #3508
  * tests: (test_mkfds::mapped-packet-socket) add a new parameter,
    protocol
  * treewide:
  * add ul_ to parse_timestamp() function name
    (drop util-linux-rename-common-symbols-4.patch)
  * add ul_ to parse_switch() function name
    (drop util-linux-rename-common-symbols-3.patch)
  * add ul_ to parse_size() function name
    (drop util-linux-rename-common-symbols-2.patch)
  * add ul_ to parse_range() function name
    (drop util-linux-rename-common-symbols-1.patch)
  * fix optional arguments usage
  * avoid strcasecmp() for ASCII-only strings
  * Wipefs: improve --all descriptions for whole-disks
  * Misc: Do not call exit() on code ending in shared libraries
  * Other fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes
- Fix problem with uname26 listed twice.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
</package>
<package pkgid="dab6b35000d2c07f82697c3e99be3b1b820877cf4aaa8c0c3550228d58c8665aafbb399c9de757152d47255d1e5e3b17d57eda6fc90be1268e90c7ffd9e585bd" name="liblcms2-2" arch="x86_64">
  <version epoch="0" ver="2.16" rel="160000.3.2"/>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to 2.11
  * Fixed __cpuid() on fast float plugin to allow gnu gcc
  * Fixed copy alpha bounds check
  * Fixed data race condition on contexts pool
  * Fixed LUT16 write matrix on multichannel V2 profiles
- Changes in 2.10
  * Added a compilation toggle to remove "register" keyword in API.
  * Previously commercial, fast_float plug-in is now released as open source
    under GPL3 license.
  * MD5 functions are now accesible through plug-in API.
  * Added support for Visual Studio 2019
  * Bug fixing.
- Drop lcms2-cgats-memory-allocation.patch, its now in upstream code
- Refresh patches
- Run spec-cleaner</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- update to 2.12:
  * Added build system for fast-float plugin (see plugin documentation)
  * Added new build-in sigmoidal tone curve
  * Added XCode 12 project
  * Added support for multichannel input up to 15 channels
  * Fix LUT8 write matrix
  * Fix version mess on 10/11
  * Fix tools &amp; samples xgetopt
  * Fix warnings on different function pointers
  * Fix matlab MEX compilation
  * plugin: cleanup and better SSE detection
  * plugin: add lab to any on float
  * plugin: it can now be compiled as C++
  * recover PDF documentation, but try to keep it under a resonable size.
  * Prevent a rare but possible out-of-bounds read in postscript generator
  * Fix some compiler warnings
  * Add named color profile building sample to testbed</changelog>
  <changelog author="info@paolostivanin.com" date="1643630400">- Update to 2.13:
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma function
  * configure now accepts --without-fastfloat to turn plugin off
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
- Rebase lcms2-visibility.patch</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 2.13.1:
  * Fix a bug on grayscale that made printing gray on white paper
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * Better documentation
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Travis CI discontinued, GitHub actions used instead
  * Added a very preliminary meson build script (thanks to xclaesse)
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma
  * configure now accepts --without-fastfloat to turn plugin off
  * autogen.sh has now a --distclean toggle to get rid of all autotools generated files
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
  * Fixed mem leaks and out-of bounds accesses as reported by fuzzer</changelog>
  <changelog author="christophe@krop.fr" date="1667908800">- Update to 2.14:
  * lcms2 now implements ICC specification 4.4
  * New multi-threaded plug-in
  * Several fixes to keep fuzzers happy
  * Removed check on DLL when CMS_NO_REGISTER_KEYWORD is used
  * Added more validation against broken profiles
  * Added more help to several tools
  * Revised documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1668168000">- Added reverse-0001-fix-memory-leaks-on-testbed.patch to fix
  colord's i586 build failure</changelog>
  <changelog author="davejplater@gmail.com" date="1668600000">- Removed reverse-0001-fix-memory-leaks-on-testbed.patch and added
  0001-fix-memory-corruption-when-unregistering-plugins.patch as
  final fix for https://github.com/hughsie/colord/issues/145</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) for alternative providers support</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 2.15:
  * New MESON build system, many thanks to amispark and Lovell
    Fuller for bringing this.
  * Fixed a bug that caused memory corruption on colord
  * cmsReadRawTag can read portions  of tags again. Removing this
    caused colord to segfault when dumping profiles
  * Added more checks based of fuzzer discoveries.
  * MSYS2 can now compile lcms2
  * Checked on Apple Silicon M1 and M2
  * Fixed a bug of fastfloat plug-in that affected Krita CMYK
    color selector
- drop 0001-fix-memory-corruption-when-unregistering-plugins.patch (upstream)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1701691200">- update to 2.16:
  * New: import .CUBE files as RGB device links
  * New: Read/Write MHC2 tags for Windows GPU access
  * New: Support for UTF8 on multi-localized Unicode functions
  * New: Support for OkLab color space, built-in and formatter.
  * Improved: floating point transforms float -&gt; integer are now
    honored as float
  * Improved: MSYS2, mingw is now supported
  * Improved: preferred CMM, platform and creator now survives profile
    edition.
  * Fixed: tificc now can deal with Lab TIFF
  * Fixed: code can now be compiled by a C++17 compiler, "register"
    keyword use detected at compile time.
  * Fixed: Reverted PostScript creation that corrupted some interpreters.
  * Bug fixing</changelog>
</package>
<package pkgid="114bd2ec7dda45e7c1c5e7d8e8a159458befc816b8223f0098c11cafdac75649c7bc93e1a5c6a569bb379e6d921fadcb445404018b4b75bffe03dea02a529529" name="libldap-2" arch="x86_64">
  <version epoch="0" ver="2.6.10+10" rel="160000.3.1"/>
  <changelog author="william.brown@suse.com" date="1755172800">- Initial import of OpenLDAP 2.6</changelog>
  <changelog author="william.brown@suse.com" date="1755172801">- Update to version 2.6.10+10:
  * Add export symbols related to LDAP_CONNECTIONLESS</changelog>
  <changelog author="alarrosa@suse.com" date="1755864000">- Fix the git version identifying as 2.6.X which breaks packages
  parsing the version string trying to match numbers.</changelog>
  <changelog author="william.brown@suse.com" date="1765540800">- jsc#PED-13833 - Add limited support for libldap-2.4 library compatibility</changelog>
</package>
<package pkgid="b023bb40b7c1fd4541facae760a65da09b7ffa24f7db236a378ac5f9f137d6b08eb2016ef972c146133c11bc7bbbbaa7596a21e2bbe5d7afc20897dbf67920bf" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.6.10+10" rel="160000.3.1"/>
  <changelog author="william.brown@suse.com" date="1755172800">- Initial import of OpenLDAP 2.6</changelog>
  <changelog author="william.brown@suse.com" date="1755172801">- Update to version 2.6.10+10:
  * Add export symbols related to LDAP_CONNECTIONLESS</changelog>
  <changelog author="alarrosa@suse.com" date="1755864000">- Fix the git version identifying as 2.6.X which breaks packages
  parsing the version string trying to match numbers.</changelog>
  <changelog author="william.brown@suse.com" date="1765540800">- jsc#PED-13833 - Add limited support for libldap-2.4 library compatibility</changelog>
</package>
<package pkgid="dd965cd29cfe7b82abf48de40542dcb923bed149b36b15c7715d99c8e220de16ef51edc4d60490c4e9c7eece77ffb491987396b6b63cd8e8d336fd6a72ed7984" name="libldb2" arch="x86_64">
  <version epoch="0" ver="4.22.7+git.460.b680c782b85" rel="160000.1.1"/>
  <changelog author="noel.power@suse.com" date="1758801600">- Disable timeouts for smb.service so that possibly slow running
  ExecStartPre script 'update-samba-security-profile' doesn't
  cause service start to fail due to timeouts;(bsc#1249181).</changelog>
  <changelog author="scabrero@suse.de" date="1759320000">- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
  to a recommends. They are only required if utilizing certificate
  auto enrollment (bsc#1249087).</changelog>
  <changelog author="noel.power@suse.com" date="1760529600">- Update to 4.22.5
  * CVE-2025-10230: Command injection via WINS server hook
    script (bso#15903); (bsc#1251280).
  * CVE-2025-9640: uninitialized memory disclosure via
    vfs_streams_xattr; (bso#15885); (bsc#1251279).</changelog>
  <changelog author="nopower@suse.com" date="1761048000">- Update to 4.22.6
  * macOS Finder client DFS broken on 4.22.0; (bso#15843).
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Spotlight search restriction for shares incomplete and
    default search searches in too many attributes; (bso#15927).
  * rpcd_mdssvc may crash because name mangling is not
    initialized; (bso#15931).
  * Only increment lease epoch if a lease was granted;
    (bso#15933).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).</changelog>
  <changelog author="noel.power@suse.com" date="1761912000">- Update [printers] location to /var/samba/spool; (bsc#1249179).</changelog>
  <changelog author="nopower@suse.com" date="1765972800">-  Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="nopower@suse.com" date="1766059200">- Adjust README.SUSE to reflect the new preferred location for
  '[printers]' share; (bsc#1254665).</changelog>
  <changelog author="scabrero@suse.de" date="1767787200">- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
  (bso#15790); (bsc#1249058).</changelog>
  <changelog author="noel.power@suse.com" date="1768824000">- Update to 4.22.7
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Searching for numbers doesn't work with Spotlight;
    (bso#15930).
  * mdssvc doesn't support $time.iso dates before 1970;
    (bso#15947).
  * Fix winbind cache consistency; (bso#15963).
  * vfs_recycle does not update mtime; (bso#15940).
  * Assert failed: (dirfd != -1) || (smb_fname-&gt;base_name[0] ==
    '/') in vfswrap_openat; (bso#15897).
  * ctdb can crash with inconsistent cluster lock configuration;
    (bso#15950).
  * samba-bgqd: rework man page; (bso#15809).
  * samba-bgqd can't find [printers] share; (bso#15936); (bsc#1254586).
  * Winbind can hang forever in gssapi if there are network
    issues; (bso#15955).
  * libldb requires linking libreplace on Linux; (bso#15961).
  * Crash in ctdbd on failed updateip; (bso#15935).</changelog>
  <changelog author="nopower@suse.com" date="1768996800">- Fix mistake in README.SUSE /var/spool/samba =&gt; /var/samba/spool
  (bsc#1254665).</changelog>
</package>
<package pkgid="d27d632ee1110f8ea3789a14232c3252106babfa82ae150e2835eba4fe7736fdce398e599694d8a01b58c8d410d9f6f083a60dae228c3abf1896c9bfef94d921" name="libldm-1_0-0" arch="x86_64">
  <version epoch="0" ver="0.2.5" rel="160000.2.2"/>
  <changelog author="cbosdonnat@suse.com" date="1491480000">- Release 0.2.3
- Added patches:
  * werror-fixes.patch
  * cast_be64toh.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Properly assign RPM group to shlib package
- Replace %soname to %sover to better reflects its intent
- Replace -exec rm by _much simpler_ -delete
- Trim excess whitespace</changelog>
  <changelog author="cbosdonnat@suse.com" date="1491825600">- Fix license files</changelog>
  <changelog author="olaf@aepfle.de" date="1496145600">- fix double const</changelog>
  <changelog author="lyan@suse.com" date="1540641600">- fix deprecated api g_type_class_add_private()
- Added patches:
  * Remove-deprecated-g_type_class_add_private.patch</changelog>
  <changelog author="aginies@suse.com" date="1582632000">- update to version 0.2.4
- update patch Remove-deprecated-g_type_class_add_private.patch
- remove upstream merged patches (werror-fixes.patch, cast_be64toh.patch)
- fix buildrequires
- use localsource as the github repo doesnt include yet the built tarball
  for 0.2.4 release</changelog>
  <changelog author="olaf@aepfle.de" date="1609848000">- Adjust Remove-deprecated-g_type_class_add_private.patch to fix build</changelog>
  <changelog author="carnold@suse.com" date="1750852800">- Update to version 0.2.5 (jsc#PED-12706)
  * Fix crash while creating mapper for a volume which lacks of
    partitions
  * Make libldm to parse and return volume GUID
  * Change the way we sanitise LDM partition name
  * Set UUID for device mapper devices (partitions and volumes)
  * Fix potential memory leak
  * Use device mapper device UUID instead of name to find device in
    a tree
  * New API: ldm_volume_dm_get_device
  * New API: ldm_partition_dm_get_device
  * Fix bug in libldm to allow for all spanned LDM volumes to bex
    correctly identified/mounted
- Upstream fixes post 0.2.5
  001-Add-example-systemd-unit-file.patch
  002-ldmtool-fix-NULL-pointer-dereference.patch
  003-Add-ability-to-override-device-mapper-UUID.patch
  004-src-Fix-declaration-of-ldm_new.patch
  005-Update-gtkdocize.patch
- Drop patch contained in new tarball
  Remove-deprecated-g_type_class_add_private.patch</changelog>
</package>
<package pkgid="6e5f5da735d61ee0e2b8ef2197902834c87cb0a4c6a081b95361f58e820103664a21748b94ff61cd3d2ba21cdb17ff04fa8036c7f304af47713c710c793e1b93" name="libleancrypto1" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="160000.1.2"/>
  <changelog author="smueller@chronox.de" date="1669377600">- merge kernel definition into common SPEC file</changelog>
  <changelog author="smueller@chronox.de" date="1673179200">- leancrypto version 0.5.1</changelog>
  <changelog author="smueller@chronox.de" date="1675598400">- leancrypto version 0.5.2
  Pretesting of ARMv8 Kyber</changelog>
  <changelog author="meissner@suse.com" date="1744286400">- updated to 1.3.0
  * Allow CPU entropy sources to be used as seed sources with meson option "seedsource=cpu"
  * Ensure full clean run on vintage system without AVX2 (thanks to "David C. Rankin" &lt;drankinatty@gmail.com&gt;)
  * EFI: compilation support on AARCH64
  * Meson: reduce number of object files to speed up compilation process
  * Intel assembler: add endbr[64|32] to every function and ensure IBT is enabled
  * ARMv8 assembler / ELF: add BTI and PAC support
  * *Full FIPS 140 compliance*: Invoke PCT, add integrity test for ELF compilations, enable FIPS compilation by default
  * ML-DSA: add external-mu support; new API: lc_dilithium_ctx_external_mu
  * Add optional Jitter RNG entropy source
  * Add SLH-DSA-Ascon-128[s|f]  (by default they are disabled, enable with meson configuration options `slh_dsa_ascon_128s` and `slh_dsa_ascon_128f`)
  * ML-KEM: use common poly_tobytes / poly_compress including fix for kyberslash for ARMv8 (thus all ML-KEM implementations have proper protections against it)
  * ML-KEM: reduce code duplication
  * Big-Endian: fixes on X.509 key usage processing, ML-KEM modulus tester
- Changes 1.2.0
  * Locking für seeded_rng added to avoid requiring the caller providing a lock
  * Addition of ASN.1 decoder, X.509 parser, PKCS#7 / CMS parser
  * Addition of ASN.1 encoder, X.509 generator, PKCS#7 / CMS generator for ML-DSA, SLH-DSA, ML-DSA-ED25519
  * ML-DSA-ED25519: Hybrid implementation changed to match definition https://www.ietf.org/archive/id/draft-ietf-lamps-pq-composite-sigs-03.html
  * RISCV64: Keccak - add assembler and ZBB implementation
  * RISCV64: ML-KEM - add assembler implementation
  * RISCV64: ML-DSA - add assembler implementation
  * Add FIPS 140 mode (as of now, it does not yet implement full FIPS 140 compliance)
  * Ascon AEAD, Hash, XOF, Ascon-Keccak: Update to comply with SP800-232
  * Dilithium AVX2: Add side channel analysis
  * leancrypto passes X.509 IETF-Hackathon tests: https://ietf-hackathon.github.io/pqc-certificates/pqc_hackathon_results_certs_r4_automated_tests.html
  * Add compilation support for (U)EFI environment
  * RISCV64 RVV: ML-KEM, ML-DSA - add assembler implementation using RVV support
  * Seeded DRNG: Require a reseed after 2**14 bytes to comply with AIS20/31 3.0 DRG.4 and the discussed upcoming changes to SP800-90A.
  * SHA-512 / 384 / 256: Addition of AVX2, SHA_NI, SHA_NI-512, ARMv8 Neon, ARMv8 CE, RISCV ASM, RISCV ZBB acceleration
  * Add lc_init API
  * Intel non-AVX2 systems: remove all SIGILL causes by ensuring no AVX2 code is executed
  * Linux kernel: support version 6.13 kernel crypto signature API
  * Allow switching the central leancrypto seeded RNG instance with a caller-provided RNG
  * ML-KEM: fix poly_frombytes to perform the loading operation modulo 3329 (instead of modulo 4096) - thanks to Daiki Ueno for reporting it
- Changes 1.1.0
  * ML-KEM remove modulus check of decapsulation key (not required by FIPS 203)
  * ML-KEM: add key pair PCT API - leancrypto cannot invoke it itself as it does not know when both keys are provided from outside
  * ML-DSA: add consistency with FIPS 204 - the signature changes as the input data handling is added (if you want to apply the old signature, use the new lc_dilithium_[sign|verify]_ctx API with ctx-&gt;ml_dsa_internal = 1)
  * ML-DSA: add API to allow caller to provide a user context as allowed by FIPS 204, to invoke ML-DSA.Sign_internal, ML-DSA.Verify_internal and HashML-DSA
  * ML-KEM: rename source code directory to ml-kem
  * ML-DSA: rename source code directory to ml-dsa
  * BIKE: Add NIST round 4 KEM candiate
  * ML-DSA: Add support to retain the expanded key to increase the performance of signature operations by 15 to 20%
  * ML-DSA: add key pair PCT API - leancrypto will not invoke it, but provides it for FIPS 140 support
  * SLH-DSA: Add SLH-DSA-SHAKE-256s, SLH-DSA-SHAKE-256f, SLH-DSA-SHAKE-192s, SLH-DSA-SHAKE-192f, SLH-DSA-SHAKE-128s, SLH-DSA-SHAKE-128f
  * ML-DSA, ML-KEM, SLH-DSA, BIKE, Hash, AEAD, RNG, HMAC, HKDF, symmetric: move API implementation from H to C file - this implies that no RUST wrappers are needed
  * Linux kernel: ML-DSA / SLH-DSA sigver input changed to be compliant to existing kernel structures: req-&gt;src SGL contains signature || msg, req-&gt;dst SGL is not processed
- Changes 1.0.1
  * fix: Kyber keygen - add LC_KYBER_K to initial hash (change is only relevant when storing keys as seed and for interoperability)
  * fix: Dilithium keygen - add dimensions K and L (change is only relevant when storing keys as seed and for interoperability)
  * small performance improvements for hasher apps
- Changes 1.0.0
  * enhancement: add Doxygen support - it is automatically compiled if Doxygen is present
  * enhancement: add Dilithium-ED25519 stream mode operation (i.e. init/update/final)
  * due to the Dilithium-ED25519 stream mode support, the Dilithium-ED25519 now used ED25519ph signature algorithm mode
  * Dilithium API change: the stream mode uses struct lc_dilithium_ctx instead of lc_hash_ctx to reflect the newly added Dilithium-ED25519 API - the lc_dilithium_ctx can be allocated on the stack or heap using LC_DILITHIUM_CTX_ON_STACK or lc_dilithium_ctx_alloc
  * enhancement: add Dilithium-ED25519 as Linux kernel akcipher algorithm
  * enhancement: make Kyber-X25519 as Linux kernel kpp algorithm consistent with the standalone Kyber kpp implementation and add a tester
  * seeded_rng: when using the ESDM as entropy source, use DRBG without prediction resistance. When having heavy respawning of applications, using the PR DRBG will strain the entropy source significantly.
  * Dilithium: add edge case tests as referenced by https://github.com/usnistgov/ACVP/pull/1525.patch and https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/G8Zf0hC-uu0/m/Kb3qNJb0AwAJ
- Changes 0.11.0
  * security fix: fix possible leak of message in Kyber
  * Kyber: reduce memory footprint, use common lc_memcmp_secure API
  * Ascon-Keccak: include the tag length into the IV and thus implicitly authenticate the tag length (thanks to Markku-Juhani Saarinen to suggest this)
  * Kyber: change standard API such that caller can select Kyber type
  * Dilithium: change standard API such that caller can select Dilithium type
  * security: addition of Timecop and instrumentation of tests to find side-channels
  * enhancement: add Linux kernel crypto API support for Ascon / Ascon-Keccak
  * fix: performance of seeded RNG by setting reseed threshold to 1MB
  * fix: Linux kernel warning on return thunk
  * enhancement: add ASM ARMv7 and ARMv8 implementation for X25519
  * enhancement: add Ascon support for XDRBG
  * enhancement: performance increase for XDRBG256
  * enhancement: add ED25519ph to support Dilithium hybrid init/update/final handling
- Changes 0.10.1
  * enhancement: Linux kernel - Kyber: allow parallel compilation of all Kyber types including all optimizations
  * enhancement: Linux kernel - Dilithium: allow parallel compilation of all Dilithium types including all optimizations
  * add additional hardening compiler flags stipulated by openssf.org
- Changes 0.10.0
  * enhancement: add Sponge APIs
  * enhancement: add Ascon Keccak 512 and 256
  * update AEAD: add lc_aead_enc|dec_init and change all AEAD algo's tag calculation to now perform MAC(AAD || ciphertext) instead of MAC(ciphertext || AAD) - this brings it in line with all AEAD algorithms
  * enhancement: add Ascon AEAD 128 and 128b
  * rename API lc_shake to lc_xof
  * enhancement: add Ascon Hash 128 and 128a
  * enhancement: add Ascon XOF and XOFa
  * enhancement: add Ascon 128/128a hasher apps
  * large data tests can now execute on small systems by using smaller memory sizes
  * remove riscv64 hash assembler directory: it is a duplicate of the riscv32 assembler code
  * Kyber 768: Add AVX2, ARMv8, ARMv7 support
  * Dilithium 65: Add AVX2, ARMv8, ARMv7 support
  * Enable compilation of Kyber 1024, Kyber-768 and Kyber-512 at the same time (APIs starting with lc_kyber_768/lc_kex_768 refer to Kyber-768, APIs starting with lc_kyber_512/lc_kex_512 refer to Kyber-512, all others refer to Kyber-1024)
  * Enable compilation of Dilithium 87, Dilithium-65 and Dilithium-44 at the same time (APIs starting with lc_dilithium_65 refer to Dilithium-768, APIs starting with lc_dilithium_44 refer to Dilithium-44, all others refer to Dilithium-87)
  * enhancement: Windows is now supported as target platform using the MINGW compiler with full acceleration support
  * Dilithium: update SampleInBall implementation following https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/y8ul-ZcVWI4 - implementation is fully checked against NIST ACVP Demo server
- Changes 0.9.2
  * fix: update "reduce memory footprint of Keccak state" to handle big-endian systems
  * enhancement: Seed the lc_seeded_rng with (random.c || Jitter RNG)
- Changes 0.9.1
  * fix: move XOR-256 memory definitions to lc_memory_support.h as otherwise compilation of external applications and libraries fail due to missing xor256.h
- Changes 0.9.0
  * enhancement: X/ED25519: enable 128 bit mode on Intel for both, kernel and user
    space
  * add Rust binding support
  * enhancement: reduce memory footprint of Keccak state
  * enhancement: add cSHAKE re-init support
  * fix: KMAC-AEAD / cSHAKE-AEAD - ensure proper re-initialization
  * enhancement: add RISC-V 64 bit Keccak - currently disabled due to a bug
  * enhancement: compile Dilithium ARMv8 support in Linux kernel (excluding the SIMD Keccak operation)
  * fix: fix ARM-CE detection logic
  * fix: potential Kyber side channel
  * fix: KMAC min MAC size is 32 bits
  * enhancement: use accelerated XOR for KMAC/cSHAKE AEAD
  * fix: enable poly_compress_avx for Linux kernel compilation when GCC &gt;= 13 is present
  * enhancement: add interface code to register leancrypto with Linux kernel crypto API
- Changes 0.8.0:
  * enhancement: add applications
  * enhancement: add Dilithium ARMv8 support (including SHAKE 2x ARMv8 support)
  * enhancement: add Dilithium ARMv7 support
  * enhancement: add Kyber ARMv7 support
  * reduce memory footprint of Dilithium and Kyber
  * enhancement: Add Kyber-X25519 KEM, KEX, and IES
  * enhancement: Add Dilithium-ED25519
  * hardening: use -fzero-call-used-regs=used-gpr if available to counter ROP
    attacks
  * fix: Add fork-detection for seeded_rng
  * update XDRBG256 implementation based on latest draft
- Changes 0.7.0:
  * enhancement: add XDRBG256 - the SHAKE256-based DRNG discussed for SP800-90A
    inclusion (almost idential to cSHAKE/KMAC DRNG specified with leancrypto)
  * enhancement: add SymKMAC AEAD algorithm - it uses 100 bytes less context than
    SymHMAC (it is less than 1024 bytes now), uses accelerated Keccak for KDF and
    authentication but is otherwise identical to SymHMAC
  * Kyber: switch responder and initiator definitions
  * enhancement: add ESDM seed source to seed lc_seeded_rng
  * editorial: reformat code using clang-format and provided configuration file
  * Dilithium: Update implementation to match FIPS 204 (draft from Aug 24, 2023)
  * Kyber: Update implementation to match FIPS 203 (draft from Aug 24, 2023)
  * enhancement: Dilithium and Kyber security strengths are selectable via Meson options
  * Kyber KEM: Update shared secret KDF (as the KDF is now removed from FIPS 203,
    it can be adjusted to be more performant and consistent with SP800-108)
  * Kyber KEX: Updated shared secret KDF to use SP800-108 compliant KMAC KDF
  * enhancement: Add input parameter validatino to Kyber as specified in FIPS 203
  * enhancement: consolidate all testing requiring an RNG to use selftest_rng
- Changes 0.6.0:
  * enhancement: Linux - add memfd_secret(2) support for secure memory allocation
  * fix: documentation of lc_kyber_keypair
  * enhancement: remove the rng_ctx parameter in all Kyber APIs except the key
    generation - internally lc_seeded_rng is used instead
  * enhancement: use -Wmissing-prototypes and fix reported issues
  * enhancement: provide standalone CBC, CTR, KW implementation
  * enhancement: provide AESNI implementation
  * enhancement: provide AES ARM CE implementation
  * enhancement: provide AES RISC-V 64 assembler implementation
  * enhancement: provide Linux kernel configuration option to enable startup
    health tests
  * fix: apply fixes such that all self tests and regression tests pass when compiled for Linux kernel
  * fix: properly zeroize memory when using the workspace memory
- Changes 0.5.3:
  * convert to safe min/max implementations
  * enhancement: allow kernel modules to be compiled directly from installed user space headers
  * enhancement: make ARMv8 code compile on macOS</changelog>
  <changelog author="meissner@suse.com" date="1744718400">- adjust license to BSD-3-clause</changelog>
  <changelog author="meissner@suse.com" date="1744718401">- added keyring, https://leancrypto.org/about/smuellerDD-2024.asc</changelog>
  <changelog author="lucas.mulling@suse.com" date="1751544000">- Update to 1.5.0:
  * Enable SHA3 CE 2x implementation for SLH-DSA and ML-DSA (performance increases 2 to 3 fold)
  * Fix lookup of RDRAND support in CPUID
  * Catch Y2038 issue on 32-bit systems that do not have 64 bit time_t support
  * Start Python interface
  * Add ED448 / X448 for use in hybrid PQC constructions, ED448 implementation verified with NIST ACVP
  * Add ML-KEM-X448 and ML-DSA-ED448 support
  * ASN.1: Add ML-DSA-ED448 certificate support
  * RUST: Add ML-DSA-ED448 support
  * Linux kernel: Add ML-KEM-X448 and ML-DSA-ED448 support
  * Ascon AEAD: Bug fix when calculating the tag for plaintext that is not multiples of 128 bits
  * Composite X.509 signatures: update implementation to match draft revision 5
  * Add support for the Linux kernel updated scatterwalk API in 6.15 for leancrypto_kernel_aead_ascon.ko
- Includes changes from 1.4.0:
  * ML-DSA: add signature generation rejection test cases and enable them during self tests
  * add HQC following reference implementation (https://pqc-hqc.org/implementation.html (versions from 2025-02-19)) but derived from PQClean implementation. NOTE: HQC is not yet considered stable as the implementation currently does not exhibit the IND-CCA2 property. Moreover, the FIPS standardization of HQC is pending. Changes to the HQC algorithm until standardization will need to be expected. I.e. the versioning rules of the library do not apply to the HQC algorithm until being announced in the CHANGES.md file.
  * ARMv8: properly save/restore SIMD registers v8 through v15 for ML-DSA/ML-KEM, X25519 and SHA3-CE (reported by Alexander Sosedkin)
  * Rust: add wrapper allowing a native interaction with the leancrypto library - the API offered by the Rust wrappers is not yet defined to be stable and may change to the next version - i.e. the versioning rules of the library do not apply to the Rust API until being announced in the CHANGES.md file.
  * Add “secure_execution” compile-time option
  * Add HQC AVX2 implementation derived from https://pqc-hqc.org/
- Remove patch fix-aarch64.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752667200">- Update to 1.5.1:
  * add ChaCha20 Poly 1305 AEAD
  * ChaCha20: add ARMv8 NEON, ARMv7 Neon, Intel AVX2, Intel AVX512,
    RISCV RVV/ZBB implementations
  * RISC-V entropy source: make implementation consistent to spec
  * Unify stack memory allocation</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752667201">- Split kernel module into to a separate package as to allow leancrypto to be
  part of ring1 following replacement of liboqs in gnutls [jsc#PED-3176]</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Add baselibs.conf</changelog>
</package>
<package pkgid="74b95547b66b1a5c4ba03ba20641ae0f4502e299bb7e2b051abc09077b25e1dd881a8e6f412e8a6ea2f6aca4404a153966dd0bc1b95a7a612b6e34b601c40ba8" name="liblldp_clif1" arch="x86_64">
  <version epoch="0" ver="1.1+106.74c0600a8692" rel="160000.2.2"/>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="lduncan@suse.com" date="1698408000">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="lduncan@suse.com" date="1705233600">- Update to version v1.1+106.74c0600a8692 (from upstream/branch-1.1):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data
  * lldpad: ieee8023: reorder disabling pMAC and disabling MM TX
  * uapi: Provide a copy of const.h
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * ChangeLog: mention Additional Ethernet Capabilities TLV
  * lldptool: add man page for Additional Ethernet Capabilities TLV
  * lldptool: add CLI interface for Additional Ethernet Capabilities TLV
  * lldpad: ieee8023: allow changing the addFragSize advertisement
  * lldpad: ieee8023: add Additional Ethernet Capabilities TLV logic
  * lldpad: ieee8023: make ieee8023_data() return a pointer to ieee8023_user_data
  * lldpad: ethtool netlink accessors for MAC merge layer
  * lldpad: ieee8023: add basic rchange procedure
  * uapi: copy ethtool definitions for MAC Merge layer from Linux
  * uapi: update linux/netlink.h copy
  * uapi: import ethtool kernel headers from net-next
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference</changelog>
</package>
<package pkgid="4a923ef3a7073356b676f0fd8310346cf56bb20e8b6ffe6ea65e443a59f51cedefe45d64d32845d3533081fdde4e095677455d04b9ae4fdb2d89aa28e92eddc9" name="liblmdb-0_9_30" arch="x86_64">
  <version epoch="0" ver="0.9.30" rel="160000.3.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1528027200">- LMDB 0.9.22 Release (2018-03-22)
  * Fix MDB_DUPSORT alignment bug (ITS#8819)
  * Fix regression with new db from 0.9.19 (ITS#8760)
  * Fix liblmdb to build on Solaris (ITS#8612)
  * Fix delete behavior with DUPSORT DB (ITS#8622)
  * Fix mdb_cursor_get/mdb_cursor_del behavior (ITS#8722)
- LMDB 0.9.21 Release (2017/06/01)
  * Fix xcursor after cursor_del (ITS#8622)
- LMDB 0.9.20 (Withdrawn)
  * Fix mdb_load with escaped plaintext (ITS#8558)
  * Fix mdb_cursor_last / mdb_put interaction (ITS#8557)
- LMDB 0.9.19 Release (2016/12/28)
  * Fix mdb_env_cwalk cursor init (ITS#8424)
  * Fix robust mutexes on Solaris 10/11 (ITS#8339)
  * Tweak Win32 error message buffer
  * Fix MDB_GET_BOTH on non-dup record (ITS#8393)
  * Optimize mdb_drop
  * Fix xcursors after mdb_cursor_del (ITS#8406)
  * Fix MDB_NEXT_DUP after mdb_cursor_del (ITS#8412)
  * Fix mdb_cursor_put resetting C_EOF (ITS#8489)
  * Fix mdb_env_copyfd2 to return EPIPE on SIGPIPE (ITS#8504)
  * Fix mdb_env_copy with empty DB (ITS#8209)
  * Fix behaviors with fork (ITS#8505)
  * Fix mdb_dbi_open with mainDB cursors (ITS#8542)
  * Fix robust mutexes on kFreeBSD (ITS#8554)
  * Fix utf8_to_utf16 error checks (ITS#7992)
  * Fix F_NOCACHE on MacOS, error is non-fatal (ITS#7682)
  * Build
    Make shared lib suffix overridable (ITS#8481)
  * Documentation
    + Cleanup doxygen nits
    + Note reserved vs actual mem/disk usage
- LMDB 0.9.18 Release (2016/02/05)
  * Fix robust mutex detection on glibc 2.10-11 (ITS#8330)
  * Fix page_search_root assert on FreeDB (ITS#8336)
  * Fix MDB_APPENDDUP vs. rewrite(single item) (ITS#8334)
  * Fix mdb_copy of large files on Windows
  * Fix subcursor move after delete (ITS#8355)
  * Fix mdb_midl_shirnk off-by-one (ITS#8363)
  * Check for utf8_to_utf16 failures (ITS#7992)
  * Catch strdup failure in mdb_dbi_open
  * Build
    + Additional makefile var tweaks (ITS#8169)
  * Documentation
    + Add Getting Started page
    + Update WRITEMAP description
- Drop 0002-Autoconf-files.patch, soname-configurable.patch and
  add Makefile-build-use-shared-lib.patch instead. Instead of
  replacing the Makefile with a libtool/automake based one, just
  patch the relevant parts of the upstream Makefile.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1538827200">- Fix occasional crash when freed pages landed on the dirty list twice
  * Add 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1553515200">- LMDB 0.9.23 Release (2018/12/19)
  * ITS#8756 Fix loose pages in dirty list
  * ITS#8831 Fix mdb_load flag init
  * ITS#8844 Fix mdb_env_close in forked process
  * Documentation
    + ITS#8857 mdb_cursor_del doesn't invalidate cursor
    + ITS#8908 GET_MULTIPLE etc don't change passed in key
- Drop upstream 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch
- Cleanup:
  * Use %license, drop %defattr
  * Use https for Url tag</changelog>
  <changelog author="mrueckert@suse.de" date="1584792000">- LMDB 0.9.24 Release (2019/07/24)
  * ITS#8969 Tweak mdb_page_split
  * ITS#8975 WIN32 fix writemap set_mapsize crash
  * ITS#9007 Fix loose pages in WRITEMAP</changelog>
  <changelog author="mrueckert@suse.de" date="1584792001">- copy the pkg config support from the fedora package</changelog>
  <changelog author="jgwang@suse.com" date="1614772800">- LMDB 0.9.28 Release (2021/02/04)
  * ITS#8662 add -a append option to mdb_load
- LMDB 0.9.27 Release (2020/10/26)
  * ITS#9376 fix repeated DUPSORT cursor deletes
- LMDB 0.9.26 Release (2020/08/11)
  * ITS#9278 fix robust mutex cleanup for FreeBSD
- LMDB 0.9.25 Release (2020/01/30)
  * ITS#9068 fix mdb_dump/load backslashes in printable content
  * ITS#9118 add MAP_NOSYNC for FreeBSD
  * ITS#9155 free mt_spill_pgs in non-nested txn on end</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 0.9.29:
  * ITS#9461 refix ITS#9376
  * ITS#9500 fix regression from ITS#8662</changelog>
  <changelog author="alx.kuzza@gmail.com" date="1674475200">- update to 0.9.29:
  * lmdump is not creating lock files</changelog>
  <changelog author="dmueller@suse.com" date="1679227200">- update to 0.9.30:
  * LMDB page_split: key threshold depends on page
    size
  * avoid gcc optimization bug on sparc64 linux
  * - Mark infrequently used functions as cold
  * clear C_EOF on cursor with MDB_FIRST_DUP
  * Use sys/cachectl.h rather than asm/cachectl.h on
    mips</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="6df395a0920ea614d1373770b24c5dfe52611318f05bc5cbd557be04cb8737b24055367c3722c2a57c3a0a4803f7c616dda441ddcebcbeaa781db7810429c570" name="libltdl7" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="160000.2.2"/>
  <changelog author="pth@suse.de" date="1438862400">- Remove spurious install_info_delete in postun (bsc#940773).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Fix install_info_{install,delete} usage: install-info does not
  allow file globbing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1525348800">- Drop libtool-no_host_name.patch for now: since we are upgrading
  to automake 1.16, we can't have any patch that would require us
  to bootstrap libtool, as this is not exactly trivial.
- Remove the line containing 'uname -m' from the libtool.m4 package
  after installation: this has the same effect as the patch above
  had.</changelog>
  <changelog author="bwiedemann@suse.com" date="1525867200">- Add libtool-reproducible-hostname.patch
  to make package build reproducible (boo#1084909)</changelog>
  <changelog author="meissner@suse.com" date="1544270400">- libtool baselib should require libltdl in baselib.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 2.4.7:
  - Libtool script now supports (configure-time and runtime) ARFLAGS
    variable, which obsoletes AR_FLAGS.  This is due to naming conventions
    among other *FLAGS and to be consistent with Automake's ARFLAGS.
  - Gnulib testsuite is enabled and run during 'make check'.
  - Support the Windows version of the Intel C Compiler (icl) in
    libtool script.
  - Pass '-fsanitize=*' flags for GCC and LLVM, and '-specs=*' for GCC
    to linker.
  - Pass '-Xassembler=*' and '-Wa,*' flag to compilers and linkers.
  - The variable 'FILECMD' with default value of '/usr/bin/file' was used to
    replace existing hard coded references to '/usr/bin/file'.
  - Add MidnightBSD support.
  - Libtool changed ARFLAGS/AR_FLAGS default from 'cru' to 'cr'.
  - Do not pass '-pthread' to Solaris linker.
  - 'libtool' and 'libtoolize' scripts now use '#! /usr/bin/env sh' shebang.
    Previously '#! /bin/sh' was used, which presents challenges for
    containerized environments.
  - Fix significant slowdown of libtoolize for certain projects (regression
    introduced in 2.4.3 release) caused by infinite m4 macro recursion.
  - Mitigate the slowdown of libtool script (introduced in v2.4.3) caused by
    increased number of calls to '$SED $sed_quote_subst' (bug#20006).
  - Properly parse and export TLS symbols on AIX.
  - Various bug fixes surrounding use of 'sed'.
  - Darwin systems set proper "allow undefined" flag on OSX 11, and
    PowerPC 10.5.
  - Removed some deprecated tests related to 'Makefile.inc' files.
- merge in testsuite, disable for now, isn't building for a while</changelog>
  <changelog author="dmueller@suse.com" date="1648555200">- add handle-Werror-return-type.patch
- disable lto, breaks libtool as seen in testsuite</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- allow tests to pass with GNU grep 3.8 boo#1203097
  add libtool-2.4.7-grep-3.8.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
</package>
<package pkgid="7ef8f40fc173d18e18d621ca11352c1b32bd0aacd4ed9392d025d78d2a26f3e536a15826145edda64c3c91f4729ca35f140fed595416879edf96bf67ebae0197" name="liblttng-ctl0" arch="x86_64">
  <version epoch="0" ver="2.13.11" rel="160000.2.2"/>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 2.10.2:
  * Do not flag consumer as disabled on relayd comm failure.
  * Cleanup inactive FDs in the consumer polling thread.
  * man: Document dead-peer detection for lttng-relayd.
  * lttng-relayd: Use the TCP keep-alive mechanism to detect a
    dead-peer.
  * Tests: race between consumer pause and trace start/stop.
  * Fix notification thread being not notified of channel creation
    on application error.
  * Fix using putenv() and free()-ing the value is invalid.
  * Fix unknown consumer type considered a libc error.
  * Fix that consumerd(64/32)_lib_dir can be NULL.
  * Fix a nonsensical message printed by lttng track/untrack.
  * Fix O_CLOEXEC being erroneously used on pipe creation.
  * Fix a wrong parameter to fcntl in pipe_set_flag.
  * Use lttng_clock_gettime instead of clock_gettime.
  * Close channel monitor pipe after killing the
    metadata_timer_thread.
  * Use file based synchronisation for python logging test.
  * Test: Add file based synchronisation point for the Python test
    application.
  * Fix wrong use of the relay_streams_sent in snapshot.
  * Fix the return code of lttcomm_send_unix_sock signed.
  * Fix a src/bin/lttng/utils.c: cast incompatible pointer warning.
  * Fix: src/common/pipe.h: include &lt;sys/types.h&gt; for ssize_t and
    mode_t.
  * Fix detect dlmopen() and disable corresponding tests if not
    available.
  * Use tmpdir for intermediary files.
  * Fix include scripts for distribution.
  * Fix a typo in lttng-consumerd file default.
  * Fix missing NULL checks in logging statements.
  * Test: Kernel testing for notification.
  * Kernel consumerd sock paths need rundir substitution.
  * Create lttng run dir regardless of user privilege.
  * Make version.h generation work with dash.
  * lttng-enable-event(1): filtering: Specify that `$ctx.cpu_id`
    is available.
  * Centralise sessiond config option handling.
  * Fix buffer overflow warning in python bindings.
  * Tests fix: BT2 does not output the metadata of a trace
    collection.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 2.10.4 (changes since 2.10.2):
  * Fix: Set errno with value from SO_ERROR on error.
  * Fix: Missing value handling for lttng_event_context_type.
  * Fix: Use SOL_SOCKET level for SO_KEEPALIVE on all platform.
  * Fix: Error out on leftover arguments.
  * Fix: Reply to version check even on protocol mismatch.
  * Fix: Error handling on relay version check.
  * Document add-context limitation for started session.
  * Fix: add-context cannot be performed after a session has been
    started.
  * Fix: Duplicated kernel consumer socket locking.
  * Fix: Remove unused event types in MI XML schema.
  * Tests: Cleanly exit from test apps on reception of SIGTERM.
  * Document consumer socket locking assumptions.
  * Fix: Consumer socket lock not held during snapshot record.
  * Fix: set_relayd_for_snapshot does not acquire the consumer
    socket lock.
  * Fix: send_channel_monitor_pipe does not take the consumer
    socket lock.
  * Document the locking assumptions of consumerd-relayd socket
    passing.
  * Assert that the consumer lock is held while sending FDs to
    consumerd.
  * Assert that the consumer socket lock is taken during
    communication.
  * Tests: Refuse to run test suite if lttng processes are present.
  * Fix: Metadata channel leak when using the snapshot tracing
    mode.
  * Fix build: in_git_repo is used before being set.
  * Add DBG statement for TCP keep-alive options.
  * Fix: Unprivilieged sessiond agent port clashes with root
    sessiond.
  * Fix: Erroneous use of extern keyword.
  * Fix: Failure to launch agent thread is not reported.
  * Fix: Agent may not be ready on launch.
  * Fix: Checking for existing session daemon is done after
    daemonising.
  * Fix: lttng logs nanoseconds.
  * Fix: stream_per_chan_id_ht should allow duplicates.
  * Fix: relayd send_command() util not logging on failure.
  * Fix: Create_output_path() relayd util is not
    const-correct.
  * Fix: Kernel snapshot handling of EAGAIN.
  * Fix validate_trace_empty test check.
  * Fix: Circular inclusion of lttng.h results in warning.
  * Fix: Channel lock must be taken to check for pending
    notifications.
  * Fix: Quiet option is not set in sessiond-config.
  * Fix: Hold consumer socket lock for consumer_send_msg.
  * Fix: Use off_t type for lseek function return value to avoid
    overflow.
  * Fix: Double similar condition.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.5:
  * Fix: missing context enum values in session xml schema.
  * Tests: add session auto-loading test cases.
  * Bash completion: ignore namespace for xmllint parsing.
  * Typo in ust consumer log message (channek -&gt; channel).
  * Fix: use signed variable for refcounting of
    consumer_relayd_sock_pair.
  * Fix: warning due to hash_key_str() being not const-correct.
  * Print consumerd32/64/kernel configuration.
  * Fix: calling ht_{hash, match}_enum with wrong argument.
  * Fix: probes should be compared strictly by events metadata.
  * Fix: test_ust-dl is generated at configure-time.
  * Fix: cmd line options overwrite env variable config options.
  * Fix: perform the initialization memory barrier out of loop body.
  * Port: fix format warnings on Cygwin.
  * Add missing include for ssize_t on Cygwin.
  * Fix: sessions with agent channels fail to load.
  * Fix: don't wait for the load thread before serving client
    commands.
  * Fix: sessiond fails to launch on --without-ust configuration.
  * Fix: agent thread poll set creation failure results in deadlock.
  * Fix: test uses sizeof() on the wrong operand of strncpy.
  * Fix: ret may be used uninitialized in sample_channel_positions().
- Add gpl-2.0.txt and lgpl-2.1.txt to the library packages with the
  %license tag.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.2:
  * See /usr/share/doc/packages/lttng-tools/ChangeLog
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.2
  Changelog: https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.12.2
  - Add signed bz2 support (keyring)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.1:
  * See https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.13.1
- Rebase lttng-tools-fix-pkgconfig.patch.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.7:
  * See https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.13.7</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.8
  * futex wait: handle spurious futex wakeups
  * agent port file was o+w when launching as root
  * sessiond: handle empty scheduled rotations
  * sessiond: size-based rotations never triggered
  * lttng-snapshot: fixed use after free of max size argument
  * liblttng-ctl: non-packed structure was used for tracker
    serialization
  * test: lttng kernel modules were still loaded after running
    test_clock_override
  * Plug some memory leaks</changelog>
  <changelog author="dmueller@suse.com" date="1674993600">- update to 2.13.9:
  * Fix: lttng: poptGetArg doesn't provide string ownership
  * Fix: relayd: missing space in trace creation logging statement
  * Fix: event field value: assertion fails on empty string
  * Build fix: rpath of test libraries results in non-reproducible build
  * Fix: never use 'no' in a command variable
  * Fix: sessiond: abort called on undefined client command
  * Fix: consumer: snapshot: assertion on subsequent snapshot
  * Fix: sessiond: instance uuid is not sufficiently unique</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.11:
  * docs: fix: Match stated automake requirement
  * Docs: Fix broken reference in lttng-add-trigger
  * Docs: Fix broken reference to lttng-concepts(7) man page
    disk space
  * Fix: lttng-add-context: leak of application context
    parameters
  * Fix: sessiond: bad fd used while rotating exiting app's
    buffers
  * Fix: consumerd: slow metadata push slows down application
    registration
  * event-rule: set event rule loglevel to domain specific value
    when unset
  * Fix: sessiond: preserve jul/log4j domain loglevels
  * Fix: sessiond: crash enabling event rules that differ only by
    loglevel type
  * Fix: sessiond: incorrect use of exclusions array leads to
    crash
  * Fix: sessiond: silent kernel notifier registration error
  * Fix: sessiond: size-based notification occasionally not
    triggered
  * Fix: adding a user space probe fails on thumb functions
  * Fix: Tests that assume CPU 0 is present
  * Fix: Wrong assumption about possible CPUs
  * Fix: lttng remove-trigger -h fails
  * Fix: ini parser: truncation of value name
  * Fix: truncated len in
    lttng_event_rule_user_tracepoint_serialize()</changelog>
</package>
<package pkgid="ea4af329512b98fd3289f8d182e34b066822086e95f7263760bfef6cb4ea99af3839450ad92c6af2ccc2bdc2976e74833647abda358490d9204a8313316f9c0f" name="liblttng-ust-ctl5" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="160000.2.2"/>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.0:
  * See /usr/share/doc/packages/lttng-ust/ChangeLog
- Add lttng-ust-2.11.0-fix-no-common.patch: Fix build with
  - fno-common (commit 21a934df, boo#1160400).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.0 (jsc#SLE-16189)
  Changelog: https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.12.0
  Delete patch: lttng-ust-2.11.0-fix-no-common.patch (upstream)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.0:
  * See https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.13.0
- Add liburcu requirement to the development package.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.2 (changes since 2.13.0):
  * Fix: ust-compiler: constructor/destructor build on g++ 4.8.
  * ust-compiler: constructor/destructor whitespaces layout and
    macro dependency.
  * Fix: ust-cancelstate: include string.h for strerror.
  * Fix: libnuma is prepended to LIBS.
  * Fix: Allow disabling some abi compat tests.
  * Fix: generate probe registration constructor as a C++
    constuctor.
  * Fix: nestable pthread cancelstate.
  * Fix: abort on decrement_sem_count during concurrent tracing
    start and teardown.
  * Fix: allocating C++ compound literal on heap with Clang.
  * Check for C++11 when building C++ probe providers.
  * fix: liblttng-ust-fd async-signal-safe close().
  * tracepoints: print debug message when lttng-ust-tracepoint.so
    is not found.
  * Fix: static_assert unavailable with glibc &lt; 2.16.
  * Fix: combined tracing of lttng-ust 2.12/2.13 generates
    corrupted traces.
  * doc/man: Document LTTNG_UST_ABORT_ON_CRITICAL variable.
  * Fix: remove autoconf features default value in help message.
  * Fix: add extern "C" to two header files.
  * Fix: __STDC_VERSION__ can be undefined in C++.
  * Fix: sample discarded events count before reserve.
  * Fix: ring buffer event counter.
  * Fix: concurrent exec(2) file descriptor leak.
  * Add "domain" parameter to the Log4j 2.x agent.
  * Fix: Convert custom loglevels in Log4j 2.x agent.
  * Fix: coverity reported null returns in Log4j2 agent.
  * Add a Log4j 2.x Java agent.
  * Fix: may be used uninitialised on powerpc.
  * Fix: doc/examples/java-log4j: fix paths to directories.
  * Fix: doc/examples/java-jul: fix paths to directories.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1660910400">- Update to version 2.13.3:
  * Document ust lock async-signal-safety.
  * Fix: don't use strerror() from ust lock nocheck.
  * Fix: remove non-async-signal-safe fflush from ERR().
  * Fix: Pointers are rejected by integer element compile time
    assertion for array and sequence.
  * Fix: statedump: invalid read during iter_end.
  * Fix: bytecode interpreter context_get_index() leaves byte order
    uninitialised.</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.4
  * Added missing closedir in _get_max_cpuid_from_sysfs()
  * File descriptor was leaked in get_possible_cpu_mask_from_sysfs
  * sessiond wait futex: handle spurious futex wakeups</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1664712000">- Update to version 2.13.5:
  * Fix: bytecode validator: reject specialised load field/context
    ref instructions.
  * Fix: bytecode validator: reject specialised load instructions.
  * Fix: event notification capture: validate buffer length.
  * Fix: event notification capture error handling.
  * Fix: lttng-ust-comm: wait on wrong child process.
  * fix: 'make dist' without javah.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.6:
  * Fix: segmentation fault on filter interpretation in "switch"
    mode
  * Fix: `ip` context is expressed as a base-10 field
  * Fix: c99: use __asm__ __volatile__
  * Fix: c99: static assert: clang build fails due to multiple
    typedef
  * Fix: Reevaluate LTTNG_UST_TRACEPOINT_DEFINE each time
    tracepoint.h is included
  * Fix: trace events in C++ constructors/destructors
  * Fix: trace events in C constructors/destructors
  * Fix: use unaligned pointer accesses for lttng_inline_memcpy</changelog>
  <changelog author="pgajdos@suse.com" date="1711454400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="mmachova@suse.com" date="1738238400">- Add python3-setuptools BuildRequires, needed for Python 3.13.</changelog>
</package>
<package pkgid="0c95c1da378ff535b7a2f8e002bd5cc36ab77321d06f85ec993cea446caba66cd647d95c78e27472c01553eaed8fe3d69d8a14d6b298e2ca0f7c7cf465a6c95e" name="liblttng-ust-python-agent1" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="160000.2.2"/>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.0:
  * See /usr/share/doc/packages/lttng-ust/ChangeLog
- Add lttng-ust-2.11.0-fix-no-common.patch: Fix build with
  - fno-common (commit 21a934df, boo#1160400).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.0 (jsc#SLE-16189)
  Changelog: https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.12.0
  Delete patch: lttng-ust-2.11.0-fix-no-common.patch (upstream)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.0:
  * See https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.13.0
- Add liburcu requirement to the development package.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.2 (changes since 2.13.0):
  * Fix: ust-compiler: constructor/destructor build on g++ 4.8.
  * ust-compiler: constructor/destructor whitespaces layout and
    macro dependency.
  * Fix: ust-cancelstate: include string.h for strerror.
  * Fix: libnuma is prepended to LIBS.
  * Fix: Allow disabling some abi compat tests.
  * Fix: generate probe registration constructor as a C++
    constuctor.
  * Fix: nestable pthread cancelstate.
  * Fix: abort on decrement_sem_count during concurrent tracing
    start and teardown.
  * Fix: allocating C++ compound literal on heap with Clang.
  * Check for C++11 when building C++ probe providers.
  * fix: liblttng-ust-fd async-signal-safe close().
  * tracepoints: print debug message when lttng-ust-tracepoint.so
    is not found.
  * Fix: static_assert unavailable with glibc &lt; 2.16.
  * Fix: combined tracing of lttng-ust 2.12/2.13 generates
    corrupted traces.
  * doc/man: Document LTTNG_UST_ABORT_ON_CRITICAL variable.
  * Fix: remove autoconf features default value in help message.
  * Fix: add extern "C" to two header files.
  * Fix: __STDC_VERSION__ can be undefined in C++.
  * Fix: sample discarded events count before reserve.
  * Fix: ring buffer event counter.
  * Fix: concurrent exec(2) file descriptor leak.
  * Add "domain" parameter to the Log4j 2.x agent.
  * Fix: Convert custom loglevels in Log4j 2.x agent.
  * Fix: coverity reported null returns in Log4j2 agent.
  * Add a Log4j 2.x Java agent.
  * Fix: may be used uninitialised on powerpc.
  * Fix: doc/examples/java-log4j: fix paths to directories.
  * Fix: doc/examples/java-jul: fix paths to directories.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1660910400">- Update to version 2.13.3:
  * Document ust lock async-signal-safety.
  * Fix: don't use strerror() from ust lock nocheck.
  * Fix: remove non-async-signal-safe fflush from ERR().
  * Fix: Pointers are rejected by integer element compile time
    assertion for array and sequence.
  * Fix: statedump: invalid read during iter_end.
  * Fix: bytecode interpreter context_get_index() leaves byte order
    uninitialised.</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.4
  * Added missing closedir in _get_max_cpuid_from_sysfs()
  * File descriptor was leaked in get_possible_cpu_mask_from_sysfs
  * sessiond wait futex: handle spurious futex wakeups</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1664712000">- Update to version 2.13.5:
  * Fix: bytecode validator: reject specialised load field/context
    ref instructions.
  * Fix: bytecode validator: reject specialised load instructions.
  * Fix: event notification capture: validate buffer length.
  * Fix: event notification capture error handling.
  * Fix: lttng-ust-comm: wait on wrong child process.
  * fix: 'make dist' without javah.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.6:
  * Fix: segmentation fault on filter interpretation in "switch"
    mode
  * Fix: `ip` context is expressed as a base-10 field
  * Fix: c99: use __asm__ __volatile__
  * Fix: c99: static assert: clang build fails due to multiple
    typedef
  * Fix: Reevaluate LTTNG_UST_TRACEPOINT_DEFINE each time
    tracepoint.h is included
  * Fix: trace events in C++ constructors/destructors
  * Fix: trace events in C constructors/destructors
  * Fix: use unaligned pointer accesses for lttng_inline_memcpy</changelog>
  <changelog author="pgajdos@suse.com" date="1711454400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="mmachova@suse.com" date="1738238400">- Add python3-setuptools BuildRequires, needed for Python 3.13.</changelog>
</package>
<package pkgid="ebed7ad805a65a72c5a356c683df4034dd8d95707ca87e8c09d5833300be4540815a6d891f3b609ea7be57453e3f2684d1b0a3f21fee28fb6694cc7a1aa50b35" name="liblttng-ust1" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="160000.2.2"/>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.0:
  * See /usr/share/doc/packages/lttng-ust/ChangeLog
- Add lttng-ust-2.11.0-fix-no-common.patch: Fix build with
  - fno-common (commit 21a934df, boo#1160400).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.0 (jsc#SLE-16189)
  Changelog: https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.12.0
  Delete patch: lttng-ust-2.11.0-fix-no-common.patch (upstream)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.0:
  * See https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.13.0
- Add liburcu requirement to the development package.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.2 (changes since 2.13.0):
  * Fix: ust-compiler: constructor/destructor build on g++ 4.8.
  * ust-compiler: constructor/destructor whitespaces layout and
    macro dependency.
  * Fix: ust-cancelstate: include string.h for strerror.
  * Fix: libnuma is prepended to LIBS.
  * Fix: Allow disabling some abi compat tests.
  * Fix: generate probe registration constructor as a C++
    constuctor.
  * Fix: nestable pthread cancelstate.
  * Fix: abort on decrement_sem_count during concurrent tracing
    start and teardown.
  * Fix: allocating C++ compound literal on heap with Clang.
  * Check for C++11 when building C++ probe providers.
  * fix: liblttng-ust-fd async-signal-safe close().
  * tracepoints: print debug message when lttng-ust-tracepoint.so
    is not found.
  * Fix: static_assert unavailable with glibc &lt; 2.16.
  * Fix: combined tracing of lttng-ust 2.12/2.13 generates
    corrupted traces.
  * doc/man: Document LTTNG_UST_ABORT_ON_CRITICAL variable.
  * Fix: remove autoconf features default value in help message.
  * Fix: add extern "C" to two header files.
  * Fix: __STDC_VERSION__ can be undefined in C++.
  * Fix: sample discarded events count before reserve.
  * Fix: ring buffer event counter.
  * Fix: concurrent exec(2) file descriptor leak.
  * Add "domain" parameter to the Log4j 2.x agent.
  * Fix: Convert custom loglevels in Log4j 2.x agent.
  * Fix: coverity reported null returns in Log4j2 agent.
  * Add a Log4j 2.x Java agent.
  * Fix: may be used uninitialised on powerpc.
  * Fix: doc/examples/java-log4j: fix paths to directories.
  * Fix: doc/examples/java-jul: fix paths to directories.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1660910400">- Update to version 2.13.3:
  * Document ust lock async-signal-safety.
  * Fix: don't use strerror() from ust lock nocheck.
  * Fix: remove non-async-signal-safe fflush from ERR().
  * Fix: Pointers are rejected by integer element compile time
    assertion for array and sequence.
  * Fix: statedump: invalid read during iter_end.
  * Fix: bytecode interpreter context_get_index() leaves byte order
    uninitialised.</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.4
  * Added missing closedir in _get_max_cpuid_from_sysfs()
  * File descriptor was leaked in get_possible_cpu_mask_from_sysfs
  * sessiond wait futex: handle spurious futex wakeups</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1664712000">- Update to version 2.13.5:
  * Fix: bytecode validator: reject specialised load field/context
    ref instructions.
  * Fix: bytecode validator: reject specialised load instructions.
  * Fix: event notification capture: validate buffer length.
  * Fix: event notification capture error handling.
  * Fix: lttng-ust-comm: wait on wrong child process.
  * fix: 'make dist' without javah.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.6:
  * Fix: segmentation fault on filter interpretation in "switch"
    mode
  * Fix: `ip` context is expressed as a base-10 field
  * Fix: c99: use __asm__ __volatile__
  * Fix: c99: static assert: clang build fails due to multiple
    typedef
  * Fix: Reevaluate LTTNG_UST_TRACEPOINT_DEFINE each time
    tracepoint.h is included
  * Fix: trace events in C++ constructors/destructors
  * Fix: trace events in C constructors/destructors
  * Fix: use unaligned pointer accesses for lttng_inline_memcpy</changelog>
  <changelog author="pgajdos@suse.com" date="1711454400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="mmachova@suse.com" date="1738238400">- Add python3-setuptools BuildRequires, needed for Python 3.13.</changelog>
</package>
<package pkgid="62111f6d065ed84f8204e831c4c76787ea04cb751d0bc876e10c41cb4104dc256808c30bf87bd06d15c6846d4a0c83b5663f6a4d891c8e266023ea33ecf194c0" name="liblua5_4-5" arch="x86_64">
  <version epoch="0" ver="5.4.7" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1679140800">- Added more numbered patches from upstream:
  * luabugs10.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1680609600">- Added more numbered patches from upstream:
  * luabugs11.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682856000">- Update to 5.4.5:
  - this is a bug-fix release.
  - Lua 5.4.5 also contains several internal improvements and
    includes a revised reference manual
- Remove upstreamed patches:
  - luabugs1.patch
  - luabugs10.patch
  - luabugs11.patch
  - luabugs2.patch
  - luabugs3.patch
  - luabugs4.patch
  - luabugs5.patch
  - luabugs6.patch
  - luabugs7.patch
  - luabugs8.patch
  - luabugs9.patch</changelog>
  <changelog author="mcepl@suse.com" date="1683633600">- Experimenting with lua 5.4.6-rc1 (release 5.4.5 has been
  effectively withdrawn).</changelog>
  <changelog author="mcepl@suse.com" date="1684756800">- Final release of 5.4.6. No change in the changelog.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685361600">- Library is always liblua5_4-5: due to SOVERSION leading digit
  being 5</changelog>
  <changelog author="mcepl@suse.com" date="1699963200">- Add skip-tests_big-endian.patch to skip little-endian-only
  tests (bsc#1216930).</changelog>
  <changelog author="schwab@suse.de" date="1701950400">- execresult.patch: Inspect errno only after failure</changelog>
  <changelog author="gmbr3@opensuse.org" date="1721822400">- Update to version 5.4.7:
  * Fixed 11 bugs from 5.4.6
  * Tests now run on shared libraries
- Removed skip-tests_big-endian.patch: fixed upstream</changelog>
  <changelog author="mcepl@cepl.eu" date="1745409600">- Fix license: it is MIT, not GPL-3.0-or-later.</changelog>
</package>
<package pkgid="9820b53a93ca9f692641dd0e0f31e913bd74b0249fbcfdcaba3e3b26db99f2b3ad86a06d76e1c2ffbe4afb198432e52027cfd99fd098d6d89dc1d5c5f9bf6a27" name="liblvm2cmd2_03" arch="x86_64">
  <version epoch="0" ver="2.03.29" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1723550400">- lvm2-monitor.service fails to start (boo#1228854)
  + bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch</changelog>
  <changelog author="glass.su@suse.com" date="1725019200">- [SLFO] systemd 254 is missing reworked SYSTEMD_READY logic in device mapper udev rules (bsc#1229518)
  * update udev dependency version in lvm2.spec</changelog>
  <changelog author="glass.su@suse.com" date="1734350400">- Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29
  * ** WHATS_NEW from 2.03.24 to 2.03.29 ***
  Version 2.03.29 - 09th December 2024
  ====================================
    Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify.
    Allow test mode when lvmlockd is built without dlm support.
    Add a note about RAID + integrity synchronization to lvmraid(7) man page.
    Add a function for running lvconvert --repair on RAID LVs to lvmdbusd.
    Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}).
    Fix renaming of raid sub LVs when converting a volume to raid (2.03.28).
    Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize.
    Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27).
  Version 2.03.28 - 04th November 2024
  ====================================
    Use radix_tree to lookup for UUID within committed metadata.
    Use radix_tree to lookup LV list entry within VG struct.
    Introduce setting config/validate_metadata = full | none.
    Restore fs resize call for lvresize -r on the same size LV (2.03.17).
    Correct off-by-one devicesfile backup counting.
    Replace use of dm_hash with radix_tree for lv names and uuids.
    Refactor vg_validate with uniq_insert and better use of CPU caches.
    Add radix_tree_uniq_insert.
    Update DM cache when taking next VG lock instead of dropping it.
    Generate json string id only for json reporting.
    For vgsummary use new API call dm_config_parse_only_section().
    Use radix_tree for PV names mapping.
    Split check_lv_segment into separate _in/complete_vg variant.
    Use find_lv instead of find_lv_in_vg when possible.
    Do a mirror fixup only when mirrors with logs are imported.
    Add faster crc32 calculation from zlib code for x86_64.
    Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization.
  Version 2.03.27 - 02nd October 2024
  ===================================
    Fix swap device size detection using blkid for lvresize/lvreduce/lvextend.
    Detect GPT partition table and pass partition filter if no partitions defined.
    Add global/sanlock_align_size option to configure sanlock lease size.
    Disable mem locking when activation/reserved_stack or reserved_memory is 0.
    Fix locking issues in lvmlockd leaving thin pool locked.
    Deprecate vdo settings vdo_write_policy and vdo_write_policy.
    Lots of typo fixes across lvm2 code base (codespell).
    Corrected integrity parameter interleave_sectors for DM table line.
    Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10.
    Do not accept duplicate device names for pvcreate.
  Version 2.03.26 - 23rd August 2024
  ==================================
    Fix internal error reported by pvmove on a VG with single PV.
    Also accept --mknodes --refresh for vgscan.
    Fix vgmknodes --refresh to wait for udev before checking /dev content.
    Use log/report_command_log=1 config setting by default for JSON output format.
    Fix unreleased memory pools on RAID lvextend.
    Add --integritysettings option to manipulate dm-integrity settings.
  Version 2.03.25 - 12nd July 2024
  ================================
    Utilize more radix_tree instead of dm_hash and btree.
    Refactor DM uuid caching from device_mapper directory.
    Enhance checking for DM uuid device.
    Fix lvm shell command completion on tab key (2.03.24).
    Avoid lockd_vg call to lvmlockd for local VGs.
    Allow forced change of locktype from none.
    Handle OPTIONS defined in /etc/sysconfig/lvmlockd.
  * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 ***
  Version 1.02.203 - 09th December 2024
  =====================================
  Version 1.02.202 - 04th November 2024
  =====================================
    Introduce dm_config_parse_only_section to stop parsing after section.
    For shorter string use on stack buffers when generating sections.
    Enhance dm_config tokenizer.
  Version 1.02.201 - 02nd October 2024
  ====================================
    Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails.
    Improve error messages on failed udev cookie create/inc/dec operation.
  Version 1.02.200 - 23rd August 2024
  ===================================
  Version 1.02.199 - 12nd July 2024
  =================================
- update lvm2.spec
  - change lvm2_version to 2.03.29
  - change upstream_device_mapper_version and device_mapper_version to 1.02.203
  - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package
  - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd
  - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="glass.su@suse.com" date="1738756800">- thin-provisioning-tools 1.1.0 requires device-mapper-devel, this creates a cycle (boo#1236749)
  * update lvm2.spec
  - remove build require dependency thin-provisioning-tools from devicemapper
  - remove thin-provisioning-tools related configure options from devicemapper
  - remove a trivial empty line in extra_opts if default_use_devices_file=1</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1740657600">- fixing HA16.0 Product building issues for packages: lvm2-lockd, cluster-md, dlm, drbd (bsc#1237701)
  * update lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="19a02952f491db109a8929b944e060d98cf3ce0c5633d0464ec7dece0d15acc85081b05c20d7c073ad9c0eb8f3902fe9e2a00f64b32dc37d27b48ceec7e18d37" name="liblz1" arch="x86_64">
  <version epoch="0" ver="1.15" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1438862400">- Update to new upstream release 1.7
  * The fast encoder, which produces a compression speed and ratio
  comparable to those of gzip, has been ported from lzip.
  * The option "-0" has been ported from lzip to minilzip.
  * If all the data to be compressed are written in advance, lzlib
  will automatically adjust the header of the compressed data to
  use the smallest possible dictionary size. This feature reduces
  the amount of memory needed for decompression and allows minilzip
  to produce identical compressed output as lzip.</changelog>
  <changelog author="mpluskal@suse.com" date="1464696000">- Update to version 1.8:
  * decoder.c (LZd_verify_trailer): Removed test of final code.
  * main.c: Added new option '-a, --trailing-error'.
  * main.c (main): Delete '--output' file if infd is a terminal.
  * main.c (main): Don't use stdin more than once.
  * configure: Avoid warning on some shells when testing for gcc.
  * Makefile.in: Detect the existence of install-info.
  * testsuite/check.sh: A POSIX shell is required to run the tests.
  * testsuite/check.sh: Don't check error messages.
- Move info scriplet to preun</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 1.10:
  * LZ_compress_finish now adjusts dictionary size for each member.
  * lzlib.c (LZ_decompress_read): Detect corrupt header with HD=3.
  * main.c: Added new option '--loose-trailing'.
  * main.c (main): Option '-S, --volume-size' now keeps input files.
  * main.c: Replaced 'bits/byte' with inverse compression ratio.
  * main.c: Show final diagnostic when testing multiple files.
  * main.c: Do not add a second .lz extension to the arg of -o.
  * main.c: Show dictionary size at verbosity level 4 (-vvvv).
  * lzlib.texi: Added chapter 'Invoking minilzip'.
- Includes 1.9:
  * Compression time of option '-0' has been reduced by 3%.
  * Compression time of options -1 to -9 has been reduced by 1%.
  * Decompression time has been reduced by 3%.
  * main.c: Continue testing if any input file is a terminal.
  * License of the library changed to "2-clause BSD".
- partial cleanup with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1544788800">- Update to new upstream release 1.11~rc2
  * In case of decompression error caused by corrupt or truncated data,
    LZ_decompress_read now does not signal the error immediately
    to the application, but waits until all decoded bytes have
    been read. This allows tools like tarlz to recover as much
    data as possible from damaged members.</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Update License field as per SR 658030 review</changelog>
  <changelog author="jengelh@inai.de" date="1549454401">- Move to final release 1.11
  * No visible changes</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- Update to 1.12:
  * see included NEWS
  * The value of the version test macro 'LZ_API_VERSION' is now
    defined as 1000 * major + minor. For version 1.12 it is 1012.
  * The new function 'LZ_api_version', which returns the
    LZ_API_VERSION of the library object code being used, has
    been added to lzlib.
  * Decompression speed has been slightly increased.
  * The new option '--check-lib', which compares the version of
    lzlib used to compile minilzip with the version actually
    being used, has been added to minilzip.
  * Minilzip now reports an error if a file name is empty (minilzip -t "").
  * Option '-o, --output' now behaves like '-c, --stdout', but
    sending the output unconditionally to a file instead of to
    standard output. See the new description of '-o' in the
    manual. This change is not backwards compatible.
  * When using '-c' or '-o', minilzip now checks whether the
    output is a terminal only once.
  * The words 'decompressed' and 'compressed' have been replaced
    with the shorter 'out' and 'in' in the verbose output of
    minilzip when decompressing or testing.
  * It has been documented in the manual that
    'LZ_(de)compress_close' and 'LZ_(de)compress_errno' can be
    called with a null argument.
  * Bugfixes, documentation updates.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 1.13:
  * The variables AR and ARFLAGS can now be set from configure.
  * In case of error in a numerical argument to a command line option, minilzip
    now shows the name of the option and the range of valid values.
  * 'minilzip --check-lib' now checks that LZ_API_VERSION and LZ_version_string
    match.
  * Several descriptions have been improved in manual, '--help', and man page.
  * The texinfo category of the manual has been changed from 'Data Compression'
    to 'Compression' to match that of gzip.</changelog>
  <changelog author="jengelh@inai.de" date="1707393600">- Update to release 1.14
  * The option -o/--output of minilzip now preserves dates,
    permissions, and ownership of the file when (de)compressing
    exactly one file.</changelog>
  <changelog author="jengelh@inai.de" date="1737288000">- Update to release 1.15
  * Lzlib now reports a nonzero first LZMA byte as a
    LZ_data_error.
  * LZ_Errno, LZ_Encoder, and LZ_Decoder are now declared in
    lzlib.h as typedef.</changelog>
</package>
<package pkgid="d0d9515d06bff687ffe4c4ab7174d8c04f6538c34fba1e04557c09677aa83c5ba3a8ee7e7a71f24f0893530abd78bcb8482321933961ec3c37a77ac67a7f5970" name="liblz4-1" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="160000.3.1"/>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="jengelh@inai.de" date="1605528000">- Update to release 1.9.3
  * api: LZ4_decompress_safe_partial() now supports unknown
    compressed size
  * api: improved LZ4F_compressBound() with automatic flushing
  * cli: multiple files are compressed now using the legacy format</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version 1.9.3 fixes also CVE-2021-3520 [bsc#1185438]</changelog>
  <changelog author="jengelh@inai.de" date="1660651200">- Update to release 1.9.4
  * Decompression speed on high-end ARM64 platform is improved,
    by ~+20%.
  * For the specific scenario of data compressed with -BD4
    setting (small blocks, &lt;= 64 KB, linked) decompressed
    block-by-block into a flush buffer (like lz4 CLI does),
    decompression speed is improved ~+70%.
  * For compressed data employing the lz4frame format (native
    format of lz4 CLI), it's possible to ignore checksum
    validation during decompression, resulting in speed
    improvements of ~+40% . This capability is exposed at both
    CLI (see --no-crc) and library levels.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="jengelh@inai.de" date="1721649600">- Update to release 1.10.0
  * Support for multithreading
  * Full support for dictionary compression
  * New compression level 2</changelog>
  <changelog author="code@bnavigator.de" date="1723636800">- Switch to cmake build system: Creates extra cmake modules for
  consuming projects</changelog>
  <changelog author="pgajdos@suse.com" date="1761739200">- security update
- added patches
  CVE-2025-62813 [bsc#1252557], incorrect error handling when passing
  a NULL pointer to lz4frame functions allows for application crash
  when processing untrusted LZ4 frames
  * lz4-CVE-2025-62813.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- CVE-2025-62813 was rejected [bsc#1252557]
- deleted patches
  * lz4-CVE-2025-62813.patch</changelog>
</package>
<package pkgid="273e800914a50d4b7be5696c5540743fce57aa38ef67b472fd9487d5defc2c8f955748d96402328ab18a9852ee24871059c42671cac85b788b5d185208e8694d" name="liblzma5" arch="x86_64">
  <version epoch="0" ver="5.8.1" rel="160000.2.2"/>
  <changelog author="andrea.manzini@suse.com" date="1699358400">- Update to version 5.4.5:
  * liblzma:
  - Fixed an assertion failure that could be triggered by a large
    unpadded_size argument. It was verified that there was no
    other bug than the assertion failure.
  - Fixed a bug that prevented building with Windows Vista
    threading when __attribute__((__constructor__)) is not
    supported.
  * xz now properly handles special files such as "con" or "nul" on
    Windows. Before this fix, the following wrote "foo" to the
    console and deleted the input file "con_xz":
    echo foo | xz &gt; con_xz
    xz --suffix=_xz --decompress con_xz
  * Small fixes and improvements to the tests.
  * Updated translations: Chinese (simplified) and Esperanto.</changelog>
  <changelog author="dmueller@suse.com" date="1706443200">- update to 5.4.6:
  * Fixed a bug involving internal function pointers in liblzma
    not being initialized to NULL. The bug can only be
    triggered if lzma_filters_update() is called on a LZMA1
    encoder, so it does not affect xz or any application known
    to us that uses liblzma.
  * Fixed a regression introduced in 5.4.2 that caused
    encoding in the raw format to unnecessarily fail if --suffix
    was not used. For instance, the following command no longer
    reports that --suffix must be used:
    echo foo | xz --format=raw --lzma2 | wc -c
  * Fixed an issue on MinGW-w64 builds that prevented
    reading from or writing to non-terminal character devices
    like NUL.
  * Added a new test.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Build static library on SLE</changelog>
  <changelog author="dmueller@suse.com" date="1711627200">- restore a bigger version number so that update works</changelog>
  <changelog author="dcermak@suse.com" date="1712232000">- Switch to using tar_scm for fetching the sources as the upstream
  tarballs on github are gone
- introduce _multibuild to allow building the translations outside
  of Ring0 and everything else in Ring0
- add rpmlintrc to silence harmless warnings</changelog>
  <changelog author="dmueller@suse.com" date="1712923200">- revert the switch to tar_scm which dropped the signature
  validation
- switch back to tarballs because the upstream tarballs are not
  gone
- reinstanciate keyring from Lasse
- go back to the last release signed by Lasse (5.4.2)
- revert multibuild, drop service and rpmlintrc
- use real_ver for the Source, move everything else back to
  %version like before the hectic XZ downgrade
- remove payload setting, we are using zstd now</changelog>
  <changelog author="info@paolostivanin.com" date="1717070400">- Update to 5.6.2:
  * Remove the backdoor (CVE-2024-3094).
  * Not changed: Memory sanitizer (MSAN) has a false positive
    in the CRC CLMUL code which also makes OSS Fuzz unhappy.
    Valgrind is smarter and doesn't complain.
    A revision to the CLMUL code is coming anyway and this issue
    will be cleaned up as part of it. It won't be backported to
    5.6.x or 5.4.x because the old code isn't wrong. There is
    no reason to risk introducing regressions in old branches
    just to silence a false positive.
  * liblzma:
  - lzma_index_decoder() and lzma_index_buffer_decode(): Fix
    a missing output pointer initialization (*i = NULL) if the
    functions are called with invalid arguments. The API docs
    say that such an initialization is always done. In practice
    this matters very little because the problem can only occur
    if the calling application has a bug and these functions
    return LZMA_PROG_ERROR.
  - lzma_str_to_filters(): Fix a missing output pointer
    initialization (*error_pos = 0). This is very similar
    to the fix above.
  - Fix C standard conformance with function pointer types.
  - Remove GNU indirect function (IFUNC) support. This is *NOT*
    done for security reasons even though the backdoor relied on
    this code. The performance benefits of IFUNC are too tiny in
    this project to make the extra complexity worth it.
  - FreeBSD on ARM64: Add error checking to CRC32 instruction
    support detection.
  - Fix building with NVIDIA HPC SDK.
  * xz:
  - Fix a C standard conformance issue in --block-list parsing
    (arithmetic on a null pointer).
  - Fix a warning from GNU groff when processing the man page:
    "warning: cannot select font 'CW'"
  * xzdec: Add support for Linux Landlock ABI version 4. xz already
    had the v3-to-v4 change but it had been forgotten from xzdec.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1728302400">- Update to 5.6.3:
  * liblzma:
  - Fix x86-64 inline assembly compatibility with GNU Binutils
    older than 2.27.
  - Fix the build with GCC 4.2 on OpenBSD/sparc64.
  * xzdec: Display an error instead of failing silently if the
    unsupported option -M is specified.
  * lzmainfo: Fix integer overflows when rounding the dictionary and
    uncompressed sizes to the nearest mebibyte.
  * Autotools-based build:
  - Fix feature checks with link-time optimization (-flto).
  - Solaris: Fix a compatibility issue in version.sh. It matters
    if one wants to regenerate configure by running autoconf.
  * CMake:
  - Use paths relative to ${prefix} in liblzma.pc when possible.
    This is done only with CMake &gt;= 3.20.
  - Prefer a C11 compiler over a C99 compiler but accept both.
  - Link Threads::Threads against liblzma using PRIVATE so that
  - pthread and such flags won't unnecessarily get included in
    the usage requirements of shared liblzma. That is,
    target_link_libraries(foo PRIVATE liblzma::liblzma) no
    longer adds -pthread if using POSIX threads and linking
    against shared liblzma. The threading flags are still added
    if linking against static liblzma.
  * Updated translations: Catalan, Chinese (simplified), and
    Brazilian Portuguese.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1738497600">- update to 5.6.4:
  * liblzma: Fix LZMA/LZMA2 encoder on big endian ARM64.
  * xz: Fix --filters= and --filters1= ... --filters9= options
    parsing. They require an argument, thus "xz --filters lzma2"
    should work in addition to "xz --filters=lzma2".
  * Updates to documentation, translations, build system files
- package license files in all packages</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1743681600">- Update to 5.8.1:
  * Multithreaded .xz decoder (lzma_stream_decoder_mt()):
  - Fix a bug that could at least result in a crash with
    invalid input. (bsc#1240414, CVE-2025-31115)
  - Fix a performance bug: Only one thread was used if the whole
    input file was provided at once to lzma_code(), the output
    buffer was big enough, timeout was disabled, and LZMA_FINISH
    was used. There are no bug reports about this, thus it's
    possible that no real-world application was affected.
  * Avoid &lt;stdalign.h&gt; even with C11/C17 compilers. This fixes the
    build with Oracle Developer Studio 12.6 on Solaris 10 when the
    compiler is in C11 mode (the header doesn't exist).
  * Autotools: Restore compatibility with GNU make versions older
    than 4.0 by creating the package using GNU gettext 0.23.1
    infrastructure instead of 0.24.
  * Update Croatian translation.
- 5.8.0 changelog:
  * liblzma on 32/64-bit x86: When possible, use SSE2 intrinsics
    instead of memcpy() in the LZMA/LZMA2 decoder. In typical cases,
    this may reduce decompression time by 0-5 %. However, when built
    against musl libc, over 15 % time reduction was observed with
    highly compressed files.
  * CMake: Make the feature test macros match the Autotools-based
    build on NetBSD, Darwin, and mingw-w64.
  * Update the Croatian, Italian, Portuguese, and Romanian
    translations.
  * Update the German, Italian, Korean, Romanian, Serbian, and
    Ukrainian man page translations.
- Summary of changes in the 5.7.x development releases:
  * Mark the following LZMA Utils script aliases as deprecated:
    lzcmp, lzdiff, lzless, lzmore, lzgrep, lzegrep, and lzfgrep.
  * liblzma:
  - Improve LZMA/LZMA2 encoder speed on 64-bit PowerPC (both
    endiannesses) and those 64-bit RISC-V processors that
    support fast unaligned access.
  - Add low-level APIs for RISC-V, ARM64, and x86 BCJ filters
    to lzma/bcj.h. These are primarily for erofs-utils.
  - x86/x86-64/E2K CLMUL CRC code was rewritten.
  - Use the CRC32 instructions on LoongArch.
  * xz:
  - Synchronize the output file and its directory using fsync()
    before deleting the input file. No syncing is done when xz
    isn't going to delete the input file.
  - Add --no-sync to disable the sync-before-delete behavior.
  - Make --single-stream imply --keep.
  * xz, xzdec, lzmainfo: When printing messages, replace
    non-printable characters with question marks.
  * xz and xzdec on Linux: Support Landlock ABI versions 5 and 6.
  * CMake: Revise the configuration variables and some of their
    options, and document them in the file INSTALL. CMake support
    is no longer experimental. (It was already not experimental
    when building for native Windows.)
  * Add build-aux/license-check.sh.</changelog>
</package>
<package pkgid="07cd6d84a046ec903afd8276500985df11d775783f50bc68912206aed382809842e47355fa4e824936717989f176e8f6a392ac7c7464c1623842448bba395f31" name="liblzo2-2" arch="x86_64">
  <version epoch="0" ver="2.10" rel="160000.3.2"/>
  <changelog author="dsterba@suse.cz" date="1490788800">- Update to 2.10
  * Improve CMake build support.
  * Add support for pkg-config.
  * Do not redefine "snprintf" so that the examples build with MSVC 2015.
  * Assorted cleanups.</changelog>
  <changelog author="dimstar@opensuse.org" date="1510660800">- Add pkgconfig BuildRequires: allow the rpm dep generator to
  inspect the shipped .pc file and produce requires/provides.</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Modernise spec file with spec-cleaner
- Move license to subpackage that will allways be installed</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Fix RPM groups.
- Trim sentence that has no comparison point.</changelog>
  <changelog author="mliska@suse.cz" date="1556280000">- Use FAT LTO objects in order to provide proper static library (boo#1133259).</changelog>
  <changelog author="mliska@suse.cz" date="1574251200">- Disable strict aliasing due to its violation
  (boo#1157271).</changelog>
  <changelog author="dmueller@suse.com" date="1611662400">- add lzo-2.08-rhbz1309225.patch to avoid aliasing issues</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dmueller@suse.com" date="1679054400">- adjust lzo-2.08-rhbz1309225.patch download reference</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
</package>
<package pkgid="f7b9b3c98d8766a8a798efaad72b1325c17ec87b69c03a392adadfb549b2af25ca5c4c3c53155f078cf8b42dd964531b8229694d870e2d66ada7ffacb68cab52" name="libmagic1" arch="x86_64">
  <version epoch="0" ver="5.46" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1690545600">- On 32bit systems define _TIME_BITS=64 to make it build</changelog>
  <changelog author="werner@suse.de" date="1690804800">- Add patch file-5.45-type_t.dif
  * Partly upstream check of type_t is wide on 32bit systems
  * Extend (auto)configure to enable wide type_t type if possible</changelog>
  <changelog author="werner@suse.de" date="1708948800">- Prepare for RPM 4.20</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1730980800">- file-seccomp.patch: glibc uses getrandom in malloc, rseq and prctl
  in various other places, allow these syscalls in seccomp filter.</changelog>
  <changelog author="werner@suse.de" date="1732795200">- Update to 5.46:
  * Add OFFPOSITIVE
  * avoid leaking symbols in libmagic
  * PR/562: jsummers: Search/regex offsets are absolute to the
    beginning of the file, so adjust them by subtracting the
    offset that the "use" starts so that we don't double-count it.
  * PR/543: matshch: bump nbuf so we can get the flags into the buffer.
  * Add Android elf notes (enh)
  * Add limit for number of magic warnings allowed
  * check regex bounds (found by clusterfuzz)
- Remove patch file-5.45-type_t.dif now upstream
- Port patches
  * file-4.24-autoconf.dif
  * file-5.17-option.dif
  * file-5.18-javacheck.dif
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.19-zip2.0.dif
  * file-5.22-elf.dif
  * file-5.28-btrfs-image.dif
  * file-5.45-type_t.dif
  * file-secure_getenv.patch
- Port patch file-5.45.dif and rename it to file-5.46.dif
  * Note that our kernel magics do not fit anymore as
    upstream now has a huge rework and extended features</changelog>
  <changelog author="werner@suse.de" date="1740139200">- Add patch boo1237209.patch temporary
  * Fix stack overrun (boo#1237209)</changelog>
  <changelog author="werner@suse.de" date="1742299200">- Add patch file-seccomp-ppc.patch
  * Minimal patch to work around of wrong provide of used TCGETS</changelog>
  <changelog author="werner@suse.de" date="1742385600">- Change patch file-seccomp.patch
  * Remove the dumb prctl allow rule as for glibc malloc the prctl
    PR_SET_VMA with flag PR_SET_VMA_ANON_NAME is already allowed
- Require at build zlib-devel to enable direct uncompresion of
  zip'ed files as well</changelog>
  <changelog author="werner@suse.de" date="1742990400">- baselibs.conf: drop it</changelog>
  <changelog author="munix9@googlemail.com" date="1748174400">- Add file-zipdata.patch
  * Fix "Some zip files are misclassified as data"
    see https://bugs.astron.com/view.php?id=571
    based on https://github.com/file/file/commit/60b2032b96fc185b37fb0f2152e834efb2edad6e</changelog>
</package>
<package pkgid="d44e06e395514bca501c9cce1a6233fde2eeda9fbc55f2b4ae1bc505ae0fc44f11f91da5282c15831374aba2a095a613d1664ec88c564c3dbeaea2e0e6d361be" name="libmana1" arch="x86_64">
  <version epoch="0" ver="56.1" rel="160000.2.2"/>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="nicolas.morey@suse.com" date="1739966400">- Update to rdma-core v56.0 (jsc#PED11323)
  - No release notes available</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743681600">- Update to rdma-core v56.1 (jsc#PED-11289, jsc#PED-11323)
  - Bug fixes for all providers</changelog>
</package>
<package pkgid="a1fd4335549ecbb01e6a6d41f9c09de80814655b0958b2f9bfd5bd52ae1acb9b6de43ca8b749e45729ef16f6694d93c5aab18560d6a399598bd411971e82e9e4" name="libmbim" arch="x86_64">
  <version epoch="0" ver="1.30.0" rel="160000.2.2"/>
  <changelog author="mardnh@gmx.de" date="1579089600">- Update to version 1.22.0
  + libmbim-glib: Message parsing logic improved to avoid reading
    fields out of bounds, e.g. if the messages sent by the modem
    are malformed or not in line with the specs.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="mardnh@gmx.de" date="1592568000">- Update to version 1.24
  * Build now requires GLib/GObject/GIO 2.48.
  * Added new GObject Introspection support in the library, that
    can be explicitly requested during configure with
  - -enable-introspection=yes. With the new introspection support,
    the libmbim-glib library can now be used directly from e.g.
    python programs, as in the example included with the release.
  * Added release version information to all the types and methods
    of the public library API, and added new per-version indices
    in the documentation.
  * Added g_autoptr() support to all public types.
  * Several other minor improvements and fixes.
- Introduce subpackage for Introspection bindings</changelog>
  <changelog author="dimstar@opensuse.org" date="1597838400">- Upate to version 1.24.2:
  + libmbim-glib:
  - Fixed several issues in the logic that merges the service
    subscribe list.
  - Improved message reading logic to skip malformed MBIM
    messages (e.g. AT URCs emitted wrongly in the MBIM port by
    some Cinterion modules).</changelog>
  <changelog author="mardnh@gmx.de" date="1601640000">- Update to version 1.24.4:
  * libmbim-glib,device:
    + Added new mbim_device_get_transaction_id() to retrieve the
    transaction id currently being used.
  * libmbim-glib,proxy:
    + Fixed the transaction id used in fragments of the same
    request.
    + Avoid creating device context when it's already being
    untracked.
    + Fixed double GError free.
  * mbimcli:
    + Fixed missing EOL in error string when closing device.</changelog>
  <changelog author="mardnh@gmx.de" date="1611316800">- Update to version 1.24.6:
  * libmbim-glib,device:
    + Fixed a GSource use after free.
    + Avoid g_file_test() on NULL path.
    + Don't warn if descriptors file cannot be read.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- Update to version 1.26.2:
  + The GUdev optional build/runtime requirement is now fully
    dropped, it's no longer used.
  + Implemented new link management operations, exclusively for the
    cdc_mbim driver for now. These new operations allow creating or
    deleting VLAN network interfaces in order to run multiplexed
    data sessions over one single physical network interface.
  + Added support for the Microsoft-defined SAR service, including
    the following operations:
  - MBIM_CID_MS_SAR_CONFIG
  - MBIM_CID_MS_SAR_TRANSMISSION_STATUS
  + libmbim-glib:
  - Logic updated to make sure full packets are written at once,
    instead of writing them in chunks.
  - Updated the "LTE attach status" APIs in order to avoid
    creating unneeded struct types in the interface. The older
    methods have been deprecated and maintained in the library
    for compatibility purposes only.
  + Bugfixes.
- Drop pkgconfig(gudev-1.0) BuildRequires: no longer used.</changelog>
  <changelog author="dmueller@suse.com" date="1653825600">- update to 1.26.4:
  * meson: force building doc on normal builds, not only during install.
  * meson: fix 'export_packages' in GIR setup.
  * compat: deprecate the MbimLteAttachStatus type.
  * net-port-manager: use unaligned netlink attribute length.
  * include MBIM proxy control service in docs.
  * codegen: add section doc for each service.
  * utils: add missing short description in section.
  * compat: add missing MbimLteAttachStatus doc.
  * device: add missing mbim_device_list_links() doc.
  * device: fix MbimDevice 'device-in-session' property doc.
  * version: add missing MBIM_CHECK_VERSION() documentation.
  * device: fix wrong reference to QmiDevice
  * Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.28.4:
  + libmbim-glib:
  - Fixed context type conversions to consider all possible APN
    types.
  - Duplicate UTF-16 strings during processing to avoid alignment
    issues.
- Changes from version 1.28.2:
  + libmbim-glib: fixed validation of complete fragments to avoid
    reading out of bounds.
  + mbim-proxy: added --verbose-full flag to allow printing logs
    with personal info included.
- Changes from version 1.28:
  + This version includes support for most operations in MBIM
    Extensions v2 (for 5G NSA) and v3 (for 5G SA). The enabling of
    the updated extensions requires the user of the library to
    explicitly request what version wants to be used, via the new
    'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V2' or
    'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V3' flags in the device open
    request. Please note that if one process enables the v2 or v3
    support, it will apply to operations done by other processes as
    well. When using the proxy, the current version support is
    propagated to all clients of the proxy automatically.
  + The verbose message logging will now by default hide all fields
    that are considered personal information. Extended message
    logging including all field contents should be explicitly
    requested.
  + Build:
  - The GNU autotools (autoconf/automake/libtool) support has
    been fully removed, this release requires the use of the
    meson build system.
  - The 'instrospection' meson option is now a boolean.
  - New boolean 'man' meson option to allow disabling the man
    page generation.
  + Extended the Basic Connect service, including the following
    operations:
  - MBIM_CID_BASIC_CONNECT_REGISTER_STATE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_SIGNAL_STATE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_SUBCRIBER_READY_STATUS (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_CONNECT (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_IP_PACKET_FILTERS (MBIMEx v3.0)
  + Extended the Microsoft-defined Basic Connect Extensions
    service, including the following operations:
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LOCATION_INFO_STATUS
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_PROVISIONED_CONTEXTS
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_VERSION (MBIMEx v2.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_DEVICE_CAPS
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_MODEM_CONFIGURATION
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_REGISTRATION_PARAMETERS
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LTE_ATTACH_INFO
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_WAKE_REASON
    (MBIMEx v3.0)
  + Extended the Microsoft-defined UICC Low Level Access service,
    including the following operations:
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_APPLICATION_LIST
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_FILE_STATUS
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_BINARY
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_RECORD
  + New Microsoft-defined Voice Extensions service, including the
    following operations: MBIM_CID_MS_VOICE_EXTENSIONS_NITZ
  + Extended the Intel-defined Firmware Update service, including
    the following operations:
    MBIM_CID_INTEL_FIRMWARE_UPDATE_MODEM_REBOOT (MBIMEx v2.0)
  + New Intel-defined Thermal RF service, including the following
    operations: MBIM_CID_INTEL_THERMAL_RF_RFIM
  + Extended the QDU service, including the following operations:
  - MBIM_CID_QDU_QUECTEL_REBOOT
  - MBIM_CID_QDU_QUECTEL_READ_VERSION
  + libmbim-glib:
  - Updated the net link operations to support devices exposed by
    the wwan subsystem.
  - New mbim_message_get_printable_full() method to print the
    contents of a given message specifying the specific MBIMEx
    version in use.
  - New mbim_message_validate() method to validate the contents
    of the headers in a MBIM message, to be used before accessing
    its contents.
  - Updated all MbimMessage getters so that an implicit
    validation is done in the g_return_* macros. This validation
    will not be done if those macros are disabled during build.
  - New MBIM_DEVICE_CONSECUTIVE_TIMEOUTS signal in the MbimDevice
    to report the number of consecutive MBIM request timeouts
    detected.
  - New mbim_device_[get|set|check]_ms_mbimex_version() methods
    to manage the MBIMEx version support in the MbimDevice.
  - New MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_[V2|V3] flags in
    mbim_device_open_full() to allow enabling MBIMEx v2.0 or v3.0
    support.
  - New MbimTlv type to support the variable-sized fields in
    MBIMEx v3.0 operations.
  - Ensure CLOSED state always in mbim_device_close(), even on
    error.
  - Disallow device close if an open operation is ongoing.
  - Extended MbimDataClass with 5G NSA/SA values, used in MBIMEx
    v2.0, and added new MbimDataClassV3 and MbimDataSubclass
    types, used in MBIMEX v3.0.
  - Extended MbimCtrlCaps and MbimSubscriberReadyState with
    values reported in MBIMEX v3.0 extensions.
  - New MbimWakeType, MbimAccessMediaType,
    MbimModemConfigurationStatus, MbimFrequencyRange,
    MbimContextRoamingControl, MbimContextMediaType,
    MbimContextState, MbimContextOperation, MbimMicoMode,
    MbimLadnInfo, MbimDefaultPduActivationHint, MbimDrxCycle,
    MbimSubscriberReadyStatusFlag enums used in MBIMEx v3.0
    specific operations.
  - New MbimUiccApplicationType, MbimUiccFileAccessibility,
    MbimUiccFileType and MbimUiccFileStructure enums, used in the
    MS UICC Low Level Access service.
  - New MbimIntelServingCellInfo enum, used in the Intel Thermal
    RF service.
  - New MbimIntelBootMode enum, used in the Intel Firmware Update
    service.
  - New MbimQduQuectelRebootType and MbimQduQuectelVersionType
    enums used in the Quectel-defined QDU service updates.
  - Extended the list of MbimNwError values with values from the
    3GPP specs.
  - Deprecated MBIM_NW_ERROR_UNKNOWN, use NONE instead.
  - Deprecated
    MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_NETWORK_BLACKLIST, use
    NETWORK_DENYLIST instead.
  - Fixed the public format for CDMA language in the SMS service.
  + mbimcli:
  - New '--device-open-ms-mbimex-v2' option to request to enable
    MBIMEX v2.0 support.
  - New '--device-open-ms-mbimex-v3' option to request to enable
    MBIMEX v3.0support.
  - New '--verbose-full' option to request enabling logs that
    include personal information.
  - New '--set-ip-packet-filters' action.
  - New '--set-provisioned-contexts' action.
  - New '--set-signal-state' action.
  - New '--set-network-idle-hint' action.
  - New '--query-network-idle-hint' action.
  - New '--set-emergency-mode' action.
  - New '--query-emergency-mode' action.
  - New '--set-service-activation' action.
  - New '--ms-query-location-info-status' action.
  - New '--ms-query-provisioned-contexts' action.
  - New '--ms-set-provisioned-contexts' action.
  - New '--ms-query-base-stations' action
  - New '--ms-query-version' action.
  - New '--ms-query-registration-parameters' action.
  - New '--ms-set-registration-parameters' action.
  - New '--ms-query-modem-configuration' action.
  - New '--ms-query-wake-reason' action.
  - New '--ms-query-uicc-application-list' action.
  - New '--ms-query-uicc-file-status' action.
  - New '--ms-query-uicc-read-binary' action.
  - New '--ms-query-uicc-read-record' action.
  - New '--ms-set-uicc-open-channel' action.
  - New '--ms-set-uicc-close-channel' action.
  - New '--ms-query-uicc-atr' action.
  - New '--ms-set-uicc-apdu' action.
  - New '--ms-set-uicc-reset' action.
  - New '--ms-query-uicc-reset' action.
  - New '--ms-set-uicc-terminal-capability' action.
  - New '--ms-query-uicc-terminal-capability' action.
  - New '--ms-query-nitz' action.
  - New '--intel-query-rfim' action.
  - New '--intel-set-rfim' action.
  - Updated '--connect' action to deprecate 'apn' and prefer
    'access-string'.
  - Updated '--connect' action to support 'compression' and
    'context-type'.
  - Updated '--intel-modem-reboot' action to optionally receive
    the boot mode type argument.
  - Fixed the Quectel specific operations so that they have the
  - -quectel prefix and do not overwrite the ones in the Basic
    Connect service.
  + Several other improvements and fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Update URL and Source to new home.
- New dependencies: help2man
- Replace bash-comletion with pkgconfig(bash-completion)
  BuildRequires, meson checks for it. Update Supplements to current
  standard.
- Drop sed call to fix python env, already set to python3 upstream.
- Update Licenses, drop COPYING.LIB and COPYING, now named
  LICENSES.
- Use ldconfig_scriptlets macro.
- Build mbimcli-bash-completion as noarch.
- Add patches from upstream:
  + 0001-intel-mutual-authentication-new-service-fcc-lock.patch
  + 0002-intel-tools-new-service-trace-config.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727092800">- Update to version 1.30.0:
  + New Intel Mutual Authentication service
  + New Intel Tools service
  + New Google service
  + Extended the Microsoft-defined Basic Connect Extensions service
- Drop patches included upstream:
  + 0001-intel-mutual-authentication-new-service-fcc-lock.patch
  + 0002-intel-tools-new-service-trace-config.patch</changelog>
</package>
<package pkgid="f8a0da8aaa088034e7be95f4caf3e2ee94572f6241d4188db52668fc84a5ac32ba4d8fe69f9e22b639adeb3da044f1569c12f8564ae970b69611718a7d294438" name="libmbim-glib4" arch="x86_64">
  <version epoch="0" ver="1.30.0" rel="160000.2.2"/>
  <changelog author="mardnh@gmx.de" date="1579089600">- Update to version 1.22.0
  + libmbim-glib: Message parsing logic improved to avoid reading
    fields out of bounds, e.g. if the messages sent by the modem
    are malformed or not in line with the specs.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="mardnh@gmx.de" date="1592568000">- Update to version 1.24
  * Build now requires GLib/GObject/GIO 2.48.
  * Added new GObject Introspection support in the library, that
    can be explicitly requested during configure with
  - -enable-introspection=yes. With the new introspection support,
    the libmbim-glib library can now be used directly from e.g.
    python programs, as in the example included with the release.
  * Added release version information to all the types and methods
    of the public library API, and added new per-version indices
    in the documentation.
  * Added g_autoptr() support to all public types.
  * Several other minor improvements and fixes.
- Introduce subpackage for Introspection bindings</changelog>
  <changelog author="dimstar@opensuse.org" date="1597838400">- Upate to version 1.24.2:
  + libmbim-glib:
  - Fixed several issues in the logic that merges the service
    subscribe list.
  - Improved message reading logic to skip malformed MBIM
    messages (e.g. AT URCs emitted wrongly in the MBIM port by
    some Cinterion modules).</changelog>
  <changelog author="mardnh@gmx.de" date="1601640000">- Update to version 1.24.4:
  * libmbim-glib,device:
    + Added new mbim_device_get_transaction_id() to retrieve the
    transaction id currently being used.
  * libmbim-glib,proxy:
    + Fixed the transaction id used in fragments of the same
    request.
    + Avoid creating device context when it's already being
    untracked.
    + Fixed double GError free.
  * mbimcli:
    + Fixed missing EOL in error string when closing device.</changelog>
  <changelog author="mardnh@gmx.de" date="1611316800">- Update to version 1.24.6:
  * libmbim-glib,device:
    + Fixed a GSource use after free.
    + Avoid g_file_test() on NULL path.
    + Don't warn if descriptors file cannot be read.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- Update to version 1.26.2:
  + The GUdev optional build/runtime requirement is now fully
    dropped, it's no longer used.
  + Implemented new link management operations, exclusively for the
    cdc_mbim driver for now. These new operations allow creating or
    deleting VLAN network interfaces in order to run multiplexed
    data sessions over one single physical network interface.
  + Added support for the Microsoft-defined SAR service, including
    the following operations:
  - MBIM_CID_MS_SAR_CONFIG
  - MBIM_CID_MS_SAR_TRANSMISSION_STATUS
  + libmbim-glib:
  - Logic updated to make sure full packets are written at once,
    instead of writing them in chunks.
  - Updated the "LTE attach status" APIs in order to avoid
    creating unneeded struct types in the interface. The older
    methods have been deprecated and maintained in the library
    for compatibility purposes only.
  + Bugfixes.
- Drop pkgconfig(gudev-1.0) BuildRequires: no longer used.</changelog>
  <changelog author="dmueller@suse.com" date="1653825600">- update to 1.26.4:
  * meson: force building doc on normal builds, not only during install.
  * meson: fix 'export_packages' in GIR setup.
  * compat: deprecate the MbimLteAttachStatus type.
  * net-port-manager: use unaligned netlink attribute length.
  * include MBIM proxy control service in docs.
  * codegen: add section doc for each service.
  * utils: add missing short description in section.
  * compat: add missing MbimLteAttachStatus doc.
  * device: add missing mbim_device_list_links() doc.
  * device: fix MbimDevice 'device-in-session' property doc.
  * version: add missing MBIM_CHECK_VERSION() documentation.
  * device: fix wrong reference to QmiDevice
  * Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.28.4:
  + libmbim-glib:
  - Fixed context type conversions to consider all possible APN
    types.
  - Duplicate UTF-16 strings during processing to avoid alignment
    issues.
- Changes from version 1.28.2:
  + libmbim-glib: fixed validation of complete fragments to avoid
    reading out of bounds.
  + mbim-proxy: added --verbose-full flag to allow printing logs
    with personal info included.
- Changes from version 1.28:
  + This version includes support for most operations in MBIM
    Extensions v2 (for 5G NSA) and v3 (for 5G SA). The enabling of
    the updated extensions requires the user of the library to
    explicitly request what version wants to be used, via the new
    'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V2' or
    'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V3' flags in the device open
    request. Please note that if one process enables the v2 or v3
    support, it will apply to operations done by other processes as
    well. When using the proxy, the current version support is
    propagated to all clients of the proxy automatically.
  + The verbose message logging will now by default hide all fields
    that are considered personal information. Extended message
    logging including all field contents should be explicitly
    requested.
  + Build:
  - The GNU autotools (autoconf/automake/libtool) support has
    been fully removed, this release requires the use of the
    meson build system.
  - The 'instrospection' meson option is now a boolean.
  - New boolean 'man' meson option to allow disabling the man
    page generation.
  + Extended the Basic Connect service, including the following
    operations:
  - MBIM_CID_BASIC_CONNECT_REGISTER_STATE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_SIGNAL_STATE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_SUBCRIBER_READY_STATUS (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_CONNECT (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_IP_PACKET_FILTERS (MBIMEx v3.0)
  + Extended the Microsoft-defined Basic Connect Extensions
    service, including the following operations:
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LOCATION_INFO_STATUS
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_PROVISIONED_CONTEXTS
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_VERSION (MBIMEx v2.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_DEVICE_CAPS
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_MODEM_CONFIGURATION
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_REGISTRATION_PARAMETERS
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LTE_ATTACH_INFO
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_WAKE_REASON
    (MBIMEx v3.0)
  + Extended the Microsoft-defined UICC Low Level Access service,
    including the following operations:
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_APPLICATION_LIST
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_FILE_STATUS
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_BINARY
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_RECORD
  + New Microsoft-defined Voice Extensions service, including the
    following operations: MBIM_CID_MS_VOICE_EXTENSIONS_NITZ
  + Extended the Intel-defined Firmware Update service, including
    the following operations:
    MBIM_CID_INTEL_FIRMWARE_UPDATE_MODEM_REBOOT (MBIMEx v2.0)
  + New Intel-defined Thermal RF service, including the following
    operations: MBIM_CID_INTEL_THERMAL_RF_RFIM
  + Extended the QDU service, including the following operations:
  - MBIM_CID_QDU_QUECTEL_REBOOT
  - MBIM_CID_QDU_QUECTEL_READ_VERSION
  + libmbim-glib:
  - Updated the net link operations to support devices exposed by
    the wwan subsystem.
  - New mbim_message_get_printable_full() method to print the
    contents of a given message specifying the specific MBIMEx
    version in use.
  - New mbim_message_validate() method to validate the contents
    of the headers in a MBIM message, to be used before accessing
    its contents.
  - Updated all MbimMessage getters so that an implicit
    validation is done in the g_return_* macros. This validation
    will not be done if those macros are disabled during build.
  - New MBIM_DEVICE_CONSECUTIVE_TIMEOUTS signal in the MbimDevice
    to report the number of consecutive MBIM request timeouts
    detected.
  - New mbim_device_[get|set|check]_ms_mbimex_version() methods
    to manage the MBIMEx version support in the MbimDevice.
  - New MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_[V2|V3] flags in
    mbim_device_open_full() to allow enabling MBIMEx v2.0 or v3.0
    support.
  - New MbimTlv type to support the variable-sized fields in
    MBIMEx v3.0 operations.
  - Ensure CLOSED state always in mbim_device_close(), even on
    error.
  - Disallow device close if an open operation is ongoing.
  - Extended MbimDataClass with 5G NSA/SA values, used in MBIMEx
    v2.0, and added new MbimDataClassV3 and MbimDataSubclass
    types, used in MBIMEX v3.0.
  - Extended MbimCtrlCaps and MbimSubscriberReadyState with
    values reported in MBIMEX v3.0 extensions.
  - New MbimWakeType, MbimAccessMediaType,
    MbimModemConfigurationStatus, MbimFrequencyRange,
    MbimContextRoamingControl, MbimContextMediaType,
    MbimContextState, MbimContextOperation, MbimMicoMode,
    MbimLadnInfo, MbimDefaultPduActivationHint, MbimDrxCycle,
    MbimSubscriberReadyStatusFlag enums used in MBIMEx v3.0
    specific operations.
  - New MbimUiccApplicationType, MbimUiccFileAccessibility,
    MbimUiccFileType and MbimUiccFileStructure enums, used in the
    MS UICC Low Level Access service.
  - New MbimIntelServingCellInfo enum, used in the Intel Thermal
    RF service.
  - New MbimIntelBootMode enum, used in the Intel Firmware Update
    service.
  - New MbimQduQuectelRebootType and MbimQduQuectelVersionType
    enums used in the Quectel-defined QDU service updates.
  - Extended the list of MbimNwError values with values from the
    3GPP specs.
  - Deprecated MBIM_NW_ERROR_UNKNOWN, use NONE instead.
  - Deprecated
    MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_NETWORK_BLACKLIST, use
    NETWORK_DENYLIST instead.
  - Fixed the public format for CDMA language in the SMS service.
  + mbimcli:
  - New '--device-open-ms-mbimex-v2' option to request to enable
    MBIMEX v2.0 support.
  - New '--device-open-ms-mbimex-v3' option to request to enable
    MBIMEX v3.0support.
  - New '--verbose-full' option to request enabling logs that
    include personal information.
  - New '--set-ip-packet-filters' action.
  - New '--set-provisioned-contexts' action.
  - New '--set-signal-state' action.
  - New '--set-network-idle-hint' action.
  - New '--query-network-idle-hint' action.
  - New '--set-emergency-mode' action.
  - New '--query-emergency-mode' action.
  - New '--set-service-activation' action.
  - New '--ms-query-location-info-status' action.
  - New '--ms-query-provisioned-contexts' action.
  - New '--ms-set-provisioned-contexts' action.
  - New '--ms-query-base-stations' action
  - New '--ms-query-version' action.
  - New '--ms-query-registration-parameters' action.
  - New '--ms-set-registration-parameters' action.
  - New '--ms-query-modem-configuration' action.
  - New '--ms-query-wake-reason' action.
  - New '--ms-query-uicc-application-list' action.
  - New '--ms-query-uicc-file-status' action.
  - New '--ms-query-uicc-read-binary' action.
  - New '--ms-query-uicc-read-record' action.
  - New '--ms-set-uicc-open-channel' action.
  - New '--ms-set-uicc-close-channel' action.
  - New '--ms-query-uicc-atr' action.
  - New '--ms-set-uicc-apdu' action.
  - New '--ms-set-uicc-reset' action.
  - New '--ms-query-uicc-reset' action.
  - New '--ms-set-uicc-terminal-capability' action.
  - New '--ms-query-uicc-terminal-capability' action.
  - New '--ms-query-nitz' action.
  - New '--intel-query-rfim' action.
  - New '--intel-set-rfim' action.
  - Updated '--connect' action to deprecate 'apn' and prefer
    'access-string'.
  - Updated '--connect' action to support 'compression' and
    'context-type'.
  - Updated '--intel-modem-reboot' action to optionally receive
    the boot mode type argument.
  - Fixed the Quectel specific operations so that they have the
  - -quectel prefix and do not overwrite the ones in the Basic
    Connect service.
  + Several other improvements and fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Update URL and Source to new home.
- New dependencies: help2man
- Replace bash-comletion with pkgconfig(bash-completion)
  BuildRequires, meson checks for it. Update Supplements to current
  standard.
- Drop sed call to fix python env, already set to python3 upstream.
- Update Licenses, drop COPYING.LIB and COPYING, now named
  LICENSES.
- Use ldconfig_scriptlets macro.
- Build mbimcli-bash-completion as noarch.
- Add patches from upstream:
  + 0001-intel-mutual-authentication-new-service-fcc-lock.patch
  + 0002-intel-tools-new-service-trace-config.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727092800">- Update to version 1.30.0:
  + New Intel Mutual Authentication service
  + New Intel Tools service
  + New Google service
  + Extended the Microsoft-defined Basic Connect Extensions service
- Drop patches included upstream:
  + 0001-intel-mutual-authentication-new-service-fcc-lock.patch
  + 0002-intel-tools-new-service-trace-config.patch</changelog>
</package>
<package pkgid="36c03f1bcd39e921bca702537b81a9c490a2ba7086a0328d75334a70bee0c7437a0020667f233c403fe68aeae89c63f197dfb649517280ef49b85746fc71447c" name="libmd0" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.3.2"/>
  <changelog author="mpluskal@suse.com" date="1468152000">- Initial package for version 0.0.0</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Description update</changelog>
  <changelog author="mpluskal@suse.com" date="1517572800">- Update to version 1.0.0:
  * build: Drop GCC specific compiler flag -include
  * build: Detect version script linker support at configure time
  * build: Use an export symbols file if there is no version script
    support
  * build: Do not override the default DEPENDENCIES for libmd
  * Stop using non-portable &lt;sys/param.h&gt;
  * Remove unused __RCSID macro usage
  * Remove unused NEWS file
  * Stop using non-portable &lt;sys/cdefs.h&gt;
  * build: Add -no-undefined libtool flag
  * build: Stop checking for malloc() and memset()
  * build: Switch to AC_C_BIGENDIAN defining WORD_BIGENDIAN</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Update to version 1.0.1:
  * Add missing compatibility macros for SHA384
  * Fix compatibility macros for SHA512
  * test: Refactor and extend message digest testing
  * Add compatibility with Aladdin Enterprises MD5 implementation
  * build: Invoke sed with portable regex</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Enable profile guided optimization</changelog>
  <changelog author="schwab@suse.de" date="1583323200">- Remove undefined macro</changelog>
  <changelog author="mpluskal@suse.com" date="1609761600">- Update to version 1.0.3
  * Import local-link header from libbsd
  * Switch SHA2 symbols from weak to strong aliases
  * build: Move local-link.h from libmd_la_helper_sources to libmd_la_SOURCES
  * build: Only depend on libmd.sym when using it
  * Remove duplicate Files entries from COPYING
  * build: Use &lt;unistd.h&gt; only if available
  * Remove unused weak symbol declarations for MD2 functions
  * build: Ignore release tarballs
  * build: Provide wrapper functions instead of aliases in DLL built with MSVC
  * build: Fix out of tree builds</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 1.0.4:
  * Place static keyword before const in function definitions
  * Declare local functions as static
  * Fix signedness type mismatch comparisons
  * test: Fix pointer type sign mismatch in DEF_TEST_DIGEST() macro
  * man: Document RIPEMD160 and SHA-1 security status
  * build system improvements</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">-  Update to version 1.1.0:
  * man: Add new libmd(7) man page
  * doc: Move mailing list reference to the end
  * build: Fix version script linker support detection
  * build: Switch to debian:latest Docker image
  * build: Fix configure.ac indentation
  * build: Require automake 1.11
  * build: Do not use strong aliases on macOS
  * On Darwin use assembler to support symbol aliases
  * build: Rename libmd_alias() to libmd_strong_alias()
  * Remove unused &lt;assert.h&gt;
  * Sync MD2 changes from NetBSD
  * Sync MD4 changes from OpenBSD
  * Sync MD5 changes from OpenBSD
  * Sync RMD160 changes from OpenBSD
  * Sync SHA1 changes from OpenBSD
  * Sync SHA2 changes from OpenBSD
  * test: Add a new test_eq() helper function
  * test: Add cases for SHA224 and SHA512-256
  * build: Terminate lists in variables with «# EOL»</changelog>
</package>
<package pkgid="585c6628bda1fcae752855e80c5ba552dca209c32dff0bb7c8d14ed095d80e33724c6a53c1306854111e188d3ea66ae2d4c14a814a94a065797c2c836ca51864" name="libmetalink3" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="160000.2.2"/>
  <changelog author="pascal.bleser@opensuse.org" date="1257076800">- initial package: 0.0.3</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1257681600">- add support for libxml2 and expat, which makes the build include
  all API functions, unlike the previous, crippled builds</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1316865600">- remove dependency on licenses, no longer in Factory</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1353412800">- Update to version 0.1.2
  * This release adds RFC 5854 Metalink 4.0 support
  * adds dynamic attribute of the origin element in Metalink
- libmetalink-autotools.patch : multiple pet peeves in autotools.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1353412801">- Fornat spec file for factory</changelog>
  <changelog author="p.drouand@gmail.com" date="1448971200">- Update to version 0.1.3
  * This release fixes the bug that signature element in metalink v4
    was not parsed correctly.
- Update libmetalink-autotools.patch
- Use download Url as source
- Perform a spec-cleaner
- Build with libxml2 and cunit support</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521633600">- libmetalink-autotools.patch: update, export only
  metalink_ symbols using -export-symbols-regex, there
  is an upstream configure option --enable-gcc-visibility
  but it is currently incomplete and cannot be used as is</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="21718db82260fe64f967e45f6b2acdf22a36643fc933d6ed725c530f5abb7aa6eda793ded585bdc22f76aa2a08bc4104fc3e9b18d3dec3d1d7d10fcaed9e1199" name="libmicrohttpd12" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="160000.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- libmicrohttpd 0.9.72:
  * improved performance with stay-alive HTTP and HTTPS connections
  * bug fixes
- remove deprecated texinfo macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621339200">- libmicrohttpd 0.9.73:
  * new function for vector-backed responses
  * compatibility with autoconf 2.70+
  * Implement ALPN support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640001600">- libmicrohttpd 0.9.74:
  * new experimental implementation of WebSockets disabled by default
  * improved compliance with the RFC HTTP specifications
  * new implementation of reply header forming
  * new implementation of request chunked encoding parsing
  * new automatic error replies
  * Keep-alive header is omitted by default for HTTP/1.1 connections.
    Use of header can be enforced by response flag.
  * Chunked encoding is used for HTTP/1.1 non-keep-alive connections
    for responses with unknown size. Previously MHD used "indication
    of the end of the response by closing connection" in such cases,
    however it is not correct for HTTP/1.1 connections as per HTTP
    RFC.
  * As required by HTTP RFC, use HTTP/1.1 version instead of HTTP/1.0
    in reply headers when client is HTTP/1.0 . HTTP/1.0 version can
    be enforced by response flag.
  * User response headers are used in replies in the same order as
    was added by application.
  * Allowed tab characters in response header values.
  * All custom "Connection:" response headers are automatically
    combined into single "Connection:" header.
  * "keep-alive" token silently dropped from custom "Connection:"
    response header. "Keep-alive" cannot be enforced and used
    automatically if possible.
  * Allow tab character in custom response header value.
  * Disallow space character in custom response header value.
  * Do not allow responses with 1xx codes for HTTP/1.0 requests.
  * Detected and reported incorrect "Upgrade" responses.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640606400">- libmicrohttpd 0.9.75:
  * fixes for where "monotonic" clock may jump back</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677585600">- libmicrohttpd 0.9.76
  * CVE-2023-27371: Fix potential DoS vector in MHD_PostProcessor
    (boo#1208745)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1685534400">- libmicrohttpd 0.9.77:
  * improvements for Digest and Basic authorizations
  * fix efficiency for TLS upgraded connections
  * fix processing of folded headers in requests
  * fix functionality with blocking sockets
- update upstream signing key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1707134400">- libmicrohttpd 1.0.0:
  * first stable release
  * Client request parsing was rewritten to RFC 9910 and RFC 9112
  * Support for strict and lenient specification enforcement
  * Digest Auth was reworked, improved support for RFC 7617
  * Improved functionality in multi-threading environment,
    especially with external sockets polling modes.
  * Reworked Basic Auth, adding new convenient API functions.
  * Re-implemented GnuTLS initialisation. Now supported
    libmicrohttpd-specific system-wide configuration, as well as
    generic GnuTLS system-wide configuration. Application may adjust
    settings based on system configuration instead of specifying its
    own full configuration.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1708776000">- libmicrohttpd 1.0.1:
  * build system fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix build with curl 8.13.0 (boo#1241036)
  add libmicrohttpd-1.0.1-curl-8.13.0.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1763726400">- Fix for the following bugs:
  * bsc#1253177 CVE-2025-59777
  * bsc#1253178 CVE-2025-62689
- Add patch:
  * CVE-2025-59777.patch
  * this same patch fixes both CVEs
  * git commit ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b</changelog>
</package>
<package pkgid="56233284067294a1d6ca19c15866c4eccc509e2b7e99fe3ea911bd410024ca2a8491c88da71831be3719d3e7f217497300df27b4da05f6669c12a89a598c0332" name="libmlx4-1" arch="x86_64">
  <version epoch="0" ver="56.1" rel="160000.2.2"/>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="nicolas.morey@suse.com" date="1739966400">- Update to rdma-core v56.0 (jsc#PED11323)
  - No release notes available</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743681600">- Update to rdma-core v56.1 (jsc#PED-11289, jsc#PED-11323)
  - Bug fixes for all providers</changelog>
</package>
<package pkgid="7e43d4dae1980899bc77a7274c5049a3df977ec3936fed97ec5fcb3c6cd2b4a5c8a940111085b6693a22f70a55eb3751d87b715345c08d4e2f1dc70cb41fa356" name="libmlx5-1" arch="x86_64">
  <version epoch="0" ver="56.1" rel="160000.2.2"/>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="nicolas.morey@suse.com" date="1739966400">- Update to rdma-core v56.0 (jsc#PED11323)
  - No release notes available</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743681600">- Update to rdma-core v56.1 (jsc#PED-11289, jsc#PED-11323)
  - Bug fixes for all providers</changelog>
</package>
<package pkgid="501e739c0b3e8cac93ba114953659769dcfeaf2efe4f39ff5af7334f2ef5560c6b3f947c8acce81d82b067a37a04469bbdad0e73585305ce4f66287868cd745a" name="libmm-glib0" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1628942400">- Switch bash completion subpackage to noarch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Update to version 1.18.6:
  + The ModemManager.service file for systemd integration provided
    in the sources is updated as follows:
    ++ 'CAP_NET_ADMIN' is now required in the
    'CapabilityBoundingSet' field.
    ++ 'AF_NETLINK' and 'AF_QIPCRTR' are now required in the
    'RestrictAddressFamilies' field.
  + The LEGACY and PARANOID filter types that were allowed
    options in the '--filter-policy' option in the ModemManager
    daemon were deprecated in version 1.16.0 and have now been
    completely removed, along with the vid:pid blacklist of
    devices and the vid:pid greylist of RS232&lt;-&gt;USB adapters.
  + The ModemManager daemon can run now in a 'quick suspend/resume'
    mode, in which no explicit data disconnection is triggered on
    suspend, and no explicit device re-probing from scratch is
    launched on resume. Instead, the daemon will try to refresh
    the state of all interfaces upon suspend, e.g. to see if the
    module keeps registered to the same operator, to see if it is
    still connected, and so on.
  + core: added support for the new 'WWAN' subsystem in Linux kernel
    5.13, enabling PCIe-only modules.
  + core: The charset conversion methods rework, including the
    avoiding of the iconv()
  + qmi: the logic managing allowed/preferred modes was fixed for
    multimode devices like the MC7304, making sure the acquisition
    order preference always had the same items.
  + serial: when modem is connected with AT+PPP, ignore forced
    disconnections, so that we don't take ownership of the PPP
    port before pppd has released it.
  + foxconn: added support for the T99W175 (SDX55) module,
    including built-in FCC unlock procedure.
  + foxconn: added new MBIM QDU firmware update method.
- Move the dbus-1 system.d file to /usr (bsc#1196170)
- Use source verification
- Update Supplements to new format
- Add BRs needed for new tests:
  * python3-gobject-Gdk
  * python3-dbus-python</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Enable QRTR support
  * Add BR pkgconfig(qrtr-glib)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1659787200">- Update to version 1.18.10:
  + Build: Require libqmi 1.30.8.
  + FCC unlock: Updated SDX55 unlock script to handle the new
    method introduced in the latest firmware releases.
  + Modem interface:
  - Set signal quality to 0% on shutdown.
  - Set signal quality as recent on init.
  + MBIM:
  - Fix task completion when peeking device fails.
  - Fix several GError double-frees.
  + mmcli: Don't print signal quality until modem is enabled.
  + Plugins: foxconn: remove carrier mapping table for T99W175.
  + Several other minor improvements and fixes.
- Changes from version 1.18.8:
  + A new connection status dispatcher setup is provided, where
    users can provide custom scripts that will be called on bearer
    connect/disconnect events. This dispatcher will make the netifd
    integration in openwrt work much better, as we'll be able to
    report network-initiated disconnections cleanly to netifd.
    There are no default connection status dispatcher scripts
    installed, but it's suggested distributions make sure the
    following directories exist:
  - ${sysconfdir}/ModemManager/connection.d/
  - ${libdir}/ModemManager/connection.d/
  + API: Add missing Simple interface definitions in
    ModemManager-names.h.
  + Build:
  - meson:
    . fix daemon enums dependencies.
    . fix port enums includes.
    . fix 'export_packages' in GIR setup.
    . fix simtech plugin module name.
  - systemd: don't run ModemManager in containers.
  + Core:
  - serial: ensure the port object is valid after BUFFER_FULL
    handling.
  - netlink:
    . use unaligned netlink attribute length.
    . only change IFF_UP flag.
  - bearer: match unknown auth to chap in loose comparisons.
  - charsets: return error if UTF-8 validation fails.
  - fcc-unlock: make scripts POSIX shell compatible.
  - modem-helpers:
    . consider minimum ID when choosing best profile.
    . fix reading &lt;Act&gt; given in COPS=? responses.
  - sms: prevent crash if date is out of range.
  - profile-manager: fix copy-paste error on tags for quarks.
  + QMI:
  - Ignore slot status indications until initial status is known.
  - Return error when loading capabilities if none is found.
  + MBIM:
  - Default initial EPS bearer's auth to chap when unknown.
  - Update default error when network error is out of range.
  + mmcli: Fix key length when printing list of items.
  + Plugins:
  - linktop: new port type hints.
  - cinterion: add support for PLSx3w modems.
  - huawei: disable +CPOL based features in Huawei E226.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661601600">- Disable make_check call, tests currently fails due to our switch
  to glib 2.73.2.
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/870
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/601
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/621</changelog>
  <changelog author="luc14n0@opensuse.org" date="1665230400">- Update to version 1.18.12:
  + This release fixes a few very critical issues that happpen when
    using a glib2 newer or equal than 2.73.2, plus numerous fixes
    for the Core, MBIM, QMI, 3GPP profile manager interface, SMS,
    libmm-glib, and mmcli.
  + Plugins:
  - sierra: disable +CPOL in the GL7600.
  - telit: add LE910Cx MBIM composition port hints.
  - telit: add port type hints for LN920 0x1060, 0x1061
    compositions.
  - icera: fix double free on %%IPSYS=? response processing
  - mtk: fix task completion when loading supported modes.
- Add new pkgconfig modules build requirements: gio-2.0, glib-2.0,
  gmodule-2.0, and gobject-2.0.
- Update ModemManager.keyring to the new upstream key:
  A814D09B9C5BC01945A64308AECE0239C6606AD5. Found at
  www.freedesktop.org/software/ModemManager/0xAECE0239C6606AD5.asc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.20.6:
  + build: New build option to allow disabling the installation of
    examples.
  + core:
  - Fix crash when uninhibiting partially removed device.
  - Fix crash when attempting to load an invalid shared utils
    library.
  + mmcli:
  - Allow JSON and key/value output when creating SMS messages.
  - Improved JSON output in network scan results.
  + libmm-glib:
  - Avoid using g_time_zone_new_offset() unless glib &gt;= 2.58.
  - Fix flags to string conversion utils to allow multiple flags.
  + MBIM:
  - Reset cached SIM info when SIM is unlocked.
  - Fix synchronizing the state of the SIM hot swap configured
    flag.
  - Fix bug cleaning up the LTE attach info unsolicited message
    handler.
  - Fallback from QMI UIM service only if unsupported.
  - Add missing support for 'emergency' APN type.
  + QMI:
  - Fix processing and exposing PCOs.
  - Fix power up on modems that don't support power state change
    indications.
  + plugins:
  - telit:
    . add additional support for 5G modems.
    . added port type hints for FN990 0x1070, 0x1071
    compositions.
    . increase allowed initial delay in AT ports.
    . fallback to AT commands if loading revision via MBIM fails.
  - quectel: add support for EC21-EUX usb modules.
  - xmm: fix crash parsing XACT? response.
- Changes from version 1.20.4:
  + build:
  - Don't hardcode building shared libraries, so that meson's
    default_library option can be used properly,
  - po: Added missing Georgian translation in LINGUAS.
  + QMI:
  - Fixed loading NR5G signal info.
  - Fixed memory leaks when processing signal info.
  - Correctly scaled the SNR value reported in NR5G.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  + MBIM:
  - Fixed processing MbimSmsStatusFlag as flags, not as an enum.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  - Chained up device notifications through the MMPortMbim
    object.
  + Messaging: Allowed Delete operation during enabling/disabling.
  + Core: Don't assume port tables always exist so that
    long-standing operations holding an object reference can finish
    cleanly even after the initial object disposal has already been
    run.
  + plugins:
  - quectel: added new firehose/sahara support udev tags in new
    models.
  - broadmobi: added MM_PLUGIN_REQUIRED_QCDM flag.
  - cinterion:
    . added a delay to the ^SWWAN? command.
    . added retry mechanism to the ^SWWAN? command.
- Changes from version 1.20.2:
  + build:
  - Fixed building without MBIM support.
  - Fixed building without tests support.
  - Disabled test interface in base manager if building without
    tests.
  - Updated intel plugin dependencies to require XMM shared
    utils.
  - Fixed templates to make build reproducible.
  + FCC unlock: Updated shell scripts to avoid requiring bash.
  + MBIM:
  - Ignored SIM related indications during a SIM slot switch
    operation.
  - Updated capabilities loading to use Microsoft Extensions if
    available.
  - Updated supported modes loading to use the CustomDataClass
    field contents.
  + SIM: Fixed length when reading GID1/GID2 using AT commands.
  + Several other minor improvements and fixes.
- Changes from version 1.20.0:
  + API:
  - New 'Modem.Sar' interface to allow the host to manage the SAR
    power level.
  - New 'Modem.GetCellInfo()' method, that allows querying
    information about the current serving and neighboring cells.
    Currently including 'cell-type' and 'serving' fields for all
    cell types, plus additional type-specific fields:
    . CDMA: 'nid', 'sid', 'base-station-id', 'ref-pn' and
    'pilot-strength'.
    . GSM: 'operator-id', 'lac', 'ci', 'timing-advance', 'arfcn',
    'base-station-id' and 'rx-level'.
    . UMTS: 'operator-id', 'lac', 'ci', 'frequency-fdd-ul',
    'frequency-fdd-dl', 'frequency-tdd', 'uarfcn', 'psc',
    'rscp', 'ecio' and 'path-loss'.
    . TDSCDMA: 'operator-id', 'lac', 'ci', 'uarfcn',
    'cell-parameter-id', 'timing-advance', 'rscp' and
    'path-loss'.
    . LTE: 'operator-id', 'tac', 'ci', 'physical-ci', 'earfcn',
    'rsrp', 'rsrq' and 'timing-advance'.
    . 5GNR: 'operator-id', 'tac', 'ci', 'physical-ci', 'nrarfcn',
    'rsrp', 'rsrq', 'sinr' and 'timing-advance'.
  - New 'access-type-preference', 'roaming-allowance',
    'profile-name', 'profile-enabled' and 'profile-source'
    fields in the 'Bearer.Properties' property, that can also be
    used in both 'Modem.Simple.Connect()' and
    'Modem.CreateBearer()'.
  - New 'Modem.Modem3gpp.SetPacketServiceState()' method and
    'Modem.Modem3gpp.PacketServiceState' property, which allow
    management the explicit attach or detach to packet service on
    the current registered network.
  - New 'Modem.Modem3gpp.SetNr5gRegistrationSettings()' method
    and 'Modem.Modem3gpp.Nr5gRegistrationSettings' property, to
    allow management of 5G specific settings like 'mico-mode' or
    'drx-cycle'.
  - New 'start-date', 'uplink-speed' and 'downlnk-speed' fields
    in the 'Bearer.Stats' property.
  - New 'Bearer.ReloadStatsSupported' property to indicate
    whether reloading ongoing stats is supported or not.
  - New 'Modem.Modem3gppProfileManager.IndexField' property, to
    indicate which field is to be used as unique index in the
    profile management operations.
  - New 'Sim.SimType', 'Sim.EsimStatus' and 'Sim.Removability'
    properties to improve the management of eSIM related
    operations.
  - New 'Sim.Gid1' and 'Sim.Gid2' properties, which allow
    identifying SIM cards that should have different settings
    applied.
  - New 'Modem.Signal.SetupThresholds() method,
    'Modem.Signal.RssiThreshold' and
    'Modem.Signal.ErrorRateThreshold' to allow configuring
    thresholds so that the modem emits indications whenever the
    signal quality values change based on those thresholds. For
    RSSI a delta amount of dBm can be given, and for error rate
    just a boolean to enable or disable the corresponding event.
  - New 'error-rate' fields in the 'Modem.Signal.Cdma',
    'Modem.Signal.Evdo', 'Modem.Signal.Gsm', 'Modem.Signal.Umts',
    'Modem.Signal.Lte' and 'Modem.Signal.Nr5g' properties.
  + Core:
  - Detecting an eSIM without an active profile in the current
    SIM slot will lead to the modem being in Failed state, in the
    same way as if the slot was for a physical SIM and no SIM was
    inserted.
  - Default amount of AT probing attempts is updated to 6, to
    cope with modems that are slower to boot.
  - New '--test-mbimex-profile-management' option in the daemon,
    to enable support for profile management operations using the
    Microsoft extensions. This is an optional feature because it
    requires using the 'apn-type' field as unique index, which
    not all users of the profile management API may expect.
  - Implemented some initial support to automatically hide
    personal details (e.g. phone numbers, SMS contents...) from
    logs, right now only applicable to QMI and MBIM logs. Updated
    support for this feature will keep on being integrated in
    future 1.20.x updates. The new '--log-personal-info' option
    in the daemon allows to disable this feature completely.
  - Added new filter match option for subsystem vendor id,
    required in several PCI based Qualcomm modules.
  - QCDM port probing will no longer automatically run for all
    plugins, only in those that explicitly require it.
  - Implemented support for suspend/resume detection based on
    ChromeOS' powerd daemon.
  - Added Cat-M and NB-IoT LPWA access technologies.
  + Modem interface: On 3GPP+3GPP2 multimode devices, a missing SIM
    card will now force the modem into Failed state, as if it was a
    3GPP-only device.
  + Simple interface: Explicitly wait for PS domain to be attached
    during a connection attempt.
  + 3GPP interface: Updated to report domain registration changes
    altogether whenever possible (e.g. when using the QMI or MBIM
    protocols).
  + MBIM:
  - Implemented support to use the Microsoft-defined MBIM
    extensions v2 and v3 whenever supported by the device. The
    ModemManager daemon will negotiate which version to use with
    the modem, so that the highest version supported is enabled.
    This negotiation applies to the whole device, so any other
    user of the MBIM device will automatically start using the
    newly agreed version.
  - Implemented current modes switching using MBIMEx v2.0
    extensions.
  - Trigger explicit disconnection if a connection attempt fails.
  - Modem will be flagged as unusable if 10 consecutive MBIM
    requests timeout.
  - Enabled multiplex support for devices in the WWAN subsystem.
  + QMI:
  - Updated logic to by default prefer 'Signal Info' over the
    deprecated 'Signal Strength' operations.
  - Updated logic to by default prefer 'System Info' over the
    deprecated 'Serving System' operations.
  - Updated power state transition logic to ensure the new state
    is reached before returning success to the user.
  - Implemented support for the 'Modem3gppProfileManager.Updated'
    signal using PDC refresh notifications.
  - Modem will be flagged as unusable if 10 consecutive QMI
    requests timeout.
  - Implemented DTMF support.
  - Implemented support for automatic SIM IMSI switch detection
    under certain roaming scenarios.
  - Updated the logic to move the PS domain state to 'registered'
    based on the DSD System Status indications.
  - Updated endpoint type detection logic to be based on the net
    driver.
  - Updated endpoint number selection to be based on the data
    port.
  - Updated connection logic to allocate separate WDS clients per
    endpoint.
  - Added support for PCO reporting.
  + plugins:
  - quectel: Added FCC unlock support for the EM05-G.
  - telit:
    . Band management updated to prefer using QMI whenever
    available, as well as to detect the #BND command format
    automatically.
    . Added support for LPWA modems.
  - fibocom:
    . Implemented optional support to power down and up the modem
    during the update of the initial EPS bearer settings.
    . Implemented initial EPS bearer settings management in the
    MA510.
  - intel: New generic plugin for Intel PCI devices with vid
    0x8086.
  - xmm: Prefer GNSS control ports explicitly tagged via udev
    tags.
  - foxconn: Use the new FOX QMI service to load firmware
    version.
  - cinterion: Added support for PCIe based devices.
- Use ldconfig_scriptlets macro.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add xsltproc and pkgconfig(bash-completion) BuildRequires: New
  dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696593600">- Add explicit /usr/bin/dbus-daemon BuildRequires: Needed for
  tests.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727092800">- Update to version 1.22.0:
  + A new "MSG" (message) log verbosity level is introduced, which
    is also the new default one if none explicitly defined. This
    level takes the place of the old "INFO" level, as a level
    including the most important messages that should be logged
    without needing to be warnings or errors. The new "INFO" level
    is more verbose than "MSG" but less verbose than "DBG", and may
    be useful as default in systems where active debugging of WWAN
    related issues is required. E.g. all user operations triggered
    via DBus method calls are logged in "INFO" level.
  + Introduced the concept of "personal information" which should
    by default not be included in log messages. Enabling personal
    information in logs requires to run the daemon with the
    '--log-personal-info' option. This feature is mostly
    implemented for QMI and MBIM specific logs, but hasn't yet been
    included in generic daemon logs or when using the AT protocol.
    Changes and fixes related to this feature will be cherry-picked
    and included in the future stable branch updates.
- Update URL and Source adresses.</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="ffa89e87f9342037d5cf121fef726ecb9049a173d7cce871a2b0dd01223048416820a0fb93360b3fea12bc41775d0eb07c2bc5ec2fa376bb6c68013b173e1034" name="libmnl0" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="160000.2.2"/>
  <changelog author="jengelh@medozas.de" date="1325160000">- SPDX format for License: tag
- Use separate include dir to detect compile errors</changelog>
  <changelog author="jengelh@medozas.de" date="1325505600">- Update to new upstream release 1.0.2
  * build and compile updates
  * header: fix invalid use of type void * in arithmetic of
  mnl_for_each_nest(...)
  * doc: fix wrong comment describing mnl_nlmsg_batch_stop</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.0.3
  * Added the "mnl_attr_for_each_payload" function, which allows to
  iterate over attributes for a given payload pointer.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline, source validator already
  does that</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Move include files to /usr/include/pkg, like done in many other
  packages</changelog>
  <changelog author="jengelh@inai.de" date="1418126400">- Remove extra directory pkg, one level is enough.</changelog>
  <changelog author="jengelh@inai.de" date="1467460800">- Update to new upstream release 1.0.4
  * Improvements in the netlink message printing function,
  attribute validation for MNL_TYPE_MSEC and MNL_TYPE_U64, clang
  compilation fixes, the new mnl_socket_open2() and
  mnl_socket_fdopen() functions, missing handling for
  NLM_F_DUMP_INTR and documentation updates.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1587038400">- package the license text</changelog>
  <changelog author="jengelh@inai.de" date="1649160000">- Update to release 1.0.5
  * New example program
  * "MNL_SOCKET_DUMP_SIZE" define, holding a recommended buffer
    size for netlink dumps.
  * Resolved compiler warnings</changelog>
</package>
<package pkgid="b87e3a6fd2ce5b5bb997a59f0ff5e9f670b3ea9c54b87f03f4c859e4b7b0aeda6aff23a2f351b1251e2c5d8b1851db7435959b8551be854a46664b32ae4e6682" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.41.1" rel="160000.3.1"/>
  <changelog author="sbrabec@suse.com" date="1744027200">- Update to version 2.41:
  * agetty: Fixed an issue where issue files were not being printed
    from additional locations, such as /run or /usr/lib. This
    change now allows for the use of local information from /etc,
    in addition to generated files from /run and
    distribution-specific files from /usr/lib.
  * cfdisk and sfdisk: Added support for the --sector-size command
    line option.
  * sfdisk: Added a new option, --discard-free.
  * fdisk: Added a new command, 'T', to discard sectors.
  * chrt: The --sched-runtime now supports SCHED_{OTHER,BATCH}
    policies.
  * column: Can now handle ANSI SGR colors inside OSC 8 hyperlink
    escape codes and sequences.
  * enosys: Can now dump defined filters.
  * libmount:
  * Added experimental support for statmount() and listmount()
    syscalls.
  * This new functionality can be accessed using "findmnt
  - -kernel=listmount".
  * Added a new mount option,
    X-mount.nocanonicalize[=source|target].
  * Added new mount extensions to the "ro" flag (ro[=vfs,fs]).
  * Added a new option, X-mount.noloop, to disable automatic loop
    device creation.
  * Now supports bind symlinks over symlinks.
  * Reads all kernel info/warning/error messages from new API
    syscalls (and mount(8) prints them).
  * libuuid: Now supports RFC9562 UUIDs.
  * findmnt, lsblk, and lsfd: Added a new --hyperlink command line
    option to print paths as terminal hyperlinks.
  * findmnt: Can now address filesystems using --id and --uniq-id
    (requires listmount() kernel support).
  * flock: Added support for the --fcntl command line option.
  * hardlink: Can now prioritize specified trees on the command
    line using --prioritize-trees.
  * Can exclude sub-trees using --exclude-subtree or keep them in
    the current mount using --mount.
  * Duplicates can now be printed using --list-duplicates.
  * hwclock: Added a new --param-index option to address position
    for RTC_PARAM_{GET,SET} ioctls.
  * kill: Can now decode signal masks (e.g. as used in /proc) to
    signal names.
  * libblkid: Made many changes to improve detection, including
    exfat, GPT, LUKS2, bitlocker, etc.
  * login: Added support for LOGIN_ENV_SAFELIST in /etc/login.def.
  * lsfd: Now supports pidfs and AF_VSOCK sockets.
  * lsipc, ipcmk, ipcrm: Now supports POSIX ipc.
  * lslogins: Now supports lastlog2.
  * lsns: Added support for the --filter option.
  * build by meson: Now supports translated man pages and has fixed
    many bugs.
  * mkswap: The option --file should now be usable on btrfs.
  * nsenter: Improved support for pidfd and can now join target
    process's socket net namespace.
  * scriptlive: Added a new option, --echo &lt;never|always|auto&gt;.
  * zramctl: Now supports COMP-RATIO and --algorithm-params.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41-ReleaseNotes
- Update util-linux-login_defs-check.sh:
  * Make instructions up to date.
  * Update checksum reflecting the shadow update.
- Refresh libmount-print-a-blacklist-hint-for-unknown-filesyst.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1744891200">- Enable mountfd support again (jsc#PED-9752).
  BREAKING CHANGE
  Mountfd is nearly completely compatible with the old mount. There
  is a special case that cannot be handled by mountfd, and it needs
  to be handled by applications:
  Mountfd discriminates between physical mount layer and virtual
  mount layer. Once the physical mount layer is read-only,
  read-write mount on the virtual layer is not possible.
  If the first mount is read only, then the physical filesystem is
  mounted read-only, and later mount of the same file system as
  read-write is not possible. To solve this problem, the first
  mount needs to be read-only only on the virtual layer, keeping
  the physical layer read-write.
  The user space fix is simple:
  Instead of
    mount -oro
  use
    mount -oro=vfs
  This will keep the physical layer read-write, but the virtual
  file system layer (and the user space access) will be read-only.</changelog>
  <changelog author="sbrabec@suse.com" date="1747742400">- Fix segfault of findmnt (boo#1242705,
  gh#util-linux/util-linux#3574,
  util-linux-libblkid-econf-parse.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1748520000">- Add ul_ prefix to functions with common names. Fixes btrfsprogs
  build failure (gh#util-linux/util-linux#3603,
  util-linux-rename-common-symbols-1.patch,
  util-linux-rename-common-symbols-2.patch,
  util-linux-rename-common-symbols-3.patch,
  util-linux-rename-common-symbols-4.patch).</changelog>
  <changelog author="nicolas@belouin.fr" date="1749556800">- Fix libmount --no-canonicalize regression (boo#1244251,
  gh#util-linux/util-linux#3479,
  libmount-fix-no-canonicalize-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1750766400">- Update to version 2.41.1:
  * cfdisk: fix memory leak and possible NULL dereference
  * fdisk: fix possible memory leak
  * findmnt: fix -k option parsing regression (boo#1242705,
    drop util-linux-libblkid-econf-parse.patch)
  * hardlink: fix performance regression
  * include/cctype: fix string comparison
  * libblkid:
  * Fix crash while parsing config with libeconf
  * befs fix underflow
  * avoid strcasecmp() for ASCII-only strings
  * libblkid/src/topology/dm: fix fscanf return value check to
    match expected number of parsed items
  * libmount:
  * (subdir) restrict for real mounts only
  * (subdir) remove unused code
  * avoid calling memset() unnecessarily
  * fix --no-canonicalize regression (boo#1244251,
    drop libmount-fix-no-canonicalize-regression.patch)
  * lsblk:
  * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE
  * avoid strcasecmp() for ASCII-only strings
  * lscpu:
  * fix possible buffer overflow in cpuinfo parser
  * Fix loongarch op-mode output with recent kernel
  * lsfd:
  * scan the protocol field of /proc/net/packet as a hex number
  * fix the description for PACKET.PROTOCOL column
  * lsns:
  * enhance compilation without USE_NS_GET_API
  * fix undefined reference to add_namespace_for_nsfd #3483
  * more:
  * fix broken ':!command' command key
  * fix implicit previous shell_line execution #3508
  * tests: (test_mkfds::mapped-packet-socket) add a new parameter,
    protocol
  * treewide:
  * add ul_ to parse_timestamp() function name
    (drop util-linux-rename-common-symbols-4.patch)
  * add ul_ to parse_switch() function name
    (drop util-linux-rename-common-symbols-3.patch)
  * add ul_ to parse_size() function name
    (drop util-linux-rename-common-symbols-2.patch)
  * add ul_ to parse_range() function name
    (drop util-linux-rename-common-symbols-1.patch)
  * fix optional arguments usage
  * avoid strcasecmp() for ASCII-only strings
  * Wipefs: improve --all descriptions for whole-disks
  * Misc: Do not call exit() on code ending in shared libraries
  * Other fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes
- Fix problem with uname26 listed twice.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
</package>
<package pkgid="cd63ee60af9acb49b93abdde740686ab1625345f19e959c3a4ee9600e6cf6884807e8e3cf20ab9d1e2ca9e54d90b9367c2c574d7c2daae6ffb45246c56e5c717" name="libmpath0" arch="x86_64">
  <version epoch="0" ver="0.12.2+254+suse.924a3ed8" rel="160000.1.1"/>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.11.0~1+118+suse.4a51b1a
  See NEWS.md for details about upstream changes in 0.11.0.
  * Pre-release of upstream 0.11.0
  * Rework of the path checking algorithm to reduce wait time and improve
  performance
  * Modified the systemd unit `multipathd.service` such that multipathd will now
  restart after a failure or crash (gh#opensvc/multipath-tools#100)
  * multipathd: move systemd watchdog handling into daemon (bsc#1232227)
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.11.0+164+suse.24eeee7
- Reviewed Upstream changes from 0.12 development
  * Continued rework of the path checker loop
  * multipathd now sets the port_state of Fibre Channel remote ports to
    "marginal" for NVMe devices, too (with nvme_core.multipath=N only).
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix path grouping if a path device is added while offline with group_by_tpg
    and group_by_serial path grouping policy
    (gh#opensvc/multipath-tools#108, bsc#1236392)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
- Changes in Upstream 0.11.0 (see also NEWS.md)
  * multipathd: set rport port_state to marginal for NVMe devices
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
  * multipath-tools: add SCST to hwtable
  * Add defaults for SCST and HPE MSA Gen7 to hwtable
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)
  * Fixes for handling empty or incompletely created multipath maps
    (bsc#1236390)
  * During map creation, fixed the case where a map with different name, but
    matching UUID and matching type was already present. multipathd
    previously failed to set up such maps. Now it will reload them with the
    correct content. (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.11.0+183+suse.3973293:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.
  * multipath-tools: make multipathd listen on a pathname socket
    (/run/multipathd.socket) besides listening on an abstract socket.
    This allows connecting to multipathd from a containerized application
    (gh#opensvc/multipath-tools#111). In client mode, applications
    linked against libmpathcmd will attempt to connect to the pathname
    socket first, and to the abstract socket if this fails.
    The MULTIPATH_SOCKET_NAME environment variable can be used to
    override the socket name.
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * libmultipath: remove buggy reinstate_paths function</changelog>
  <changelog author="mwilck@suse.com" date="1762862400">- Update to version 0.11.3+184+suse.e1501732:
- Fixes from upstream 0.11.3 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1769428800">- Update to version 0.12.2+254+suse.924a3ed8:
- Bug fixes from 0.12.2 (bsc#1257007, see NEWS.md for details)
  * kpartx: fix segfault when operating on regular files
    (bsc#1257244, bsc#1257153)
  * multipathd: print path offline message even without a checker
    (bsc#1254094)
  * Fix `mpathpersist --report-capabilities` output.
  * Fix command descriptions in the multipathd man page.
  * Fix ISO C23 compatibility issue causing errors with new compilers.
  * Fix memory leak caused by not joining the "init unwinder" thread.
  * Fix memory leaks in kpartx.
  * Print the warning "setting scsi timeouts is unsupported for protocol" only
    once per protocol.
  * Make sure multipath-tools is compiled with the compiler flag
    `-fno-strict-aliasing`. (gh#opensvc/multipath-tools#130, bsc#1255285)
- Features from upstream 0.12.0 (see also NEWS.md):
  * Maps that were added outside of multipathd (e.g. using the **multipath**
    command) and that couldn't be reloaded by multipathd used to be ignored
    by multipathd. multipathd will now monitor them. If some paths were
    offline while the map was created, multipathd will now add them to the
    map when they go online again.
  * multipathd retries persistent reservation commands that have failed on one
    path on another one.
- Documentation fixes
- Additions to the hardware table</changelog>
</package>
<package pkgid="6304584a46c170c413c21907457443b1051681a77aec0a6eb9df2ba1b355a5a72b1af157f41b0b3f7f3d06cf99fed027a737abc29bfd3779e78d2799363dbb32" name="libmpdec4" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="160000.2.2"/>
  <changelog author="skrah@bytereef.org" date="1628596800">- Initial package</changelog>
  <changelog author="mcepl@suse.com" date="1630584000">- Switch on _multibuild with the separate test step (to minimize
  dependencies).
- Add a basic baselibs.conf.</changelog>
  <changelog author="mcepl@cepl.eu" date="1746619200">- Update to 4.0.1 (bsc#1242704):
  - Add Cygwin support.
  - Update config.guess and config.sub to the latest versions.
  - Fix pkg-config files for custom paths.
  - Set LD/LDXX unconditionally to CC/CXX, since LDFLAGS/LDXXFLAGS from ./configure rely on it.
- Update to 4.0.0:
  - sync soversion and major_version
  - The added number formatting feature requires an ABI change,
    hence the increase to SOVERSION=4.
  - Packagers outside of the Linux distributions sometimes use
    the major version number as the equivalent of SOVERSION on
    their platforms and have an incorrect SOVERSION for 2.5.1,
    which requires SOVERSION=3.
  - While SOVERSION is not required to match the major
    version number (example: glibc), mpdecimal will from
    now on take the path of least resistance and always use
    SOVERSION=MPD_MAJOR_VERSION.
  - The jump to 4.0.0 should also remind users that a C++ library
    is available.
  - Support for out-of-tree build.
  - Support for pkg-config.
  - Unix: support for Loongson.
  - Unix: support for CheriBSD.
  - Compilers: support for icx, icpx, ibm-clang_r, ibm-clang++_r,
    CompCert, clang-cl and emscripten.
  - Windows: support for MSYS2/MinGW.
  - MSVC: the build now uses /O2 /DNDEBUG.
  - MSVC: new arm64/arm32 cross build scripts.
  - AIX: the shared libraries are now installed as versioned
    objects, e.g., shr4.o, shr4_64.o.
  - New ./configure switches:
  - --enable-static: enable/disable the build of the static
    libraries (default: enabled).
  - --enable-pc: enable/disable the install of the pkgconfig
    files (default: enabled).
  - --enable-doc: enable/disable the install of the documentation
    (default: enabled).
  - New man pages direct users to the mpdecimal-doc package or
    the online HTML documentation.
  - The prebuilt HTML documentation is now in the separate
    mpdecimal-doc package, which gives distributions that reject
    prebuilt documentation the option to disregard it and use the
    new man pages.
  - libmpdec:
  - Add the “z” format specifier (coerce negative zeros to
    positive).
  - In extremely rare cases the transcendental functions (exp,
    ln, log10) did not set the Subnormal/Underflow flags. The
    reason is that in the case of an exponent boundary the Ziv
    correction loop for correct rounding requires very few
    iterations to arrive at the correctly rounded result, but
    may need many more iterations to arrive at the correct
    flags.
  - In these cases, Subnormal/Underflow is not very
    informative, so the status quo was to skip the extra
    iterations.
  - Version 4.0.0 now specializes exponent boundary cases
    and uses up to five additional iterations to set
    Subnormal/Underflow. The refactored code has no speed
    penalty on average; in fact, in the deccheck tests (random
    tests with a bias towards corner cases) it is slightly
    faster.
  - No cases have been found where more than two additional
    iterations are required, but they may exist.
  - eability fixes
  - mpd_qset_string_exact(), mpd_qset_i64_exact() and
    mpd_qset_u64_exact() can now be called with a nonzero
    status. Previously, the functions could return
    NaN/Invalid_operation in that case.
  - This is listed under “reliability fixes” since there is
    no possible scenario under which these functions would
    legitimately be called with a nonzero status.
  - libmpdec++
  - Add input validation for Decimal.shiftl(), Decimal.shiftr()
    and Decimal::ln10().</changelog>
  <changelog author="mcepl@cepl.eu" date="1747137600">- Fix LDXXFLAGS (thank you Stefan Krah for providing the patch)</changelog>
</package>
<package pkgid="b4ae6dd8452865d712e094bb7de939946481b901e12b485ae8488e4d062f3fdbee5675e2a1a493008ed20d267da18a97ff264b38c24c64a639f3fa8a41b7985b" name="libmpfr6" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1594641600">- Update to mpfr 4.1.0
  * New function mpfr_get_str_ndigits about conversion to a string of digits.
  * New function mpfr_dot for the dot product (incomplete, experimental).
  * New functions mpfr_get_decimal128 and mpfr_set_decimal128 (available only
    when MPFR has been built with decimal float support).
  * New function mpfr_cmpabs_ui.
  * New function mpfr_total_order_p for the IEEE 754 totalOrder predicate.
  * The mpfr_out_str function now accepts bases from -2 to -36, in order to
    follow mpfr_get_str and GMP's mpf_out_str functions (these cases gave an
    assertion failure, as with other invalid bases).
  * Shared caches: cleanup; really detect lock failures (abort in this case).
  * The behavior of the formatted output functions (mpfr_printf, etc.) with
    an empty precision field has improved: trailing zeros are kept in a way
    similar to the formatted output functions from C.
  * Improved mpfr_add and mpfr_sub when all operands have a precision equal to
    twice the number of bits per word, e.g., 128 bits on a 64-bit platform.
  * Optimized the tuning parameters for various architectures.
  * Improved test coverage to 98.6% of code for x86_64.
  * Bug fixes.
  * MPFR manual: corrected/completed the mpfr_get_str description in order to
    follow the historical behavior and GMP's mpf_get_str function.
- Remove mpfr-4.0.2-p6.patch and floating-point-format-no-lto.patch</changelog>
  <changelog author="rguenther@suse.com" date="1613131200">- Add cummulative patch mpfr-4.1.0-p7.diff fixing various bugs.</changelog>
  <changelog author="rguenther@suse.com" date="1668772800">- Update to mpfr 4.1.1
  * Bug fixes (see &lt;https://www.mpfr.org/mpfr-4.1.0/#fixed&gt; and/or the
    ChangeLog file), in particular for macros implementing functions.
  * Improved manual formatting.
  * Accumulated bugfixes
- Remove mpfr-4.1.0-p7.diff, all patches are contained in the
  new version.
- Update mpfr.keyring</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1668859200">- package license files correctly</changelog>
  <changelog author="rguenther@suse.com" date="1669291200">- Add mpfr-4.1.1-patch01.patch to fix bug with code using
  the mpfr_custom_get_kind macro.</changelog>
  <changelog author="rguenther@suse.com" date="1673265600">- Update to mpfr 4.2.0
  * New functions mpfr_cosu, mpfr_sinu, mpfr_tanu, mpfr_acosu, mpfr_asinu,
    mpfr_atanu and mpfr_atan2u.
  * New functions mpfr_cospi, mpfr_sinpi, mpfr_tanpi, mpfr_acospi, mpfr_asinpi,
    mpfr_atanpi and mpfr_atan2pi.
  * New functions mpfr_log2p1, mpfr_log10p1, mpfr_exp2m1, mpfr_exp10m1 and
    mpfr_compound_si.
  * New functions mpfr_fmod_ui, mpfr_powr, mpfr_pown, mpfr_pow_uj, mpfr_pow_sj
    and mpfr_rootn_si (mpfr_pown is actually a macro defined as an alias for
    mpfr_pow_sj).
  * Bug fixes.
    In particular, for the formatted output functions (mpfr_printf, etc.),
    the case where the precision consists only of a period has been fixed
    to be like ".0" as specified in the ISO C standard, and the manual has
    been corrected and clarified.
    The macros of the custom interface have also been fixed: they now behave
    like functions (except a minor limitation for mpfr_custom_init_set).
- Remove mpfr-4.1.1-patch01.patch which is included in the new release.</changelog>
  <changelog author="schwab@suse.de" date="1675166400">- tests-tsprintf.patch: Avoid testsuite failure with glibc &gt;= 2.37</changelog>
  <changelog author="rguenther@suse.com" date="1681819200">- Add mpfr-4.2.0-cummulative.patch, cummulative patches for
  mpfr 4.2.0:
  * A test of the thousands separator in tsprintf.c is based on the
    output from the GNU C Library up to 2.36, which is incorrect.
  * The mpfr_ui_pow_ui function has infinite loop in case of overflow.
  * The tfprintf and tprintf tests may fail in locales where decimal_point
    has several bytes, such as ps_AF.
  * In particular cases that are very hard to round, mpfr_rec_sqrt may yield
    a stack overflow due to many small allocations in the stack, based on
    alloca().
- Remove tests-tsprintf.patch that's included in the above set.</changelog>
  <changelog author="rguenther@suse.com" date="1686139200">- Update mpfr-4.2.0-cummulative.patch, adds patches fixing the following bugs
  * the mpfr_reldiff function, which computes |b-c|/b, is buggy on special
    values, e.g. on the following (b,c) values: (+Inf,+Inf) gives ±0
    instead of NaN (like NaN/Inf); (+0,+0) gives 1 instead of NaN (like 0/0);
    (+0,1) gives 1 instead of Inf (like 1/0). Moreover, the sign of 0 for
    (+Inf,+Inf) or (-Inf,-Inf) is not set, i.e. it is just the sign of the
    destination before the call; as a consequence, results are not even
    consistent.
  * the reuse tests are incomplete: the sign of a result zero is not checked,
    so that it can miss bugs (one of the mpfr_reldiff bugs mentioned above,
    in particular).
  * the general code for the power function (mpfr_pow_general internal
    function) has two bugs in particular cases: the first one is an incorrect
    computation of the error bound when there has been an intermediate
    underflow or overflow (in such a case, the computation is performed
    again with a rescaling, thus with an additional error term, but there is
    a bug in the computation of this term), so that the result may be
    rounded incorrectly (in particular, a spurious overflow is possible);
    the second one occurs in a corner case (destination precision 1,
    rounding to nearest, and where the rounded result assuming an unbounded
    exponent range would be 2emin-2 and the exact result is larger than this
    value), with the only consequence being a missing underflow exception
    (the underflow flag is not set).
  * the mpfr_compound_si function can take a huge amount of memory and time
    in some cases (when the argument x is a large even integer and xn is
    represented exactly in the target precision) and does not correctly
    detect overflows and underflows
  * MPFR can crash when a formatted output function is called with
    %.2147483648Rg in the format string.</changelog>
  <changelog author="rguenther@suse.com" date="1692705600">- Update to mpfr 4.2.1
  * Includes all fixes from mpfr-4.2.0-cummulative.patch which is
    subsequently removed.
  * Improved MPFR manual.
  * Configure tests: replaced the test of the link with GMP, in order
    to avoid the use of a function without a prototype (Autoconf issue), as
    this is obsolescent in ISO C. The new test should be more robust.</changelog>
</package>
<package pkgid="fe97d0f1129d10116405e0fdd83f17099479732c9e7249e175ea88f56bacef0b0d1ddc787c93dac211a9fa4910bfac0a44f83285f160caefb779a1579be0c1fe" name="libmspack0" arch="x86_64">
  <version epoch="0" ver="0.11" rel="160000.2.2"/>
  <changelog author="mardnh@gmx.de" date="1516017600">- Update to version 0.6
  * read_spaninfo(): a CHM file can have no ResetTable and have a
  negative length in SpanInfo, which then feeds a negative output
  length to lzxd_init(), which then sets frame_size to a value of
  your choosing, the lower 32 bits of output length, larger than
  LZX_FRAME_SIZE. If the first LZX block is uncompressed, this
  writes data beyond the end of the window.
  This issue was raised by ClamAV as CVE-2017-6419.
  * lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the
  issue mentioned above, these functions now reject negative lengths
  * cabd_read_string(): add missing error check on result of read().
  If an mspack_system implementation returns an error, it's
  interpreted as a huge positive integer, which leads to reading
  past the end of the stack-based buffer.
  This issue was raised by ClamAV as CVE-2017-11423
- Add subpackage for helper tools
- Run spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1516104000">- Fix typo</changelog>
  <changelog author="jengelh@inai.de" date="1516104001">- Correct SRPM group.</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Correct mspack-tools group to Productivity/File utilities</changelog>
  <changelog author="sbrabec@suse.com" date="1532952000">- Update to version 0.7 (bsc#1103032):
  * Fix 1 or 2 byte overwrite by bad KWAJ file header extensions
    (CVE-2018-14681).
  * Fix 1 byte overread by character U+0100 in a CHM filename
    (CVE-2018-14682).
  * Reject blank CHM filenames (CVE-2018-14680).
  * Fix off-by-1 in CHM PMGI/PMGL chunk number validity checks,
    which could cause a crash (CVE-2018-14679).</changelog>
  <changelog author="sbrabec@suse.com" date="1540296000">- Update to version 0.8:
  * New parameter MSCABD_PARAM_SALVAGE which permits salvaging
    badly damaged files rather than rejecting them outright.
  * Fix the above 38912-byte Quantum CAB block bug.
  * Reject blank CHM filenames that are blank because they have
    embedded null bytes.
  * chmextract: Protect from absolute/relative pathnames in CHM
    files.</changelog>
  <changelog author="sbrabec@suse.com" date="1541592000">- Update to version 0.9.1:
  * Fix bug in decompressing data to get to the correct folder
    offset when the folder is LZX compressed (0.8 regression).
  * Build system cleanup
  * Testsuite available
  * Does not install testing tools and examples by default.
- Rename mspack-tools to mspack-examples to follow upstream change.</changelog>
  <changelog author="mardnh@gmx.de" date="1551700800">- Update to version 0.10:
  * Fix Heap buffer overflow in chmd_read_headers()
  * Fix memory exhausted in chmd_read_headers()
  * Fix memory exhausted in oabd_decompress()</changelog>
  <changelog author="mardnh@gmx.de" date="1551873600">- Update to version 0.10.1
  * Bugfix release, no functional changes</changelog>
  <changelog author="info@paolostivanin.com" date="1675684800">- Update to version 0.11:
  * see https://github.com/kyz/libmspack/blob/master/libmspack/ChangeLog
    for a full changelog</changelog>
</package>
<package pkgid="948bc3b1516569d98d525952937b4bc924f15292c87b5240be92921ac13165984976b383e35e3ea358630a44253101efadfab403db37c7cf63f27b1c2193c4aa" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.5.20250531" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Add a further sclp entry for qemu s390 based systems</changelog>
  <changelog author="werner@suse.de" date="1744632000">- Add ncurses patch 20250412
  + add pangoterm -TD
  + add kf1 to kf5 to sclp (report by Werner Fink)
  + add vt100+pf1-pf4 -TD
- Modify patch ncurses-5.9-ibm327x.dif
  * Skip the further entry as now aprt of the common `sclp' entry
  * Add ansi.sys entry to ibm327x for coloring support</changelog>
  <changelog author="werner@suse.de" date="1745841600">- Add ncurses patch 20250426
  + expand note on extensions in curs_addch.3x
  + add illumos, sun-16color, sun-256color, sun-direct -TD
  + add wyse+cvis -TD
- Add ncurses patch 20250419
  + add note on scrolling and lower-right corner to waddch and wadd_wch
    manual pages.
- Modify patch ncurses-5.9-ibm327x.dif
  * sclp term: more missed features like home/end/pageup/pagedown keys</changelog>
  <changelog author="werner@suse.de" date="1746014400">- Modify patch ncurses-5.9-ibm327x.dif
  * sclp term: use ASCII Console key mapping and support home
  * ibm327x term: can do color and drawings but no cursor</changelog>
  <changelog author="werner@suse.de" date="1746446400">- Add ncurses patch 20250503
  + update/correct some of the rv/xr strings, checked with tack -TD
  + use ansi+rca in sclp -TD
  + use vt220+pcedit in sclp (Werner Fink)
  + move some building blocks from illumos to sun-color, based on
    illumos source-history -TD
  + improve use-clauses: ansi+cup, ansi+idl1, ansi+rca, ansi+rca2,
    ansi+sgrso, ansi+sgrul -TD
  + add ecma+standout, ecma+underline -TD
  + add rv code for alacritty -TD
  + add rv/xr codes for contour, ghostty, iterm2, kitty, konsole,
    vscode, vte, wezterm -TD
- Modify patch ncurses-5.9-ibm327x.dif
  * Reflect upstream added changes
- Port patch ncurses-6.4.dif</changelog>
  <changelog author="werner@suse.de" date="1747051200">- Add ncurses patch 20250510
  + add rv/xr codes for domterm, mintty, mlterm -TD
  + add xr code for putty -TD
  + update teraterm to 5.0 -TD
  + add rlogin-color -TD</changelog>
  <changelog author="bwiedemann@suse.com" date="1747310400">- Avoid expanding %jobs in comment (boo#1237231)</changelog>
  <changelog author="werner@suse.de" date="1747656000">- Add ncurses patch 20250517
  + initial changes for some ABI 7 features:
    + disable wgetch-events
    + add feature for extending mouse-buttons
    + add feature for extending direct-color support
  + use bracketed+paste in nsterm, rlogin-color, screen, terminology -TD
- First steps to support ABI 7
- Update to tack-1.11-20250503
  * 2025/04/29 Add checks for RV/rv and XR/xr</changelog>
  <changelog author="werner@suse.de" date="1748260800">- Add ncurses patch 20250524
  + correct option-name used in configure script, which resulted in size
    change for cchar_t (cf: 20250517).</changelog>
  <changelog author="werner@suse.de" date="1748865600">- Add ncurses patch 20250531
  + improve logic in misc/run_tic.in for constructing symbolic link
    when $DESTDIR is set.</changelog>
</package>
<package pkgid="94904a629df2a8c7d5110c9b9fab287119a2e23194e709ddabca7d225b1ef9734d369cf05c915939ddd575cd5f22f3969d6049de3776d61c2624083891208faa" name="libndctl6" arch="x86_64">
  <version epoch="0" ver="82" rel="160000.2.2"/>
  <changelog author="msuchanek@suse.com" date="1661342400">- Update to version 74
  * Many CXL fixes
  * Some build system fixes
  * monitor: Fix the monitor config file parsing
  * ndctl/bus: Handle missing scrub commands more gracefully
  * ndctl/dimm: Flush invalidated labels after overwrite
  - Remove upstreamed patch
  - ndctl-build-Fix-systemd-unit-directory-detection.patch
  - ndctl-meson-make-modprobedatadir-an-option.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1673611200">- Update to version 75 (jsc#PED-1080):
  * CXL fixes and improvements
  * Add master-passphrase removal support
  * some oob memory access fixes</changelog>
  <changelog author="msuchanek@suse.com" date="1677067200">- Merge fixes since v75
  +  daxctl-Fix-memblock-enumeration-off-by-one.patch
  +  daxctl-Skip-over-memory-failure-node-status.patch
  +  meson.build-fix-version-for-v75.patch
  +  libndctl-msft-Remove-NDN_MSFT_SMART_-_VALID-defines.patch
  +  libndctl-msft-Replace-nonsense-NDN_MSFT_CMD_SMART-co.patch
  +  libndctl-msft-Add-custom-cmd_is_supported-method.patch
  +  libndctl-msft-Improve-smart-state-reporting.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1677153600">- Update to version 76
  * daxctl-online-memory: fix a memblock enumeration off-by-one
  * daxctl-online-memory: tolerate non-memblock sysfs attrs that start with 'memory_'
  * cxl-monitor: new command to monitor CXL events
  * Refresh harden_ndctl-monitor.service.patch: Apply to cxl-monitor as well
- Remove upstreamed patches
  - daxctl-Fix-memblock-enumeration-off-by-one.patch
  - daxctl-Skip-over-memory-failure-node-status.patch
  - meson.build-fix-version-for-v75.patch
  - libndctl-msft-Remove-NDN_MSFT_SMART_-_VALID-defines.patch
  - libndctl-msft-Replace-nonsense-NDN_MSFT_CMD_SMART-co.patch
  - libndctl-msft-Add-custom-cmd_is_supported-method.patch
  - libndctl-msft-Improve-smart-state-reporting.patch
- Add build fixes for TW and Leap
  + cxl-monitor-fix-include-paths-for-tracefs-and-tracee.patch
  + cxl-event-trace-use-the-wrapped-util_json_new_u64.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1692014400">- Update to version 78
  * Improved CXL support (jsc#PED-5804, jsc#PED-6162)
  - Remove upstreamed patches
  - cxl-monitor-fix-include-paths-for-tracefs-and-tracee.patch
  - cxl-event-trace-use-the-wrapped-util_json_new_u64.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="mli@suse.com" date="1717070400">- Update to version 79
  * New cxl-wait-sanitize and cxl-set-alert-config commands
  * Support for QOS Class in cxl-create-region</changelog>
  <changelog author="msuchanek@suse.com" date="1728561600">- Update to version 80
  * cxl-list: add --media-errors option
  * cxl-list: always emit memdev firmware revision
  * daxctl: fail create-device with extra parameters
  * daxctl: remove unused options from create-device usage message
- cxl-json-Fix-tracefs-include.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1743422400">- Update to version 81
  * ndctl/namespace: avoid integer overflow in namespace validation
  * ndctl/dimm: do not increment a ULLONG_MAX slot value
  * ndctl/namespace: protect against overflow handling param.offset
  * ndctl/namespace: protect against under|over-flow w bad param.align
  * ndctl/list: display region caps for any of BTT, PFN, DAX
  * cxl/region: report max size for region creation
  * daxctl: output more information if memblock is unremovable
  * cxl/json: remove prefix from tracefs.h #include
- Remove upstreamed cxl-json-Fix-tracefs-include.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1749729600">- Update to version 82
  * adds libcxl enumeration of FWCTL character devices - Linux 6.15 compatibility</changelog>
</package>
<package pkgid="519a1374c52a5f63c7f6c14cf851e8643f365c9718890e9cbe90e7dde8b56ccc5c69594e16b81ff0bd1d3b5710443b3c509de2cc1799748d892a2b109cfcbd7d" name="libndp0" arch="x86_64">
  <version epoch="0" ver="1.8" rel="160000.2.2"/>
  <changelog author="meissner@suse.com" date="1391860800">- library for neighbour discovery, for later use by NetworkManager</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907200">- Minor cleanups for inclusion into Factory:
  + Shared Library packages must only contain libraries (move
    binary file and man page to main package).
  + Adjust RPM Groups: Productivity/Networking/Other for the main
    package and System/Libraries for the shared library package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907201">- Update to version 1.3:
  + libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is
    used as parameter and destination in s[n]printf().
- No longer bootstrap: the tarball is complete.
- Remove libtool, automake and autoconf BuildRequires: no longer
  needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- Update to version 1.4:
  + libndp: fix buffer overflow in ndp_msg_opt_dnssl_domain().</changelog>
  <changelog author="mpluskal@suse.com" date="1463918400">- Update to version 1.6 (bsc#979645 CVE-2016-3698):
  * libndp: reject redirect and router advertisements from
    non-link-local
  * libndp: validate the IPv6 hop limit
- Changes for version 1.5:
  * ndptool: validate the IPv6 hop limit
- Small spec file adjustement:
  * Used spec-cleaner
  * Make building more verbose
  * Update describtion of subpackages
  * Use correct cathegory for subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.7
  * fix socket fd missing for O_CLOEXEC
  * Fix issue where not sending all IPs to an interface
  * typo in ndptool.c fixed</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 1.8:
  * libndp,ndptool: use poll() instead of select()
  * ndptool: avoid static buffer for string in ndptool
  * libndp: avoid static buffer for debug string in ndp_sock_recv()
  * libndp: use thread local variables for static return arguments
  * ndptool: fix printing dnssl lifetime in ndptool
  * ndptool: fix potential memory leak caused by strdup
  * libndp: close sockfd after using to avoid handle leak</changelog>
  <changelog author="mgorse@suse.com" date="1719489600">- Add libndp-CVE-2024-5564.patch: add a check on the route
  information option length field (bsc#1225771 CVE-2024-5564).</changelog>
</package>
<package pkgid="846bd8112d482fb08fb45b49460ecabbdcfe8ad2e003f9470e4a0a975206771c318b080cb4ddae93724558cbddbf1c11a1d1a4e1294636e806f2783517658cba" name="libnetfilter_conntrack3" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.0.5
  * conntrack: add mark event filter
  * conntrack: compare: relax MARK/ZONE attribute comparison</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.0.6
  * add support for IPv6 NAT
  * conntrack: add zone attribute to tuple</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.0.7
  * new synproxy support
  * don't crash on NULL labelmap
  * expose a copy of nf_conntrack_common.h</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.0.8
  * conntrack: support for IPS_OFFLOAD</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1644840000">- Update to release 1.0.9
  * This release comes with the new nfct_nlmsg_build_filter()
    function that allows to add metadata for kernel-side
    filtering of conntrack entries during conntrack table dump.
  * The nfct_query() API supports the new NFCT_Q_FLUSH_FILTER
    argument, it allows to flush only IPv6 or IPv4 entries from
    the connection tracking table.</changelog>
  <changelog author="jengelh@inai.de" date="1727352000">- Update to release 1.1.0
  * Enhancements for filtering dump and flush commands, see
    struct nfct_filter_dump and nfct_nlmsg_build_filter().
  * ctnetlink event BPF fixes (endianness issue, IPv6 matching)
    and enhancements (zone matching).</changelog>
  <changelog author="jengelh@inai.de" date="1732536000">- Specfile modernization</changelog>
</package>
<package pkgid="70c5e0b1681f0fc5f9aa7db890c179257d68ed848549e24686237d22304cec79d56aaf4927a7180a59f42b598728226598f0ae847be0819d964af95c48d6fd5d" name="libnetfilter_cthelper0" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="160000.3.2"/>
  <changelog author="jengelh@inai.de" date="1338811200">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1346414400">- Rectify baselibs.conf to include the right package name</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to initial official release 1.0.0
  * This library provides the infrastructure for the user-space
  helper infrastructure available since the Linux kernel 3.6.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="cshorler@googlemail.com" date="1417953600">- Add fix_h_expect_policy_free.patch to fix crash due to following
  a just-freed pointer [bnc#908875]</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Remove version from subinclude directory; it tends to break
  recompiles of third software after a library update.</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow build on uclinux
  * Resolve use-after-free in nfct_helper_free()
  * Resolve double free in nfct-helper-add example
  * Fixed incorrect netlink message building with multiple nfct
    helper policies
- Drop fix_h_expect_policy_free.patch (merged)</changelog>
</package>
<package pkgid="2ed4368ab61c607dcac99b0ab862c85422415efbd54b34119be316eab9e0c3861c979acf7902b9820517589e53a017ed47258b262b516c463a02e4d5dcfd3f1e" name="libnetfilter_cttimeout1" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="160000.3.2"/>
  <changelog author="jengelh@medozas.de" date="1330516800">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to first official tarball release 1.0.0
  * Add ICMPv6 support
  * add new parameter type to nfct_timeout_snprintf</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow building on uclinux</changelog>
</package>
<package pkgid="a8553a11124eadad23698a3ab6155c8b173a264bf9df30977f234cf213f30409079cb7a63e9b95c4d85f2c9746a8818ae74380759852e931d4042438a23e4253" name="libnettle8" arch="x86_64">
  <version epoch="0" ver="3.10.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 3.8:
  This release includes a couple of new features, and many
  performance improvements. It adds assembly code for two more
  architectures: ARM64 and S390x.
  The new version is intended to be fully source and binary
  compatible with Nettle-3.6. The shared library names are
  libnettle.so.8.5 and libhogweed.so.6.5, with sonames
  libnettle.so.8 and libhogweed.so.6.
  New features:
  * AES keywrap (RFC 3394), contributed by Nicolas Mora.
  * SM3 hash function, contributed by Tianjia Zhang.
  * New functions cbc_aes128_encrypt, cbc_aes192_encrypt,
    cbc_aes256_encrypt.
    On processors where AES is fast enough, e.g., x86_64 with
    aesni instructions, the overhead of using Nettle's general
    cbc_encrypt can be significant. The new functions can be
    implemented in assembly, to do multiple blocks with reduced
    per-block overhead.
    Note that there's no corresponding new decrypt functions,
    since the general cbc_decrypt doesn't suffer from the same
    performance problem.
  Bug fixes:
  * Fix fat builds for x86_64 windows, these appear to never
    have worked.
  Optimizations:
  * New ARM64 implementation of AES, GCM, Chacha, SHA1 and
    SHA256, for processors supporting crypto extensions. Great
    speedups, and fat builds are supported. Contributed by
    Mamone Tarsha.
  * New s390x implementation of AES, GCM, Chacha, memxor, SHA1,
    SHA256, SHA512 and SHA3. Great speedups, and fat builds are
    supported. Contributed by Mamone Tarsha.
  * New PPC64 assembly for ecc modulo/redc operations,
    contributed by Amitay Isaacs, Martin Schwenke and Alastair
    D´Silva.
  * The x86_64 AES implementation using aesni instructions has
    been reorganized with one separate function per key size,
    each interleaving the processing of two blocks at a time
    (when the caller processes multiple blocks with each call).
    This gives a modest performance improvement on some
    processors.
  * Rewritten and faster x86_64 poly1305 assembly.
- drop libnettle-s390x-CPACF-SHA-AES-support.patch (included in 3.8)</changelog>
  <changelog author="dmueller@suse.com" date="1659009600">- update to 3.8.1:
  * Avoid non-posix m4 argument references in the chacha
    implementation for arm64, powerpc64 and s390x. Reported by
    Christian Weisgerber, fix contributed by Mamone Tarsha.
  * Use explicit .machine pseudo-ops where needed in s390x
    assembly files. Bug report by Andreas K. Huettel, fix
    contributed by Mamone Tarsha.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1684152000">- update to 3.9
  * rewrite of the C and plain x86_64 assembly implementations of
    GHASH to use precomputed tables in a different way, with tables
    always accessed in the same sequential manner. This should make
    Nettle's GHASH implementation side-channel silent on all
    platforms, but considerably slower on platforms without carry-
    less mul instructions. E.g., benchmarks of the C implementation
    on x86_64 showed a slowdown of 3 times.
  * Fix bug in ecdsa and gostdsa signature verify operation, for
    the unlikely corner case that point addition really is point
    duplication.
  * Fix for chacha on Power7, nettle's assembly used an instruction
    only available on later processors
  * Add support for the SM4 block cipher
  * Add support for the Balloon password hash
  * Add support for SIV-GCM authenticated encryption mode
  * Add support for OCB authenticated encryption mode.
  * New exported functions md5_compress, sha1_compress,
    sha256_compress, sha512_compress
  * multiple performance optimizations
  * Delete all arcfour assembly code. Affects 32-bit x86, 32-bit
    and 64-bit sparc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1686139200">- update to 3.9.1: [bsc#1212112, CVE-2023-36660]
  * Fix bug in the new OCB code may be exploitable for denial of
    service or worse due to memory corruption</changelog>
  <changelog author="pmonreal@suse.com" date="1686225600">- Include the nettle library manual in HTML and PDF formats in
  the devel package.</changelog>
  <changelog author="pmonreal@suse.com" date="1686312000">- Add the architecture specific READMEs as provided by upstream.</changelog>
  <changelog author="pmonreal@suse.com" date="1718625600">- Update to 3.10:
  * Bug fixes:
  - Add missing hash functions sha512_224 and sha512_256 to the
    nettle_get_hashes() list. The name values in the
    corresponding nettle_hash structs also changed to use
    underscore instead of dash, for consistency.
  - Fix a few cases of formally undefined calls to memcpy(dst,
    NULL, 0), resulting from valid calls to, e.g.,
    sha256_update(ctx, 0, NULL).
  * New features:
  - Support RSA-OAEP encryption. Contributed by Nicolas Mora and Daiki Ueno.
  - New function sha3_256_shake_output, new functions
    sha3_128_init, sha3_128_update, sha3_128_shake,
    sha3_128_shake_output. Contributed by Daiki Ueno.
  - Added DRBG-CTR with AES256, contributed by Simon Josefsson.
  * Optimizations:
  - New combined gcm-aes assembly for powerpc64, contributed by Danny Tsen.
  - New sha256 assembly for powerpc64, contributed by Eric Richter.
  - Improved performance for powerpc64 AES decrypt, by skipping
    subkey transformations that don't suit the vncipher instructions.
  - Add arm64 CPU feature detection for Android and for Apple systems,
    contributed by Foolbar and Tim Kosse, prespectively.
  * Miscellaneous:
  - New tests for side-channel silence, based on valgrind.
  - Delete all md5 assembly code. Delete all sparc32 assembly code.</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- ppcl64le: POWER10 performance enhancements for cryptography [jsc#PED-9904]
  * powerpc64/sha256: fix loading overreads by loading less and shifting
  * powerpc64/sha256: adjust stack offset for storing non-volatile registers
  * powerpc64: remove use of m4_unquote in the load step for sha256
  * Temporarily skip the gcm test: libnettle-powerpc64-skip-AES-GCM-test.patch
  * Add patches:
  - libnettle-powerpc64-sha256-fix-loading-overreads.patch
  - libnettle-powerpc64-sha256-adjust-stack-offset-for-non-volatile-registers.patch
  - libnettle-powerpc64-remove-m4_unquote-sha256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1735819200">- Update to nettle 3.10.1:
  * Bug fixes:
  - Fix buffer overread in the new sha256 assembly for
    powerpc64, as well as a stack alignment issue.
  - Added missing nettle_mac structs for hmac-gosthash.
  - Fix configure test for valgrind, to not attempt to run
    valgrind on executables built using memory sanitizers.
  * Enable back the gcm regression test:
  - Remove libnettle-powerpc64-skip-AES-GCM-test.patch
  * Remove patches upstream:
  - libnettle-powerpc64-sha256-fix-loading-overreads.patch
  - libnettle-powerpc64-sha256-adjust-stack-offset-for-non-volatile-registers.patch
  - libnettle-powerpc64-remove-m4_unquote-sha256.patch</changelog>
</package>
<package pkgid="48abee9c8618b515c2c2a116b0364b21889fdcad8d04a9c5b5e67cf71565e75c977033ffb99ab7f7c9a5da3231e1affb9cce92e320073e8ff6e4b8f0f12124b9" name="libnewt0_52" arch="x86_64">
  <version epoch="0" ver="0.52.24" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Use current factory dependencies
- Always build python3 bindings
- Small cleanup with spec-clenaer</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Build without py2 if needed
- Fix upstream url</changelog>
  <changelog author="lars@linux-schulserver.de - 0.52.20" date="1553083200">- use new license string compatible with latest spdx.org changes
- ran spec-cleaner
- adjust spec file to be able to build for SLE-12 and below:
  + re-add BuildRoot definition
  + re-add defattr definitions
  + define python2_sitearch if the macro is not defined
- added newt-0.52.20-implicit-pointer-decl.patch to get rid of
  compiler warnings about implicit definitions of functions</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="mpluskal@suse.com" date="1587643200">- Update to version 0.52.21:
  * define env NEWT_NOFLOWCTRL to disable flow control (Robert Gill)
  * don't leak memory on errors in dialogboxes
  * fix radio button selection check in snack
  * fix plural forms in Lithuanian translation (#1568999)
  * fix parallel build (Émeric Dupont)
  * allow python versions to be specified with --with-python option</changelog>
  <changelog author="fvogt@suse.com" date="1591790400">- Split doc build into separate spec file
- As the example scripts are "pointless", just don't install them</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 0.52.23:
  * fix automatic height of menu/list in whiptail (broken in 0.52.22)
  * fix automatic width of whiptail --yesno box
  * fix automatic width in whiptail with unicode characters
  * fix automatic width with whiptail --noitem and --notags options
  * fix spacing with longer tags in whiptail
  * avoid overlapping backtitle in whiptail with automatic height
  * fix crash in whiptail with new libpopt
  * switch from usleep to nanosleep (Rosen Penev)
  * fix libnewt.pc to enable static linking (Alexey Sheplyakov)
  * fix LDFLAGS order in snack linking (Sam James)
  * use CFLAGS when compiling snack
  * improve configure.ac (Thomas Kuehne)
  * install header and libnewt.pc with shared library (Michael Olbrich)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 0.52.24:
  * add support for python3.13
  * fix compiler warnings</changelog>
  <changelog author="mjambor@suse.com" date="1720785600">- Add -D_GNU_SOURCE to compilation flags because it is a required
  feature macro for function setlinebuf to be declared. [boo#1225864]</changelog>
</package>
<package pkgid="a253f5b62be3f5182d2d9b481fc05eae2f273b6723f048749663f2243c4a3494e45d18f07a385547d9ee41c1b2e252b3e89d3a3a569402494fdb62cebb298ae6" name="libnfnetlink0" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="160000.3.2"/>
  <changelog author="jengelh@medozas.de" date="1325332800">- Update to new git snapshot 1.0.0+git28
  * build updates, license update</changelog>
  <changelog author="cfarrell@suse.com" date="1328875200">- license update: GPL-2.0
  Look at e.g. src/iftable.c - please check if GPL-3.0 applications require
  this library</changelog>
  <changelog author="jengelh@inai.de" date="1346414400">- Update to new git snapshot 1.0.0+git35
  * Fix incomplete retrieval of the interface list,
  which causes conntrackd to not operate as desired
  (http://marc.info/?l=netfilter&amp;m=134458290414850&amp;w=2 )</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.1
  (no changes over 1.0.0+git35, this is just the official release)</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1649246400">- Update to release 1.0.2
  * Resolved Valgrind warnings due to uninitialized padding in
    netlink messages.</changelog>
</package>
<package pkgid="a276f412cf73dcafd138522f500b4383284d7d7489fd55d4e0737c6bdd9c7972272c113f8fe47c39ee90e3bb18ddc881091fdafc28d289d99c181db37d525918" name="libnfsidmap1" arch="x86_64">
  <version epoch="0" ver="1.0" rel="160000.2.2"/>
  <changelog author="nfbrown@suse.com" date="1680004800">- Add 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0008-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be sed in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="pvorel@suse.cz" date="1681992000">- Update to version 2.6.3
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.3/2.6.3-Changelog
- Remove patches from this release:
  - 0006-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  - 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  - 0008-nfsd.man-fix-typo-in-section-on-scope.patch
- Remove systemd/50-nfs.conf (was removed in upstream in d8d29f85)
  and the realted patch (bsc#1200710).
  0005-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch.
- New file /usr/lib/udev/rules.d/60-nfs.rules (which replaced in upstream
  systemd/50-nfs.conf in 9466df03).
- Add fsidd:
  - /usr/lib/systemd/system/fsidd.service
  - /usr/lib/udev/rules.d/60-nfs.rules
  - /usr/sbin/fsidd</changelog>
  <changelog author="nfbrown@suse.com" date="1697457600">- 0001-export-fix-handling-of-error-from-match_fsid.patch
  Errors from match_fsid() shouldn't be fatal.
  (bsc#1214540)</changelog>
  <changelog author="nfbrown@suse.com" date="1700049600">- Build with --enable-junction so that nfsref is built
  https://lore.kernel.org/linux-nfs/DFBBA6DD-7F22-4A38-BAA2-DBD40EB81BB9@oracle.com/</changelog>
  <changelog author="nfbrown@suse.com" date="1701777600">- Update to version 2.6.4
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.4/2.6.4-Changelog
  - includes fixes for bsc#1210997
- Removed patchs from this release
  - 0001-export-fix-handling-of-error-from-match_fsid.patch
- Added some upstream patches
  - 0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
  - 0002-conffile-don-t-report-error-from-conf_init_file.patch
  - 0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
  - 0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
  These fix minor bugs and allow config files to be in /usr/etc.
  So also move config files to /usr/etc and create directories
  foo.conf.d for each config file, so other config file can easily
  be addded.
  (boo#1216740)</changelog>
  <changelog author="nfbrown@suse.com" date="1713787200">- nfs-utils.spec: Provide nfsidmap as well as obsoleting it.
  (bsc#1222947)</changelog>
  <changelog author="dmueller@suse.com" date="1724155200">- add 0001-gssd-revert-commit-a5f3b7ccb01c.patch,
  0002-gssd-revert-commit-513630d720bd.patch,
  0003-gssd-switch-to-using-rpc_gss_seccreate.patch,
  0004-gssd-handle-KRB5_AP_ERR_BAD_INTEGRITY-for-machine-cr.patch,
  0005-gssd-handle-KRB5_AP_ERR_BAD_INTEGRITY-for-user-crede.patch,
  0006-configure-check-for-rpc_gss_seccreate.patch: fixes for
  libtirpc 1.3.5</changelog>
  <changelog author="pvorel@suse.cz" date="1730203200">- Update to version 2.8.1
  - https://lore.kernel.org/linux-nfs/4a86eea3-973e-4535-8aa5-f3b8b5f7934d@redhat.com/
  - https://kernel.org/pub/linux/utils/nfs-utils/2.8.1/2.8.1-Changelog
  - Add new binary nfsdctl
  - The default number of nfsd threads is now 16 instead of 8
- Removed patchs from previous releases
  - 0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
  - 0002-conffile-don-t-report-error-from-conf_init_file.patch
  - 0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
  - 0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
  - 0001-gssd-revert-commit-a5f3b7ccb01c.patch
  - 0002-gssd-revert-commit-513630d720bd.patch
  - 0003-gssd-switch-to-using-rpc_gss_seccreate.patch
  - 0004-gssd-handle-KRB5_AP_ERR_BAD_INTEGRITY-for-machine-cr.patch
  - 0005-gssd-handle-KRB5_AP_ERR_BAD_INTEGRITY-for-user-crede.patch
  - 0006-configure-check-for-rpc_gss_seccreate.patch
- Turn nfs-utils-1.0.7-bind-syntax.patch to git patch (bug reference,
  easier to refresh via git, likely it can be now removed)
- Add BuildRequires libnl-3.0, readline</changelog>
  <changelog author="william.brown@suse.com" date="1733918400">- Require system-user-nobody for nfs-client as the statd user relies
  on `nogroup` from this package</changelog>
  <changelog author="dmueller@suse.com" date="1739016000">- update to 2.8.2:
  * exports: Fix referrals when --enable-junction=no
  * nfsidmap(v2): Add guards around [nfsidmap] usages of [sysconf].
  * libnsm(v2): fix the safer atomic filenames fix
  * libnsm: fix the safer atomic filenames fix
  * nfsd: dump default number of threads to 16
  * autoconf: don't build nfsdcltrack by default
  * nfs(5): Update rsize/wsize options
  * nfsdctl: clarify when versions can be set on the man page
  * nfsdctl: fix up the help text in version_usage()
  * libnsm: safer atomic filenames
  * nfs-utils: fixup statd testing simulator host arg
  * mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation</changelog>
</package>
<package pkgid="aa186c08a3e9fba6812dab0955d6ef9cd9254ee2e0d981e724cc90fae6d919fa04e27541055ae48ea1505b8ed121c62c81437e9594b67795821b7f5097ef345c" name="libnftables1" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 1.0.8
  * Support for setting meta and ct mark from other fields in
    rules, e.g. set meta mark to ip dscp header field.
  * Enhacements for -o/--optimize to deal with NAT statements, to
    compact masquerade statements.
  * Support for stateful statements in anonymous maps, such as
    counters.
  * Support for resetting stateful expressions in sets, maps and
    elements, e.g. counters.
  * broute support to short-circuit bridge logic from the bridge
    prerouting hook and pass up packets to the local IP stack.
  * JSON support for table and chain comments.
- Added 0001-Revert-py-replace-distutils-with-setuptools.patch</changelog>
  <changelog author="jengelh@inai.de" date="1697716800">- Update to release 1.0.9
  * Custom conntrack timeouts can use time specification with
    units other than seconds.
  * Allow combination of dnat with numgen.
  * Allow for using constants as key in dynamic sets.
  * Support for matching on the target address of a IPv6 neighbour
    solicitation/advertisement.
  * Restore bitwise operations in combination with maps, e.g. jump
    to chain depending on bitwise operation on packet mark.
  * Fix crash with log prefix longer that 127 bytes.
- Drop merged 0001-Revert-py-replace-distutils-with-setuptools.patch</changelog>
  <changelog author="code@bnavigator.de" date="1704283200">- Fix the python bindings subpackages
  * The PEP517 python build requires setuptools
  * Actually use the rpm subpackage definition
  * The version is actually python3dist(nftables) = 0.1
  * is noarch and requires libnftables1 through dlopen, tell
    rpmlint
  * remove unused shebang</changelog>
  <changelog author="dmueller@suse.com" date="1704369600">- buildrequire setuptools explicitly as pip drops the dependency</changelog>
  <changelog author="jengelh@inai.de" date="1721217600">- Update to release 1.1.0
  * Restore compatibility set element dump with &lt;= 0.9.8
  * Disallow empty interface names
  * Restore rule replace command
  * Search for group, rt_mark, rt_realms at
    /etc/iproute2, /usr/share/iproute2
  * Resolve some timezone issues
  * Support for variables in map expressions
  * VLAN support</changelog>
  <changelog author="jengelh@inai.de" date="1727956800">- Update to release 1.1.1
  * Reduce netlink cache dependencies to speed up incremental
    updates.
  * Allow zero burst in byte ratelimiter expression.
  * Fix double-free when users call nft_ctx_clear_vars() followed
    by nft_ctx_free().
  * Document that the tproxy statement is non-terminal (unlike in
    iptables). This allows for tproxy+log and tproxy+mark combos,
    see man nft(8) for details.
  * Add egress support for the `list hooks` subcommand.</changelog>
  <changelog author="jengelh@inai.de" date="1741089600">- Add 0001-tools-add-a-systemd-unit-for-static-rulesets.patch
  [boo#1237277]</changelog>
  <changelog author="jengelh@inai.de" date="1741435200">- Update 0001-tools-add-a-systemd-unit-for-static-rulesets.patch
  from new submission.</changelog>
  <changelog author="jengelh@inai.de" date="1744632000">- Update to release 1.1.2
  * Allow for expressing protocol dependency on sets.
  * Support for more advanced bitwise operations with statements.
  * Set element auto-merge now skips elements with
    timeout/expiration.
  * Memory footprint reduction for set elements.
  * Updated `nft monitor` to report flowtable events.
  * Support for merging bitmask matching in set/map with
  - o/--optimize.
  * Improved MPTCP support with symbol table for subtypes.</changelog>
  <changelog author="jengelh@inai.de" date="1745323200">- Update to release 1.1.3
  * Fix incorrect bytecode for vlan pcp mangling from netdev family
    chains such as ingress/egress: `... vlan pcp set 6 counter`
  * Fix bogus element in large concatenated set ranges, leading to:
    ``16777216 . 00:11:22:33:44:55 . 10.1.2.3 comment "123"``
    instead of:
    ``"lo" . 00:11:22:33:44:55 . 10.1.2.3 comment "123"``
  * Restore set auto-merge feature with timeouts, disabled in the
    previous v1.1.2 release.</changelog>
</package>
<package pkgid="cc62b25de5207c1303727e21aa62582d96186edb634932aa83f8eda87f1e01417764c51e4ac1007068682f2cb5565f493c71d3b8881ad4f020b7cb349376091f" name="libnftnl11" arch="x86_64">
  <version epoch="0" ver="1.2.9" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1637236800">- Update to release 1.2.1
  * expr: add last match time support
  * expr: missing netlink attribute in last expression</changelog>
  <changelog author="jengelh@inai.de" date="1654603200">- Update to release 1.2.2
  * exthdr: tcp option reset support</changelog>
  <changelog author="jengelh@inai.de" date="1660046400">- Update to release 1.2.3
  * This release includes a compile time bugfix with clang and
  - D_FORTIFY_SOURCE=2.</changelog>
  <changelog author="jengelh@inai.de" date="1668081600">- Update to release 1.2.4
  * rule, set_elem: remove trailing \n in userdata snprintf
  * libnftnl: Fix res_id byte order</changelog>
  <changelog author="jengelh@inai.de" date="1678363200">- Update to release 1.2.5
  * expr: add inner support</changelog>
  <changelog author="jengelh@inai.de" date="1689076800">- Update to release 1.2.6
  * expr: meta: introduce broute meta expression</changelog>
  <changelog author="jengelh@inai.de" date="1721131200">- Update to release 1.2.7
  * Avoid potential use-after-free when clearing set's expression
    list
  * Avoid misc buffer overflows in attribute setters
  * Implement nftnl_obj_unset symbol already exported in
    libnftnl.map
  * Remove unimplemented symbols from libnftnl.map
  * Validate per-expression and per-object attribute value and
    data length
  * Fix synproxy object setter with unaligned data</changelog>
  <changelog author="jengelh@inai.de" date="1727956800">- Update to release 1.2.8
  * Fixes for incorrect validation of dynset netlink attributes
    from the kernel</changelog>
  <changelog author="jengelh@inai.de" date="1744632000">- Update to release 1.2.9
  * Added support for kernel space AND, OR and XOR operations (for
    Linux kernel &gt;= 6.13)
  * Fix ct id being printed as "unknown" key</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1745841600">- Update signing key to 0x8C5F7146A1757A65E2422A94D70D1A666ACF2B21,
  which is currently used to sign the latest tarballs including
  version 1.2.9.</changelog>
</package>
<package pkgid="daf096bca4261a30677be6e7a441c1e9b5b8aa158659898aba73c3037e1f2d7efd1f6964cf8bdf6000cb5f3e02ed7fdbe1b6354b54e07900b6621bd9a38c2a4f" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="160000.3.1"/>
  <changelog author="dmueller@suse.com" date="1700568000">- fix unversioned provides to be in sync with nghttp3</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.58.0:
  * Update manual pages
  * Bump neverbleed
  * Bump ngtcp2
  * Prefer clock_gettime if __CYGWIN__ defined
  * Do not require strict c++ mode
  * nghttpx: Stricter transfer-encoding checks
  * Refactor character comparison
  * Integration servertester h3
  * integration: Enable http3 test with cmake</changelog>
  <changelog author="dmueller@suse.com" date="1706443200">- update to 1.59.0:
  * Update bash_completion
  * h2load: Fix bug that ttfb is not recorded if h3 stream
    has no data
  * h2load: Consider all h2 HEADERS when counting bytes and
    recording ttfb
  * h2load: Ignore 1xx status code
  * nghttpd: Free SSL_CTX on exit
  * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data
  * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data
  * cmake: Require OpenSSL &gt;= 1.1.1
  * Add nghttp2_select_alpn and deprecate
    nghttp2_select_next_protocol
  * nghttpx: Add --alpn-list and deprecate --npn-list
  * h2load: Add --alpn-list and deprecate --npn-list
  * Remove NPN
  * src: Support building with aws-lc
  * Avoid detecting OpenSSL 3.2 as quictls
  * Use nghttp3_pri_parse_priority added since nghttp3 v1.1.0
  * h2load: Fix IPv6 address in :authority
  * h2load: Fix IPv6 address in :authority
  * nghttpx: Propagate stream priority from backend to
    frontend
  * nghttpx: Propagate stream priority from backend to
    frontend
  * Merge pull request #1991 from nghttp2/get-and-parse-
    extpri
  * Add API to get and parse RFC 9218 priority
  * nghttpx: Prefer __FILE_NAME__ if defined</changelog>
  <changelog author="pgajdos@suse.com" date="1710763200">- version update to 1.60.0
  * makerelease.sh: Speed up git submodule
  * Speed up git clone
  * build(deps): bump actions/cache from 3 to 4
  * Fixing the build and install trees
  * build(deps): bump microsoft/setup-msbuild from 1 to 2
  * nghttpx: Set ocsp response to SSL in case of boringssl
  * Run with python3
  * src: Certificate Compression with boringssl
  * Fix missing newline
  * Switch to aws lc
  * Libbrotli fixup
  * Deprecate RFC 7540 priorities (aka stream dependencies)
  * Let dependabot manage go modules
  * build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0
  * integration-tests: Omit unused parameters
  * Munit
  * Introduce nghttp2_ssize API
  * Move deprecated warning upfront
  * Describe RFC 7540 priorities deprecation plan
  * Apps migrate nghttp2 ssize
  * src: Remove unused functions
  * Reconsider ssize t usage in src
  * Use GitHub private vulnerability reporting
  * Move security policy to GitHub standard location
  * Bump mruby to 3.3.0
  * Bump llhttp to 48588093ca4219b5f689acfc9ebea9e4c8c37663
  * h2load: Add --sni option
  * Bump ngtcp2 dependencies
  * mruby: Adopt deprecation of mrbc_ prefix
  * neverbleed: Define _GNU_SOURCE for pthread_setaffinity_np
  * bpf: Pre-expand aes key
  * mruby: Exclude mrdb gem which causes nghttpx to crash
  * nghttpx: Reuse EVP_CIPHER_CTX for QUIC connection ID encryption
  * Run apt-get update before install
  * src: Deal with the case that send_quantum &lt; max_udp_payload_size
  * nghttpx: Remove SHRPX_QUIC_MAX_UDP_PAYLOAD_SIZE
  * Fix build when AI_NUMERICSERV is undefined
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="mpluskal@suse.com" date="1710763201">- Update keyring with current key</changelog>
  <changelog author="adam.majer@suse.de" date="1712145600">- gcc7.patch: Fix compilation for SLE-15 (jsc#PED-8206)</changelog>
  <changelog author="pgajdos@suse.com" date="1712232000">- version update to 1.61.0
  * Fixes CVE-2024-28182 [bsc#1221399]
  * nghttpx: Shutdown h3 stream read with trailer as well by @tatsuhiro-t in #2087
  * Checkout with submodules by @jonaski in #2093
  * Respect BUILD_STATIC_LIBS and add option for tests by @jonaski in #2092
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2097
  * Workaround llvm issue on github ubuntu runner by @tatsuhiro-t in #2098
  * docker: Use copy --link by @tatsuhiro-t in #2099
  * Nghttpx header idle timeout by @tatsuhiro-t in #2100
  * nghttpx: Fix frontend-header-timeout does not work in config file by @tatsuhiro-t in #2101
  * Rewrite hexdump by @tatsuhiro-t in #2102
  * Switch to distroless/base-nossl by @tatsuhiro-t in #2103
  * Bump ngtcp2 by @tatsuhiro-t in #2105
  * nghttpx: Simplify quic connection close handling by @tatsuhiro-t in #2106
  * build(deps): bump github.com/quic-go/quic-go from 0.41.0 to 0.42.0 by @dependabot in #2107
  * autotools: Use tar-ustar automake option by @tatsuhiro-t in #2108
  * Automate release process by @tatsuhiro-t in #2109
  * autotools: Switch to tar-pax by @tatsuhiro-t in #2110
  * nghttpx: Drop a UDP datagram from well-known port by @tatsuhiro-t in #2111
  * nghttpx: Fix port byte order by @tatsuhiro-t in #2112
  * h2load: Allow host header to be overridden by @tatsuhiro-t in #2113
  * nghttpx: Rework QUIC stateless reset packet size by @tatsuhiro-t in #2114
  * nghttpx: More QUIC prohibited ports by @tatsuhiro-t in #2115
  * Add actions/stale by @tatsuhiro-t in #2116
  * nghttpx: Discard UDP datagram that is too short to be a valid QUIC packet by @tatsuhiro-t in #2117
  * nghttp: Support SSLKEYLOGFILE by @tatsuhiro-t in #2119
  * No rfc7540 priority fix by @tatsuhiro-t in #2120
  * Further reduce Stateless reset emission by @tatsuhiro-t in #2122
  * nghttpx: Rework Connection ID construction by @tatsuhiro-t in #2124
  * Nghttpx faster worker lookup by @tatsuhiro-t in #2125
  * nghttpx: Split thread into worker_process and thread by @tatsuhiro-t in #2126
  * bpf: Drop bad QUIC packet by @tatsuhiro-t in #2127
  * cmake: check SSL_provide_quic_data when ENABLE_HTTP3 is ON by @jimmy-park in #2128
  * nghttpx: Allocate 3 bits for QUIC configuration in Connection ID by @tatsuhiro-t in #2129
  * nghttpx: Migrate to ares_getaddrinfo by @tatsuhiro-t in #2132
  * Bump munit by @tatsuhiro-t in #2131
  * nghttpx: Fix error message by @tatsuhiro-t in #2133
  * nghttpd: Fix read stall by @tatsuhiro-t in #2134</changelog>
  <changelog author="dmueller@suse.com" date="1718625600">- update to 1.62.1:
  * nghttpx: Fix batch UDP QUIC packet dropped on GRO read
- update to 1.62.0:
  * nghttpx: Fix QUIC stateless reset stack buffer overflow
  * Require c-ares &gt;= 1.16.0 for ares_getaddrinfo
  * Require C++20 compiler
  * Adopt std::to_array and remove make_array
  * nghttpx: Define APIEndpoints separately
  * nghttpx: Do not send error/status body when method is HEAD
  * nghttpx: Fix alignment issues in BlockAllocator
  * nghttpx: Simplify parameter declaration for ipc_fd functions
  * nghttpx: Add extent to ipc_fd explicitly
  * Make make_byte_ref return std::span
  * Make util::decode_hex return std::span
  * Rewrite util::parse_uint
  * Let base64::decode return std::span
  * Refactor StringRef
  * Stringref refactor c str and str
  * Add StringRef literal operator and remove StringRef::from_lit
  * Make StringRef(const std::string&amp;) implicit
  * Add http2::make_field family functions
  * Remove std::string conversion operator from StringRef
  * Optimize StringRef comparisons against c-string
  * Pack more quic pkt
  * nghttpx: Dynamic GSO failover
  * Refactor ImmutableString
  * nghttpx: Refactor QUIC data path
  * nghttpx: Fix inherited TCP port comparison
  * make_websocket_accept_token: Lesser conversions
  * Add http3::make_field family functions
  * Remove unnecessary namespace qualifications
  * Refactor http utils
  * Refactor streq
  * Remove util::streq and let StringRef operator== deal with it
  * Update the link for the Prefix.pdf document. fix #2178
  * Introduce typed nghttp2_min and nghttp2_max
- drop gcc7.patch (obsolete, we require C++20 now)</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- version update to 1.64.0
  1.64.0
  * Change clang-format options by @tatsuhiro-t in #2240
  * build(deps): bump github.com/quic-go/quic-go from 0.46.0 to 0.47.0 by @dependabot in #2243
  * build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #2244
  * nghttp2_map: Port ngtcp2 changes by @tatsuhiro-t in #2245
  * h2load: Fix UDP datagram send/recv metric by @tatsuhiro-t in #2248
  * build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #2252
  * fix race condition on h1 connection close by @TuxInvader in #2249
  * Gha ubuntu 24.04 by @tatsuhiro-t in #2254
  * GHA: Run tests for i686-w64-mingw32 host by @tatsuhiro-t in #2255
  * cmake: Fix c-ares v1.34.0 version detection failure by @tatsuhiro-t in #2256
  * fix: -Wextra-semi errors in nghttp2_helper.h by @codebytere in #2258
  * clang-format macros that do not need semicolon at the end by @tatsuhiro-t in #2259
  * Remove extra semicolons by @tatsuhiro-t in #2260
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2261
  * Do not allow '@' in :authority or host field values by @tatsuhiro-t in #2262
  * h2load: GRO buffer size should be 64KiB by @tatsuhiro-t in #2263
  * Bump libbpf to v1.4.6 by @tatsuhiro-t in #2264
  * Update nghttp2_check_authority doc by @tatsuhiro-t in #2265
  1.63.0
  * Bump libbpf to v1.4.2 by @tatsuhiro-t in #2191
  * build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #2193
  * nghttpx: Fix batch UDP QUIC packet dropped on GRO read by @tatsuhiro-t in #2196
  * CMakeLists.txt: allow to compile the C only lib without CXX compiler by @ThomasDevoogdt in #2200
  * build(deps): bump github.com/quic-go/quic-go from 0.43.1 to 0.44.0 by @dependabot in #2197
  * Fix compiler versions in readme by @ryandesign in #2203
  * build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #2205
  * build(deps): bump github.com/quic-go/quic-go from 0.44.0 to 0.45.0 by @dependabot in #2206
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2207
  * build(deps): bump docker/build-push-action from 5 to 6 by @dependabot in #2208
  * Add wolfSSL support by @tatsuhiro-t in #2209
  * Append --shallow-submodules to git clone --recursive by @tatsuhiro-t in #2210
  * Always append options to extra options by @tatsuhiro-t in #2211
  * build(deps): bump github.com/quic-go/quic-go from 0.45.0 to 0.45.1 by @dependabot in #2213
  * Disable dependency tracking by @tatsuhiro-t in #2214
  * Fix Dockerfile.android build failure by @tatsuhiro-t in #2215
  * Fix UDP_GRO struct cmsghdr data type by @tatsuhiro-t in #2216
  * GHA: Suppress warnings by @tatsuhiro-t in #2217
  * Fix levenshtein initialization by @tatsuhiro-t in #2218
  * build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #2220
  * Undefine NGHTTP2_NO_SSIZE_T if BUILDING_NGHTTP2 is defined by @tatsuhiro-t in #2224
  * Bump clang format by @tatsuhiro-t in #2226
  * Suppress old compiler error by @tatsuhiro-t in #2228
  * build(deps): bump github.com/quic-go/quic-go from 0.45.1 to 0.45.2 by @dependabot in #2229
  * build(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #2231
  * build(deps): bump github.com/quic-go/quic-go from 0.45.2 to 0.46.0 by @dependabot in #2232
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2236
  * Bump libbpf to v1.4.5 by @tatsuhiro-t in #2237
  * Update go by @tatsuhiro-t in #2238
  * levenshtein: Use size_t by @tatsuhiro-t in #2239</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845)
  * nghttp2-CVE-2026-27135.patch</changelog>
</package>
<package pkgid="432bba97cbe99107785173599a1c4b196b03fa7d873b9617ca4b6a91ba77ad4e98e829496c4c973c5bf15524458c89eb7e14dfb81c613a29ae9be9627f0c2842" name="libnl-config" arch="noarch">
  <version epoch="0" ver="3.11.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1519646400">- Update to new upstream release 3.4.0 [boo#1082756]
  * route/link: add accessor API for IPv6 flags
  * Provide accessors for actions (rtnl_act).
  * rule: Add support for l3mdev in FIB rules
  * addr: add AF_VSOCK to translation table
  * addr: Add support for AF_MPLS
  * route: Add support for MPLS address family
  * route: Add support for TTL propagation in MPLS routes
  * route: Add support for lwtunnel and MPLS  encapsulations</changelog>
  <changelog author="jengelh@inai.de" date="1576756800">- Update to release 3.5.0
  * route/qdisc: add 64-bit rate/ceil support for htb class
  * xfrmi: introduce XFRM interfaces support
  * xfrm: fix memory corruption (dangling pointer) when when
    setting xfrmnl_sa
  * route/link: avoid dangling pointer in rtnl_link_set_slave_type()
  * nla_ok: fix overrun in attribute iteration.
  * route:act: add vlan action
  * route:tc: allow to set chain index for tc objects
  * route:qdisc: add MQPRIO Qdisc
  * if_tunnel: update IFLA defines up to FWMARK
  * Add support for cloning cgroup filter objects
  * neigh: cache updates as well query AF_BRIDGE neigh
  * route:cls: add matchall classifier
  * neigh: support bridge entries for vxlan interfaces
  * rule: add support for protocol and port ranges
  * link: add Geneve support</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1629720000">- Add 0001-route-link-add-RTNL_LINK_REASM_OVERLAPS-stat.patch
  [boo#1189451]</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Update to release 3.6.0
  * route/mdb: add support for MAC multicast entries
  * mdb: support bridge multicast database notification
  * Support Hardware offload capability for MACsec
  * nflog: add CT support
  * Add IPv6 GRE support
  * Add IPv6 VTI support
  * Add support for team devices
- Drop 0001-route-link-add-RTNL_LINK_REASM_OVERLAPS-stat.patch
  (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1657108800">- Update to release 3.7
  * route/mdb: fix buffer overflow in mdb_msg_parser()
  * route/act: add NAT action</changelog>
  <changelog author="jengelh@inai.de" date="1693310400">- Update to release 3.8
  * addr: create an all-zero addresses when parsing "any" or "default"
  * addr: allow constructing all-zero addresses
  * route: construct all-zero addresses for default route destination
  * bridge: Add support for link_info of a bridge
  * bridge: extend libnl with options needed for VLAN aware forwarding
  * route/link: add accessor API for IPv6 DEVCONF
  * neigh: add support of NHID attribute
  * route: add nh type</changelog>
  <changelog author="jengelh@inai.de" date="1701691200">- Update to release 3.9
  * route/link: add bonding interface options set rtnl apis
  * route: fix memleak in rtnl_act_parse()
  * route/tc: avoid integer overflow in rtnl_tc_calc_cell_log()</changelog>
  <changelog author="jengelh@inai.de" date="1721476800">- Update to release 3.10
  * route: support for setting ageing time for dynamic bridge
    table entries
  * route: support for VLAN filtering on bridge ports
  * route: support for layer 3 filtering on bridges</changelog>
  <changelog author="jengelh@inai.de" date="1730289600">- Update to release 3.11
  * Add NLA_{SINT|UINT} attribute types
  * Add NLA functions for variable-length integers
  * link/bonding: add getters for attributes
  * lib/route: add support for bridge msti</changelog>
</package>
<package pkgid="98f50f9d82d18e31992db378faf34c036f64a5148451cc23ba830c1528e565ef0885e759518a1bcb17cb0c26c8f601880444d8c1203597c1734b0fb7926e5947" name="libnl3-200" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1519646400">- Update to new upstream release 3.4.0 [boo#1082756]
  * route/link: add accessor API for IPv6 flags
  * Provide accessors for actions (rtnl_act).
  * rule: Add support for l3mdev in FIB rules
  * addr: add AF_VSOCK to translation table
  * addr: Add support for AF_MPLS
  * route: Add support for MPLS address family
  * route: Add support for TTL propagation in MPLS routes
  * route: Add support for lwtunnel and MPLS  encapsulations</changelog>
  <changelog author="jengelh@inai.de" date="1576756800">- Update to release 3.5.0
  * route/qdisc: add 64-bit rate/ceil support for htb class
  * xfrmi: introduce XFRM interfaces support
  * xfrm: fix memory corruption (dangling pointer) when when
    setting xfrmnl_sa
  * route/link: avoid dangling pointer in rtnl_link_set_slave_type()
  * nla_ok: fix overrun in attribute iteration.
  * route:act: add vlan action
  * route:tc: allow to set chain index for tc objects
  * route:qdisc: add MQPRIO Qdisc
  * if_tunnel: update IFLA defines up to FWMARK
  * Add support for cloning cgroup filter objects
  * neigh: cache updates as well query AF_BRIDGE neigh
  * route:cls: add matchall classifier
  * neigh: support bridge entries for vxlan interfaces
  * rule: add support for protocol and port ranges
  * link: add Geneve support</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1629720000">- Add 0001-route-link-add-RTNL_LINK_REASM_OVERLAPS-stat.patch
  [boo#1189451]</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Update to release 3.6.0
  * route/mdb: add support for MAC multicast entries
  * mdb: support bridge multicast database notification
  * Support Hardware offload capability for MACsec
  * nflog: add CT support
  * Add IPv6 GRE support
  * Add IPv6 VTI support
  * Add support for team devices
- Drop 0001-route-link-add-RTNL_LINK_REASM_OVERLAPS-stat.patch
  (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1657108800">- Update to release 3.7
  * route/mdb: fix buffer overflow in mdb_msg_parser()
  * route/act: add NAT action</changelog>
  <changelog author="jengelh@inai.de" date="1693310400">- Update to release 3.8
  * addr: create an all-zero addresses when parsing "any" or "default"
  * addr: allow constructing all-zero addresses
  * route: construct all-zero addresses for default route destination
  * bridge: Add support for link_info of a bridge
  * bridge: extend libnl with options needed for VLAN aware forwarding
  * route/link: add accessor API for IPv6 DEVCONF
  * neigh: add support of NHID attribute
  * route: add nh type</changelog>
  <changelog author="jengelh@inai.de" date="1701691200">- Update to release 3.9
  * route/link: add bonding interface options set rtnl apis
  * route: fix memleak in rtnl_act_parse()
  * route/tc: avoid integer overflow in rtnl_tc_calc_cell_log()</changelog>
  <changelog author="jengelh@inai.de" date="1721476800">- Update to release 3.10
  * route: support for setting ageing time for dynamic bridge
    table entries
  * route: support for VLAN filtering on bridge ports
  * route: support for layer 3 filtering on bridges</changelog>
  <changelog author="jengelh@inai.de" date="1730289600">- Update to release 3.11
  * Add NLA_{SINT|UINT} attribute types
  * Add NLA functions for variable-length integers
  * link/bonding: add getters for attributes
  * lib/route: add support for bridge msti</changelog>
</package>
<package pkgid="013b454fb1d39b4fe985deb3f04c5ce721c9318a016d585dc44171daed717f63b302df815bd835dd56178e5197678b0bec4841279a3b15d20e69ee4fc1749723" name="libnm0" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="861da5b8be0b24777d76c14d3094a973b21d7ef45dcdf212d4d5576a35057da2caa23c89c8b1f1b62f680a444385cd60010967ed977003fe06730f9794b43342" name="libnpth0" arch="x86_64">
  <version epoch="0" ver="1.8" rel="160000.2.3"/>
  <changelog author="astieger@suse.com" date="1428753600">- npth 1.2:
  * Fix possible clobbering of ERRNO.</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- update to 1.3:
  * Bypass npth_protect/npth_unprotect iff the library has not yet
    been initialized.
  * Improve detection of clock_gettime
- use reproducible build timestamp</changelog>
  <changelog author="astieger@suse.com" date="1494936000">- update to 1.4:
  * fixes for platforms other than GNU/Linux
  * New function npth_is_protected to help debugging.
  * Change license from LGPLv3+/GPLv2+ to LGPLv2+.
- run tests
- update signing keyring
- package license text and other information</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- update to 1.5:
  * Fix the busy waiting emulation of pthread_mutex_timedlock for
    Unices lacking that function</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1531742400">- Update to 1.6:
  * Fix library requirements for HPUX.</changelog>
  <changelog author="jengelh@inai.de" date="1599220800">- Remove old specfile constructs and doubleshipping of docs.</changelog>
  <changelog author="pmonreal@suse.com" date="1708948800">- Update to 1.7:
  * The npth-config command is not installed by default, because it is
    now replaced by use of pkg-config/gpgrt-config with npth.pc.
    Supply --enable-install-npth-config configure option, if needed.
  * Support for legacy systems w/o pthread_rwlock_t support.  [T4306]
  * New functions npth_poll and npth_ppoll for Unix.  [T5748]
  * Fixes to improve support for 64 bit Windows.
  * Fix declaration conflict using newer mingw versions.  [T5889]
  * Fix build problems on Solaris 11.  [T4491]
  * Fix detecting of the pthread library.  [rPTH6629a4b801]
  * Clean up handling of unsafe semaphores on AIX.  [T6947]
  * Link without -flat_namespace to support macOS 11.  [T5610]
  * Release-info: https://dev.gnupg.org/T7010
  * Update spec file
  * Update upstream npth.keyring</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1738324800">- Update to 1.8:
  * New function npth_get_version
  * New macros NPTH_VERSION and NPTH_VERSION_NUMBER
  * Fix INSERT_EXPOSE_RWLOCK_API for musl C library
  * Return a run-time error if npth_rwlock_timedrdlock is not
    supported</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741089600">- specfile: update license to LGPL-2.1-or-later</changelog>
</package>
<package pkgid="662c251ae2c394ed3c925fbfd1b57ff095feb6a2f7df49d3e6bd29c1b18d478074cea3207bf3e6798aa4c8de3a4e57a5ca11b5e954ec642830b5c221b00c0996" name="libnss_usrfiles2" arch="x86_64">
  <version epoch="0" ver="2.27.1" rel="160000.3.2"/>
  <changelog author="kukuk@suse.de" date="1490097600">- Filter out GLIBC_PRIVATE</changelog>
  <changelog author="kukuk@suse.de" date="1490184000">- Move Requires to correct sub-package</changelog>
  <changelog author="kukuk@suse.de" date="1490616000">- Add docu and /usr/etc as directory
- Adjust nsswitch.conf on openSUSE, too</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- RPM group correction</changelog>
  <changelog author="kukuk@suse.de" date="1515412800">- The default nsswitch.conf has changed again back to the old
  values [bsc#1074515]</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1549108800">- Update to version 2.27
  - Sync with glibc 2.27 source code
  - Add support for alias, ethers, protocols, services and rpc
- Add usrfiles to /etc/nsswitch.conf only on first installation,
  remove it during de-installation.</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove post %install section to make it generic useable</changelog>
  <changelog author="kukuk@suse.com" date="1632916800">- Install into _libdir [bsc#1191070]</changelog>
  <changelog author="kukuk@suse.com" date="1710936000">- Update to version 2.27.1
  - Cleanup prototypes</changelog>
</package>
<package pkgid="1ec63217b0f17622bdde8c85afe0faab24a5ac89b454dafdb70be9ca06bec527fe389715b4caff1de7a9e9762aa8e8b71dc3dfd33dcfa7fe514da5c6343b52df" name="libnuma1" arch="x86_64">
  <version epoch="0" ver="2.0.19.14.g690a72c" rel="160000.2.2"/>
  <changelog author="trenn@suse.de" date="1706616000">- Update to version 2.0.17.4.g63befa8:
  * Fix CodeQl Warn: Wrong type of arguments to formatting function
  * libnuma: Fix incorrect print and exit of numa_preferred/_many APIs
  * libnuma: Fix unexpected output
  * Fix README.md
  * Increase version number
  * Fix build badge
  * Fix README.md
  * Update README.md
  * Add configure file for release
  * Fix unused function return warning in numastat
  * fix complain() fuction print newline
  * Document that numa_police_memory may cause data races
  * Add numastat_diff from jirka-h
  * Enable v1 compatibility for unused getnodemask test
  * libnuma: Handle initialization without sysfs
  * Support empty memory nodes
  * numactl: Add --version option to print version
  * Remove obsolete numamon file
  * numactl: Use standard tab indent for print_node_cpus
  * Avoid using /proc/cpuinfo in test suite
  * numact: Add --cpu-compress option
  * Pin release workflow script to minimize risk of supply chain attacks
  * move_pages: Fix warning (missing hunk from earlier revert)
  * numastat: Remove unused functions
  * distance: Remove unused variable (NFC)
  * numademo: Adjust memcpy test bandwidth calculation
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * Refactor print_node_cpus to display CPU ranges instead of individual CPUs
  * numactl: Fix manual for --preferred and --preferred-many
  * Revert "Fix build error on riscv64 by linking libatomic"
  * Include &lt;fcntl.h&gt; instead of &lt;sys/fcntl.h&gt;
  * Fix the example usage in the numactl manual
  * Fix issue #190 about numa_exit_on_warn does not work
  * Create SECURITY.md
  * fix: fix memory leaks when run with -H
  * use mems allowed nodes to test prefer_many policy.
  * fix typo in memhog.8
  * Update move_pages.c
  * migspeed don't have to be linked against librt
  * Add MPOL_F_RELATIVE/STATIC_NODES</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707134400">- Update to version 2.0.17.8.g67984e5:
  * numastat: Print package version number instead of own.
  * numastat: Remove commented out perl code
  * Check for MPOL_PREFERRED_MANY lazily
  * libnuma: add numa_set_mempolicy_home_node API</changelog>
  <changelog author="trenn@suse.de" date="1707393600">- Update to version 2.0.18.0.g3871b1c:
  * Increase version number to 2.0.18
  * man pages: fix table include preprocessor</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="trenn@suse.de" date="1715601600">- Update to version 2.0.18.5.g4bfdcc6:
  * numactl: Add documentation for weighted interleave
  * numactl: Fix RESOURCE_LEAK in show()
  * numademo: Fix the using of the uninitialized value
  * Add `-w` and `--weighted-interleave` for weighted interleave mode
  * Fix fallback for set_mempolicy_home_node syscall</changelog>
  <changelog author="trenn@suse.de" date="1728561600">- Update to version 2.0.18.10.g6c14bd5:
  * Save and restore errno when probing for SET_PREFERRED_MANY
  * libnuma: fix nodemask allocation size for get_mempolicy
  * Update numactl.c
  * numastat: eliminate hard-coded tables
  * Don't fail build when set_mempolicy_home_node syscall is unknown
  * numactl: Add documentation for weighted interleave
  * numactl: Fix RESOURCE_LEAK in show()
  * numademo: Fix the using of the uninitialized value
  * Add `-w` and `--weighted-interleave` for weighted interleave mode
  * Fix fallback for set_mempolicy_home_node syscall</changelog>
  <changelog author="trenn@suse.de" date="1744372800">- Update to version 2.0.19.13.g63e0223:
  * libnuma.c: Introduce numa_preferred_err()
  * numactl: Add --show option support for MPOL_WEIGHTED_INTERLEAVE
  * Add numa_get_weighted_interleave_mask() API
  * libnuma: Add APIs for weighted-interleaved allocations
  * libnuma.c: Fix memleak in numa_has_home_node()
  * Replace fgrep with grep -F to fix warning
  * Make numa_available respect EPERM</changelog>
  <changelog author="trenn@suse.de" date="1750766400">- Fix Node0 does not exist (bsc#1244492)
  A 4abeee1aac20a7a2552870e0359b8df013ae9037.patch</changelog>
  <changelog author="trenn@suse.de" date="1751284800">- Update to version 2.0.19.14.g690a72c:
  * numastat command fails on LPAR which is not having node0
  Patch is now upstream:
  https://github.com/numactl/numactl/pull/246
  D    4abeee1aac20a7a2552870e0359b8df013ae9037.patch
  Patches are wrong or not needed anymore:
  https://github.com/numactl/numactl/pull/246
  D    0001-Fixed-segfault-when-no-node-could-be-found-in-sysfs-.patch
  D    numactl-clearcache-pie.patch</changelog>
  <changelog author="trenn@suse.de" date="1754308800">- bsc#1247093 bsc#1246858
  Cleanup code by reverting 2 patches and get back to old
  has_preferred_many initialization.
  This allows to call numa_set_bind_policy early again.
  A    Cleanup-No-need-to-suppress-possible-errno-anymore.patch
  A    Cleanup-move-has_preferred_many-to-numa_init-again.patch</changelog>
</package>
<package pkgid="b96e823aa04aafc9903dcfdf80f31a903cdfac610370889474a4fb7a187e7cc54747f20d3f58d2936ecb1d17c871f6376423d8f48239269a21eca5a0bb5c125d" name="libnvme-mi1" arch="x86_64">
  <version epoch="0" ver="1.11+17.g6d55624d" rel="160000.1.1"/>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+4.g18b9f8e5:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
- Drop intergrated patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1759752000">- Update to version 1.11+17.g6d55624d:
  * linux: use EVP_PKEY_CTX_add1_hkdf_info only once in compat function (bsc#1246914)
  * nvme/linux: check for empty digest in gen_tls_identity() (bsc#1246914)
  * nvme/linux: add fallback implementation for nvme_insert_tls_key_compat() (bsc#1246914)
  * linux: fix HKDF TLS key derivation back to OpenSSL 3.0.8 (bsc#1246914)
  * libnvme: TLS PSK derivation fixes (bsc#1246914)
  * linux: rename __nvme_insert_tls_key_versioned() to __nvme_insert_tls_key() (bsc#1246914)
  * linux: rename __nvme_insert_tls_key() to __nvme_import_tls_key() (bsc#1246914)
  * test/psk: add testcase for TLS identity derivation (bsc#1246914)
  * linux: set errno when nvme_generate_tls_key_identity() fails (bsc#1246914)
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)</changelog>
</package>
<package pkgid="95a76268e654aa9a0754e6d836276e21534e3fa28c0d1e658fd9a347de07e44c0c1344a1e1f4fdbd767aaae50e7bf3e1b52ed47ecd5d4216157c8502dcb52e6e" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.11+17.g6d55624d" rel="160000.1.1"/>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+4.g18b9f8e5:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
- Drop intergrated patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1759752000">- Update to version 1.11+17.g6d55624d:
  * linux: use EVP_PKEY_CTX_add1_hkdf_info only once in compat function (bsc#1246914)
  * nvme/linux: check for empty digest in gen_tls_identity() (bsc#1246914)
  * nvme/linux: add fallback implementation for nvme_insert_tls_key_compat() (bsc#1246914)
  * linux: fix HKDF TLS key derivation back to OpenSSL 3.0.8 (bsc#1246914)
  * libnvme: TLS PSK derivation fixes (bsc#1246914)
  * linux: rename __nvme_insert_tls_key_versioned() to __nvme_insert_tls_key() (bsc#1246914)
  * linux: rename __nvme_insert_tls_key() to __nvme_import_tls_key() (bsc#1246914)
  * test/psk: add testcase for TLS identity derivation (bsc#1246914)
  * linux: set errno when nvme_generate_tls_key_identity() fails (bsc#1246914)
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)</changelog>
</package>
<package pkgid="d1f38b8a53045c5af877d7691064ebd6dc6b6cd5eeea14f687833eec8ef1d395d1cb5bfab74cc2aa64926e9afccd440ddeddf6f078093032b7c05d119c2e0ad7" name="liboath0" arch="x86_64">
  <version epoch="0" ver="2.6.11.12" rel="160000.3.2"/>
  <changelog author="schwab@suse.de" date="1533556800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="mardnh@gmx.de" date="1609243200">- Update to version 2.6.5
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.
    KEY and OTP may now be given as '-' to mean stdin, or @FILE to
    read from a particular file.  This is recommended on multi-user
    systems, since secrets as command line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.
  * Doc fixes.
- Update to version 2.6.4
  * libpskc: New --with-xmlsec-crypto-engine to hard-code crypto
    engine.  Use it like --with-xmlsec-crypto-engine=gnutls or
  - -with-xmlsec-crypto-engine=openssl if the default dynamic
    loading fails because of runtime linker search path issues.
  * oathtool --totp --verbose now prints TOTP hash mode.
  * oathtool: Hash names (e.g., SHA256) for --totp are now upper
    case.  Lower/mixed case hash names are supported for
    compatibility.
  * pam_oath: Fail gracefully for missing users.
    This allows you to incrementally add support for OATH
    authentication instead of forcing it on all users.
  * Fix libpskc memory corruption bug.
  * Fix man pages.
  * Build fixes.
- Update to version 2.6.3
  * pam_oath: Fix self-tests.
- Drop not longer needed patches:
  * 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch
  * 0003-pam_oath-assign-safe-default-to-alwaysok-config-memb.patch
  * 0002-update_gnulibs_files.patch
  * gnulib-libio.patch
- Use source verification
- Use proper source URLs</changelog>
  <changelog author="mardnh@gmx.de" date="1611144000">- Update to version 2.6.6
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.  KEY and OTP may now be given as '-' to mean
    stdin, or @FILE to read from a particular file.  This is
    recommended on multi-user systems, since secrets as command
    line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.</changelog>
  <changelog author="mardnh@gmx.de" date="1619956800">- Update to version 2.6.7
  * pam_oath: Support variables in usersfile string parameter.
    These changes introduce the ${USER} and ${HOME} placeholder
    values for the usersfile string in the pam_oath configuration
    file. The placeholder values allow the user credentials file
    to be stored in a file path that is relative to the user, and
    mimics similar behavior found in google-authenticator-libpam.
    The motivation for these changes is to allow for
    non-privileged processes to use pam_oath (e.g., for 2FA with
    xscreensaver). Non-privileged and non-suid programs are
    unable to use pam_oath. These changes are a proposed
    alternative to a suid helper binary as well.
  * doc: Fix project URL in man pages.
  * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config.
  * build: Modernize autotools usage.
    Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE
    to make rebuilding from source more safe with future automake
    versions.
  * Updated gnulib files.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- url -&gt; https</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659441600">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="mardnh@gmx.de" date="1688904000">- Update to version 2.6.8
  * libpskc: Fixes for recent libxmlsec releases.
  * pam_oath: Provide fallback pam_modutil_getpwnam implementation.
  * pam_oath: Don't fail authentication when pam_modutil_getpwnam
  doesn't ** know the user when usersfile don't include ${USER}
  or ${HOME}.
  * pam_oath: Self-test improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.6.11
  * liboath: Handle invalid base32 encoded secrets.  Fixes: #41.
  * Various build fixes including updated gnulib files.
  * Improve compatibility with recent libxmlsec.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726228800">- Fix security issue CVE-2024-47191 by adding
  0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch .
- Add patch to implement new null_usersfile_okay argument
  42-null_usersfile_okay.patch .
- Makes this version 2.6.11.12 to be able to depend on it.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1729080000">- Update 0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch
  with bsc#1231699 improvements for security fix CVE-2024-47191</changelog>
</package>
<package pkgid="01a81f159f82e3eea2c9564cfef46ffa65a20b26fe7203ec8dcfd7254220a43f26760bb7fe0118e08d198fd8ece3cd02d7adc6782ff77baef002bdf697c9ab47" name="libogg0" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="160000.3.2"/>
  <changelog author="reddwarf@opensuse.org" date="1321790400">- updated to version 1.3.0
  * Add ogg_stream_flush_fill() call
    This produces longer packets on flush, similar to
    what ogg_stream_pageout_fill() does for single pages.
- run spec-cleaner on it
- remove "SLES10 -&gt; SLES11 upgrade path" parts since the upgrade
  already happened and anyway the entry in bugzilla is not public</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level does not exist, use -O3</changelog>
  <changelog author="coolo@suse.com" date="1324814401">- own aclocal directory</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libogg 1.3.1
  * Guard against very large packets.
  * Respect the configure --docdir override.
  * Documentation fixes.
- fix SLE build</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 1.3.2
  * Fix an bug in oggpack_writecopy().</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Orthographic fixes to descriptions. RPM group fix.</changelog>
  <changelog author="9+suse@cirno.systems" date="1522152000">- Use %license macro
- Update to version 1.3.3
  * Fix an issue with corrupt continued packet handling.</changelog>
  <changelog author="jengelh@inai.de" date="1567339200">- Update to release 1.3.4
  * Faster slice-by-8 CRC32 implementation.
    See https://lwn.net/Articles/453931/ for motivation.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 1.3.5:
  * Fix unsigned typedef problem on macOS.
  * Fix overflow check in ogg_sync_buffer.
  * Clean up cmake and autotools build files.
  * Remove Symbian and Apple XCode build files.
  * Fix documentation cross-reference links.</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="3ae264324218f206f6ba115577a03c2ea246339ab1059971d258043ee98228773f519142cccc7713986499339aa31bb31485f7a63da25f6d12699a90e0e683f4" name="libonig5" arch="x86_64">
  <version epoch="0" ver="6.9.8" rel="160000.2.2"/>
  <changelog author="i@marguerite.su" date="1410004800">- update version 5.9.5
  * [impl] escape warnings for -Wall.
  * [impl] remove unused variable.
- changes in 5.9.4
  * [dist] add oniguruma.pc.in file
- changes in 5.9.3
  * fix print_tree ENCLOSE_OPTION bug</changelog>
  <changelog author="i@marguerite.su" date="1445428800">- update version 5.9.6
  * [impl] add onigenc_end_unicode().
  * [impl] add onig_add_end_call().</changelog>
  <changelog author="mrueckert@suse.de" date="1456833600">- remove ruby build requires. seems unused.</changelog>
  <changelog author="mrueckert@suse.de" date="1502107200">- Version 6.5.0
  - [new] support Absent clear (Absent functions)
  - abolish configure option: --enable-combination-explosion-check
  - [new] support Absent functions (?~...)
  - fix #65: SIZEOF_SIZE_T doesn't exist on certain architecutres
  - [new] support \O (true anychar)
  - [new] support \K (keep)
  - add new node type: NODE_GIMMICK
  - [new] support \N (no newline)
  - [new] support \R (general newline)
  - [new] support if-then-else syntax
  - [new] support backref validity checker
- Version 6.4.0
  - fix memory leaks
  - change encoding of doc/XXXX.ja from EUC-JP to UTF-8
  - update doc/RE, and doc/RE.ja
  - fix fatal bug of endless repeat check on Windows
  - PR #62 : add check for return values
  - [new] support call zero (\g{0})
  - [new] support relative call by positive number
  - [new] support relative back-reference by positive number
  - fix #60 : check value type
  - change output format for ONIG_DEBUG_COMPILE and
    ONIG_DEBUG_MATCH
- Version 6.3.0
  - fix #60 : invalid state(CCS_VALUE) in parse_char_class()
  - fix #59 : access to invalid address by reg-&gt;dmax value
  - fix invalid increment of start position in onig_scan()
  - fix #58 : access to invalid address by reg-&gt;dmin value
  - fix #57 : DATA_ENSURE() check must be before data access
  - fix #56 : return invalid result for codepoint 0xFFFFFFFF
  - [new] add \o{17777777777} syntax.
  - fix #55 : Byte value expressed in octal must be smaller than
    256
- Version 6.2.0
  - fix: size in xmemcpy in stack_double (PR #51)
  - Initialize return value
  - NEW API: add onig_set_capture_num_limit()
  - change MemNumType from short int to int
  - fix: [0-9-a] was not allowed as [0-9\-a]
  - fix: illegal capture after recursive call
  - fix: problem with optimization of \z
  - fix: .* optimization
  - Set a limit of parser recursion
  - fix; that warnings are not shown properly
  - fix: /[a-c#]+\W/ =~ "def#" fails when encoding is UTF-16/32
  - fix: /[\x{0}-X]/i doesn't match properly when UTF-16/32 is
    used.
- Version 6.1.3
  - fix: Syntax error: redirection unexpected (expecting word) #35
- Version 6.1.2
  - allow word bound, word begin and word end in look-behind.
  - add ONIG_OPTION_CHECK_VALIDITY_OF_STRING option.
  - fix use after free node.
  - fix memory leaks after parsing regexp error.
  - implement many of is_valid_mbc_string().
- Version 6.1.1
  - fix segfault /W.?{888}{888}{888}\x00/ (found by libfuzzer)
  - fix error unmatched close parenthesis for %{(.*?)} #23
- Version 6.1.0
  - add contributed/libfuzzer-onig.cpp  (thanks hannob)
  - update LTVERSION 4:0:0
  - NEW API: onigenc_is_valid_mbc_string().
  - add is_valid_mbc_string() member into OnigEncodingType.
  - fix out of bounds read.
  - disable USE_INVALID_CODE_SCHEME.
  - doc/RE improved.
  - add onig_scan() into doc/API.
  - fix bug: Out of bounds read in onig_strcpy() #17
  - fix bug: infinite loop of backreference and group.
  - fix out of bounds read in mbc_to_code() #16
  - doc/RE refinements.
  - add onig_scan() (NEW API)
  - reimplement match stack allocation for case too many repeat
  - and too many captures in regexp.
  - number of captures &lt;= 32767 for bytecode representation.
  - don't use int_map_backward for thread-safe.
  - fix case of enclosed option in look-behind.
  - fix ignore case in look-behind.
  - fix memory leak in onig_unicode_define_user_property()
  - declare variables at the top of scope.  (thanks nmaya)
- Version 6.0.0
  - add NEW API: onig_unicode_define_user_property()
  - update Unicode data to 8.0.0
  - change OnigCodePoint type to unsigned int.
  - add doc/UNICODE_PROPERTIES.
  - add error code ONIGERR_FAIL_TO_INITIALIZE.
  - add make_win64/32.bat.
  - fix bug of uninitialized regex_t value on error.
  - reimplement Unicode case folding.
  - update LTVERSION = 3.0.0
  - remove all THREAD_ macro.
  - add init member into OnigEncoding. (add onig_initialize())
  - remove state member of regex.
  - move source files into src/
  - rename configre.in to configure.ac.
  - fix memory leak. (thanks pigzang)
  - change mail address.</changelog>
  <changelog author="avindra@opensuse.org" date="1514030400">- Version 6.7.0
  - add ONIG_SYNTAX_ONIGURUMA (default syntax)
  - restructure StackType
  - implement subexp calls (?R), (?&amp;name), (?-n), (?+n) for Perl
    syntax
  - use string pool of gperf for Unicode Property lookup function
  - fix an empty greedy regex and a word boundary (.*\b) fails
  - remove a stack type STK_POS
  - add a declaration of onig_end()
  - fix compilation failure in out-of-source build
  - [new] hexadecimal codepoint \uHHHH
- Version 6.6.1
  - fix definition of \X to (?&gt;\O(?:\Y\O)*)
- Version 6.6.0
  - rename Absent clear to Range clear
  - [new] Extended Grapheme Cluster \X and boundary \y, \Y
  - fix: invalid index(ctype) value assigned to Unicode Block
    properties
  - --enable-crnl-as-line-terminator to be deprecated
  - [new] ASCII only mode options (?WDSP)
  - [new] ONIG_OPTION_XXXX_IS_ASCII  options
  - disable OP_CCLASS_NODE
  - [spec] Absent clear restore previous range value at backtrack
  - optimize for simple one char repetition in Absent expression
  - fix: invalid impl. for reluctant repetition in Absent expression
  - remove compile switch USE_NAMED_GROUP
  - Visual Studio 2005 compilation fixed
- cleanup with spec-cleaner</changelog>
  <changelog author="mrueckert@suse.de" date="1583323200">- Update to version 6.9.4
  - NEW API: RegSet (set of regexes)
  - Fixed CVE-2019-19012 (boo# 1156984)
  - Fixed CVE-2019-19203 (boo# 1164550) (Does not affect UTF-8,
    UTF-16 and UTF-32 encodings)
  - Fixed CVE-2019-19204 (boo# 1164569) (Affects only PosixBasic,
    Emacs and Grep syntaxes)
  - Fixed CVE-2019-19246 (boo# 1157805)
  - Fixed some problems (found by libFuzzer test)
- changes from 6.9.3
  - Fixed CVE-2019-13224 (boo# 1142847)
  - Fixed CVE-2019-13225 (boo# 1141157)
  - Fixed many problems (found by libfuzzer programs)
- changes from 6.9.2
  - Update Unicode version 12.1.0
  - NEW: Unicode Text Segment mode option (?y{g}) (?y{w}) g:
    Extended Grapheme Cluster mode / w: Word mode
  - Fix Issue #139
- changes from 6.9.1
  - Speed improvement (* especially UTF-8)
- changes from 6.9.0
  - Update Unicode version 11.0.0
  - NEW: add Emoji properties
- changes from 6.8.2
  - Fix: #80 UChar in header causes issue
  - NEW API: onig_set_callout_user_data_of_match_param() (*
    omission in 6.8.0)
  - add doc/CALLOUTS.API and doc/CALLOUTS.API.ja
- changes from 6.8.1
  - Update shared library version to 5.0.0 for API incompatible
    changes from 6.7.1
- changes from 6.8.0
  - Retry-limit-in-match function enabled by default
  - NEW: configure option --enable-posix-api=no (* enabled by
    default)
  - NEW API: onig_search_with_param(), onig_match_with_param()
  - NEW: Callouts of contents (?{...contents...}) (?{...}[X&lt;&gt;])
    (?{{....}})
  - NEW: Callouts of name (*name) (*name[tag]{args...})
  - NEW: Builtin callouts (*FAIL) (*MISMATCH) (*ERROR{n}) (*COUNT)
    (*MAX{n}) etc..
  - (* Callout function API is experimental level and isn't fixed
    definitely yet. Undocumented now)
- changes from 6.7.1
  - NEW: Mechanism of try-in-match-limit (* disabled by default)
  - #73: Update for automake 1.15.1</changelog>
  <changelog author="mrueckert@suse.de" date="1592222400">- Update to 6.9.5.1
  - Fixed Issue #192
  - POSIX API disabled by default for Unix (* Enabled by: configure
  - -enable-posix-api=yes)
  - Update Unicode version 13.0.0
  - NEW: Code point sequence notation \x{HHHH HHHH ...}, \o{OOOO
    OOOO ...}
  - NEW API: retry limit in search functions
  - NEW API: maximum nesting level of subexp call
  - Fixed behavior of isolated options in Perl and Java syntaxes.
    /...(?i).../
  - fix a problem (found by oss-fuzz test on my PC)
- add --enable-posix-api to keep the posix API enabled.</changelog>
  <changelog author="mrueckert@suse.de" date="1604577600">- Update to 6.9.6
  - When using configure script, if you have the POSIX API enabled
    in an earlier version (disabled by default in 6.9.5) and you
    need application binary compatibility with the POSIX API,
    specify "--enable-binary-compatible-posix-api=yes" instead of
    "--enable-posix-api=yes". Starting in 6.9.6,
    "--enable-posix-api=yes" only supports source-level
    compatibility for 6.9.5 and earlier about POSIX API. (Issue
    [#210])
  - NEW: configure option
  - -enable-binary-compatible-posix-api=[yes/no]
  - NEW API: Limiting the maximum number of calls of subexp-call
  - NEW API: ONIG_OPTION_NOT_BEGIN_STRING / NOT_END_STRING /
    NOT_BEGIN_POSITION
  - Fixed behavior of ONIG_OPTION_NOTBOL / NOTEOL
  - Fixed many problems found by OSS-Fuzz
  - Fixed many problems found by Coverity
  - Fixed CVE-2020-26159 (This turned out not to be a problem
    later. #221)
  - Under cygwin and mingw, generate and install the libonig.def
    file (Issue #220)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622721600">- Update to 6.9.7.1
  * NEW API: ONIG_OPTION_CALLBACK_EACH_MATCH
  * NEW API: ONIG_OPTION_IGNORECASE_IS_ASCII
  * NEW API: ONIG_SYNTAX_PYTHON
  * Fixed some problems found by OSS-Fuzz
- Enable tests</changelog>
  <changelog author="mrueckert@suse.de" date="1651752000">- Update to 6.9.8
  - Update Unicode version 14.0.0
  - Whole options
  - (?C) : ONIG_OPTION_DONT_CAPTURE_GROUP
  - (?I) : ONIG_OPTION_IGNORECASE_IS_ASCII
  - (?L) : ONIG_OPTION_FIND_LONGEST
  - Fixed some problems found by OSS-Fuzz</changelog>
</package>
<package pkgid="879f3f903224dfe48f125230bfa27461974d3e590ed6fd3b94d966bc4206864c6949e7be2eecec3834c541e09690d4f4f662d3d786438fae90637e35d8c70ae1" name="libopeniscsiusr0" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="160000.2.2"/>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1703073600">- Updated to latest upstream: two small changes, with no known
  functional changes:
  * Incorrect documentation for `iscsiadm -m session` print level
    (upstream issue #432)
  * Stop using deprecated inet_aton and inet_ntoa (upstream issue
    [#435])
- Also, stopped using pre-prepared tarballs for the build, instead
  now using a service file to get latest SUSE srouces directly.
  This removed these two files:
  * open-iscsi-2.1.9-suse.tar.bz2, and
  * open-iscsi-SUSE-latest.diff.bz2
  whcih were both created by a shell script, and added a service-
  file-generated file of the form:
  * open-iscsi-2.1.9.suse+TAG_OFFSET.tar.xz
  where TAG_OFFSET is of the form "COMMIT_COUNT.HASH", where
  COMMIT_COUNT is the count of commits since 2.1.9-suse (in this
  case), and HASH is the git commit hash being used.</changelog>
  <changelog author="lduncan@suse.com" date="1727697600">- Update to version 2.1.10.suse+51.fea0fde82ed1:
  * Incudes upstream version 2.1.10 plus some fixes
  * Fix firmware targets startup to always be "onboot" (#482)
    (bsc#1228084)
  * Change a discovery function to void return type (#481)
  * Fix gcc issues (#480)
  * Bugfix read specific sysfs value "off" of session attribute (#466)
  * Fix bug where abort_tmo read failures were ignored. (#467)
  * grammar nitpicks (#464)
  * Fix memory leak in iscsi_check_session_use_count (#465)
  * improve the comments in idbm_lock() (#458)
  * Make it visible when memory allocation failure (#457)
  * Better handle multiple iscsiadm commands (#453)
  * iscsiadm: allow hostnames in node-mode commands (#451)
  * Modify how workqueue priority is set (#445)
  * Fix authmethod check by printing a warning message when CHAP used and authmethod=None (#443)
  * iscsid: Rescan devices on relogin (#444)
  * Adds missing characters in README. (#440)
  * Turn off iSCSI NOP-Outs, by default.
  * fix: add usr/iscsid_req.h missinig underline (#431) (#436)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="lduncan@suse.com" date="1744027200">- Update to version 2.1.11.suse+65.65365e1cdedb:
  * doc: fixup iscsiadm man page option for -r (#501)
  * Modify log function to print session id (#498)
  * Fix minor typo ("authenticaton") (#500)
  * Preparing for version 2.1.11 (#499)
  * iscsid: Rate limit session reopen log messages (#492)
  * IPv6 support for iBFT iSCSI boot (#493)
  * Improve iscsiadm command line parsing messages (#494)
  * More testing cleanup, and fix dprint test usage (#491)
  * Fix a typo in test/README (#486)
  * iscsid: Fix hang during login with scan=manual (#485)
  * fix 4 issues which are finded when building with clang 17 (#478)</changelog>
  <changelog author="lduncan@suse.com" date="1744027201">- Change SPEC file so that open-iscsi lock files always go
  in /run/lock/iscsi (bsc#1239107)</changelog>
  <changelog author="lduncan@suse.com" date="1744804800">- Update to version 2.1.11.suse+66.13c070123738:
  * Fix iscsid.conf NOP configuration (bsc#1240541)</changelog>
  <changelog author="lduncan@suse.com" date="1752408000">- Update to version 2.1.11.suse+73.1723affc61eb:
  * README for rpm build directory
  * Fix issue with IPv6 adapter interfaces (#508, bsc#1240969)
  * fwparam_ppc.c: Fix the calloc-transposed-args issue (#504)
  * Makefile: fix "No rule to make target 'iscsiuio/Makefile.in" issue (#506)
  * Fix typo in initiator.c (#507)
- Fixed some issues in this changes file
  * One date had incorrect format from 2014
  * Two separator lines were formatted incrrectly</changelog>
</package>
<package pkgid="f8be97b77f852f4138fc8efc972dbb4e8f19bd0477750a7c8ef4e5dd2c011e155314ebcb3a6ed2ac0d10cbb6c90f6badc9bf9495f4ef244bbe1cd91b37c8e7ca" name="libopenssl-3-devel" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="160000.7.1"/>
  <changelog author="pmonreal@suse.com" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="lucas.mulling@suse.com" date="1755432000">- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl3-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl3-CVE-2025-9232.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="angel.yankov@suse.com" date="1771934400">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="lucas.mulling@suse.com" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
</package>
<package pkgid="1b7ccb41f5f3e76b2ad0cb6be7566e502ece9ab062961d5d810f01e8dca2e14e58ef94631f00928ce7b53a81efbe0b1e1b3d3aae41608934cd8ab536f38df673" name="libopenssl-3-fips-provider" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="160000.7.1"/>
  <changelog author="pmonreal@suse.com" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="lucas.mulling@suse.com" date="1755432000">- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl3-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl3-CVE-2025-9232.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="angel.yankov@suse.com" date="1771934400">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="lucas.mulling@suse.com" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
</package>
<package pkgid="3cd337f37dc40c66addd6f2da7f81f930b07bdbc5f600419e0acbf0e2b8ea20d76b7ac18225a44a4ea3ab539d7d505d1c45b3e39e42ded1b61a6861e0a906fb7" name="libopenssl-devel" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="160000.2.2"/>
  <changelog author="otto.hollmann@suse.com" date="1700740800">- Update to 3.1.4 (jsc#PED-6570)</changelog>
  <changelog author="pmonreal@suse.com" date="1706529600">- New libopenssl-fips-provider package.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1707825600">- Add Conflicts, Provides: openssl(cli) (bsc#1210313)</changelog>
  <changelog author="pmonreal@suse.com" date="1708689600">- Build the 32bit flavor of libopenssl-fips-provider [bsc#1220232]
  * Update baselibs.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Update to 3.2.3</changelog>
  <changelog author="lucas.mulling@suse.com" date="1739275200">- Update to 3.2.4</changelog>
  <changelog author="lucas.mulling@suse.com" date="1743768000">- Update to 3.5.0</changelog>
</package>
<package pkgid="66a3283fe96510206760e50ac1d95299624f2773ef624d4d4d0baad81cab3c1b7489158672a4c8a45574c51ebe630a8535b747522be7725f1c1ec395f7d038d1" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="160000.7.1"/>
  <changelog author="pmonreal@suse.com" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="lucas.mulling@suse.com" date="1755432000">- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl3-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl3-CVE-2025-9232.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="angel.yankov@suse.com" date="1771934400">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="lucas.mulling@suse.com" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
</package>
<package pkgid="cc6d1dd22d33e33f351cda866ff92908beb55bb09d48ba3ee194b8fee964dae49894b3796ab0dd59916d447769e9573b6d4866a9489596fa6c52e3ffa7437765" name="libopenvswitch-3_5-0" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="160000.3.1"/>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1707998400">- Fix CVE-2023-3966 [bsc#1219465] openvswitch3: Invalid memory access in Geneve with HW offload
- Added patch,
    +openvswitch-CVE-2023-3966.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mjambor@suse.com" date="1717502400">- GCC 14 started to advertise c_atomic extension, older versions
  didn't do that.  Add check for __clang__, so GCC doesn't include
  headers designed for Clang
  (openvswitch-2.17.8-gcc14-build-fix.patch) [boo#1225906]</changelog>
  <changelog author="pgajdos@suse.com" date="1722340800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1724846400">- Update openvswitch to 3.3.1. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v3.3.1/NEWS
- Update OVN to 24.03.3. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v24.03.3/NEWS
- Drop upstream fixed patches,
  * CVE-2023-1668.patch
  * CVE-2023-3152.patch
  * CVE-2023-5366.patch
  * openvswitch-2.17.8-gcc14-build-fix.patch
  * openvswitch-CVE-2023-3966.patch
- Updated the patch for version v3.3.1
  * install-ovsdb-tools.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1734350400">- Add proper dependency on /usr/sbin/ipsec on openvswitch-ipsec:
  without the binary present, the service crashes on startup
  (boo#1234617).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1737979200">- Update openvswitch to 3.3.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v3.3.2/NEWS
- Update OVN to 24.03.5. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v24.03.5/NEWS
  - This update fix CVE-2025-0650 ovn: egress ACLs may be bypassed
    via specially crafted UDP packet (bsc#1236353)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1742558400">- Update OVN to 25.03.0 for a list of changes, check
  https://github.com/ovn-org/ovn/blob/v25.03.0/NEWS (jsc#PED-11228)
- Update openvswitch to 3.5.0 for a list of changes, check
  https://www.openvswitch.org/releases/NEWS-3.5.0.txt (jsc#PED-11228)
- Rename "python3-ovs" to "python3-openvswitch" for distro consistency
- Update patch file 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1764158400">- Update OVN to 25.03.1
  * Bug fixes
- Update Openvswitch to 3.5.2
  * Bug fixes</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767960000">- Update OVN to 25.03.2
  - Bug fixes
  - Dynamic Routing:
  * Add the option "dynamic-routing-redistribute-local-only" to Logical
    Routers and Logical Router Ports which refines the way in which
    chassis-specific Advertised_Routes (e.g., for NAT and LB IPs) are
    advertised.
  * Add the option "dynamic-routing-vrf-id" to Logical Routers which allows
    CMS to specify the Linux routing table id for a given vrf.
  - Add ovn-nbctl lsp-add-router-port which will create router port on
    specified LS.
  - Add ovn-nbctl lsp-add-localnet-port which will create localnet port on
    specified LS.</changelog>
</package>
<package pkgid="c9621bf03fe67b61879f3b92ff4efe853a7c188b06dc4ee1d92f10d32764cc0887a64edf10352627967c3e9d796b0d2a726cab79fc778ba7d5c7e0bee292e3a8" name="libopus0" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1498046400">- Cleanup with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.2.1:
  + This fixes an issue where the encoder can misdetect that the
    signal is SWB instead of FB, lowpassing the signal. This patch
    makes the encoder much more careful about doing that.</changelog>
  <changelog author="mcepl@suse.com" date="1539864000">- Update to 1.3:
  - improved speech/music detection based on a neural network
  - low-bitrate speech improvements
  - support for immersive audio using ambisonics
  - tone quality improvements
  - updates to the Opus standard (rfc 8251) are on by default
  - security improvements
- Clean up SPEC to the latest standards</changelog>
  <changelog author="aloisio@gmx.com" date="1558785600">- Update to version 1.3.1
  * This release fixes an issue with the analysis on files with
    digital silence (all zeros), especially on x87 builds
    (mostly affects 32-bit builds).
  * Two new features:
    + A new OPUS_GET_IN_DTX query to know if the encoder is in
    DTX mode (last frame was either a comfort noise frame or
    not encoded at all)
    + A new (and still experimental) CMake-based build system
    that is eventually meant to replace the VS2015 build
    system (the autotools one will stay).</changelog>
  <changelog author="dimstar@opensuse.org" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565870400">- Add 2 upstream bug fixes for Silk:
  * opus-Silk-CNG-adapts-faster.patch: Silk CNG adapts faster to
    received packets with lower gains.
  * opus-Silk-fix-arm-optimization.patch: Avoid processing LPC
    coeffs beyond the given order in NEON optimizations.</changelog>
  <changelog author="gboiko@suse.com" date="1586952000">- Backport of an upstream fix for celt decoder:
  * opus-Fix-celt-decoder-assertion-when-using-OPUS_CUSTOM.patch: When
    using OPUS_CUSTOM, `CELTDecoder-&gt;end` can be larger than 21.
    Assert against 25 instead in OPUS_CUSTOM builds.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.4:
  * Improved tuning of the Opus in-band FEC (LBRR). See the
    https://gitlab.xiph.org/xiph/opus/-/issues/2360 for details
  * Added a OPUS_SET_INBAND_FEC(2) option that turns on FEC, but
    does not force SILK mode (FEC will be disabled in CELT mode)
  * Improved tuning and various fixes to DTX
  * Added Meson support, improved CMake support
- Change Source to new home on github.
- Use autosetup, make_build and ldconfig_scriptlets macros.
- Move AUTHORS and README docs to devel package.
- Drop patches fixed upstream:
  * opus-Fix-celt-decoder-assertion-when-using-OPUS_CUSTOM.patch
  * opus-Silk-CNG-adapts-faster.patch
  * opus-Silk-fix-arm-optimization.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1709640000">- Update to 1.5.1:
  * Significant improvement to packet loss robustness using
    Deep Redundancy (DRED)
  * Improved packet loss concealment through Deep PLC
  * Low-bitrate speech quality enhancement down to
    6 kb/s wideband
  * Improved x86 (AVX2) and Arm (Neon) optimizations
  * Support for 4th and 5th order ambisonics</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1713096000">- Update to 1.5.2:
  * fix build issues and bugs for other platforms</changelog>
</package>
<package pkgid="8e44a82173598666c5631f870817050498c936df7478b24ca9d4c42f87a1c65b48392185d99ba132a24df5df1bc5522ec06c84a17e9ef60f8e0eaba5b7a790df" name="liborc-0_4-0" arch="x86_64">
  <version epoch="0" ver="0.4.41" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1610798400">- Update to version 0.4.32:
  + Add support for JIT code generation in Universal Windows
    Platform apps.
  + Minor Meson build system fixes and improvements.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669032000">- Update to version 0.4.33:
  + Add support for aarch64 (64-bit ARM) architecture.
  + aarch32: Implement loadupdb instruction used e.g. for video
    pixel format packing/unpacking/conversions.
  + neon: Fix unsigned only implementation of loadoffb, loadoffw
    and loadoffl.
  + neon: Fix testsuite not passing on arm CPUs.
  + orccodemem: Fix use-after-free in error paths.
  + orccpu-powerpc: Fix build with kernel &lt; 4.11.
  + Add support for macOS Hardened Runtime.
  + Enable only SSE and MMX backends for Windows.
  + Fix ORC_RESTRICT definition for MSVC.
  + pkgconfig: add -DORC_STATIC_COMPILATION flag to .pc file for
    static-only builds.</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- Update to version 0.4.34
  + Thread-safety improvements around orc codemem
    allocation/freeing
  + Add orc_parse_code() with more detailed error reporting
  + Implement Orc function lazy initialization correctly via atomic
    operations
  + orc program parser fixes and improvements
  + build fixes and compiler warning fixes
  + coverity and clang scan-build static code analysis fixes
  + meson: Do not always generate static library for test library
  + ci improvements</changelog>
  <changelog author="pgajdos@suse.com" date="1707998400">- version update to 0.4.37
  0.4.37
  ======
  - enable neon instructions on Apple ARM64 (Aleix Conchillo Flaqué)
  - orcc: Fix regression, was hard-coded to use "sse" as default target (Sebastian Dröge)
  - MMX backend fixes (L. E. Segovia, Jorge Zapata)
  - testsuite: Build fixes for Clang (L. E. Segovia)
  - testsuite, tools: Fix warning caused by inserting unneeded source operands (L. E. Segovia)
  - orccompiler: call sys_icache_invalidate() to invalidate macos inst cache (Aleix Conchillo Flaqué)
  - macOS/iOS version/target check build fixes (Aleix Conchillo Flaqué)
  0.4.36
  ======
  - Only use AVX / AVX2 instructions on CPUs that support both AVX and AVX2
    (fixes crash on machines that only support AVX) (L. E. Segovia)
  0.4.35
  ======
  - Add support for AVX / AVX2 (L. E. Segovia)
  - SSE backend improvements (L. E. Segovia)
  - New `orf` and `andf` opcodes for bitwise AND and OR for single precision floats (Jorge Zapata)
  - Add support for `convwf`, int16 to float conversion (Jorge Zapata)
  - Allow backend selection through ORC_TARGET environment variable (L. E. Segovia)
  - Documentation improvements (Jorge Zapata, L. E. Segovia, Tim-Philipp Müller)
  - orconce: Use Win32 once implementation with MSVC (Seungha Yang, L. E. Segovia)
  - orcc: add --binary option to output raw machine code for functions (L. E. Segovia)
  - orcprofile: Implement Windows high-resolution timestamp for MSVC
    to allow benchmarking on MSVC builds (L. E. Segovia)</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- version update to 0.4.38
  0.4.38
  ======
  - x86: account for XSAVE when checking for AVX support, fixing
    usage on hardened linux kernels where AVX support has been
    disabled (L. E. Segovia)
  - neon: Use the real intrinsics for divf and sqrtf
    (L. E. Segovia)
  - orc.m4 for autotools is no longer shipped. If anyone still uses
    it they can copy it into their source tree (Tim-Philipp Müller)</changelog>
  <changelog author="alarrosa@suse.com" date="1709726400">- Backport patch from SLE
- Add relax-tests.patch to increase test timeouts to 2 minutes,
  also limit the max value for memcpy_speed.c test bsc#1130085
- Enable tests</changelog>
  <changelog author="alarrosa@suse.com" date="1721649600">- Update to version 0.4.39:
  - Security: Fix error message printing buffer overflow leading
    to possible code execution in orcc with specific input files
    (CVE-2024-40897). This only affects developers and CI
    environments using orcc, not users of liborc (boo#1228184)
  - div255w: fix off-by-one error in the implementations
  - x86: only run AVX detection if xgetbv is available
  - x86: fix AVX detection by implementing the check recommended
    by Intel
  - Only enable JIT compilation on Apple arm64 if running on macOS,
    fixes crashes on iOS
  - Fix potential crash in emulation mode if logging is enabled
  - Handle undefined TARGET_OS_OSX correctly
  - orconce: Fix typo in GCC __sync-based implementation
  - orconce: Fix usage of __STDC_NO_ATOMICS__
  - Fix build with MSVC 17.10 + C11
  - Support stack unwinding on Windows
  - Major opcode and instruction set code clean-ups and refactoring
  - Refactor allocation and chunk initialization of code regions
  - Fall back to emulation on Linux if JIT support is not
    available, e.g. because of SELinux sandboxing or noexec
    mounting)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727092800">- Update to version 0.4.40:
  + Security: Minor follow-up fixes for CVE-2024-40897
  + Fix include header use from C++
  + orccodemem: Assorted memory mapping fixes
  + powerpc: fix div255w which still used the inexact substitution
  + powerpc: Disable VSX and ISA 2.07 for Apple targets
  + powerpc: Allow detection of ppc64 in Mac OS
  + x86: work around old GCC versions (pre 9.0) having broken
    xgetbv implementationsv
  + x86: consider MSYS2/Cygwin as Windows for ABI purposes only
  + x86: handle unnatural and misaligned array pointers
  + x86: Fix non-C11 typedefs
  + x86: try fixing AVX detection again by adding check for XSAVE
  + Some compatibility fixes for Musl
  + meson: Fix detecting XSAVE on older AppleClangv
  + Check return values of malloc() and realloc()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1739880000">- Update to version 0.4.41:
  + orccodemem: Don't modify the process umask, which caused race
    conditions with other threads
  + x86: various SSE and MMX fixes
  + avx: Fix sqrtps encoding causing an illegal instruction crash
  + Hide internal symbols from ABI and do not install internal
    headers
  + Rename backend to target, including `orc-backend` meson option
    and `ORC_BACKEND` environment variable
  + Testsuite, tools: Disambiguate OrcProgram naming conventions
  + Build: Fix `_clear_cache` call for Clang and error out on
    implicit function declarations
  + opcodes: Use MIN instead of CLAMP for known unsigned values to
    fix compiler warnings
  + Spelling fix in debug log message</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741003200">- Removing patches after update
  - 0001-Use-vasprintf-if-available-for-error-messages-and.patch
  - orc-check-return-value-of-vasprintf.patch</changelog>
</package>
<package pkgid="b8d7974d78e15ed976ce3b09bde72056ab38b3bb00b47b4da87442e1e078605423b0166bda1012eb0128063aaf8c64637d621888b8d251e663df94eb54a64a72" name="libosinfo" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="160000.3.2"/>
  <changelog author="carnold@suse.com" date="1614686400">- Update to version 1.9.0
  Changes in this release include:
  * Improve on the osinfo-tools' and osinfo-detect's help
  * Several CI improvements
  * Several translations improvements
  * Improve on debuggability of the loader code
  * Fix build when using clang</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to version 1.10.0
  Changes in this release include:
  * Add API for resolving multiple tree matches
  * Add API for resolving multiple media matches
  * Add API to match between two OsinfoTree
  * Add API to match between two OsinfoMedia
  * Add API to get a complete list of firmwares
  * Add missing documentation of osinfo_os_add_firmware()
  * Add release status to osinfo-query
  * Add --all flag to all tools to report all matches
  * Fix hiding database entries
  * Adapt to libsoup3 which is now preferred over libsoup2
  * Several CI improvements
  * Several translations improvements</changelog>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1197769 - FTBFS: libosinfo won't compile on SP4
  libosinfo.spec</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Add 3a0fef72.patch: build: Add option to select libsoup ABI.
  Following this, add conditional pkgconfig(libsoup-3.0)
  BuildRequires.
- Modernize spec, use ldconfig_scriptlets macro for post(un)
  handling, package COPYING with license macro.</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1699876800">- Update to version 1.11.0 (jsc#PED-6305)
  Changes in this release include:
  * Several minor memory leak fixes
  * Several CI improvements
  * Several translations improvements
- Drop 3a0fef72.patch as it is now part of the tarball</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
  <changelog author="carnold@suse.com" date="1709553600">- bsc#1220228 - virt-manager crashes when its viewer is opened on a
  running guest that uses spice graphics
  virt-manager uses both libosinfo and spice-gtk. spice-gtk is now
  built to use libsoup 3.0 but libosinfo was still using
  libsoup 2.4. Prefer libsoup 3.0 over libsoup 2.4 for Tumbleweed
  and newer SLE versions.</changelog>
  <changelog author="christophe@krop.fr" date="1716724800">- Add upstream change:
  * 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
  <changelog author="carnold@suse.com" date="1733140800">- Update to version 1.12.0 (jsc#PED-8910)
  * Some memory leak fixes
  * Adapt to change in libxml2
  * Several CI improvements
  * Several translations improvements
- Drop 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
</package>
<package pkgid="e6a0deb3d318169b641cf160a85fe05539820ce22b111f6702259442fd9e580f26717a96ca9aa9d4b3703849c95f1f03856756d536e440e5ca255195b725e791" name="libosinfo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="160000.3.2"/>
  <changelog author="carnold@suse.com" date="1614686400">- Update to version 1.9.0
  Changes in this release include:
  * Improve on the osinfo-tools' and osinfo-detect's help
  * Several CI improvements
  * Several translations improvements
  * Improve on debuggability of the loader code
  * Fix build when using clang</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to version 1.10.0
  Changes in this release include:
  * Add API for resolving multiple tree matches
  * Add API for resolving multiple media matches
  * Add API to match between two OsinfoTree
  * Add API to match between two OsinfoMedia
  * Add API to get a complete list of firmwares
  * Add missing documentation of osinfo_os_add_firmware()
  * Add release status to osinfo-query
  * Add --all flag to all tools to report all matches
  * Fix hiding database entries
  * Adapt to libsoup3 which is now preferred over libsoup2
  * Several CI improvements
  * Several translations improvements</changelog>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1197769 - FTBFS: libosinfo won't compile on SP4
  libosinfo.spec</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Add 3a0fef72.patch: build: Add option to select libsoup ABI.
  Following this, add conditional pkgconfig(libsoup-3.0)
  BuildRequires.
- Modernize spec, use ldconfig_scriptlets macro for post(un)
  handling, package COPYING with license macro.</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1699876800">- Update to version 1.11.0 (jsc#PED-6305)
  Changes in this release include:
  * Several minor memory leak fixes
  * Several CI improvements
  * Several translations improvements
- Drop 3a0fef72.patch as it is now part of the tarball</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
  <changelog author="carnold@suse.com" date="1709553600">- bsc#1220228 - virt-manager crashes when its viewer is opened on a
  running guest that uses spice graphics
  virt-manager uses both libosinfo and spice-gtk. spice-gtk is now
  built to use libsoup 3.0 but libosinfo was still using
  libsoup 2.4. Prefer libsoup 3.0 over libsoup 2.4 for Tumbleweed
  and newer SLE versions.</changelog>
  <changelog author="christophe@krop.fr" date="1716724800">- Add upstream change:
  * 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
  <changelog author="carnold@suse.com" date="1733140800">- Update to version 1.12.0 (jsc#PED-8910)
  * Some memory leak fixes
  * Adapt to change in libxml2
  * Several CI improvements
  * Several translations improvements
- Drop 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
</package>
<package pkgid="b32f7728096c7bf569996a123bb5725d4c88227e2db1a49bd2274b4015fde3807e34b6884bd98629e5118dc195dfaeb129de9389bc6c59ebaf43376070c7373a" name="libp11-kit0" arch="x86_64">
  <version epoch="0" ver="0.25.5" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1646827200">- make sure p11-kit components have matching versions (boo#1196812)</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip testsuite on qemu arches, it fails</changelog>
  <changelog author="pmonreal@suse.com" date="1695211200">- Update to 0.25.0:
  * add PKCS#11 3.0 support
  * add support for profile objects
  * add ability to adjust module and config paths at run-time via
    system environmental exports
  * make terminal output nicer
  * p11-kit: add command to print merged configuration
  * p11-kit: add commands to list, add and delete profiles of a token
  * trust: add command to check format of .p11-kit files
  * virtual: fix libffi type signatures for PKCS#11 3.0 functions
  * server: fix umask setting when --group is specified
  * server: check SHELL only when neither --sh nor --csh is specified
  * rpc: use space string in C_InitToken
  * rpc: fix two off-by-one errors identified by asan
  * modules: make logging message more translatable
  * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms
  * pkcs11.h: add IBM specific mechanism and attributes
  * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms
  * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption
  * po: update translations from Transifex
- Update upstream p11-kit.keyring file
- Add missing lang files
- Switch to using Meson as the build system</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211201">- Add d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch: Fix probing
  of C_GetInterface.</changelog>
  <changelog author="pmonreal@suse.com" date="1698408000">- Update to 0.25.1:
  * fix probing of C_GetInterface [#535]
  * p11-kit: add command to list tokens [#581]
  * p11-kit: add command to list mechanisms supported by a token [#576]
  * p11-kit: add command to generate private-public keypair on a token
    [#551, #582]
  * p11-kit: add commands to import/export certificates and public
    keys into/from a token [#543, #549, #568, #588]
  * p11-kit: add commands to list and delete objects of a token
    [#533, #544, #571]
  * p11-kit: add --login option to login into a token with object
    and profile management commands [#587]
  * p11-kit: adjust behavior of PKCS#11 profile management commands
    [#558, #560, #583, #591]
  * p11-kit: print PKCS#11 URIs in list-modules [#532]
  * bug and build fixes [#528 #529, #534, #537, #540, #541, #545,
    [#547], #550, #557, #572, #575, #579, #585, #586, #590]
  * test fixes [#553, #580]
  * Remove patch fixed upstream:
  - d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698926400">- Update to 0.25.2:
  * fix error code checking of readpassphrase for --login option [#595]
  * build fixes [#594]
  * test fixes [#596]</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 0.25.3:
  * rpc: fix serialization of NULL mechanism pointer [#601]
  * fix meson build failure in macOS (appleframeworks not found) [#603]</changelog>
  <changelog author="mjambor@suse.com" date="1721995200">- Added a backport of an upstream commit in p11-kit-d938f4a8a3a2.patch
  to avoid passing an incompatible pointer type to a function which is
  an error by default in GCC 14.</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 0.25.4:
  * rpc: add support for recursive attributes
  * p11-kit: add function to check run-time version of the library
  * p11-kit: expose version information through macros
  * p11-kit: add option to specify CKA_ID in generate-keypair and
    import-object commands
  * p11-kit: add --provider option to specify PKCS#11 module when
    using p11-kit commands
  * p11-kit: fix a bug where eddsa mechanism isn't recognized in
    generate-keypair
  * p11-kit: fallback to C_GetFunctionList when C_GetInterface
    returns CKR_FUNCTION_NOT_SUPPORTED
  * bug and build fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1726228801">- Update to 0.25.5:
  * iter: fix recursive attribute loading
  * fix building on FreeBSD 14.0 (amd64)
  * Remove p11-kit-d938f4a8a3a2.patch upstream</changelog>
</package>
<package pkgid="1739ac3e91a1eefcbe9a79ae8e02b79b3616562147d36241259299a0c7b0fcea6f6f4c1c7a629b174626a411ae2719ec84a051cee8c9466bbc1a7168efe8316d" name="libpango-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.56.4" rel="160000.2.2"/>
  <changelog author="pujos.michael@gmail.com" date="1711886400">- added GraphicsMagick package as Recommends. The invocation of
  pango-view with the ft2 backend requires the gm command found in
  that package</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Update to version 1.52.2:
  + coretext: Implement reload_font.
  + coretext: Use Menlo instead of Courier for monospace.
  + win32: Avoid a double free.
  + Update to Unicode 15.1.
  + Simplify hexbox drawing.
- Changes from version 1.52.1:
  + Fix hexbox drawing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718020800">- Update to version 1.54.0:
  + Build fixes.
  + Memory leak fixes.
  + Drop the install-tests build option.
  + Add build-examples and build-tests build options.
  + Require meson 0.63.
  + Add pango_item_get_char_offset.
  + Update to Unicode 15.1.
  + Fix wrong use of GWeakRef, leading to crashes.
- Drop -Dinstall-tests meson parameter: no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1735387200">- Update to version 1.55.0 (Unstable):
  + Support Unicode 16
  + Add pango_font_map_add_font_file
  + fontconfig: Reject patterns without FC_FILE
  + coretext:
  - Actually use .AppleSystemUIFont
  - Keep track of variations
  + build:
  - Require harfbuzz 8.4.0
  - Require fontconfig 2.15
  - Require meson 1.2.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736424000">- Update to version 1.56.0:
  + Support setting font features in font descriptions
  + serialization:
  - Document the tab array format
  - Accept attributes without range
  + layout: Fix measuring ellipsis runs with shapes
  + build:
  - Require C11
  - Require GLib 2.80
  - Require cairo 1.18
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Drop help2man BuildRequires, upstream ported manpages for tools
  to rst2man/rst2html, and defaults to not build it. Follow
  upstream and do not build the man or html documentation for
  tools.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1737028800">- Update to version 1.56.0+12:
  * Deal with FC_FONT_WRAPPER more graciously
  * itemize: Limp along harder
  * build: Reshuffle docs build
  * build: Move gir to toplevel meson.build
  * build: Generate glib deprecation defines
  * build: Sync naming with gtk</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1737288000">- Update to version 1.56.1:
  + Avoid criticals when there are no fonts
  + fontconfig:
  - Handle lack of FC_FONT_WRAPPER in font cache
  - Prefer application fonts even if they are older</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741780800">- Update to version 1.56.2:
  + Annotation fixes
  + fontconfig:
  - Set optical size for fonts with an opsz axis
  - Make panog_font_map_reload_font scale linearly
  + win32: Improve the pango_font_map_reload_font implementation</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 1.56.3:
  + Improve font description serialization
  + fontconfig: Avoid FcFontSetSort when possible
  + coverage: Extend coverage by Unicode decomposition
  + win32: Speed up coverage creation
  + Deprecate pango_font_descriptions_free</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751025600">- Update to version 1.56.4:
  + fontconfig:
  - Improve the add_font_file implementation
  - Combine font features and style variants
  - Make sure font faces stay alive
  + win32:
  - Drop some caching
  - Make sure font faces stay alive
  - Modernize and simplify the code
  - Stop synthesizing fonts
  - Implement list models
  + coretext: Support synthetic small caps
  + layout: Avoid assertions in line breaking
  + build: Require GLib 2.82</changelog>
</package>
<package pkgid="3cf11f6cc26195624dd18cb873033a30e3e09cf1bf8c37dd77951ab8425e9a5d7bb50b3e4b8a3c9c626a5a9807ccfd20cc3f3ac549a2138a5acd60dc2612c525" name="libparted-fs-resize0" arch="x86_64">
  <version epoch="0" ver="3.6" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1634644800">- BuildRequire python3-base: Fix execution of test suite. Otherwise
  we fail with
  ./t0282-gpt-move-backup.sh: /usr/bin/python3: bad interpreter: No
  such file or directory.</changelog>
  <changelog author="aschnell@suse.com" date="1634644801">- fixed name of shared library package and split off
  libparted-fs-resize (bsc#1191778)</changelog>
  <changelog author="aschnell@suse.com" date="1650456000">- update to version 3.5:
  * Add support for JSON output.
  * Add support for linux-home flag for GPT.
  * Add --fix option.
  added patches:
  - direct-handling-of-partition-type-id-and-uuid.patch
  - parted-json-no-type-flag.patch
  refreshed patches:
  - libparted-open-the-device-RO-and-lazily-switch-to-RW.patch
  - parted-2.4-ncursesw6.patch
  - parted-add-ignore-busy-option.patch
  - parted-fix-resizepart-and-rm-command.patch
  - parted-implement-wipesignatures-option.patch
  - parted-print-max-partitions-for-yast.patch
  - parted-type.patch
  - tests-disable.patch
  removed patches:
  - parted-escape-printed-device-path.patch
  - parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="aschnell@suse.com" date="1652875200">- add new type command from upstream
  added patches:
  - type-command.patch</changelog>
  <changelog author="dmueller@suse.com" date="1654084800">- use static keyring file (and switch to the release team keyring)</changelog>
  <changelog author="aschnell@suse.com" date="1655985600">- drop type flag (SUSE specific) to fix bsc#1190847
  refreshed patches:
  - parted-mac.patch
  - tests-adapt-to-SUSE.patch
  drop patches:
  - parted-type.patch
  - parted-type-accept-hex.patch
  - parted-json-no-type-flag.patch</changelog>
  <changelog author="aschnell@suse.com" date="1696507200">- updated fatresize to version 0.2 which includes a man-page
  removed patches:
  - fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="aschnell@suse.com" date="1706702400">- update to version 3.6:
  - Support GPT partition attribute bit 63 as no_automount flag
  - Add type commands to set type-id on MS-DOS and type-uuid on GPT
  - Add swap flag support to the dasd disklabel
  - Add display of GPT disk and partition UUIDs in JSON output
  refreshed patches:
  - parted-mac.patch
  - libparted-dasd-implicit-partition-disk-flag.patch
  - tests-disable.patch
  removed patches:
  - direct-handling-of-partition-type-id-and-uuid.patch
  - type-command.patch
  - libparted-dasd-improve-lvm-raid-flag-handling.patch
  - libparted-dasd-add-swap-flag-handling-for-DASD-CDL.patch</changelog>
  <changelog author="aschnell@suse.com" date="1708516800">- avoid deprecated rpm syntax</changelog>
  <changelog author="aschnell@suse.com" date="1737547200">- fixed build with gcc15
  added patches:
  - parted-do-version.patch</changelog>
</package>
<package pkgid="1d4cffd0c8f0be722f0cbcac6bd9d0f1aef49845ce8b0cbcd23d518b3ae87709816f9ea97f23d7be12a8015e76de4760ef49a3deb2e239e907d0e6889ff22754" name="libparted2" arch="x86_64">
  <version epoch="0" ver="3.6" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1634644800">- BuildRequire python3-base: Fix execution of test suite. Otherwise
  we fail with
  ./t0282-gpt-move-backup.sh: /usr/bin/python3: bad interpreter: No
  such file or directory.</changelog>
  <changelog author="aschnell@suse.com" date="1634644801">- fixed name of shared library package and split off
  libparted-fs-resize (bsc#1191778)</changelog>
  <changelog author="aschnell@suse.com" date="1650456000">- update to version 3.5:
  * Add support for JSON output.
  * Add support for linux-home flag for GPT.
  * Add --fix option.
  added patches:
  - direct-handling-of-partition-type-id-and-uuid.patch
  - parted-json-no-type-flag.patch
  refreshed patches:
  - libparted-open-the-device-RO-and-lazily-switch-to-RW.patch
  - parted-2.4-ncursesw6.patch
  - parted-add-ignore-busy-option.patch
  - parted-fix-resizepart-and-rm-command.patch
  - parted-implement-wipesignatures-option.patch
  - parted-print-max-partitions-for-yast.patch
  - parted-type.patch
  - tests-disable.patch
  removed patches:
  - parted-escape-printed-device-path.patch
  - parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="aschnell@suse.com" date="1652875200">- add new type command from upstream
  added patches:
  - type-command.patch</changelog>
  <changelog author="dmueller@suse.com" date="1654084800">- use static keyring file (and switch to the release team keyring)</changelog>
  <changelog author="aschnell@suse.com" date="1655985600">- drop type flag (SUSE specific) to fix bsc#1190847
  refreshed patches:
  - parted-mac.patch
  - tests-adapt-to-SUSE.patch
  drop patches:
  - parted-type.patch
  - parted-type-accept-hex.patch
  - parted-json-no-type-flag.patch</changelog>
  <changelog author="aschnell@suse.com" date="1696507200">- updated fatresize to version 0.2 which includes a man-page
  removed patches:
  - fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="aschnell@suse.com" date="1706702400">- update to version 3.6:
  - Support GPT partition attribute bit 63 as no_automount flag
  - Add type commands to set type-id on MS-DOS and type-uuid on GPT
  - Add swap flag support to the dasd disklabel
  - Add display of GPT disk and partition UUIDs in JSON output
  refreshed patches:
  - parted-mac.patch
  - libparted-dasd-implicit-partition-disk-flag.patch
  - tests-disable.patch
  removed patches:
  - direct-handling-of-partition-type-id-and-uuid.patch
  - type-command.patch
  - libparted-dasd-improve-lvm-raid-flag-handling.patch
  - libparted-dasd-add-swap-flag-handling-for-DASD-CDL.patch</changelog>
  <changelog author="aschnell@suse.com" date="1708516800">- avoid deprecated rpm syntax</changelog>
  <changelog author="aschnell@suse.com" date="1737547200">- fixed build with gcc15
  added patches:
  - parted-do-version.patch</changelog>
</package>
<package pkgid="76231d025dad1173bf65da622d8a5bb695e0513617102c2a4a11ec7d2fa39530a1f8cd3ded9ab2d666bcf676816b6fba01b1a3ee85f489589b169f9e4f4cc2f6" name="libpath_utils1" arch="x86_64">
  <version epoch="0" ver="0.2.1" rel="160000.2.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="48d677d86793d4f3742fd736045dac84980941cc14453a42d7546f931ccc9455ea09b5358bd47055bfbe8451c61a2ecaf469e856d818c0327beb2cac2676773b" name="libpcap1" arch="x86_64">
  <version epoch="0" ver="1.10.5" rel="160000.4.1"/>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
  <changelog author="pmonreal@suse.com" date="1767614400">- Security fix: [bsc#1255765, CVE-2025-11961]
  * Fix out-of-bound-write and out-of-bound-read in pcap_ether_aton()
    due to missing validation of provided MAC-48 address string
  * Add libpcap-CVE-2025-11961.patch</changelog>
</package>
<package pkgid="0170e05c3b612f30bfd43532b7a24b42aafcaa59cb166589cbd57be34d8d3fdc3713088be1765de12d279edd556059b6acab3f6672863f9b6b7ce2abfa9668ab" name="libpci3" arch="x86_64">
  <version epoch="0" ver="3.13.0" rel="160000.3.1"/>
  <changelog author="gmbr3@opensuse.org" date="1652356800">- Make shared library executable</changelog>
  <changelog author="dmueller@suse.com" date="1669982400">- update to 3.9.0:
  * We decode Compute Express Link (CXL) capabilities.
  * The tree mode of lspci is now compatible with filtering options.
  * When setpci is used with a named register, it checks whether
    the register is present in the particular header type.
  * Linux: The intel-conf[12] back-ends prefer to use ioperm() instead
    of iopl() to gain access to I/O ports.
  * mmio-conf1(-ext): Added a new back-end implementing the intel-conf1
    interface over MMIO. This is useful on some ARM machines, but it
    requires manual configuration of the MMIO addresses.
  * As usually, updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1683806400">- Update to 3.10.0:
  - Fixed bug in definition of versioned symbol aliases
    in shared libpci, which made compiling with link-time
    optimization fail.
  - Filters now accept "0x..." syntax for backward compatibility.
  - Windows: The cfgmgr32 back-end which provides the list of devices
    can be combined with another back-end which provides access
    to configuration space.
  - ECAM (Enhanced Configuration Access Mechanism), which is defined
    by the PCIe standard, is now supported. It requires root privileges,
    access to physical memory, and also manual configuration on some
    systems.
  - lspci: Tree view now works on multi-domain systems. It now respects
    filters properly.
  - Last but not least, pci.ids were updated to the current snapshot
    of the database. This includes overall cleanup of entries with
    non-ASCII characters in their names -- such characters are allowed,
    but only if they convey interesting information (e.g., umlauts
    in German company names, but not the "registered trade mark" sign).</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1717934400">- update to 3.12.0:
  * lspci decodes the IDE (Integrity &amp; Data Encryption) and
    TEE-IO extended capabilities.
  * Optimization flags used for compiling individual object files
    should be the same as optimization flags for linking the final
    executable to make link-time optimization possible.
  * no longer look up subsystems in the HWDB
  * Updated pci.ids
- include changes from 3.11:
  * update-pciids now supports XZ compression
  * update-pciids now sends itself as the User-Agent.
  * Added a pcilmr utility for PCIe lane margining
  * ECAM back-end now scans ACPI and BIOS memory faster.
  * Linux systems without pread/pwrite are no longer supported
  * Improved decoding of PCIe control and status registers.
  * Decoding of CXL capabilities now supports up to CXL 3.0.
  * lspci now displays interrupt message numbers consistently across
    different capabilities.
  * Cache of IDs resolved via DNS, which was located in ~/.pci-ids
    by default, is now stored according to the XDG base directory
    specification in $XDG_CACHE_HOME/pci-ids.
  * All source files now have SPDX license identifiers.
  * various minor bug fixes and updated pci.ids.</changelog>
  <changelog author="dmueller@suse.com" date="1719748800">- update to 3.13.0:
  * lspci decodes CXL 1.1 device link status information.
  * Further development of the pcilmr (the link margining
    utility)
  * Dump parsing supports 6-digit domain numbers.
  * Bug fixes in PCIe link state reporting.
  * Decode more fields in PCIe AER capability.
  * Fixed build on Linux systems with musl libc.
  * Updated pci.ids.</changelog>
  <changelog author="psimons@suse.com" date="1721390400">- Synchronize SLE-15 and openSUSE:Factory [jsc#PED-8393, bsc#1224138].
  The following patches are now obsolete in version 3.13.0:
  * lspci-Fixed-buffer-overflows-in-ls-tree.c.patch
  * pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  * pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch</changelog>
  <changelog author="psimons@suse.com" date="1741867200">- Synchronize SLE-12 and openSUSE:Factory [jsc#PED-4587].
  The following patches are now obsolete in version 3.13.0:
  * add-decoding-of-vendor-specific-vpd-fields.patch
  * pciutils-3.1.7-fix-memory-leak-in-get_cache_name.patch
  * pciutils-3.2.0_update-dist.patch
  * pciutils-3.5.1-add-support-for-32-bit-pci-domains.patch
  * pciutils-lspci-Correct-Root-Capabilities-CRS-Software-Visibil.patch
  * show-gen4-speed-properly.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1761134400">- pciutils.spec: Add a strict dependency to libpci. [bsc#1252338]
  Mixing different versions of pciutils and libpci could result in
  a segmentation fault due to incompatible ABI.</changelog>
</package>
<package pkgid="66b590d8e484c675fe04c8aa1bb21de1d14332baf465440d79880ac55331361c7cdfc182f1017db2da36520d497853015f2282d15c63d4956074f14c10988592" name="libpciaccess0" arch="x86_64">
  <version epoch="0" ver="0.18.1" rel="160000.3.2"/>
  <changelog author="sndirsch@suse.com" date="1423483200">- Update to version 0.13.3
  * This release provides a number of platform-specific improvements
    for various platforms, including Linux, Solaris, OpenBSD, NetBSD,
    and Hurd, plus the addition of some support for Cygwin.
- added baselibs.conf as source to specfile in order to make factory
  checkin policy happy</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">-  Update to version 0.13.4
  * Add missing guards around config.h inclusion
  * Check for __linux__ instead of linux during compilation
  * Include the POSIX fcntl.h instead of sys/fcntl.h
  * Include config.h before any other headers.
  * Bug 89151: Fix build on NetBSD/alpha and NetBSD/sparc64.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1491652800">- Update to version 0.13.5:
  This release includes musl build fixes, improvements to the
  Solaris backend and allows parsing separate sysfs files rather
  than reading the config file on newer kernels.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 0.14:
  This release adds support for 32-bit PCI domain IDs, which are common in
  virtualized environments. This support has been tested on Linux, and probably
  also "just works" on FreeBSD and Solaris, to the extent that the underlying
  OS supports it.</changelog>
  <changelog author="sndirsch@suse.com" date="1562932800">- Update to version 0.15
  * Updates for FreeBSD and Hurd support
  * Fixed multifunction bridge enumeration
  * Fixed a crash when no PCI bus exists</changelog>
  <changelog author="sndirsch@suse.com" date="1563796800">- Update to version 0.16
  * This release brings a compilation fix on 32-bit arm with newer
    glibc, and fixes the raw x86 backend's memory mapping to handle
    writes correctly.</changelog>
  <changelog author="sndirsch@suse.com" date="1666094400">- Update to version 0.17
  * Fix spelling/wording issues
  * meson: install man page in mandir/man1/, not mandir/1/
  * gitlab CI: add a basic build test for both autotools and meson
  * gitlab CI: stop requiring Signed-off-by in commits
  * configure.ac: Use pkg-config to find zlib dependency info
  * Obtain correct value of is_64 and is_prefetchable PCI device fields
  * hurd_pci: Use __pci_conf_ variants of pci_conf_
  * x86: Use gnumach device instead of /dev/mem on GNU systems &amp;&amp; factorise ifdefs
  * x86: Remove mapping of regions during probe - otherwise remapping later fails
  * x86: Remove probe during create, other backends don't do this
  * hurd: device_open(pci), /servers/bus/pci fallback
  * x86: Sort devices by B/D/F due to recursive scan
  * hurd: Don't necessarily look up _SERVERS_BUS_PCI
  * Add a meson build system
  * autoconf: Add meson files to dist tarball
  * pciaccess.pc.in: add Libs.Private
  * Hurd: avoid using the deprecated RPC pci_get_ndevs()
  * hurd: Implement device memory mapping
  * Hurd: Fix initialization order
  * Add pci_device_disable() function
  * missed library installation in meson
  * hurd: Add missing round up size in map_dev_mem
  * hurd: Fix letting map_dev_mem map anywhere
  * hurd: Fix map_dev_mem from non-zero address
  * hurd: Restore initialization order
  * hurd: Fix pci_device_hurd_map_legacy
  * Add support for building on macOS w/o X11, using endian code from "portable_endian.h"...
  * Add parentheses to the macro definition
  * pci_sys set NULL after free
  * Add header protection macro in linux_devmem.h
  * Delete redundant symbols ';'
- switched to meson build system</changelog>
  <changelog author="sndirsch@suse.com" date="1707134400">- Update to version 0.18
  * Remove "All rights reserved" from Oracle copyright notices
  * Try fopen(".../pci.ids", "re") on Solarish systems as well
  * Remove autotools build
  * gitlab-ci: use `meson setup`
  * gitlab-ci: don't bother to configure meson for the version check
  * gitlab-ci: remove unnecessary call to `meson configure`
  * FreeBSD: Fallback to /usr/share/misc/pci_vendors
  * FreeBSD: Remove sparc64 code
  * Fix compilation warnings when building against hurd-amd64.</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1711281600">- Update to version 0.18.1
  * meson: allow building static library, not just shared</changelog>
</package>
<package pkgid="4c993bc40d9e041c390ea219be28f1dc6ea55217b0c72f50a8b57ef67afffc405d3ea6eabc75b96a4115cf6e51665dde7d135b41c2dd092888d8f0568dcf4e7e" name="libpcp3" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1702555200">- declare the users/groups we create in the preinstall scripts
  (this is needed for newer rpm versions)</changelog>
  <changelog author="tina.mueller@suse.com" date="1706788800">- Change YAML::XS::LibYAML to YAML::XS as this is the module to be used</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1711972800">- Upgrade to 6.2.0 (bsc#1217826 CVE-2023-6917, bsc#1217783):
  * Changes from pcp-6.2.0:
  - Client tools and utilities:
    pmlogger: default to creating version 3 PCP archives
    pmie, pmlogger, pmcd, pmproxy: init script hardening to
    run less as root:root, more as pcp:pcp and more safely
    pcp-reboot-init: new systemd service for $PCP_RC_DIR setup
    pcp2arrow: new, export metrics to parquet format for pandas
    pcp-atop: deterministic process sort when handling NULLs
    pcp-atop: update to v2.10.0 upstream code
    pcp-htop: update to latest upstream fixes
    pcp-geolocate: function with older versions of python
    pcp-meminfo: resolve possible 'broken pipe' diagnostics
    pcp-ss: fix handling of listening state sockets to match ss
    pcp-ss: fix the UDP UNCONN vs LISTEN state handling
  - PMDA additions, enhancements and bug fixes:
    pmdaproc: improvements for process accounting metrics
    pmdalinux: add pgpromote* and pgdemote* memory metrics
    pmdalinux: add metric sysfs.module.zswap.max_pool_percent
    pmdalinux: add new SNMP metric network.ip.outtransmits
    pmdasummary: send state change 0 (no change) back to pmcd
    pmdapostgresql: support the psycopg3 python module as well
    pmdaopenmetrics: kepler support - live metrics and logging
  - Server-side utilities and log management scripts:
    pmlogrewrite, pmlogredact: fix for missing data volumes
    pmcd: cosmetic change to avoid pipe2 name clash
    runaspcp: new helper utility for unprivileged rc scripts
    pmnsmerge: be more defensive in qsort comparison routine
    pmlogsize: fix qsort comparison function handling of equality
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: pmOpenLog refactor for handling previous log files
    libpcp: new __pmCleanMapDir routine to aid log culling
    libpcp &amp; pmcd: READY-NOT-READY hardening
    libpcp: avoid possible thread issues (coverity)
    libpcp: refactor pmDupContext for thread safety
    libpcp_import: add guard in pmiPutMark to prevent SIGSEGV
  - Build, infrastructure and packaging updates:
    build: changes to re-enable builds for FreeBSD 12, 13, 14
    build: add diffutils rpm dep as pmdaproc script uses diff
    build: add main.yml for building and publishing container
    build: resolve compiler warnings in various tools/libraries
    packaging: use tmpfiles.d method to create PCP_RUN_DIR
    build: packaging changes for openSUSE 15.5 and 15.6
    debian: do not ship empty directory /usr/lib/pkgconfig
    build: el10 systemd-presets for pmcd/pmie/pmlogger enabling
    build: drop rpm dep on bpftool as local version used only
    build: change perl YAML::XS::LibYAML module to YAML::XS
  - Security Enhanced Linux:
    selinux: policy improvements for CentOS/RHEL 7 and 8
  - Documentation:
    docs: Fedora 39 found some tbl(1)/troff(1) issues, fix
    docs: add an explicit code-of-conduct for PCP
    docs: pmns(5) note that metric names must only contain ASCII
    docs: update the BPF README to describe bpftool reality
  * Changes from pcp-6.1.1:
  - Client tools and utilities:
    pmie: add -o/--format to control output format with archives
    pcp-geolocate: automatic latitude and longitude metric labels
    pcp-atop: fix segv encountered on a multi-node NUMA system
    pcp-atop: add last level cache support using pmdaresctrl
    pcp-htop: updated with latest fixes from htop.dev
    pcp-netstat: without time options report one sample only
    pcp-netstat: add machine header info
    pcp-meminfo: without time options report one sample only
    pcp-meminfo: add machine header info
    pcp-buddyinfo: resolve a key issue when using python v2
    pcp-zoneinfo: ensure determinism in pcp-zoneinfo output
    pcp-zoneinfo: fix failure with older PCP metric instances
  - PMDA additions, enhancements and bug fixes:
    pmdaresctrl: new PMDA for x86_64 last level cache metrics
    pmdafarm: new Seagate Field Access Reliability Metrics PMDA
    pmdadarwin: updated for changes in NFS stats management
    pmdalinux: new mem.util metrics from recent kernel versions
    pmdalinux: new networking metrics relating to MPTcpExt
    pmdasockets: allow sockets with duplicate sources to exist
    pmdabpftrace: rework exit/wait handling to avoid errors
    pmdahaproxy: fixed connect script handling of string quoting
    pmdastatsd: fixed metadata for a couple of metrics
    pmdalinux: fixed semantics for mem.vmstat.nr_free_cma metric
    pmdadenki: simplification and refactoring of metrics
    pmdagfs2: correct permissions of several installed files
    pmdakvm: fixed semantics for kvm.largepages metric
  - Server-side utilities and log management scripts:
    pmproxy: add support for HTTP compression
    pmlogger: rework heuristic for Latest folio creation
    pmlogctl: fix incorrect rewriting of PCP_ARCHIVE_DIR
    pmlogredact: add latitude and longitude labels to redacted set
    pmlogrewrite: resolve a small memory leak
    pmlogrewrite: use PM_CTXFLAG_METADATA_ONLY for speed
    pmcd: add $PMCD_CREDS_TIMEOUT as an alternative to -q
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: new PM_CTXFLAG_METADATA_ONLY flag for pmNewContext
    libpcp: fix a couple of derived metric bugs
    libpcp_web: implement config override by canonical env vars
  - Misc build, infrastructure and packaging updates:
    build: new CI build to keep PCP for MacOS up-to-date
    build: several fixes to tools when compiling with clang
    build: install pmlog[redact,reduce,rewrite] on default PATH
    build: default to using a path-prefixed PCP_PYTHON_PROG
    build: update the Fedora container to f38
    build: drop of i386/i686 architectures from Fedora builds
    build: enable build of pmdalibvirt on CentOS 7 platform
    build: enable Qt6 in Fedora and post-RHEL-9 rpm spec files
    build: add pyodbc rpm dep for pcp-pmda-mssql in RHEL 9
  - Security Enhanced Linux:
    selinux: allow pmproxy use the io_uring API
    selinux: policy fixes for recent AVCs on RHEL 7.9
    selinux: add netlink_kobject_uevent_socket getattr (bpftrace)
  - Documentation:
    man pages: change all to map font CW -&gt; CR for latest groff
    man: note pmseries Redis timeseries load order limitation
  * Changes from pcp-6.1.0:
  - pmlogredact: new command for archive anonymisation
  - pcp-atop: new bar graph visualisation mode
  - pcp-atop: update to atoptool.nl 2.9.1 sources
  - pcp-htop: support dynamic screens (user-configurable tabs)
  - pcp-htop: update to latest upstream source
  - pcp-htop: default screens for filesystems, disks and cgroups
  - pcp-htop: non-default screens for several libbpf modules
  - pcp-htop: fix mishandling of some process argument shading
  - pcp-buddyinfo: new tool reporting Linux buddyinfo stats
  - pcp-meminfo: new tool reporting Linux kernel memory stats
  - pcp-netstat: new tool reporting networking statistics
  - pcp-slabinfo: new tool reporting Linux slabinfo kernel stats
  - pcp-zoneinfo: new tool reporting Linux zoneinfo kernel stats
  - pmsleep,pmpause: add -w where option for systemd annotation
  - pmieconf: move test_action from primary into a separate group
  - pmieconf: update webhook action for better EDA integration
  - pmlogconf: remove latency-inducing fsync on config write
  - pmlogconf: updates for new metrics used in pcp-atop
  - pmdalinux: add three new /proc/vmstat pscan/pgsteal metrics
  - pmdalinux: fix bug when lsb-release is only /etc/*-release file
  - pmdabpf: add -q/--tryload command line option
  - pmdaopenmetrics: reduce transient instance logs, improve labels
  - libpcp: improved SSL error reporting
  - selinux: add policy updates for pmproxy (io_uring,ipc_lock)
  - build: support for Qt6, drop remaining Qt4 configure-support
  - build: updated licence strings in spec files to follow SPDX
  - build: default to using a path-prefixed PCP_PYTHON_PROG
  - build: fix several makefile clean targets for deb packagers
  - build: configure.ac update to autoconf 2.71
  - build: add tarball upload to release workflow
  - docs: pmie updates to explain action behaviour with archives
  - docs: retire "archive log" phrase from man pages and books
  - docs: transition Artifactory (no free service) to Packagecloud
  * Changes from pcp-6.0.5:
  - pmie: ensure pmie.log.YYYYMMDD is owned by pcp:pcp
  - pcp2json: extend pcp2json with an option to send HTTP POSTs
  - pmlogger: fix pidfile update; pmlogger.pid is for primary only
  - pmdumptext: fix scaling when -i command line option is used
  - pmlogextract: improve resilience in corner-case conditions
  - pmdasmart: additional NVME power state metrics
  - pmdasmart: additional NVME disk information metrics
  - pmdasmart: update help with proper description of DC status
  - pmdasmart: filter out zram devices when probing for devices
  - pmdahacluster: handle pacemaker 2.1.5 crm_mon output changes
  - pmcd: improve debugging flags and diagnostics in general
  - libpcp_pmda: refactor and improve library diagnostics
  - selinux: updates to policy for pmlogger and pmlogger_daily
  - build: switch rpm spec files to SPDX license identifiers
  - build, qa: numerous updates to improve PCP on OpenBSD
  - build: switch from registry.centos.org to quay.io for el6/el7
  - ci: add centos6 back into the fold as its on quay.io now
  - ci: add Debian 12, drop Ubuntu 16 and Fedora 35
  * Changes from pcp-6.0.4:
  - pmcd: propogate a new PMCD_HOSTNAME_CHANGE flag to clients
  - pmdumplog: support preferred alternate name pmlogdump
  - pmlogger: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmlogger_janitor: new script called from pmlogger_check
  - pmlogger: add -d directory argument for alternate naming schemes
  - pmlogrewrite: fix remaining corner case for indom renumbering
  - pmie: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmie: catching SIGUSR1 triggers a pending task dump
  - pmie_{check,daily}: change pmie.log handling regime
  - pmieconf: add support for a webhook action to pmieconf
  - pmieconf: add a wall rule action for adm group members
  - pmieconf: add support for an action testing rule
  - pmieconf: use correct pmieconf percent type for thermal throttle
  - pmieconf: add minimum pct conjunction to entropy for small poolsizes
  - pminfo: use -b to batch pmDesc retrievals as well as pmResult
  - pmstat: fix corner case handling of automatic pmcd reconnect
  - pcp2influxdb: add requests.post timeout to avoid hangs
  - pcp-dstat: fixes CSV output to show all (not visible) plugins
  - pcp-htop: support File Descriptor Meter
  - pcp-htop: sync latest fixes from upstream htop
  - pcp-mpstat: fixed broken pipe issue
  - pcp-ps: fix exception handling for process name
  - rc scripts: ensure pmcd.conf not rewritten unnecessarily
  - pmdalinux: add a couple of new /proc/net/snmp ICMP metrics
  - pmdalinux: add new network.tcp.tcpplbrehash metric
  - pmdaproc: add new proc.smaps.pss_dirty metric
  - pmdarabbitmq: add timeout handling to http requests
  - pmdastatsd: stats and blocklisted metric names alignment
  - libpcp: new pmAddDerivedText API for derived metric help text
  - libpcp: check level parameter on entry to pmLookupText
  - libpcp: new PMAPI error code addition for bad API arguments
  - libpcp: allow derived metrics semantics of 'similar' indoms
  - selinux: add missing context information on farm services
  - build: fix a number of Debian sub-package dependency issues
  * Changes from pcp-6.0.3:
  - build: fix Debian postinst script handling of missing systemctl
  - pmdaproc: support per-cgroup IRQ PSI metrics in recent kernels
  - pmdalinux: support for system wide IRQ PSI metrics in recent kernels
  - pmlogrewrite: improved handling of unused instance domains
  * Changes from pcp-6.0.2:
  - Client tools and utilities:
    pcp-atop: update to latest upstream atoptool.nl sources
    pcp-atop: cgroup, NUMA memory and NUMA CPU support
    pcp-htop: update to latest upstream htop.dev sources
    pcp-dstat: fix handling of --swap with -f (full) option
    pcp-dstat: fix columns for --net-packets
    pcp-mpstat: fix handling of log-once summary metric values
    pcp-mpstat: improve error handling for the current values
    pcp-ps: added capabilities to show N samples with archives
    pcp-ps: fix handling of the -o option
    pcp-ps: fix broken pipe errors when piping to head(1)
    pcp-ps: fix process "START" column calculation and rounding
    pcp-pidstat: fix broken pipe errors when piping to head(1)
    pmdumplog: extend -x so -xxx reports timestamps in Epoch format
    pmlogger: refactor getting FQDN for local host
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set config default for biosnoop module to disabled
    pmdabpf: port forward to latest vendored libbpf-tools code
    pmdalinux: boolean metric network.interface.virtual from sysfs
    pmdalinux: more careful slabinfo 32/64 bit type multiplication
    pmdalinux: add NUMA external fragmentation metric via sysfs
    pmdalinux: fix pmid numbering issue with hinv.map.scsi_id
    pmdanfsclient: fix srcport handling for RDMA and UDP mounts
    pmdaopenmetrics: validate all names before using them for metrics
    pmdaoverhead: new PMDA to measure overhead for groups of processes
    pmdastatsd: static metric memory leak fix
    pmdastatsd: ragel parser refactor and fix
  - Server-side utilities and log management scripts:
    pmieconf: new pmie rule checking file descriptor limits
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: fix buffer issue for user/group name lookups
    libpcp_web: improve error handling in pmseries AST parser
  - Misc build, infrastructure and packaging updates:
    configure.ac: fixes for improved C99 compatibility
    configure.ac: use QTDIR search path only when given
    MacOS: build: fix shared library builds on modern Macs
    OpenBSD: build updates for clang, Qt and openssl
    libbpf: updated minimium version to 0.8.0, ARM and PPC support
    Qt: update minimum required versions for libqwt
    Drop no-longer-used pmlogger_daily_report systemd rpm spec code
    Determine clang version without optional llvm-config utility
    Another attempt to get the man/man-db/mandoc stuff sorted
  - Security Enhanced Linux:
    Policy updates for pmdastatsd
  - Documentation and QA infrastructure:
    Add help text for some OpenBSD kernel instance domains
    Provide more detailed explanation for default PMLOGGER_INTERVAL
    pmdaChildren(3): clarify the memory allocation scheme
    pcp-ps(1) man page fixes.
  * Changes from pcp-6.0.1:
  - Security Enhanced Linux:
    selinux: rework policy to use optional_policy
    selinux: rework policy to use an independent policy
    selinux: new cluster_exec_t policy handling for pmdahacluster(1)
    selinux: retire those parts of the build affecting CentOS 6
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set perf_buffer__poll timeout to 0 for optimal sampling
    pmdabpf: add CO-RE biosnoop
    pmdabpf: no BPF debug messages unless debugging (-Ddev0)
    pmdalinux: add "squashfs" to the list of ignored filesystem types
    pmdasnmp: install agent specific configuration file to PMDATMPDIR
    pmdakvm: initialise perf_event interface only if/when needed
  - Client tools and utilities:
    pcp-ps: initial version of a PCP implementation of ps(1)
    pcp-dstat: add --nomissed command line option for large systems
    pmfind, libpcp_web: MMV and shutdown memory management fixes
    pmlogreduce: fix corner-case in temporal index generation
    pmlogcheck: tighten some pmlogcheck pass0 checks
    pmseries: fix sampling when start &lt; first sample or series has gaps
    shell completion: improve pmrep/zsh instance completion in live mode
    shell tools: convert fgrep and egrep over to grep -F and -E
  - Server-side utilities and log management scripts:
    pmlogger_daily_report: no longer needs any systemd support now
    pmlogger_daily.sh: fix pmlogger_daily_report test for zeroconf
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_web: fix race conditions affecting pmproxy
    libpcp_web: allow scalar operands in pmseries expressions
    libpcp_web: add pmseries float multiplication
  - Misc build, infrastructure and packaging updates:
    build: add PCP archive analysis container
    build: updates to fix Windows platform builds
    build: update configure.ac to allow builds on Mac M1 (arm64)
    build: make openSUSE spec file builds work again
    containers: remove /build directory
    debian: use deb-systemd-helper if available
    build: fix libpcp check-statics regexp error with objects in subdirs
    build: podman PMDA no longer has deps, make it unconditional
    build: don't package and install pmrep xtract-names helper
    build: updates to hiredis code for pmseries and pmproxy
    build: updates to hiredis-cluster code for pmseries and pmproxy
    build: fix Makepkgs handling of argument parameters
    build: use vendored github.com/libbpf/bpftool/libbpf and update
    build: use vendored github.com/iovisor/bcc/libbpf-tools
    build: use vendored git.code.sf.net/p/qwt and update
    build: fix bpf PMDA inclusion check
    build: fix windows default pmcd.conf entry, dup path component
    build: rework Python3 and Python2 configure.ac logic
    packaging: fix rpm systemd-sysusers on f37 and rawhide
  - Documentation and QA infrastructure:
    docs: small typo fixes relating to secure connections
    docs: fix sheet2pcp(1) man page quoting in examples
    pmdasample: additional metrics for testing cases
  * Changes from pcp-6.0.0:
  - Major changes:
    1. Add version 3 PCP archive support: instance domain change-deltas,
    Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary
    timezones support, 64-bit file offsets used throughout for larger
    (beyond 2GB) individual volumes.
  * * Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting. **
  * * Version 2 archives remain the default (for next few years). **
    2. Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
    this impacts on libpcp, PMAPI clients and PMCD use of encryption;
    these are now configured and used consistently with pmproxy HTTPS
    support and redis-server, which were both already using OpenSSL.
    3. New nanosecond precision timestamp PMAPI calls for PCP library
    interfaces that make use of timestamps.  These are all optional,
    and full backward compatibility is preserved for existing tools.
  - Client tools and utilities:
    pcp2elasticsearch: implement authentication support
    pcp-dstat: implement support for the top-alike plugins
    pcp-dstat: add plugin configuration for ZFS metrics
    pcp-dstat: battery charge remaining config using denki metrics
    pcp-htop: update to latest stable upstream release
    pcp-htop: initial support for screen tabs in the user interface
    pcp-pidstat: correct operation of the -p ALL|SELF options
    pmlogger: small changes for handling derived metrics better
    pmlogger, import: support configurable default archive version
    pcp2xxx: ignore pmrep-specific options
    pmlogger: extra hardening, backtrace symbol improvements
    pmlogger: add -V (output archive version) command line option
    pmseries: add sum(), avg() and stdev() functions
    pmseries: add nth_percentile() and topk() functions
    pmseries: add max_inst() and max_sample() functions
    pmseries: add min_inst() and min_sample() functions
    pmseries: be more defensive during shutdown error paths
    pmseries: fix assumption that any 40-character string is a SID
    pmseries: allow reporting values from SIDs (not just queries)
    sheet2pcp: add -V (output archive version) command line option
    ganglia2pcp: add -V (output archive version) command line option
    iostat2pcp: add -V (output archive version) command line option
  - PMDA additions, enhancements and bug fixes:
    pmdaapache: do time_t manipulation with sufficient space
    pmdabcc: sync bcc PMDA modules with upstream bcc tools
    pmdabpf: adds CO-RE (Compile Once - Run Everywhere) modules
    (exitsnoop, oomkill, bashreadline, mountsnoop, vfsstat,
    opensnoop, fsslower, statsnoop, tcpconnlat, tcpconnect)
    pmdabpf: support x86, arm and powerpc
    pmdabpf: fixed persistence of indom and cluster identifiers
    pmdabpf: rework setrlimit() logic for some small memory hosts
    pmdabpftrace: move example autostart scripts to /usr/share
    pmdabpftrace: update biolatency example script for kernel 5.16+
    pmdadenki: fix battery detection for non-intel systems
    pmdadenki: add support for multiple active batteries
    pmdadenki: support the -D option for debugging
    pmdadenki: improve labels associated with metrics
    pmdadenki: add battery capacity metric
    pmdadenki: add separate indom help text
    pmdalinux: add new MpTcpExt metrics from latest Linux 5.x kernels
    pmdalinux: updates for latest /proc/net/netstat kernel changes
    pmdalinux: improve network metrics help text
    pmdalinux: fix of tty metrics on s390x platform
    pmdamailq: update to ensure Y2038-safe time_t handling
    pmdammv: use highest available timestamp resolution
    pmdaopenvswitch: additional interface and coverage stats
    pmdapostfix: harden against a not-yet-running postfix
    pmdaproc: fix psargs string for processes with very large PIDs
    pmdaproc: fix cgroup cpu metrics refresh structures
    pmdasockets: prevent string overwrite of ss_stats_t fields
    pmdasockets: add checking to the pmStore filter strings
    pmdastatsd: fix detection of failure memory allocation
  - Server-side utilities and log management scripts:
    pmproxy: allow request parameters to be sent in the request body
    pmproxy: fix race on teardown of pcp protocol proxy clients
    pmproxy: improve error checking, check uv_pipe_bind result
    pmproxy: harden logging interfaces, racing with startup
    pmieconf: add several pmie rules for Open vSwitch metrics
    pmlogrewrite: subtle change in semantics for error checking
    pmlogreduce: allow sub-second values for -t option
    pmlogreduce: temporal index, add entries after 100k of data volume
    pmlogcheck: beef up pass 0 to check metadata record types
    pmlogconf: fix reprobing with interactive changes
    pmlogmv: fallback to copy for cross-mount case when link fails
    pmlogmv: add -c (paranoid checksum) option
    pmlogger_farm: add default configuration file for farm loggers
    pmlogger_check: increase PMLOGGER_REQUEST_TIMEOUT from 2 to 10 secs
    pmlogger_daily: callbacks for extra daily log processing tasks
    pmlogger_daily, pmlogger_check: additional systemd-driven changes
    pmlogger_daily: move redirection of stdout+stderr earlier in script
    pmlogger_daily: abandom use of fmt(1) - not portable - uses awk now
    pmlogger_daily_report.sh: some major efficiency improvements
    pmlogger_daily_report: re-enabled for rpm and deb builds
    pmie_check: avoid leaving lock file and temp dir behind
    pm{log,ie}ctl: handle embedded shell syntax in control lines
    pm{log,ie}ctl: add -C args option to pass "args" to pm{logger,ie}_check
    systemd units: pmlogger and pmie farm conditional use of type=exec
    rc-pmcd: reorder the systemd paths attempted in migrate_pid_cgroup
    dbpmda: fix an overlapping copy and add error handling
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_archive: new library for apps that write PCP archives
    libpcp: optimize indom handling in fetchgroup code
    libpcp: drop time_t abuse in getdate.y, use safe sizes
    libpcp: add __pmDumpPDUTrace() and circular trace buffer
    libpcp: add PM_ERR_FEATURE, PM_ERR_TLS error codes
    libpcp: refactor __pmDumpStack(), improve direct calling tools
    libpcp_qmc: require Qt5.6 as the minimum version for builds
    libpcp_qmc: resolve the Qt::endl warning more cleanly
    libpcp_web: stop Redis initialization if Redis version tool old
    libpcp_web: honour config settings that disable redis completely
    libpcp_web: fix memory leaks in discovery, query parsing and APIs
    libpcp_web: honor exclude.metrics setting in pmseries --load
    libpcp_web: run pmFetchArchive(3) in a worker thread
    libpcp_web: fix race condition tearing down load baton
    libpcp_pmda: ensure indom cache write handles time_t safely
    libpcp_import: add interface for setting output log version
    libpcp_import: interfaces for samples with high-resolution timestamps
    python api: updates to allow building from outside git repo
    python api: allow tools using pmconfig module to ignore options
    python api: add python wrappers for highres PMAPI routines
    python api: correct refcounting on pmParseMetricSpec source buffer
  - Security Enhanced Linux:
    selinux: additional policy rules, esp glusterd_log_t
    selinux: bcc PMDA policy to exec private memfd ctypes/libffi objects
    selinux: make use of syslogd_var_run_t map rule conditional
    selinux: policy updates needed for the pmdasockets metrics
    selinux: fine-tune netlink_tcpdiag_socket policy for all platforms
  - Misc build, infrastructure and packaging updates:
    build: latest distros supported (ubuntu 22.04, fedora 37, rhel9, etc)
    build: reproducible debian build efforts
    build: use standard dpkg buildflags variables.
    build: add BuildRequires: python*-pymongo to mongodb PMDA
    build: detect libbpf version for the BPF PMDA
    build: do not transform symlink targets when generating the source tarball
    build: update artifactory deploy script, add recalculate_metadata subtask
    build: update configure script for python2 retirement in rhel9
    build: convert libpcp check-statics to using readelf if available
    build: updates to libpcp check-statics for OpenBSD
    build: fix configure detection of backtrace() and associated hooks
    build: fixed source dependencies within libpcp_web makefile
    build: add rpm conflicts lines on postgresql-pgpool-II
    build: remove pmclient reliance on libpcp.h for timed sleep
    build: remove mmvdump reliance on libpcp.h for mmap wrapper
    build: make perl truly conditional in the PCP build
    build: drop no-longer-needed NSS/NSPR package deps
    build: resolve ostree non-writable /var for pmieconf
    packaging: update rpm specs to solve systemd warnings
    container: bump base image version
    Makepkgs: fix for Debian build (and Qt packaging failure in CI)
    vendor: switch to git-subtree for iovisor/bcc libbpf-tools code
  - Documentation and QA infrastructure:
    docs: update notes about sar2pcp, iostat2pcp in pcpcompat(1)
    docs: add section to pcpcompat(1) about python2
    docs: add fix for readthedocs compilation error
    docs: updates to the Quick Guide documents
    docs: clatifications to pmrep et al: man pages
    docs: improve pmproxy timeseries and pmseries load documentation
    docs: further improvements and fixes to the INSTALL doc
    docs: add pmlogger(1) -V, describe $PCP_ARCHIVE_VERSION in pcp.conf.
    docs: small fixes to the pcp-pidstat man page
    docs: fix webapi documentation typo around polltimeout
    pylint: numerous issues resolved, tracking latest versions
    qa: regression tests for bpftrace PMDA: check probes
    qa: pmdabcc pylint fixups
    qa: rework Redis PING-PONG checks
    qa/check: run tests under timeout(1) control if possible
    qa-summary: allow unified reporting from CI and QA Farm
    qa/admin/show-me-all &amp; qa/show-me: changes for CI integration
    qa/check: add support for "triaged" tests
    ci: send report to Slack when QA workflow is triggered manually
    ci: add required packages to enable bpf PMDA on CentOS Stream 9
    ci: run CodeQL daily and for each PR
    ci: run full QA on pull requests, save history
    ci: unset XDG_RUNTIME_DIR when invoking podman
- Refresh patches:
  * 0001-Install-libraries-without-exec-permission.patch
  * 0002-Remove-CPAN-rpaths.patch
  * 0003-Remove-runlevel-4-from-init-scripts.patch
  * 0010-services-switch-logutil-and-pmieutil-scripts-from-ty.patch
- Change dependency from openssl-devel &gt;= 1.1.1 to openssl-devel &gt;= 1.0.2p.
  Required for SLE-12, builds just fine.
- Disable 'pmda-infiniband' subpackage for SLE-12.
  Required so it builds cleanly.
- Introduce pmda-resctrl package, disabled for architectures other
  than x86_64.
- Change the architecture for various subpackages to 'noarch' as they
  contain no binaries, this lowers rpmlint's badness score
  substantially.
- Disable 'pmda-mssql', as it fails to build.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712145600">- Add fix for bsc#1222121 CVE-2024-3019:
  * 0011-disable-redis-proxying-by-default.patch</changelog>
  <changelog author="dmueller@suse.com" date="1713182400">- move pmlogger_daily into main package (bsc#1222815)
- fix compile flags conflusion</changelog>
  <changelog author="martin.schreiner@suse.com" date="1732708800">- Replace dejavu-fonts with liberation-fonts.
- Fix for bsc#1232695.</changelog>
  <changelog author="pgajdos@suse.com" date="1737460800">- Fix symlink race; CVE-2024-45770; (bsc#1230552)
  + 0012-src-pmpost-pmpost.c-guard-against-possible-symlink-a.patch
- Fix pmstore corruption; CVE-2024-45769 (bsc#1230551)
  + 0013-src-libpcp-src-p_result.c-correct-buffer-over-run-te.patch
  + 0014-src-libpcp-src-p_result.c-hardening-of-the-result-PD.patch
  + 0015-src-libpcp-src-p_result.c-hardening-of-result-PDU-ev.patch
  + 0016-src-libpcp-src-p_result.c-rework-PDU-integrity-check.patch
  + 0017-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0018-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0019-src-libpcp-src-p_result.c-32-bit-fix-for-SUSE-Issue-.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742904000">- Enable custom pcp-selinux module (bsc#1237260)</changelog>
  <changelog author="cathy.hu@suse.com" date="1746014400">- Add missing dependencies for selinux-policy-targeted in
  %post for pcp-selinux (bsc#1242052)</changelog>
</package>
<package pkgid="cc2946a55847dd8a125a5ca09f2cfb441b217f6e6cac85a24dd05b59eac81d1c090cc10493ac21d94332d78397aae16e6589ec3623cf5841007bca5b4bb7ecc2" name="libpcp_import1" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1702555200">- declare the users/groups we create in the preinstall scripts
  (this is needed for newer rpm versions)</changelog>
  <changelog author="tina.mueller@suse.com" date="1706788800">- Change YAML::XS::LibYAML to YAML::XS as this is the module to be used</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1711972800">- Upgrade to 6.2.0 (bsc#1217826 CVE-2023-6917, bsc#1217783):
  * Changes from pcp-6.2.0:
  - Client tools and utilities:
    pmlogger: default to creating version 3 PCP archives
    pmie, pmlogger, pmcd, pmproxy: init script hardening to
    run less as root:root, more as pcp:pcp and more safely
    pcp-reboot-init: new systemd service for $PCP_RC_DIR setup
    pcp2arrow: new, export metrics to parquet format for pandas
    pcp-atop: deterministic process sort when handling NULLs
    pcp-atop: update to v2.10.0 upstream code
    pcp-htop: update to latest upstream fixes
    pcp-geolocate: function with older versions of python
    pcp-meminfo: resolve possible 'broken pipe' diagnostics
    pcp-ss: fix handling of listening state sockets to match ss
    pcp-ss: fix the UDP UNCONN vs LISTEN state handling
  - PMDA additions, enhancements and bug fixes:
    pmdaproc: improvements for process accounting metrics
    pmdalinux: add pgpromote* and pgdemote* memory metrics
    pmdalinux: add metric sysfs.module.zswap.max_pool_percent
    pmdalinux: add new SNMP metric network.ip.outtransmits
    pmdasummary: send state change 0 (no change) back to pmcd
    pmdapostgresql: support the psycopg3 python module as well
    pmdaopenmetrics: kepler support - live metrics and logging
  - Server-side utilities and log management scripts:
    pmlogrewrite, pmlogredact: fix for missing data volumes
    pmcd: cosmetic change to avoid pipe2 name clash
    runaspcp: new helper utility for unprivileged rc scripts
    pmnsmerge: be more defensive in qsort comparison routine
    pmlogsize: fix qsort comparison function handling of equality
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: pmOpenLog refactor for handling previous log files
    libpcp: new __pmCleanMapDir routine to aid log culling
    libpcp &amp; pmcd: READY-NOT-READY hardening
    libpcp: avoid possible thread issues (coverity)
    libpcp: refactor pmDupContext for thread safety
    libpcp_import: add guard in pmiPutMark to prevent SIGSEGV
  - Build, infrastructure and packaging updates:
    build: changes to re-enable builds for FreeBSD 12, 13, 14
    build: add diffutils rpm dep as pmdaproc script uses diff
    build: add main.yml for building and publishing container
    build: resolve compiler warnings in various tools/libraries
    packaging: use tmpfiles.d method to create PCP_RUN_DIR
    build: packaging changes for openSUSE 15.5 and 15.6
    debian: do not ship empty directory /usr/lib/pkgconfig
    build: el10 systemd-presets for pmcd/pmie/pmlogger enabling
    build: drop rpm dep on bpftool as local version used only
    build: change perl YAML::XS::LibYAML module to YAML::XS
  - Security Enhanced Linux:
    selinux: policy improvements for CentOS/RHEL 7 and 8
  - Documentation:
    docs: Fedora 39 found some tbl(1)/troff(1) issues, fix
    docs: add an explicit code-of-conduct for PCP
    docs: pmns(5) note that metric names must only contain ASCII
    docs: update the BPF README to describe bpftool reality
  * Changes from pcp-6.1.1:
  - Client tools and utilities:
    pmie: add -o/--format to control output format with archives
    pcp-geolocate: automatic latitude and longitude metric labels
    pcp-atop: fix segv encountered on a multi-node NUMA system
    pcp-atop: add last level cache support using pmdaresctrl
    pcp-htop: updated with latest fixes from htop.dev
    pcp-netstat: without time options report one sample only
    pcp-netstat: add machine header info
    pcp-meminfo: without time options report one sample only
    pcp-meminfo: add machine header info
    pcp-buddyinfo: resolve a key issue when using python v2
    pcp-zoneinfo: ensure determinism in pcp-zoneinfo output
    pcp-zoneinfo: fix failure with older PCP metric instances
  - PMDA additions, enhancements and bug fixes:
    pmdaresctrl: new PMDA for x86_64 last level cache metrics
    pmdafarm: new Seagate Field Access Reliability Metrics PMDA
    pmdadarwin: updated for changes in NFS stats management
    pmdalinux: new mem.util metrics from recent kernel versions
    pmdalinux: new networking metrics relating to MPTcpExt
    pmdasockets: allow sockets with duplicate sources to exist
    pmdabpftrace: rework exit/wait handling to avoid errors
    pmdahaproxy: fixed connect script handling of string quoting
    pmdastatsd: fixed metadata for a couple of metrics
    pmdalinux: fixed semantics for mem.vmstat.nr_free_cma metric
    pmdadenki: simplification and refactoring of metrics
    pmdagfs2: correct permissions of several installed files
    pmdakvm: fixed semantics for kvm.largepages metric
  - Server-side utilities and log management scripts:
    pmproxy: add support for HTTP compression
    pmlogger: rework heuristic for Latest folio creation
    pmlogctl: fix incorrect rewriting of PCP_ARCHIVE_DIR
    pmlogredact: add latitude and longitude labels to redacted set
    pmlogrewrite: resolve a small memory leak
    pmlogrewrite: use PM_CTXFLAG_METADATA_ONLY for speed
    pmcd: add $PMCD_CREDS_TIMEOUT as an alternative to -q
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: new PM_CTXFLAG_METADATA_ONLY flag for pmNewContext
    libpcp: fix a couple of derived metric bugs
    libpcp_web: implement config override by canonical env vars
  - Misc build, infrastructure and packaging updates:
    build: new CI build to keep PCP for MacOS up-to-date
    build: several fixes to tools when compiling with clang
    build: install pmlog[redact,reduce,rewrite] on default PATH
    build: default to using a path-prefixed PCP_PYTHON_PROG
    build: update the Fedora container to f38
    build: drop of i386/i686 architectures from Fedora builds
    build: enable build of pmdalibvirt on CentOS 7 platform
    build: enable Qt6 in Fedora and post-RHEL-9 rpm spec files
    build: add pyodbc rpm dep for pcp-pmda-mssql in RHEL 9
  - Security Enhanced Linux:
    selinux: allow pmproxy use the io_uring API
    selinux: policy fixes for recent AVCs on RHEL 7.9
    selinux: add netlink_kobject_uevent_socket getattr (bpftrace)
  - Documentation:
    man pages: change all to map font CW -&gt; CR for latest groff
    man: note pmseries Redis timeseries load order limitation
  * Changes from pcp-6.1.0:
  - pmlogredact: new command for archive anonymisation
  - pcp-atop: new bar graph visualisation mode
  - pcp-atop: update to atoptool.nl 2.9.1 sources
  - pcp-htop: support dynamic screens (user-configurable tabs)
  - pcp-htop: update to latest upstream source
  - pcp-htop: default screens for filesystems, disks and cgroups
  - pcp-htop: non-default screens for several libbpf modules
  - pcp-htop: fix mishandling of some process argument shading
  - pcp-buddyinfo: new tool reporting Linux buddyinfo stats
  - pcp-meminfo: new tool reporting Linux kernel memory stats
  - pcp-netstat: new tool reporting networking statistics
  - pcp-slabinfo: new tool reporting Linux slabinfo kernel stats
  - pcp-zoneinfo: new tool reporting Linux zoneinfo kernel stats
  - pmsleep,pmpause: add -w where option for systemd annotation
  - pmieconf: move test_action from primary into a separate group
  - pmieconf: update webhook action for better EDA integration
  - pmlogconf: remove latency-inducing fsync on config write
  - pmlogconf: updates for new metrics used in pcp-atop
  - pmdalinux: add three new /proc/vmstat pscan/pgsteal metrics
  - pmdalinux: fix bug when lsb-release is only /etc/*-release file
  - pmdabpf: add -q/--tryload command line option
  - pmdaopenmetrics: reduce transient instance logs, improve labels
  - libpcp: improved SSL error reporting
  - selinux: add policy updates for pmproxy (io_uring,ipc_lock)
  - build: support for Qt6, drop remaining Qt4 configure-support
  - build: updated licence strings in spec files to follow SPDX
  - build: default to using a path-prefixed PCP_PYTHON_PROG
  - build: fix several makefile clean targets for deb packagers
  - build: configure.ac update to autoconf 2.71
  - build: add tarball upload to release workflow
  - docs: pmie updates to explain action behaviour with archives
  - docs: retire "archive log" phrase from man pages and books
  - docs: transition Artifactory (no free service) to Packagecloud
  * Changes from pcp-6.0.5:
  - pmie: ensure pmie.log.YYYYMMDD is owned by pcp:pcp
  - pcp2json: extend pcp2json with an option to send HTTP POSTs
  - pmlogger: fix pidfile update; pmlogger.pid is for primary only
  - pmdumptext: fix scaling when -i command line option is used
  - pmlogextract: improve resilience in corner-case conditions
  - pmdasmart: additional NVME power state metrics
  - pmdasmart: additional NVME disk information metrics
  - pmdasmart: update help with proper description of DC status
  - pmdasmart: filter out zram devices when probing for devices
  - pmdahacluster: handle pacemaker 2.1.5 crm_mon output changes
  - pmcd: improve debugging flags and diagnostics in general
  - libpcp_pmda: refactor and improve library diagnostics
  - selinux: updates to policy for pmlogger and pmlogger_daily
  - build: switch rpm spec files to SPDX license identifiers
  - build, qa: numerous updates to improve PCP on OpenBSD
  - build: switch from registry.centos.org to quay.io for el6/el7
  - ci: add centos6 back into the fold as its on quay.io now
  - ci: add Debian 12, drop Ubuntu 16 and Fedora 35
  * Changes from pcp-6.0.4:
  - pmcd: propogate a new PMCD_HOSTNAME_CHANGE flag to clients
  - pmdumplog: support preferred alternate name pmlogdump
  - pmlogger: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmlogger_janitor: new script called from pmlogger_check
  - pmlogger: add -d directory argument for alternate naming schemes
  - pmlogrewrite: fix remaining corner case for indom renumbering
  - pmie: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmie: catching SIGUSR1 triggers a pending task dump
  - pmie_{check,daily}: change pmie.log handling regime
  - pmieconf: add support for a webhook action to pmieconf
  - pmieconf: add a wall rule action for adm group members
  - pmieconf: add support for an action testing rule
  - pmieconf: use correct pmieconf percent type for thermal throttle
  - pmieconf: add minimum pct conjunction to entropy for small poolsizes
  - pminfo: use -b to batch pmDesc retrievals as well as pmResult
  - pmstat: fix corner case handling of automatic pmcd reconnect
  - pcp2influxdb: add requests.post timeout to avoid hangs
  - pcp-dstat: fixes CSV output to show all (not visible) plugins
  - pcp-htop: support File Descriptor Meter
  - pcp-htop: sync latest fixes from upstream htop
  - pcp-mpstat: fixed broken pipe issue
  - pcp-ps: fix exception handling for process name
  - rc scripts: ensure pmcd.conf not rewritten unnecessarily
  - pmdalinux: add a couple of new /proc/net/snmp ICMP metrics
  - pmdalinux: add new network.tcp.tcpplbrehash metric
  - pmdaproc: add new proc.smaps.pss_dirty metric
  - pmdarabbitmq: add timeout handling to http requests
  - pmdastatsd: stats and blocklisted metric names alignment
  - libpcp: new pmAddDerivedText API for derived metric help text
  - libpcp: check level parameter on entry to pmLookupText
  - libpcp: new PMAPI error code addition for bad API arguments
  - libpcp: allow derived metrics semantics of 'similar' indoms
  - selinux: add missing context information on farm services
  - build: fix a number of Debian sub-package dependency issues
  * Changes from pcp-6.0.3:
  - build: fix Debian postinst script handling of missing systemctl
  - pmdaproc: support per-cgroup IRQ PSI metrics in recent kernels
  - pmdalinux: support for system wide IRQ PSI metrics in recent kernels
  - pmlogrewrite: improved handling of unused instance domains
  * Changes from pcp-6.0.2:
  - Client tools and utilities:
    pcp-atop: update to latest upstream atoptool.nl sources
    pcp-atop: cgroup, NUMA memory and NUMA CPU support
    pcp-htop: update to latest upstream htop.dev sources
    pcp-dstat: fix handling of --swap with -f (full) option
    pcp-dstat: fix columns for --net-packets
    pcp-mpstat: fix handling of log-once summary metric values
    pcp-mpstat: improve error handling for the current values
    pcp-ps: added capabilities to show N samples with archives
    pcp-ps: fix handling of the -o option
    pcp-ps: fix broken pipe errors when piping to head(1)
    pcp-ps: fix process "START" column calculation and rounding
    pcp-pidstat: fix broken pipe errors when piping to head(1)
    pmdumplog: extend -x so -xxx reports timestamps in Epoch format
    pmlogger: refactor getting FQDN for local host
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set config default for biosnoop module to disabled
    pmdabpf: port forward to latest vendored libbpf-tools code
    pmdalinux: boolean metric network.interface.virtual from sysfs
    pmdalinux: more careful slabinfo 32/64 bit type multiplication
    pmdalinux: add NUMA external fragmentation metric via sysfs
    pmdalinux: fix pmid numbering issue with hinv.map.scsi_id
    pmdanfsclient: fix srcport handling for RDMA and UDP mounts
    pmdaopenmetrics: validate all names before using them for metrics
    pmdaoverhead: new PMDA to measure overhead for groups of processes
    pmdastatsd: static metric memory leak fix
    pmdastatsd: ragel parser refactor and fix
  - Server-side utilities and log management scripts:
    pmieconf: new pmie rule checking file descriptor limits
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: fix buffer issue for user/group name lookups
    libpcp_web: improve error handling in pmseries AST parser
  - Misc build, infrastructure and packaging updates:
    configure.ac: fixes for improved C99 compatibility
    configure.ac: use QTDIR search path only when given
    MacOS: build: fix shared library builds on modern Macs
    OpenBSD: build updates for clang, Qt and openssl
    libbpf: updated minimium version to 0.8.0, ARM and PPC support
    Qt: update minimum required versions for libqwt
    Drop no-longer-used pmlogger_daily_report systemd rpm spec code
    Determine clang version without optional llvm-config utility
    Another attempt to get the man/man-db/mandoc stuff sorted
  - Security Enhanced Linux:
    Policy updates for pmdastatsd
  - Documentation and QA infrastructure:
    Add help text for some OpenBSD kernel instance domains
    Provide more detailed explanation for default PMLOGGER_INTERVAL
    pmdaChildren(3): clarify the memory allocation scheme
    pcp-ps(1) man page fixes.
  * Changes from pcp-6.0.1:
  - Security Enhanced Linux:
    selinux: rework policy to use optional_policy
    selinux: rework policy to use an independent policy
    selinux: new cluster_exec_t policy handling for pmdahacluster(1)
    selinux: retire those parts of the build affecting CentOS 6
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set perf_buffer__poll timeout to 0 for optimal sampling
    pmdabpf: add CO-RE biosnoop
    pmdabpf: no BPF debug messages unless debugging (-Ddev0)
    pmdalinux: add "squashfs" to the list of ignored filesystem types
    pmdasnmp: install agent specific configuration file to PMDATMPDIR
    pmdakvm: initialise perf_event interface only if/when needed
  - Client tools and utilities:
    pcp-ps: initial version of a PCP implementation of ps(1)
    pcp-dstat: add --nomissed command line option for large systems
    pmfind, libpcp_web: MMV and shutdown memory management fixes
    pmlogreduce: fix corner-case in temporal index generation
    pmlogcheck: tighten some pmlogcheck pass0 checks
    pmseries: fix sampling when start &lt; first sample or series has gaps
    shell completion: improve pmrep/zsh instance completion in live mode
    shell tools: convert fgrep and egrep over to grep -F and -E
  - Server-side utilities and log management scripts:
    pmlogger_daily_report: no longer needs any systemd support now
    pmlogger_daily.sh: fix pmlogger_daily_report test for zeroconf
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_web: fix race conditions affecting pmproxy
    libpcp_web: allow scalar operands in pmseries expressions
    libpcp_web: add pmseries float multiplication
  - Misc build, infrastructure and packaging updates:
    build: add PCP archive analysis container
    build: updates to fix Windows platform builds
    build: update configure.ac to allow builds on Mac M1 (arm64)
    build: make openSUSE spec file builds work again
    containers: remove /build directory
    debian: use deb-systemd-helper if available
    build: fix libpcp check-statics regexp error with objects in subdirs
    build: podman PMDA no longer has deps, make it unconditional
    build: don't package and install pmrep xtract-names helper
    build: updates to hiredis code for pmseries and pmproxy
    build: updates to hiredis-cluster code for pmseries and pmproxy
    build: fix Makepkgs handling of argument parameters
    build: use vendored github.com/libbpf/bpftool/libbpf and update
    build: use vendored github.com/iovisor/bcc/libbpf-tools
    build: use vendored git.code.sf.net/p/qwt and update
    build: fix bpf PMDA inclusion check
    build: fix windows default pmcd.conf entry, dup path component
    build: rework Python3 and Python2 configure.ac logic
    packaging: fix rpm systemd-sysusers on f37 and rawhide
  - Documentation and QA infrastructure:
    docs: small typo fixes relating to secure connections
    docs: fix sheet2pcp(1) man page quoting in examples
    pmdasample: additional metrics for testing cases
  * Changes from pcp-6.0.0:
  - Major changes:
    1. Add version 3 PCP archive support: instance domain change-deltas,
    Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary
    timezones support, 64-bit file offsets used throughout for larger
    (beyond 2GB) individual volumes.
  * * Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting. **
  * * Version 2 archives remain the default (for next few years). **
    2. Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
    this impacts on libpcp, PMAPI clients and PMCD use of encryption;
    these are now configured and used consistently with pmproxy HTTPS
    support and redis-server, which were both already using OpenSSL.
    3. New nanosecond precision timestamp PMAPI calls for PCP library
    interfaces that make use of timestamps.  These are all optional,
    and full backward compatibility is preserved for existing tools.
  - Client tools and utilities:
    pcp2elasticsearch: implement authentication support
    pcp-dstat: implement support for the top-alike plugins
    pcp-dstat: add plugin configuration for ZFS metrics
    pcp-dstat: battery charge remaining config using denki metrics
    pcp-htop: update to latest stable upstream release
    pcp-htop: initial support for screen tabs in the user interface
    pcp-pidstat: correct operation of the -p ALL|SELF options
    pmlogger: small changes for handling derived metrics better
    pmlogger, import: support configurable default archive version
    pcp2xxx: ignore pmrep-specific options
    pmlogger: extra hardening, backtrace symbol improvements
    pmlogger: add -V (output archive version) command line option
    pmseries: add sum(), avg() and stdev() functions
    pmseries: add nth_percentile() and topk() functions
    pmseries: add max_inst() and max_sample() functions
    pmseries: add min_inst() and min_sample() functions
    pmseries: be more defensive during shutdown error paths
    pmseries: fix assumption that any 40-character string is a SID
    pmseries: allow reporting values from SIDs (not just queries)
    sheet2pcp: add -V (output archive version) command line option
    ganglia2pcp: add -V (output archive version) command line option
    iostat2pcp: add -V (output archive version) command line option
  - PMDA additions, enhancements and bug fixes:
    pmdaapache: do time_t manipulation with sufficient space
    pmdabcc: sync bcc PMDA modules with upstream bcc tools
    pmdabpf: adds CO-RE (Compile Once - Run Everywhere) modules
    (exitsnoop, oomkill, bashreadline, mountsnoop, vfsstat,
    opensnoop, fsslower, statsnoop, tcpconnlat, tcpconnect)
    pmdabpf: support x86, arm and powerpc
    pmdabpf: fixed persistence of indom and cluster identifiers
    pmdabpf: rework setrlimit() logic for some small memory hosts
    pmdabpftrace: move example autostart scripts to /usr/share
    pmdabpftrace: update biolatency example script for kernel 5.16+
    pmdadenki: fix battery detection for non-intel systems
    pmdadenki: add support for multiple active batteries
    pmdadenki: support the -D option for debugging
    pmdadenki: improve labels associated with metrics
    pmdadenki: add battery capacity metric
    pmdadenki: add separate indom help text
    pmdalinux: add new MpTcpExt metrics from latest Linux 5.x kernels
    pmdalinux: updates for latest /proc/net/netstat kernel changes
    pmdalinux: improve network metrics help text
    pmdalinux: fix of tty metrics on s390x platform
    pmdamailq: update to ensure Y2038-safe time_t handling
    pmdammv: use highest available timestamp resolution
    pmdaopenvswitch: additional interface and coverage stats
    pmdapostfix: harden against a not-yet-running postfix
    pmdaproc: fix psargs string for processes with very large PIDs
    pmdaproc: fix cgroup cpu metrics refresh structures
    pmdasockets: prevent string overwrite of ss_stats_t fields
    pmdasockets: add checking to the pmStore filter strings
    pmdastatsd: fix detection of failure memory allocation
  - Server-side utilities and log management scripts:
    pmproxy: allow request parameters to be sent in the request body
    pmproxy: fix race on teardown of pcp protocol proxy clients
    pmproxy: improve error checking, check uv_pipe_bind result
    pmproxy: harden logging interfaces, racing with startup
    pmieconf: add several pmie rules for Open vSwitch metrics
    pmlogrewrite: subtle change in semantics for error checking
    pmlogreduce: allow sub-second values for -t option
    pmlogreduce: temporal index, add entries after 100k of data volume
    pmlogcheck: beef up pass 0 to check metadata record types
    pmlogconf: fix reprobing with interactive changes
    pmlogmv: fallback to copy for cross-mount case when link fails
    pmlogmv: add -c (paranoid checksum) option
    pmlogger_farm: add default configuration file for farm loggers
    pmlogger_check: increase PMLOGGER_REQUEST_TIMEOUT from 2 to 10 secs
    pmlogger_daily: callbacks for extra daily log processing tasks
    pmlogger_daily, pmlogger_check: additional systemd-driven changes
    pmlogger_daily: move redirection of stdout+stderr earlier in script
    pmlogger_daily: abandom use of fmt(1) - not portable - uses awk now
    pmlogger_daily_report.sh: some major efficiency improvements
    pmlogger_daily_report: re-enabled for rpm and deb builds
    pmie_check: avoid leaving lock file and temp dir behind
    pm{log,ie}ctl: handle embedded shell syntax in control lines
    pm{log,ie}ctl: add -C args option to pass "args" to pm{logger,ie}_check
    systemd units: pmlogger and pmie farm conditional use of type=exec
    rc-pmcd: reorder the systemd paths attempted in migrate_pid_cgroup
    dbpmda: fix an overlapping copy and add error handling
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_archive: new library for apps that write PCP archives
    libpcp: optimize indom handling in fetchgroup code
    libpcp: drop time_t abuse in getdate.y, use safe sizes
    libpcp: add __pmDumpPDUTrace() and circular trace buffer
    libpcp: add PM_ERR_FEATURE, PM_ERR_TLS error codes
    libpcp: refactor __pmDumpStack(), improve direct calling tools
    libpcp_qmc: require Qt5.6 as the minimum version for builds
    libpcp_qmc: resolve the Qt::endl warning more cleanly
    libpcp_web: stop Redis initialization if Redis version tool old
    libpcp_web: honour config settings that disable redis completely
    libpcp_web: fix memory leaks in discovery, query parsing and APIs
    libpcp_web: honor exclude.metrics setting in pmseries --load
    libpcp_web: run pmFetchArchive(3) in a worker thread
    libpcp_web: fix race condition tearing down load baton
    libpcp_pmda: ensure indom cache write handles time_t safely
    libpcp_import: add interface for setting output log version
    libpcp_import: interfaces for samples with high-resolution timestamps
    python api: updates to allow building from outside git repo
    python api: allow tools using pmconfig module to ignore options
    python api: add python wrappers for highres PMAPI routines
    python api: correct refcounting on pmParseMetricSpec source buffer
  - Security Enhanced Linux:
    selinux: additional policy rules, esp glusterd_log_t
    selinux: bcc PMDA policy to exec private memfd ctypes/libffi objects
    selinux: make use of syslogd_var_run_t map rule conditional
    selinux: policy updates needed for the pmdasockets metrics
    selinux: fine-tune netlink_tcpdiag_socket policy for all platforms
  - Misc build, infrastructure and packaging updates:
    build: latest distros supported (ubuntu 22.04, fedora 37, rhel9, etc)
    build: reproducible debian build efforts
    build: use standard dpkg buildflags variables.
    build: add BuildRequires: python*-pymongo to mongodb PMDA
    build: detect libbpf version for the BPF PMDA
    build: do not transform symlink targets when generating the source tarball
    build: update artifactory deploy script, add recalculate_metadata subtask
    build: update configure script for python2 retirement in rhel9
    build: convert libpcp check-statics to using readelf if available
    build: updates to libpcp check-statics for OpenBSD
    build: fix configure detection of backtrace() and associated hooks
    build: fixed source dependencies within libpcp_web makefile
    build: add rpm conflicts lines on postgresql-pgpool-II
    build: remove pmclient reliance on libpcp.h for timed sleep
    build: remove mmvdump reliance on libpcp.h for mmap wrapper
    build: make perl truly conditional in the PCP build
    build: drop no-longer-needed NSS/NSPR package deps
    build: resolve ostree non-writable /var for pmieconf
    packaging: update rpm specs to solve systemd warnings
    container: bump base image version
    Makepkgs: fix for Debian build (and Qt packaging failure in CI)
    vendor: switch to git-subtree for iovisor/bcc libbpf-tools code
  - Documentation and QA infrastructure:
    docs: update notes about sar2pcp, iostat2pcp in pcpcompat(1)
    docs: add section to pcpcompat(1) about python2
    docs: add fix for readthedocs compilation error
    docs: updates to the Quick Guide documents
    docs: clatifications to pmrep et al: man pages
    docs: improve pmproxy timeseries and pmseries load documentation
    docs: further improvements and fixes to the INSTALL doc
    docs: add pmlogger(1) -V, describe $PCP_ARCHIVE_VERSION in pcp.conf.
    docs: small fixes to the pcp-pidstat man page
    docs: fix webapi documentation typo around polltimeout
    pylint: numerous issues resolved, tracking latest versions
    qa: regression tests for bpftrace PMDA: check probes
    qa: pmdabcc pylint fixups
    qa: rework Redis PING-PONG checks
    qa/check: run tests under timeout(1) control if possible
    qa-summary: allow unified reporting from CI and QA Farm
    qa/admin/show-me-all &amp; qa/show-me: changes for CI integration
    qa/check: add support for "triaged" tests
    ci: send report to Slack when QA workflow is triggered manually
    ci: add required packages to enable bpf PMDA on CentOS Stream 9
    ci: run CodeQL daily and for each PR
    ci: run full QA on pull requests, save history
    ci: unset XDG_RUNTIME_DIR when invoking podman
- Refresh patches:
  * 0001-Install-libraries-without-exec-permission.patch
  * 0002-Remove-CPAN-rpaths.patch
  * 0003-Remove-runlevel-4-from-init-scripts.patch
  * 0010-services-switch-logutil-and-pmieutil-scripts-from-ty.patch
- Change dependency from openssl-devel &gt;= 1.1.1 to openssl-devel &gt;= 1.0.2p.
  Required for SLE-12, builds just fine.
- Disable 'pmda-infiniband' subpackage for SLE-12.
  Required so it builds cleanly.
- Introduce pmda-resctrl package, disabled for architectures other
  than x86_64.
- Change the architecture for various subpackages to 'noarch' as they
  contain no binaries, this lowers rpmlint's badness score
  substantially.
- Disable 'pmda-mssql', as it fails to build.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712145600">- Add fix for bsc#1222121 CVE-2024-3019:
  * 0011-disable-redis-proxying-by-default.patch</changelog>
  <changelog author="dmueller@suse.com" date="1713182400">- move pmlogger_daily into main package (bsc#1222815)
- fix compile flags conflusion</changelog>
  <changelog author="martin.schreiner@suse.com" date="1732708800">- Replace dejavu-fonts with liberation-fonts.
- Fix for bsc#1232695.</changelog>
  <changelog author="pgajdos@suse.com" date="1737460800">- Fix symlink race; CVE-2024-45770; (bsc#1230552)
  + 0012-src-pmpost-pmpost.c-guard-against-possible-symlink-a.patch
- Fix pmstore corruption; CVE-2024-45769 (bsc#1230551)
  + 0013-src-libpcp-src-p_result.c-correct-buffer-over-run-te.patch
  + 0014-src-libpcp-src-p_result.c-hardening-of-the-result-PD.patch
  + 0015-src-libpcp-src-p_result.c-hardening-of-result-PDU-ev.patch
  + 0016-src-libpcp-src-p_result.c-rework-PDU-integrity-check.patch
  + 0017-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0018-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0019-src-libpcp-src-p_result.c-32-bit-fix-for-SUSE-Issue-.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742904000">- Enable custom pcp-selinux module (bsc#1237260)</changelog>
  <changelog author="cathy.hu@suse.com" date="1746014400">- Add missing dependencies for selinux-policy-targeted in
  %post for pcp-selinux (bsc#1242052)</changelog>
</package>
<package pkgid="8f30a302fccdb790851add5b538be56e478d0c75b289868457643657bcf9def77a226e671656db8879ef03f4e11789cf65718d0483fa2126e000011fbbebcb15" name="libpcre2-8-0" arch="x86_64">
  <version epoch="0" ver="10.45" rel="160000.3.1"/>
  <changelog author="pgajdos@suse.com" date="1651752000">- do not enable jit-sealloc [bsc#1182864] [bsc#1199208]</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Fix the profiling call to be non-parallel again (fighting spec cleaner)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670328000">- pcre2 10.41:
  * pcre2grep behaves more like GNU grep for multiple patterns that
    match more than once on a line</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670846401">- pcre2 10.42:
  * Fix 10.41 regression that added the default definition of
    PCRE2_CALL_CONVENTION to pcre2posix.c instead of pcre2posix.h,
    which meant that programs including pcre2posix.h but not pcre2.h
    couldn't compile
  * Fix an intermittent JIT fault and minor issues</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1708084800">- pcre2 10.43:
  * The JIT code no longer supports ARMv5 architecture.
  * A new function pcre2_get_match_data_heapframes_size() for finer
    heap control.
  * New option flags to restrict the interaction between ASCII and
    non-ASCII characters for caseless matching and \d and friends.
    There are also new pattern constructs to control these flags
    from within a pattern.
  * Upgrade to Unicode 15.0.0.
  * Treat a NULL pattern with zero length as an empty string.
  * Added support for limited-length variable-length lookbehind
    assertions, with a default maximum length of 255 characters
    (same as Perl) but with a function to adjust the limit.
  * Perl changed the meaning of (for example) {,3} which did not
    used to be recognized as a quantifier. Now it means {0,3} and
    PCRE2 has also changed. Note that {,} is still not a
    quantifier.
  * Following Perl, allow spaces and tabs after { and before } in
    all Perl- compatible items that use braces, and also around
    commas in quantifiers. The one exception in PCRE2 is \u{...},
    which is from ECMAScript, not Perl, and PCRE2 follows
    ECMAScript usage.
  * Changed the meaning of \w and its synonyms and derivatives (\b
    and \B) in UCP mode to follow Perl. It now matches characters
    whose general categories are L or N or whose particular
    categories are Mn (non-spacing mark) or Pc (combining
    punctuation).
  * Changed the default meaning of [:xdigit:] in UCP mode to
    follow Perl. It now matches the "fullwidth" versions of hex
    digits. PCRE2_EXTRA_ASCII_DIGIT can be used to keep it ASCII
    only.
  * Make PCRE2_UCP the default in UTF mode in pcre2grep and add
  - no_ucp, --case-restrict and --posix-digit.
  * Add --group-separator and --no-group-separator to pcre2grep.</changelog>
  <changelog author="dmueller@suse.com" date="1719748800">- update to 10.44:
  * This is mostly a bug-fix and tidying release. There is one
    new function, to set a maximum size for a compiled pattern.
    The maximum name length for groups is increased to 128.
  * Some auxiliary files for building under VMS are added.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723809600">- Fix GitHub issue #415: Test suite fails when targeting i686.
  The fix is taken straight from PR #418, also on GitHub.
- Add patch file:
  * pcre2-10.44-github-issue-415.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1743336000">- Update to 10.45:
  * New upstream maintainers (and signing key)
  * Update Unicode support to UCD 16
  * Case-insensitive matching of Unicode properties Ll, Lt, and Lu
    has been changed to match Perl
  * Case-insensitive matching of backreferences now respects the
    PCRE2_EXTRA_CASELESS_RESTRICT option
  * Parsing of the \x escape is stricter, and is no longer parsed
    as an escape for the NUL character if not followed by '{' or
    a hexadecimal digit. Use \x00 instead.
  * Add a new feature called scan substring. This is a type of
    assertion which matches the content of a capturing block to a
    sub-pattern.
  * Add support for UTS#18 compatible character classes
  * Add support for Perl-style extended character classes
  * JIT compilation now fails with the new error code
    PCRE2_ERROR_JIT_UNSUPPORTED for patterns which use features not
    supported by the JIT compiler.
  * New options PCRE2_EXTRA_NO_BS0 (disallow \0 as an escape for
    the NUL character); PCRE2_EXTRA_PYTHON_OCTAL (use Python
    disambiguation rules for deciding whether \12 is a
    backreference or an octal escape); PCRE2_EXTRA_NEVER_CALLOUT
    (disable callout syntax entirely); PCRE2_EXTRA_TURKISH_CASING
    (use Turkish rules for case-insensitive matching).
  * Add new API function pcre2_set_optimize() for
    controlling which optimizations are enabled.
  * A variety of extensions have been made to pcre2_substitute()
    and its syntax for replacement strings. These now support:
    \123 octal escapes; titlecasing \u\L; \1 backreferences; \g&lt;1&gt;
    and $&lt;NAME&gt; backreferences; $&amp; $` $' and $_; new function
    pcre2_set_substitute_case_callout() to allow locale-aware case
    transformation.
- drop pcre2-10.44-github-issue-415.patch, included upstream
- update license to BSD-3-Clause WITH PCRE2-exception and cascade
  to subpackages and parts (boo#1240358)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1756900800">- Fix bsc#1248842 / CVE-2025-58050.
- Add patch:
  * CVE-2025-58050.patch</changelog>
</package>
<package pkgid="ad67acd1c65398b8ae2a9b339a4bd24ab09c86ca530c3b024d0df66ab1c6428a9568e1b7270abb5dd1d26649819644765c91692c9523c4e75c398de396b0799c" name="libpcsclite1" arch="x86_64">
  <version epoch="0" ver="2.0.1" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1636804800">- Change to systemd-sysusers</changelog>
  <changelog author="axel.braun@gmx.de" date="1638619200">- version 1.9.5
  * pcscd: autoexit even if no client connects
  * Fix variable substitution in systemd units
  * fix potential race conditions with powerState handling
  * Add and use tag TAG_IFD_DEVICE_REMOVED
  * UnitaryTests: port code to Python 3</changelog>
  <changelog author="axel.braun@gmx.de" date="1652356800">- version 1.9.6
  * do not fail reader removal in some specific cases (USB/Thunderbolt port)
  * improve documentation regarding /etc/reader.conf.d/
  * SCardGetStatusChange: speedup the case DISABLE_AUTO_POWER_ON
  * configure:
  . add --disable-strict option
    By default the compiler arguments are now:
  - Wall -Wextra -Wno-unused-parameter -Werror ${CFLAGS}
  . fail if flex is not found
  * fix different data races
  * pcscdaemon: -v displays internal constants values:
    MAX_READERNAME &amp; PCSCLITE_MAX_READERS_CONTEXTS
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1652443200">- version 1.9.7
  * disable strict compilation by default
  * fix 3 warnings</changelog>
  <changelog author="axel.braun@gmx.de" date="1655035200">- version 1.9.8
  * Install install_spy.sh &amp; uninstall_spy.sh scripts in docdir
  * SCardTransmit(): do not fail if receive buffer is "too large"
  * SCardControl(): do not fail if receive buffer is "too large"
  * fix some memory leaks on shutdown
  * use a better random number generator
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1662897600">- version 1.9.9
  * SCardEstablishContext() may return SCARD_W_SECURITY_VIOLATION if
    refused by Polkit
  * Fix SCardReleaseContext() failure on orphan handles
  * Fix SCardDisconnect() on orphan handle
  * pcsc-spy: log the pioSendPci &amp; pioRecvPci SCardTransmit() parameters
  * Improve the log from pcscd: log the return code in text instead of hex
  * Some other minor improvements</changelog>
  <changelog author="meissner@suse.com" date="1677931200">- add a 32 bit -devel package for use by wine development with wine 8.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1686312000">- Version 2.0.0
  * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
  * Add '--disable-polkit' option
  * Reset eventCounter when a reader is removed
  * Add "polkit" in "pcscd -v" output if enabled
  * Doxygen: document SCARD_E_INVALID_VALUE for some functions
  * use secure_getenv(3) if available
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1700913600">- version 2.0.1
  * SCardConnect(): return SCARD_W_SECURITY_VIOLATION when needed (polkit)
  * SCardCancel(): return SCARD_S_SUCCESS even if the client already finished
  * polkit is enabled by default
  * libpcscspy: fix a crash with NULL pointers
  * Doxygen: fix SCardBeginTransaction() documentation
  * fix pcscd internal thread safety issues (clang -fsanitize=thread)
  * Some other minor improvements</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="a75d7224ccf31924d2a57c1459ea55052f148b8713de4d114592c93e5af037dc42d174cef17338f9654444b16c6bbe3000475c7d25a675e16fc3936271069f3d" name="libpgm-5_3-0" arch="x86_64">
  <version epoch="0" ver="5.3.128" rel="160000.2.2"/>
  <changelog author="bwiedemann@suse.com" date="1507291200">- Add libpgm-5.2.122-reproducible.patch to make build reproducible
  (boo#1047218)</changelog>
  <changelog author="luca.boccassi@gmail.com" date="1508846400">- Create m4 directory before running autoreconf -fi to avoid build
  failure on CentOS 6 due to older version of autoconf.</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build -32bit packages, which are needed by
  zeromq's -32bit implementation. [bsc#1146257]</changelog>
  <changelog author="luca.boccassi@gmail.com" date="1548676800">- Backport patches from upstream to avoid adding a non-existing
  foo/lib/pgm-5.2/include directory to pkg-config's CFLAGS which
  breaks applications using strict compiler flags, and to make the
  build reproducible regardless of the reported system/architecture
  Added:
- libpgm-5.2.122-pkg-config-do-not-add-I-to-non-existing-directory.patch
- libpgm-5.2.122-reproducible-architecture.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">- Add libpgm-5.2.122-configure-rdtsc-checking-chg.patch
  same as https://github.com/steve-o/openpgm/pull/63</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1603108800">- Always pretend we do not have ftime(3), function is deprecated
  and absent from next glibc release.</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Add use_python3.patch to allow use of Python3 instead of
  Python2 for generating files.</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- version update to 5.3.128
  * Maintenance release aggregating all patches to the repository since
    previous tested release.
- modified sources
  % baselibs.conf
- deleted patches
  - libpgm-5.2.122-configure-rdtsc-checking-chg.patch (upstreamed)
  - libpgm-5.2.122-pkg-config-do-not-add-I-to-non-existing-directory.patch (upstreamed)
  - libpgm-5.2.122-reproducible-architecture.patch (upstreamed)
  - libpgm-5.2.122-reproducible.patch (upstreamed)
  - use_python3.patch (upstreamed)</changelog>
  <changelog author="bluca@debian.org" date="1687089600">- Add Mark-pgm_family_string-as-inline.patch to fix building packages that
  include the PGM headers without using pgm_family_string() by marking it
  'inline' to avoid unused-function warnings. Sent upstream:
  https://github.com/steve-o/openpgm/pull/74</changelog>
</package>
<package pkgid="113ad23c1164837249b0b81f2f623cf66380e9c2d785c59904a4ba4f55649153f09abd22a7d9cfa1dc3316f676b1d7864c3ce3177b0aa0873d83335b80eae51b" name="libpipeline1" arch="x86_64">
  <version epoch="0" ver="1.5.8" rel="160000.3.2"/>
  <changelog author="mpluskal@suse.com" date="1436702400">- Add gpg signature
- Cleanup spec file with spec-cleaner
- Add missing dependency on pkg-config</changelog>
  <changelog author="p.drouand@gmail.com" date="1447070400">- Update to version 1.4.1
  * Fix test failure with Check 0.10.0.</changelog>
  <changelog author="werner@suse.de" date="1542974400">- Update to version 1.5.0
  * Add `pipecmd_pre_exec' to install a pre-exec handler for a single command.
  * Fix EOF detection in get_line.</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 1.5.3:
  * Fix implementation-defined behaviour while handling read/write errors.
  * Port tests to the modern Check API.
  * `pipecmd_exec' now calls `_exit' rather than `exit', to avoid bugs such as
  * functions registered using `atexit' being called multiple times.
  * Document that standard FDs must be open before calling `pipeline_start'.
  * Building libpipeline now requires Autoconf &gt;= 2.63 and Automake &gt;= 1.11.2.
  * Various portability improvements, via Gnulib.</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 1.5.4:
  * Building libpipeline now requires Autoconf &gt;= 2.64.
  * Developmed moved to Gitlab</changelog>
  <changelog author="werner@suse.de" date="1639742400">- Use autoconf</changelog>
  <changelog author="werner@suse.de" date="1641902400">- Update to 1.5.5:
  * Move release process to GitLab CI.
- Back to download from savannah.nongnu.org for a fully bootstrapped
  tar ball without the need of autoconfig and gl
  Compare https://gitlab.com/cjwatson/libpipeline/-/releases
  and     https://gitlab.com/cjwatson/libpipeline/-/packages/4425007</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 1.5.6:
  * Fix handling of leading whitespace in `pipecmd_new_argstr` and
  `pipecmd_argstr`.</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 1.5.7:
  * Add notes to libpipeline(3) of when functions were added.
  * Transferred Git repository to https://gitlab.com/libpipeline/libpipeline.
  * Make `socketpair` tests used by `./configure --enable-socketpair-pipe`
    compatible with C23.</changelog>
  <changelog author="werner@suse.de" date="1729252800">- Update to 1.5.8 (27 August 2024):
  * Upgrade to Gnulib `stable-202407`.  Building libpipeline now requires
    Automake &gt;= 1.14.
  * Use C23-style `nullptr`.</changelog>
</package>
<package pkgid="f397f191009d850b44429027cfb458192e663e8d10711c2f679b7f8ea436c7b4441a4eac9aa7c027ee5b949b9936c944013de69fd639147be0cd60acd642d493" name="libpixman-1-0" arch="x86_64">
  <version epoch="0" ver="0.43.4" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="mvetter@suse.com" date="1542974400">- Update to version 0.36.0:
  + Add tests for (a)rgb floating point formats
  + Add support for argb/xrgb float formats, v5
  + Fix stride calculation in stress-test
  + Adjust for clang's removal of __builtin_shuffle
  + Fix vector loads on ppc64le
  + Promote unsigned short to unsigned int explicitly
  + pixman-filter: Made Gaussian a bit wider
  + pixman-filter: Nested polynomial for cubic
  + pixman-filter: Fix several issues related to normalization
  + pixman-filter: Speed up BOX/BOX filter
  + pixman-filter: integral splitting is only needed for triangle
    filterdd
  + pixman-filter: Correct Simpsons integration
  + pixman-filter: reduce amount of malloc/free/memcpy to generate
    filter
  + pixman-image: Added enable-gnuplot config to view filters in
    gnuplot
  + pixman-fast-path.c: Pick NEAREST affine fast paths before
    BILINEAR ones
  + pixman-private: include &lt;float.h&gt; only in C code
- Remove pixman-private-correct-include.patch: upstreamed</changelog>
  <changelog author="info@paolostivanin.com" date="1587384000">- Update to version 0.40.0:
  + Meson build system improvements
  + Supporting optimizations on Hygon Dhyana processors
    to match what is enabled for Intel/AMD CPUs.
  + A few Loongson fixes/improvements.
  + Lots of other fixes</changelog>
  <changelog author="mgorse@suse.com" date="1667563200">- Add pixman-CVE-2022-44638.patch: avoid an integer overflow
  (boo#1205033 CVE-2022-44638).</changelog>
  <changelog author="mgorse@suse.com" date="1667563201">- Update to version 0.42.2 (boo#1205033 CVE-2022-44638):
  + This version contains a fix for a heap overflow.
  + Drop upstream merged pixman-CVE-2022-44638.patch
- Update URL, and tweak source URI.</changelog>
  <changelog author="sflees@suse.de" date="1708776000">- Update to version 0.43.2
  + Highlights include:
  * mmx: use xmmintrin.h if building with SSE2
  * implement r8g8b8 sRGB (without alpha)
  * Build system swapped to Meson
  + Various other fixes
- Add meson BuildRequires and replace configure/make/make_install
  macros with respective meson/meson_build/meson_install, following
  upstreams switch to meson.
- Add cmake and pkgconfig(gtk+-3.0) BuildRequires: new
  depdendencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Rework previous change
  + Disable the demos: pass -Ddemos=disabled to meson. This allows
    us not to BuildRequire gtk3. Having it would result in a build
    cycle.
  + Pass -Dlibpng=disabled to meson: only needed for the tests.
- Drop pkgconfig(gtk+-3.0) BuildRequires: with the demos disabled,
  we don't need this anymore.
- Drop cmake BuildRequires: the build system uses meson. cmake is
  used as a fallback to find libraries when they can't be found
  with pkgconfig.
- Enable test suite (meson_test), without the png tests (for
  minimal build deps).
- Switch post/post to ldconfig_scriptlets: there is no other code
  in the scripts.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1712664000">- a64-neon is an aarch64 feature, not armv6/7</changelog>
  <changelog author="federico@suse.com" date="1714737600">- Update to version 0.43.4
  + Fix incorrect compositing on big-endian architectures.
  + Allow building on clang/arm32.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1733313600">- Increase test timeout on s390x. Several tests can be slow and
  sometimes times out in our builds.
- Use autosetup macro.</changelog>
</package>
<package pkgid="72067c69a161de5624c2afbe6f6ef87af7482cc1fb1f47ca3a3915a96aaddc1af5044129f71894ec89ccfce4af7536cfd19e2e909d9229d3a367736a8bc1a600" name="libpkgconf5" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="160000.2.2"/>
  <changelog author="ngompa13@gmail.com" date="1565611200">- Update to 1.6.3
  + Fixed a memory leak when deduplicating paths.
  + Fixed strndup-related build regression on Windows.
  + Added --modversion description to pkgconf(1) man page.
  + Properly tokenize versions. Versions cannot logically contain
    whitespace, as dependency-lists would not properly tokenize if
    they could. A diagnostic is generated for malformed version
    strings containing whitespace when --validate is used.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592222400">- Update to 1.7.3
  - Bug fixes:
  + Fix a possible out of boundary write when evaluating dependencies.
    Patch by Tobias Stöckmann.
  + Fix escaping logic on Windows.  Patch by Vincent Torri.
  + Fix out of boundary reads and writes with a malformed fragment.
    Patches by Tobias Stöckmann.
  + Fix a possible out of boundary write when evaluating tuples.
    Patch by Tobias Stöckmann.
  + Fix a windows-specific crash relating to path fixups.
  + Fix a possible out of boundary access in the parser for the
    cross-compile database.  Patch by Tobias Stöckmann.
  + Missing files for building with Meson are now included in the
    tarball.  Patch by Neal Gompa.
  + Fix calculation of package atoms on Windows with paths that
    use both directory separator characters.
  + Fix a possible buffer overflow involving newline escaping.
    Patch by Tobias Stöckmann.
  + Fix an out of boundary access in the parser.
    Patch by Tobias Stöckmann.
  + Fix leakage of strcmp() result value in pkgconf_compare_version()
    responses.
  + Return the default personality if loading a cross-compile
    personality file failed.
  + Do not complain about newlines when validating package versions.
  + Properly detect strndup() on Windows when building with Meson.
  - Enhancements:
  + A new --shared option and WantDefaultStatic cross-compile
    configuration option have been added.  This allows for toolchains
    to specify that static linking should be used by default.
  + Support for the PKG_CONFIG_MSVC_SYNTAX environment variable has
    been added.  Patch by Dan Kegel.
  + Support for the PKGCONF_PKG_PKGF_DONT_MERGE_SPECIAL_FRAGMENTS
    client flag which disables emulation of freedesktop.org pkg-config
    fragment merging semantics has been added.
    Patch by Karen Arutyunov.</changelog>
  <changelog author="ngompa13@gmail.com" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds (boo#1175039)</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- do not own directories provided by filesystem
- small cleanups inspired by spec-cleaner</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625054400">- Update to 1.7.4
  + Add PKG_CONFIG_DONT_DEFINE_PREFIX environment variable
  + Handle platforms where realpath(3) requires a pre-allocated
    buffer
  + Fix null-dereference crash when pulling a malformed
    'uninstalled' .pc file into a dependency tree.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1629720000">- Update to version 1.8.0:
  + Fix a minor memory leak relating to cross-personalities
  + Fix some edge cases with --redefine-prefix
  + Do not prepend sysroot_dir if the .pc file does not exist
    in the sysroot
  + Do not perform path filtering on default system include
    and library path lists.</changelog>
  <changelog author="qzhao@suse.com" date="1674993600">- Add pkgconf-CVE-2023-24056.patch: Backport commit 628b2b2baf from
  upstream, test for, and stop string processing, on truncation
  (bsc#1207394 CVE-2023-24056).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1702900800">- update to 2.1.0:
  * new solver for higher performance with complicated graphs
  * Add --license selector to the pkgconf CLI
  * Add flag --verbose and --solution to CLI
  * Changes and fixes to --modversion
  * bug fixes and developer visible changes
- drop pkgconf-CVE-2023-24056.patch, now included</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1707739200">- update to 2.1.1:
  * Fix --modversion with constraints
  * Reintroduce an optimization to the dependency graph walker
    which avoids revisiting already visited nodes
  * Add a regression test to check that the dependency flattener is
    working as expected</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716638400">- update to 2.2.0:
  * Significant solver rework to flatten both requires and
    requires.private dependencies in a single pass.  Improves
    performance slightly and ensures proper dependency order.
  * Improve --digraph output to reflect more of the solver's state
    in the rendered dependency graph.
  * Do not reference the graph root by name when presenting error
    messages about directly requested dependency nodes.</changelog>
</package>
<package pkgid="24d7074addc83615173c0f41005cc8f18614b14a269012c5c5dba327fb9e5aeed211b280c3f2a663ad6e2727adac436fc029e32259156938bb41d6e62059318e" name="libpmem1" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="160000.2.2"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1557921600">- Disable Werror to deal with a new GCC 9 warning.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570795200">- Update to PMDK 1.7 (jsc#SLE-9886)
  - Introduces new APIs in libpmemobj for managing space used by transactions.
    (see pmemobj_tx_log_append_buffer man page for details)
  - Introduces new APIs in librpmem, splitting rpmem_persist into rpmem_flush
    and rpmem_drain, allowing applications to use the flush + drain model
    already known from libpmem. (libpmemobj does not use this feature yet)
  - Optimizes large libpmemobj transactions by significantly reducing
    the amount of memory modified at the commit phase.
  - Optimizes tracking of libpmemobj reservations.
  - Adds new flags for libpmemobj's pmemobj_tx_xadd_range[_direct] API:
    POBJ_XADD_NO_SNAPSHOT and POBJ_XADD_ASSUME_INITIALIZED, allowing
    applications to optimize how memory is tracked by the library.
- To support some of the above changes the libpmemobj on-media layout had
  to be changed, which means that old pools have to be converted using
  pmdk-convert &gt;= 1.7.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1581595200">- Update to PMDK 1.8
  - Introduces new API in libpmemobj for user-assisted defragmentation
    (see pmemobj_defrag man page for details).
  - Introduces experimental support for PPC64LE architecture.
  - Introduces new flag in libpmemobj for opting-out of transaction aborts on failure
    (POBJ_TX_NO_ABORT), along with new variants of existing APIs that didn't accept
    flags (pmemobj_tx_xfree, pmemobj_tx_xpublish,
  - pmemobj_tx_xlock, pmemobj_tx_xlog_append_buffer, pmemobj_tx_xstrdup, pmemobj_tx_xwcsdup).
  - Moves out libvmem and libvmmalloc to the new repository (https://github.com/pmem/vmem).
  - obj: introduce new statistics useful for defrag
  - obj: introduce transient/persistent statistics enabling
  - obj: introduce pmemobj_tx_(set/get)_user_data funcs
  - obj: introduce pmemobj_(set/get)_user_data funcs
  - obj: disable workaround for offsetof() since VS 15.5 in public header
  - common: drop support for libndctl &lt; 63 on Linux
  - pool: rename -N --no-exec to -d --dry-run
- Add gen-doc.sh to pregenerate documentation in pregen-doc.tgz and avoid adding a
  build dependency to pandoc</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595419200">- Update to PMDK 1.9
  - Switches the default instruction set for memcpy, memmove and memset
    implementations on x86 to AVX512, and introduces numerous performance
    improvements for those operations on AVX and SSE2 fallback paths.
  - Optimizes transactional allocations in libpmemobj by avoiding one
    extraneous cache miss and reducing the amount of work required to perform
    a reservation.
  - Introduces a new API in libpmemobj, pmemobj_tx_set_failure_behavior,
    that enables the application to control the behavior of aborting
    transactions.
  - Stabilizes support for ppc64.
  - pmem: mem[cpy|set] optimization when eADR is available
  - obj: detect msync failures in non-pmem variants of mem[cpy|move|set]
- Add patches to fix compilation against libfabric:
  - examples-rpmem-add-missing-lfabric-flag.patch to fix examples linkage errors
  - common-fix-LIBFABRIC-flags.patch to fix daemons/tools linkage errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1611316800">- Enable aarch64 build</changelog>
  <changelog author="christian.voegl@suse.com" date="1631102400">- Update to PMDK 1.9.2
  * Version 1.9.2
  - This release reverts an incorrect change in SDS handling
    "pool: disable SDS check if not supported", and introduces
    a proper fix for the issues that patch attempted to correct.
  * Version 1.9.1
  - common: fix LIBFABRIC flags
  - common: Add runtime SDS check and disable
  - pool: disable SDS check if not supported
  - obj: fix failure atomicity bug in huge allocs
  - obj: add missing drain after ulog processing
  - Drop common-fix-LIBFABRIC-flags.patch (now in upstream)
  - Add a comment to gen-doc.sh</changelog>
  <changelog author="christian.voegl@suse.com" date="1631102401">- Update to PMDK 1.11.0
  * Version 1.11.0
  - Adds new APIs for libpmem2, most notably there are new functions
    to shrink and extend an existing reservation and a new iterator API
    for mappings contained within an existing reservation. There's also
    a new function to retrieve a numa node for a source.
  - Makes the pmemobj_open() and pmemobj_close() functions from libpmemobj
    thread-safe. It's now easier to correctly manage persistent memory
    pools in a parallel environment.
  - Introduces a new API in libpmemobj to globally change the method of
    assigning arenas to threads. The default is to rely on a OS per-thread
    key to store arena information. This release introduces an option
    to avoid the use of thread-local keys by simply using one global
    arena for all threads in a pool.
  - pmem2: don't force smaller alignment for fsdax mappings
  - rpmem: various fixes for powerpc64le
  - doc: fix documentation of pmem_is_pmem()
  - common: fix various minor problems found by static analysis
  - pmem2: arm64: fix possible data loss on ARMv8.2+ (improper flushing)
    This release introduces no changes to the on-media layout and is
    fully compatible with the previous version of PMDK.
  * Version 1.10
  - This release introduces a new stable PMDK library, libpmem2, which
    is the next major release of libpmem.
    This library has an entirely new, but familiar, API that addresses many
    shortcomings of the previous version, while retaining all of its
    functionality. To learn more, see https://pmem.io/pmdk/libpmem2/ or
    libpmem2(7).
    The old library, libpmem, is still going to be maintained for the
    foreseeable future, but we'd like to encourage any new applications to
    leverage libpmem2.</changelog>
  <changelog author="christian.voegl@suse.com" date="1631707200">- Renamed libpmem2-1-devel to libpmem2-devel</changelog>
  <changelog author="jengelh@inai.de" date="1632225600">- Trim old specfile constructs like defattr.</changelog>
  <changelog author="christian.voegl@suse.com" date="1633521600">- Update to PMDK 1.11.1
  * Bugfixes:
  * doc: remove exprimental moniker from libpmem2(7)
  * common: fix missing sfence in non-temporal memcpy
  * common: fix a mismatch between prototype and body
  * common: fix mismatched function args
  * obj: rename vars clashing with those of a containing block
  * pmem2: don't force smaller alignment for fsdax mappings
  * pool: don't trample upon users of localtime()
  * rpmem: Fix RPMEM_RAW_BUFF_SIZE and LANE_ALIGN_SIZE for powerpc64le</changelog>
</package>
<package pkgid="a182ba4b9f4f8aa5f6407ff8b7253465859b78dc671f4c05572802555541cb85fe958ec50ad52354ee1ea7454d06883d17ff94ed0ef2092b6750bf857380c109" name="libpmemobj1" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="160000.2.2"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1557921600">- Disable Werror to deal with a new GCC 9 warning.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570795200">- Update to PMDK 1.7 (jsc#SLE-9886)
  - Introduces new APIs in libpmemobj for managing space used by transactions.
    (see pmemobj_tx_log_append_buffer man page for details)
  - Introduces new APIs in librpmem, splitting rpmem_persist into rpmem_flush
    and rpmem_drain, allowing applications to use the flush + drain model
    already known from libpmem. (libpmemobj does not use this feature yet)
  - Optimizes large libpmemobj transactions by significantly reducing
    the amount of memory modified at the commit phase.
  - Optimizes tracking of libpmemobj reservations.
  - Adds new flags for libpmemobj's pmemobj_tx_xadd_range[_direct] API:
    POBJ_XADD_NO_SNAPSHOT and POBJ_XADD_ASSUME_INITIALIZED, allowing
    applications to optimize how memory is tracked by the library.
- To support some of the above changes the libpmemobj on-media layout had
  to be changed, which means that old pools have to be converted using
  pmdk-convert &gt;= 1.7.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1581595200">- Update to PMDK 1.8
  - Introduces new API in libpmemobj for user-assisted defragmentation
    (see pmemobj_defrag man page for details).
  - Introduces experimental support for PPC64LE architecture.
  - Introduces new flag in libpmemobj for opting-out of transaction aborts on failure
    (POBJ_TX_NO_ABORT), along with new variants of existing APIs that didn't accept
    flags (pmemobj_tx_xfree, pmemobj_tx_xpublish,
  - pmemobj_tx_xlock, pmemobj_tx_xlog_append_buffer, pmemobj_tx_xstrdup, pmemobj_tx_xwcsdup).
  - Moves out libvmem and libvmmalloc to the new repository (https://github.com/pmem/vmem).
  - obj: introduce new statistics useful for defrag
  - obj: introduce transient/persistent statistics enabling
  - obj: introduce pmemobj_tx_(set/get)_user_data funcs
  - obj: introduce pmemobj_(set/get)_user_data funcs
  - obj: disable workaround for offsetof() since VS 15.5 in public header
  - common: drop support for libndctl &lt; 63 on Linux
  - pool: rename -N --no-exec to -d --dry-run
- Add gen-doc.sh to pregenerate documentation in pregen-doc.tgz and avoid adding a
  build dependency to pandoc</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595419200">- Update to PMDK 1.9
  - Switches the default instruction set for memcpy, memmove and memset
    implementations on x86 to AVX512, and introduces numerous performance
    improvements for those operations on AVX and SSE2 fallback paths.
  - Optimizes transactional allocations in libpmemobj by avoiding one
    extraneous cache miss and reducing the amount of work required to perform
    a reservation.
  - Introduces a new API in libpmemobj, pmemobj_tx_set_failure_behavior,
    that enables the application to control the behavior of aborting
    transactions.
  - Stabilizes support for ppc64.
  - pmem: mem[cpy|set] optimization when eADR is available
  - obj: detect msync failures in non-pmem variants of mem[cpy|move|set]
- Add patches to fix compilation against libfabric:
  - examples-rpmem-add-missing-lfabric-flag.patch to fix examples linkage errors
  - common-fix-LIBFABRIC-flags.patch to fix daemons/tools linkage errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1611316800">- Enable aarch64 build</changelog>
  <changelog author="christian.voegl@suse.com" date="1631102400">- Update to PMDK 1.9.2
  * Version 1.9.2
  - This release reverts an incorrect change in SDS handling
    "pool: disable SDS check if not supported", and introduces
    a proper fix for the issues that patch attempted to correct.
  * Version 1.9.1
  - common: fix LIBFABRIC flags
  - common: Add runtime SDS check and disable
  - pool: disable SDS check if not supported
  - obj: fix failure atomicity bug in huge allocs
  - obj: add missing drain after ulog processing
  - Drop common-fix-LIBFABRIC-flags.patch (now in upstream)
  - Add a comment to gen-doc.sh</changelog>
  <changelog author="christian.voegl@suse.com" date="1631102401">- Update to PMDK 1.11.0
  * Version 1.11.0
  - Adds new APIs for libpmem2, most notably there are new functions
    to shrink and extend an existing reservation and a new iterator API
    for mappings contained within an existing reservation. There's also
    a new function to retrieve a numa node for a source.
  - Makes the pmemobj_open() and pmemobj_close() functions from libpmemobj
    thread-safe. It's now easier to correctly manage persistent memory
    pools in a parallel environment.
  - Introduces a new API in libpmemobj to globally change the method of
    assigning arenas to threads. The default is to rely on a OS per-thread
    key to store arena information. This release introduces an option
    to avoid the use of thread-local keys by simply using one global
    arena for all threads in a pool.
  - pmem2: don't force smaller alignment for fsdax mappings
  - rpmem: various fixes for powerpc64le
  - doc: fix documentation of pmem_is_pmem()
  - common: fix various minor problems found by static analysis
  - pmem2: arm64: fix possible data loss on ARMv8.2+ (improper flushing)
    This release introduces no changes to the on-media layout and is
    fully compatible with the previous version of PMDK.
  * Version 1.10
  - This release introduces a new stable PMDK library, libpmem2, which
    is the next major release of libpmem.
    This library has an entirely new, but familiar, API that addresses many
    shortcomings of the previous version, while retaining all of its
    functionality. To learn more, see https://pmem.io/pmdk/libpmem2/ or
    libpmem2(7).
    The old library, libpmem, is still going to be maintained for the
    foreseeable future, but we'd like to encourage any new applications to
    leverage libpmem2.</changelog>
  <changelog author="christian.voegl@suse.com" date="1631707200">- Renamed libpmem2-1-devel to libpmem2-devel</changelog>
  <changelog author="jengelh@inai.de" date="1632225600">- Trim old specfile constructs like defattr.</changelog>
  <changelog author="christian.voegl@suse.com" date="1633521600">- Update to PMDK 1.11.1
  * Bugfixes:
  * doc: remove exprimental moniker from libpmem2(7)
  * common: fix missing sfence in non-temporal memcpy
  * common: fix a mismatch between prototype and body
  * common: fix mismatched function args
  * obj: rename vars clashing with those of a containing block
  * pmem2: don't force smaller alignment for fsdax mappings
  * pool: don't trample upon users of localtime()
  * rpmem: Fix RPMEM_RAW_BUFF_SIZE and LANE_ALIGN_SIZE for powerpc64le</changelog>
</package>
<package pkgid="d8e2d972ea89eb40697f38612eb310f2303068c779fcfc20dabe5f846bf31e8f8d6ea3c7423c9ddc9a4bc68d2b921e69aac0d3cbfd6d6c301d44460824c1981e" name="libpng16-16" arch="x86_64">
  <version epoch="0" ver="1.6.44" rel="160000.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1718193600">- Backport patch to fix PAC/BTI support on aarch64:
  * 563.patch</changelog>
  <changelog author="schwab@suse.de" date="1723377600">- Fix missing backslash</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730203200">- version update to 1.6.44:
  * Hardened calculations in chroma handling to prevent overflows, and
    relaxed a constraint in cHRM validation to accomodate the standard
    ACES AP1 set of color primaries.
    (Contributed by John Bowler)
  * Removed the ASM implementation of ARM Neon optimizations and updated
    the build accordingly. Only the remaining C implementation shall be
    used from now on, thus ensuring the support of the PAC/BTI security
    features on ARM64.
    (Contributed by Ross Burton and John Bowler)
  * Fixed the pickup of the PNG_HARDWARE_OPTIMIZATIONS option in the
    CMake build on FreeBSD/amd64. This is an important performance fix
    on this platform.
  * Applied various fixes and improvements to the CMake build.
    (Contributed by Eric Riff, Benjamin Buch and Erik Scholz)
  * Added fuzzing targets for the simplified read API.
    (Contributed by Mikhail Khachayants)
  * Fixed a build error involving pngtest.c under a custom config.
    This was a regression introduced in a code cleanup in libpng-1.6.43.
    (Contributed by Ben Wagner)
  * Fixed and improved the config files for AppVeyor CI and Travis CI.
- Drop upstream patch:
  * 563.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764331200">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  * libpng16-CVE-2025-22801.patch
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774612800">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754)
  * libpng16-CVE-2026-33416-1.patch
  * libpng16-CVE-2026-33416-2.patch
  * libpng16-CVE-2026-33416-3.patch
  * libpng16-CVE-2026-33416-4.patch
  CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755)
  * libpng16-CVE-2026-33636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776340800">- added patches
  CVE-2026-34757: Information disclosure and data corruption via use-after-free vulnerability [bsc#1261957]
  * libpng16-CVE-2026-34757.patch</changelog>
</package>
<package pkgid="920aeb5357813012ecc2d3a3ab09341b1128f2e2cdac7d4aefcdfb49c83498740d8f5e9f0b3d3586708552b0a4d2e19ded5c87df4662e743ef1505a8793c6395" name="libpolkit-agent-1-0" arch="x86_64">
  <version epoch="0" ver="123" rel="160000.2.2"/>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="aschnell@suse.com" date="1667995200">- read actions also from /etc/polkit-1/actions (jsc#PED-1405)
  added polkit-actions-in-etc.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
  <changelog author="lnussel@suse.com" date="1695124800">- change /usr/share/polkit-1/rules.d to 555,root:root. /usr content
  isn't secret anyway so this avoids non-root owned files in /usr
  (boo#1215482)
- update 50-default.rules to allow adding more admin rules
  (jsc#PED-260, drop polkit-no-wheel-group.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 123:
  + Highlights:
  - better safety with deeper restriction of the configuration
    files
  - better safety with restricting the daemon's owner under
    systemd
  - better safety with the systemd unit sandboxing
  - less thread races during upload of the configuration
- Changes from version 122:
  + Highlights:
  - new Georgian translation
  - port to mozjs-102
  - daemon-less build (support for e.g. flatpak deps)
  - re-enable of (API) documentation build
- See more detailed changes in the included NEWS.md file.
- Change URL and Source to new home, and drop polkit.keyring and
  tar.gz.sign tarball signature, no longer available.
- Drop polkit-fix-pam-prefix.patch: Fixed upstream.
- Add /usr/bin/dbus-daemon BuildRequires, needed for tests. Replace
  the dbus-1 with /usr/bin/dbus-daemon Requires.</changelog>
  <changelog author="tobias.klausmann@freenet.de" date="1702036800">- Add 'dbus-service' as Requires instead of /usr/bin/dbus-daemon
  This allow to use other dbus implementations such as dbus-broker with this
  package again. (bsc#1217863)</changelog>
  <changelog author="mjambor@suse.com" date="1720785600">- Add -Wno-error=implicit-function-declaration to %optflags to
  work-around an issue in mocklibc (which has been meanwhile removed
  by upstream) with exactly this kind of issue.</changelog>
  <changelog author="dimstar@opensuse.org" date="1723636800">- BuildRequire gettext-devel instead of gettext: Allows OBS to
  shortcut throught gettext-runtime-mini.</changelog>
  <changelog author="meissner@suse.com" date="1752580800">- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
  added 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch</changelog>
</package>
<package pkgid="a4ca83a60dcdd100dc473365f69d60bc01e886187e2b61a2ab100c38bd02d51b2bcb1b951b705c0e4f7db02efede487155d8b0bf75da8094db0c22b103b368ad" name="libpolkit-gobject-1-0" arch="x86_64">
  <version epoch="0" ver="123" rel="160000.2.2"/>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="aschnell@suse.com" date="1667995200">- read actions also from /etc/polkit-1/actions (jsc#PED-1405)
  added polkit-actions-in-etc.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
  <changelog author="lnussel@suse.com" date="1695124800">- change /usr/share/polkit-1/rules.d to 555,root:root. /usr content
  isn't secret anyway so this avoids non-root owned files in /usr
  (boo#1215482)
- update 50-default.rules to allow adding more admin rules
  (jsc#PED-260, drop polkit-no-wheel-group.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 123:
  + Highlights:
  - better safety with deeper restriction of the configuration
    files
  - better safety with restricting the daemon's owner under
    systemd
  - better safety with the systemd unit sandboxing
  - less thread races during upload of the configuration
- Changes from version 122:
  + Highlights:
  - new Georgian translation
  - port to mozjs-102
  - daemon-less build (support for e.g. flatpak deps)
  - re-enable of (API) documentation build
- See more detailed changes in the included NEWS.md file.
- Change URL and Source to new home, and drop polkit.keyring and
  tar.gz.sign tarball signature, no longer available.
- Drop polkit-fix-pam-prefix.patch: Fixed upstream.
- Add /usr/bin/dbus-daemon BuildRequires, needed for tests. Replace
  the dbus-1 with /usr/bin/dbus-daemon Requires.</changelog>
  <changelog author="tobias.klausmann@freenet.de" date="1702036800">- Add 'dbus-service' as Requires instead of /usr/bin/dbus-daemon
  This allow to use other dbus implementations such as dbus-broker with this
  package again. (bsc#1217863)</changelog>
  <changelog author="mjambor@suse.com" date="1720785600">- Add -Wno-error=implicit-function-declaration to %optflags to
  work-around an issue in mocklibc (which has been meanwhile removed
  by upstream) with exactly this kind of issue.</changelog>
  <changelog author="dimstar@opensuse.org" date="1723636800">- BuildRequire gettext-devel instead of gettext: Allows OBS to
  shortcut throught gettext-runtime-mini.</changelog>
  <changelog author="meissner@suse.com" date="1752580800">- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
  added 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch</changelog>
</package>
<package pkgid="181a658fbfda0e9753844a47a11a55451370de646237e8ee77b22359647c1b5ff84e1473ec27bf26d25a816f1e05eb98e86db352ea9ad6e2afa1a3f3601535d4" name="libpopt0" arch="x86_64">
  <version epoch="0" ver="1.19" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1373198400">- Fix typo in popt-libc-updates.patch that prevented it to work
  with glibc before 2.17.
- More robust make install call; remove redundant %clean section</changelog>
  <changelog author="schwab@suse.de" date="1381147200">- popt-alignment-checks.patch: fix alignment checks</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Remove --with-pic which is only for static libs.
- Fix RPM groups.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="meissner@suse.com" date="1548504000">- build a 32bit library generically, for use by 32bit fuzzing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- fix URLs, rpm5.org is no more</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1593172800">- Update to version 1.18:
  * fix an ugly and ancient security issue with popt failing to drop privileges on alias exec from a SUID/SGID program
  * perform rudimentary sanity checks when reading in popt config files
  * collect accumulated misc fixes (memleaks etc) from distros
  * convert translations to utf-8 encoding
  * convert old postscript documentation to pdf
  * dust off ten years worth of autotools sediment
  * reorganize and clean up the source tree for clarity
  * remove the obnoxious splint annotations from the sources
- popt-alignment-checks.patch removed: contained in upstream
- popt-libc-updates.patch changed: to be compatible with new version.</changelog>
  <changelog author="jengelh@inai.de" date="1598270400">- Update homepage URL.
- Drop old rpm constructs.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654603200">- Create lang subpackage</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1663416000">- popt 1.19:
  * various build system fixes
  * various developer visible fixes
  * Fix the handling of superfluous args passed with =
  * Fix multiple resource and memory leaks
  * Fix '=' getting shown for short options
  * Improve random number handling
  * translation updates and documentation improvements
- refresh spec file, run tests, package license in every package,
  and treat all compiler warnings and errors</changelog>
</package>
<package pkgid="b79fdc144064dcbc5b1751da791a32864f6be38aef74cbe885e5c5e15513c6dbe38ebd8e882b92153d2dadbd7757e05e61483f08a5b58631fbc69f2ab0613c27" name="libproc2-1" arch="x86_64">
  <version epoch="0" ver="4.0.5" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="kukuk@suse.com" date="1698667200">- procps-ng-3.3.17-logind.patch: Fix crash of "w -s -h"</changelog>
  <changelog author="kukuk@suse.com" date="1702555200">- procps-3.3.17-ignore-sysctl_conf.patch: ignore dangling symlink
  to missing /etc/sysctl.conf file [bsc#1217990]</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722340800">- Switch to procps 4 branch, absorbing the former procps4 package:
  + Add provides/obsoletes procps4: make zypper replace procps4
    with the main package for users that manually switched.
- Aligning to the existing procps4 package, drop/add/modify
  patches:
  A    79042e07.patch
  A    procps-ng-4.0.0-integer-overflow.patch
  A    procps-ng-4.0.4-ignore-sysctl_conf.patch
  A    procps-ng-4.0.4-pmapX-not-twice-anymore.patch
  A    procps-ng-4.0.0-floats.dif
  D    CVE-2023-4016.patch
  D    bsc1195468-23da4f40.patch
  D    procps-3.3.17-bsc1181976.patch
  D    procps-3.3.17-ignore-sysctl_conf.patch
  D    procps-3.3.17-library-bsc1181475.patch
  D    procps-3.3.17-top-bsc1181475.patch
  D    procps-ng-3.3.10-integer-overflow.patch
  D    procps-ng-3.3.10-large_pcpu.patch
  D    procps-ng-3.3.17-logind.patch
  D    procps-ng-3.3.8-bnc634840.patch
  D    procps-ng-3.3.9-watch.patch
  D    procps-ng-3.3.8-accuracy.dif
  D    procps-ng-3.3.10-bnc634071_procstat2.diff
  D    procps-ng-3.3.10-fdleak.dif
  M    procps-ng-3.3.10-errno.patch
  M    procps-ng-3.3.10-slab.patch
  M    procps-ng-3.3.11-pmap4suse.patch
  M    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
  M    procps-ng-3.3.8-petabytes.patch
  M    procps-ng-3.3.8-readeof.patch
  M    procps-v3.3.3-pwdx.patch</changelog>
  <changelog author="schwab@suse.de" date="1725451200">- procps-ng-4.0.4-idletime-no-tty.patch: don't print idle time without tty
- procps-ng-4.0.4-w-array-bounds.patch: fix array bounds violation</changelog>
  <changelog author="werner@suse.de" date="1734609600">- Update to procps-ng-4.0.5
  * library
    increment current, revision and age to 0: 1:0:0
    internal: days/users when value is 0                   issue #303
    internal: dont print 60s but increment minute          issue #302
    internal: stat api fixed remaining cpu distortions     issue #321
    internal: only count user sessions
    internal: Recover from meminfo seek using LXC          Debian #1072831
    internal: stat api no longer counts guest tics twice   issue #339
    external: zswap &amp; zswapped added to meminfo api
    external: schedule class added to pids api
    external: disk sleep added to pids api, sleep revised  issue #265
    external: docker containers added to pids api
    external: procps_users new exported function
    external: procps_uptime_snprint uses given upseconds
    external: procps_container_uptime
    external: meminfo api adds SecPageTables, Unaccepted
    external: pids api now provides open file descriptors
    external: 'info' parm removed from all 'VAL' macros    issue #332
    external: Add procps_sigmask_names
    external: Add procps_capability_names
    external: Add PIDS_CAP__PRM Permitted Capabilities
  * build-sys: Added --disable-pidwait and fixed logic     issue #352
  * kill: Correctly parse negative pids                    issue #354
  * pgrep: select process by environment variable          issue #167
  * pgrep: Rework pidfile reading to include stdin         issue #318
  * pmap: Don't escape correct UTF-8 characters
  * ps: Add environ field
  * ps: Add htprv and htshr fields for HugeTables
  * ps: restore lost tasks for options --sort with -H      issue #304
  * ps: add 'docker' containers field, similar to 'lxc'
  * ps: Restore AIX free-format                            issue #323
  * ps: can display open file descriptors for each task
  * ps: Fix signames scanning                              issue #341
  * ps: Add -o pcap,pcaps to show permitted capabilities
  * ps: Zombies show &lt;defunct&gt; in the commandname          issue #355
  * ps: Use quick mode if possible                         merge #239
  * slabtop: Add --human option for slab size
  * snice: Minor fix for help screen                       Debian #1086441
  * sysctl: Add glob excludes                              merge #206
  * sysctl: --all skips stat_refresh                       Debian #978688
  * top: added a 'CLS' scheduling class field, like ps
  * top: exploit library addition of 'disk sleep'          issue #265
  * top: add 'docker' containers field, similar to 'lxc'
  * top: provides additional control over colors
  * top: can display open file descriptors for each task
  * top: corrected cpu % for hosts with qemu processes     issue #339
  * top: remains functional if /proc mounted subset=pid
  * top: can display a task's permitted capabilities (^A)
  * uptime: Add container uptime option                    issue #300
  * vmstat: Add page allocation to --stats
  * vmstat.8: si/so are changed by --unit                  Debian #1061944
  * w: Don't segfault with -s option                       issue #301
  * w: Cache pids list                                     issue #305
  * w: Add container uptime option
  * w.1: Note utmp is for non-systemd                      Debian #1080333
  * watch: use clock_gettime                               issue #295
  * watch.1: --chgexit only works for visible changes      Debian #729569
  * hugetop: a new utility to show huge page information   merge #214
- Remove patches now upstream or fixed
  * 79042e07.patch
  * procps-ng-4.0.4-idletime-no-tty.patch
  * procps-ng-4.0.4-w-array-bounds.patch
- Port patches
  * procps-ng-3.3.10-errno.patch
  * procps-ng-3.3.10-slab.patch
  * procps-ng-3.3.10-xen.dif
  * procps-ng-3.3.11-pmap4suse.patch
  * procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-readeof.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.8-vmstat-terabyte.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-4.0.0-floats.dif
  * procps-ng-4.0.0-integer-overflow.patch
  * procps-ng-4.0.4-ignore-sysctl_conf.patch
  * procps-v3.3.3-columns.dif
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch procps-ng-4.0.5-bsc1246330.patch
  * Do not Fail in year 2038 (bsc#1246330)</changelog>
</package>
<package pkgid="e84a0454de5ee9b2e9fce76e79b8a80a2099e946d2558b2428ee5140757e6a1477a9cbeb36ac96479c6d8f32b3e0eb1c97fa83179966cd6f58eacba5d6c5c40e" name="libprotobuf-c1" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1657540800">- Update to release 1.4.1 (jsc#PED-5634)
  * Fixed unsigned integer overflow (GH#499, bsc#1210323, CVE-2022-48468)
  * Avoid shifting signed values (GH#508)
- Remove 508.patch (merged)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO again.</changelog>
  <changelog author="adam.majer@suse.de" date="1682337600">- Add protobuf-devel to devel package recommends as the binary there
  is required to actually generated protobuf headers.</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- limit to protobuf &lt; 22 as it is not compatible with newer
  versions (gh#protobuf-c#544)</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 1.5.0:
  * Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
  * remove deprecated functionality
  * Avoid "unused variable" compiler warning
  * Update autotools
  * Support for new Google protobuf 22.x, 23.x releases
  * Remove protobuf 2.x support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1723464000">- BuildRequire a C++ compiler, previously pulled in via protobuf</changelog>
  <changelog author="fstrba@suse.com" date="1729512000">- Added patch:
  * 711.patch
    + Backport the changes from the pull request #711
    https://github.com/protobuf-c/protobuf-c/pull/711 fixing
    build with protobuf 26.0+</changelog>
  <changelog author="fstrba@suse.com" date="1729598400">- Modified patch:
  * 711.patch
    + Drop a hunk that was creating problems when the protoc-c
    was called directly and not just as a plugin to protoc</changelog>
  <changelog author="jengelh@inai.de" date="1730030400">- Implement naming guidelines and rename libprotobuf-c-devel back
  to just %name-devel. (The divergence came about on Nov 19 2021
  as a result of merging two subpackages.)</changelog>
  <changelog author="jengelh@inai.de" date="1739102400">- Update to release 1.5.1
  * Order `oneof` union members from largest to smallest
  * Better compatibility with protobuf &gt;= 26.0
- Delete 711.patch (merged)</changelog>
</package>
<package pkgid="a13f04d9f8f242fee9c7322d6c8fc634f17bd4be550d8dc9216a34c5be02853ddcb6b7cbe310cafa9d065b189153b5c9341af626774a22a44d8f2ecd9cd506a4" name="libproxy1" arch="x86_64">
  <version epoch="0" ver="0.5.9" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1689249600">- Update to version 0.5.3:
  + Fix crash querying URLs without a host.
  + Web: Update application page.
  + Add appplication info about apt and python requests.</changelog>
  <changelog author="dimstar@opensuse.org" date="1692187200">- Generate libpxbackend-1_0-mini to be used inside OBS: the backend
  is built without additional dependencies like cURL. So there is
  no wpad/pac support in this variant. Helps break a build cycle.</changelog>
  <changelog author="dimstar@opensuse.org" date="1694606400">- Add libpxbackend-1_0 to baselibs.conf: required by libproxy.so.1.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709121600">- Drop pkgconfig(libsoup-3.0) BuildRequires: no longer needed.</changelog>
  <changelog author="yfjiang@suse.com" date="1710849600">- Do not use %elif by now since SLE, Leap does not have an rpm
  supporting the tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712059200">- Update to version 0.5.4:
  + Add golang link to application page.
  + Improve libproxy test coverage.
  + Improve coverage.
  + Specify library version more completely.
  + Use the correct separator character for Windows ProxyOverride.
  + Improve handling of Windows proxy settings.
  + Add curl option to the generated config for backend instead.
  + Set initial state to online.
  + Windows: Detect scheme presence in proxy URLs more robustly.
  + Fix broken WPAD proxy resolution.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712577600">- Update to version 0.5.5:
  + Windows: Try all configured proxy resolution types.
  + Cleanup curl.
  + Add release option.
  + Expose missing functions in symbol map.
  + Fix crash during unload by.
  + Log debug instead of warning on wpad pac failure.
  + Fix refcounting in px_proxy_factory_copy.
  + symver: Fix symbol map to be a valid tree.
  + Fix free function for pxProxyFactory type.
  + CodeQL badge and updated repology.
  + meson: Don't build OSX plugin on iOS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714392000">- Update to version 0.5.6:
  + Support XDP Desktop Portal proxy resolver.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718798400">- Update to version 0.5.7:
  + Handle empty ignore settings.</changelog>
  <changelog author="dimstar@opensuse.org" date="1727870400">- Update to version 0.5.9:
  + Ignore invalid proxy URL.
  + Memleak fixes.
  + kde: Add ReversedException support.
  + Fix memory leak using PX_FORCE_CONFIG.
  + Update msys2 build steps.
  + Remove white space in key value.
- Changes from version 0.5.8:
  + Update repology list.
  + Properly handle empty proxy ignore entry.
  + Add support for direct keyword in PAC.</changelog>
</package>
<package pkgid="e240787a23d02caf7e7f98f81ed0790082bea0a27ddfe6c6d4b5058b0ab35721d44a489091e53e86af5ebe4f5296ca544d1761e5b691b31a431933cd5111e91c" name="libpskc0" arch="x86_64">
  <version epoch="0" ver="2.6.11.12" rel="160000.3.2"/>
  <changelog author="schwab@suse.de" date="1533556800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="mardnh@gmx.de" date="1609243200">- Update to version 2.6.5
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.
    KEY and OTP may now be given as '-' to mean stdin, or @FILE to
    read from a particular file.  This is recommended on multi-user
    systems, since secrets as command line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.
  * Doc fixes.
- Update to version 2.6.4
  * libpskc: New --with-xmlsec-crypto-engine to hard-code crypto
    engine.  Use it like --with-xmlsec-crypto-engine=gnutls or
  - -with-xmlsec-crypto-engine=openssl if the default dynamic
    loading fails because of runtime linker search path issues.
  * oathtool --totp --verbose now prints TOTP hash mode.
  * oathtool: Hash names (e.g., SHA256) for --totp are now upper
    case.  Lower/mixed case hash names are supported for
    compatibility.
  * pam_oath: Fail gracefully for missing users.
    This allows you to incrementally add support for OATH
    authentication instead of forcing it on all users.
  * Fix libpskc memory corruption bug.
  * Fix man pages.
  * Build fixes.
- Update to version 2.6.3
  * pam_oath: Fix self-tests.
- Drop not longer needed patches:
  * 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch
  * 0003-pam_oath-assign-safe-default-to-alwaysok-config-memb.patch
  * 0002-update_gnulibs_files.patch
  * gnulib-libio.patch
- Use source verification
- Use proper source URLs</changelog>
  <changelog author="mardnh@gmx.de" date="1611144000">- Update to version 2.6.6
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.  KEY and OTP may now be given as '-' to mean
    stdin, or @FILE to read from a particular file.  This is
    recommended on multi-user systems, since secrets as command
    line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.</changelog>
  <changelog author="mardnh@gmx.de" date="1619956800">- Update to version 2.6.7
  * pam_oath: Support variables in usersfile string parameter.
    These changes introduce the ${USER} and ${HOME} placeholder
    values for the usersfile string in the pam_oath configuration
    file. The placeholder values allow the user credentials file
    to be stored in a file path that is relative to the user, and
    mimics similar behavior found in google-authenticator-libpam.
    The motivation for these changes is to allow for
    non-privileged processes to use pam_oath (e.g., for 2FA with
    xscreensaver). Non-privileged and non-suid programs are
    unable to use pam_oath. These changes are a proposed
    alternative to a suid helper binary as well.
  * doc: Fix project URL in man pages.
  * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config.
  * build: Modernize autotools usage.
    Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE
    to make rebuilding from source more safe with future automake
    versions.
  * Updated gnulib files.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- url -&gt; https</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659441600">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="mardnh@gmx.de" date="1688904000">- Update to version 2.6.8
  * libpskc: Fixes for recent libxmlsec releases.
  * pam_oath: Provide fallback pam_modutil_getpwnam implementation.
  * pam_oath: Don't fail authentication when pam_modutil_getpwnam
  doesn't ** know the user when usersfile don't include ${USER}
  or ${HOME}.
  * pam_oath: Self-test improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.6.11
  * liboath: Handle invalid base32 encoded secrets.  Fixes: #41.
  * Various build fixes including updated gnulib files.
  * Improve compatibility with recent libxmlsec.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726228800">- Fix security issue CVE-2024-47191 by adding
  0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch .
- Add patch to implement new null_usersfile_okay argument
  42-null_usersfile_okay.patch .
- Makes this version 2.6.11.12 to be able to depend on it.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1729080000">- Update 0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch
  with bsc#1231699 improvements for security fix CVE-2024-47191</changelog>
</package>
<package pkgid="b35e3f10c3ba8a43f5961de303e2dd8ccf00a4b91a6724bf723aa105a549d0b9c4a089f24d668f8035cae184664b3f877e87e3813355c0fb0e1de3ee8b37dbd0" name="libpsl5" arch="x86_64">
  <version epoch="0" ver="0.21.5" rel="160000.3.2"/>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="astieger@suse.com" date="1524916800">- update to 0.20.2:
  * Fix non srcdir builds
  * Add API decoration
  * Detection fallback from libidn2 to libcu, libidn</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1558267200">- update to 0.21.0:
  * Add -b/--batch to 'psl' to suppress printing the domain</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594987200">- update to 0.21.1:
  * fix build with recent platform.sh changes to publicsuffix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672142400">- update to 0.21.2:
  * Increased internal label size
  * Fix undefined behavior in library code
  * Ensure that calls to fopen() and stat() can handle largefiles
- add multibuild definition</changelog>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710676800">- update to 0.21.5:
  * fixes for other platforms and build system updates
- add upstream signing key and verify source signature</changelog>
</package>
<package pkgid="22a57f2a633798bbe55b512a48e035dfb6eecc21012dcfcd11efee3b46e957057f2082b0238896bfa51954266fec87d6fa817690f118d41da50b1a330352a43b" name="libpwquality-tools" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="160000.3.2"/>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.4.2:
  * Fix regression in handling retry, enforce_for_root, and
    local_users_only options introduced with the previous
    release.</changelog>
  <changelog author="dsauer@suse.com" date="1602849600">- update to 1.4.4
  * e11f2bd Fix regression with enabling cracklib check
  * 02e6728 Use make macros in rpm spec file
  * xxxxxxx Translated using Weblate (Polish, Turkish, Ukrainian)
- update to 1.4.3
  * 1213d33 Update translation files
  * a951fbe Add --disable-cracklib-check configure parameter
  * 6a8845b fixup static compilation
  * 92c6066 python: Add missing getters/setters for newly added settings
  * bfef79d Add usersubstr check
  * 09a2e65 pam_pwquality: Add debug message for the local_users_only option
  * a6f7705 Fix some gcc warnings
  * 8c8a260 pwmake: Properly validate the bits parameter.
  * 7be4797 we use Fedora Weblate now
  * xxxxxxx Translated using Weblate (Azerbaijani, Bulgarian,
    Chinese (Simplified), Czech, French, Friulian, Hungarian, Italian,
    Japanese, Norwegian Bokmål, Persian, Russian, Spanish, Turkish)</changelog>
  <changelog author="josef.moellers@suse.com" date="1609848000">- Do not use macro %make_build pre SLE-15
  Use "make -O %{?_smp_mflags}" instead
  [libpwquality.spec]</changelog>
  <changelog author="dimstar@opensuse.org" date="1632830400">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
  (boo#1191042).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Add python-rpm-macros to BuildRequires (boo#1194757).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672056000">- Update to version 1.4.5:
  + Minor bug fixes and documentation enhancements.
  + Updated translations.</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1703073600">- add: prereq "pam-config" in baselibs.conf
  * post scriptlet in pam_pwquality-32bit runs: pam-config</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- Drop python 2.x support (it's been 4 years).
- Add python3-setuptools BuildRequires which is needed for
  distutils.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736510400">- Add libpwquality-fix-python-install.patch: Fix installation of
  python bindings after moving to setuptools.</changelog>
  <changelog author="schubi@suse.com" date="1737720000">- pwquality.conf moved from /etc/security to /usr/lib/security</changelog>
</package>
<package pkgid="b700b20aefcc6e7ef286fb671b870b9121527c197b9e168612841675dcc95b90d3a3c77e1227759cd62eaf7ab9283cc55d5e66bc761cdba60a300e278bb69fcf" name="libpwquality1" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="160000.3.2"/>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.4.2:
  * Fix regression in handling retry, enforce_for_root, and
    local_users_only options introduced with the previous
    release.</changelog>
  <changelog author="dsauer@suse.com" date="1602849600">- update to 1.4.4
  * e11f2bd Fix regression with enabling cracklib check
  * 02e6728 Use make macros in rpm spec file
  * xxxxxxx Translated using Weblate (Polish, Turkish, Ukrainian)
- update to 1.4.3
  * 1213d33 Update translation files
  * a951fbe Add --disable-cracklib-check configure parameter
  * 6a8845b fixup static compilation
  * 92c6066 python: Add missing getters/setters for newly added settings
  * bfef79d Add usersubstr check
  * 09a2e65 pam_pwquality: Add debug message for the local_users_only option
  * a6f7705 Fix some gcc warnings
  * 8c8a260 pwmake: Properly validate the bits parameter.
  * 7be4797 we use Fedora Weblate now
  * xxxxxxx Translated using Weblate (Azerbaijani, Bulgarian,
    Chinese (Simplified), Czech, French, Friulian, Hungarian, Italian,
    Japanese, Norwegian Bokmål, Persian, Russian, Spanish, Turkish)</changelog>
  <changelog author="josef.moellers@suse.com" date="1609848000">- Do not use macro %make_build pre SLE-15
  Use "make -O %{?_smp_mflags}" instead
  [libpwquality.spec]</changelog>
  <changelog author="dimstar@opensuse.org" date="1632830400">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
  (boo#1191042).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Add python-rpm-macros to BuildRequires (boo#1194757).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672056000">- Update to version 1.4.5:
  + Minor bug fixes and documentation enhancements.
  + Updated translations.</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1703073600">- add: prereq "pam-config" in baselibs.conf
  * post scriptlet in pam_pwquality-32bit runs: pam-config</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- Drop python 2.x support (it's been 4 years).
- Add python3-setuptools BuildRequires which is needed for
  distutils.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736510400">- Add libpwquality-fix-python-install.patch: Fix installation of
  python bindings after moving to setuptools.</changelog>
  <changelog author="schubi@suse.com" date="1737720000">- pwquality.conf moved from /etc/security to /usr/lib/security</changelog>
</package>
<package pkgid="9cb91c6b545a25ad46a4a13df44464580a29a8d63ea6758789147036ec3e73fb3e7c711300eb3cbb0e9b9b4febc8e0c22c3505f7f4f2b4321e8985195364dcbe" name="libpxbackend-1_0" arch="x86_64">
  <version epoch="0" ver="0.5.9" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1689249600">- Update to version 0.5.3:
  + Fix crash querying URLs without a host.
  + Web: Update application page.
  + Add appplication info about apt and python requests.</changelog>
  <changelog author="dimstar@opensuse.org" date="1692187200">- Generate libpxbackend-1_0-mini to be used inside OBS: the backend
  is built without additional dependencies like cURL. So there is
  no wpad/pac support in this variant. Helps break a build cycle.</changelog>
  <changelog author="dimstar@opensuse.org" date="1694606400">- Add libpxbackend-1_0 to baselibs.conf: required by libproxy.so.1.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709121600">- Drop pkgconfig(libsoup-3.0) BuildRequires: no longer needed.</changelog>
  <changelog author="yfjiang@suse.com" date="1710849600">- Do not use %elif by now since SLE, Leap does not have an rpm
  supporting the tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712059200">- Update to version 0.5.4:
  + Add golang link to application page.
  + Improve libproxy test coverage.
  + Improve coverage.
  + Specify library version more completely.
  + Use the correct separator character for Windows ProxyOverride.
  + Improve handling of Windows proxy settings.
  + Add curl option to the generated config for backend instead.
  + Set initial state to online.
  + Windows: Detect scheme presence in proxy URLs more robustly.
  + Fix broken WPAD proxy resolution.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712577600">- Update to version 0.5.5:
  + Windows: Try all configured proxy resolution types.
  + Cleanup curl.
  + Add release option.
  + Expose missing functions in symbol map.
  + Fix crash during unload by.
  + Log debug instead of warning on wpad pac failure.
  + Fix refcounting in px_proxy_factory_copy.
  + symver: Fix symbol map to be a valid tree.
  + Fix free function for pxProxyFactory type.
  + CodeQL badge and updated repology.
  + meson: Don't build OSX plugin on iOS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714392000">- Update to version 0.5.6:
  + Support XDP Desktop Portal proxy resolver.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718798400">- Update to version 0.5.7:
  + Handle empty ignore settings.</changelog>
  <changelog author="dimstar@opensuse.org" date="1727870400">- Update to version 0.5.9:
  + Ignore invalid proxy URL.
  + Memleak fixes.
  + kde: Add ReversedException support.
  + Fix memory leak using PX_FORCE_CONFIG.
  + Update msys2 build steps.
  + Remove white space in key value.
- Changes from version 0.5.8:
  + Update repology list.
  + Properly handle empty proxy ignore entry.
  + Add support for direct keyword in PAC.</changelog>
</package>
<package pkgid="b5e90390ea3dd4e870e816aa1ad8bf125533e216cbf2619902d9f72a23f2e1259b56fdc0d5f343477896bf1b706169e02b95c38b6c45b487e07566c5d30bb63a" name="libpython3_13-1_0" arch="x86_64">
  <version epoch="0" ver="3.13.13" rel="160000.1.1"/>
  <changelog author="mcepl@cepl.eu" date="1770379200">- Update to 3.13.12: Python 3.13.12 final Release date:
  2026-02-03
  - Tools/Demos
  - gh-142095: Make gdb ‘py-bt’ command use frame from thread
    local state when available. Patch by Sam Gross and Victor
    Stinner.
  - Tests
  - gh-144415: The Android testbed now distinguishes between
    stdout/stderr messages which were triggered by a newline,
    and those triggered by a manual call to flush. This fixes
    logging of progress indicators and similar content.
  - gh-65784: Add support for parametrized resource wantobjects
    in regrtests, which allows to run Tkinter tests with the
    specified value of tkinter.wantobjects, for example -u
    wantobjects=0.
  - gh-143553: Add support for parametrized resources, such as
  - u xpickle=2.7.
  - gh-142836: Accommodated Solaris in
    test_pdb.test_script_target_anonymous_pipe.
  - gh-129401: Fix a flaky test in test_repr_rlock that checks
    the representation of multiprocessing.RLock.
  - bpo-31391: Forward-port test_xpickle from Python 2 to
    Python 3 and add the resource back to test’s command line.
  - Security
  - gh-144125: BytesGenerator will now refuse to serialize
    (write) headers that are unsafely folded or delimited; see
    verify_generated_headers. (Contributed by Bas Bloemsaat and
    Petr Viktorin in gh-121650) (bsc#1257181, CVE-2026-1299).
  - gh-143935: Fixed a bug in the folding of comments when
    flattening an email message using a modern email policy.
    Comments consisting of a very long sequence of non-foldable
    characters could trigger a forced line wrap that omitted
    the required leading space on the continuation line,
    causing the remainder of the comment to be interpreted as
    a new header field. This enabled header injection with
    carefully crafted inputs (bsc#1257029, CVE-2025-11468).
  - gh-143925: Reject control characters in data: URL media
    types (bsc#1257046, CVE-2025-15282).
  - gh-143919: Reject control characters in http.cookies.Morsel
    fields and values (bsc#1257031, CVE-2026-0672).
  - gh-143916: Reject C0 control characters within
    wsgiref.headers.Headers fields, values, and parameters
    (bsc#1257042, CVE-2026-0865).
  - Library
  - gh-144380: Improve performance of io.BufferedReader line
    iteration by ~49%.
  - gh-144169: Fix three crashes when non-string keyword
    arguments are supplied to objects in the ast module.
  - gh-144100: Fixed a crash in ctypes when using a deprecated
    POINTER(str) type in argtypes. Instead of aborting, ctypes
    now raises a proper Python exception when the pointer
    target type is unresolved.
  - gh-144050: Fix stat.filemode() in the pure-Python
    implementation to avoid misclassifying invalid mode values
    as block devices.
  - gh-144023: Fixed validation of file descriptor 0 in posix
    functions when used with follow_symlinks parameter.
  - gh-143999: Fix an issue where inspect.getgeneratorstate()
    and inspect.getcoroutinestate() could fail for generators
    wrapped by types.coroutine() in the suspended state.
  - gh-143706: Fix multiprocessing forkserver so that sys.argv
    is correctly set before __main__ is preloaded. Previously,
    sys.argv was empty during main module import in forkserver
    child processes. This fixes a regression introduced in
    3.13.8 and 3.14.1. Root caused by Aaron Wieczorek, test
    provided by Thomas Watson, thanks!
  - gh-143638: Forbid reentrant calls of the pickle.Pickler and
    pickle.Unpickler methods for the C implementation.
    Previously, this could cause crash or data corruption, now
    concurrent calls of methods of the same object raise
    RuntimeError.
  - gh-78724: Raise RuntimeError’s when user attempts to call
    methods on half-initialized Struct objects, For example,
    created by Struct.__new__(Struct). Patch by Sergey
    B Kirpichev.
  - gh-143602: Fix a inconsistency issue in write() that leads
    to unexpected buffer overwrite by deduplicating the buffer
    exports.
  - gh-143547: Fix sys.unraisablehook() when the hook raises an
    exception and changes sys.unraisablehook(): hold a strong
    reference to the old hook. Patch by Victor Stinner.
  - gh-143378: Fix use-after-free crashes when a BytesIO object
    is concurrently mutated during write() or writelines().
  - gh-143346: Fix incorrect wrapping of the Base64 data in
    plistlib._PlistWriter when the indent contains a mix of
    tabs and spaces.
  - gh-143310: tkinter: fix a crash when a Python list is
    mutated during the conversion to a Tcl object (e.g., when
    setting a Tcl variable). Patch by Bénédikt Tran.
  - gh-143309: Fix a crash in os.execve() on non-Windows
    platforms when given a custom environment mapping which is
    then mutated during parsing. Patch by Bénédikt Tran.
  - gh-143308: pickle: fix use-after-free crashes when
    a PickleBuffer is concurrently mutated by a custom buffer
    callback during pickling. Patch by Bénédikt Tran and Aaron
    Wieczorek.
  - gh-143237: Fix support of named pipes in the rotating
    logging handlers.
  - gh-143249: Fix possible buffer leaks in Windows overlapped
    I/O on error handling.
  - gh-143241: zoneinfo: fix infinite loop in
    ZoneInfo.from_file when parsing a malformed TZif file.
    Patch by Fatih Celik.
  - gh-142830: sqlite3: fix use-after-free crashes when the
    connection’s callbacks are mutated during a callback
    execution. Patch by Bénédikt Tran.
  - gh-143200: xml.etree.ElementTree: fix use-after-free
    crashes in __getitem__() and __setitem__() methods of
    Element when the element is concurrently mutated. Patch by
    Bénédikt Tran.
  - gh-142195: Updated timeout evaluation logic in subprocess
    to be compatible with deterministic environments like
    Shadow where time moves exactly as requested.
  - gh-143145: Fixed a possible reference leak in ctypes when
    constructing results with multiple output parameters on
    error.
  - gh-122431: Corrected the error message in
    readline.append_history_file() to state that nelements must
    be non-negative instead of positive.
  - gh-143004: Fix a potential use-after-free in
    collections.Counter.update() when user code mutates the
    Counter during an update.
  - gh-143046: The asyncio REPL no longer prints copyright and
    version messages in the quiet mode (-q). Patch by Bartosz
    Sławecki.
  - gh-140648: The asyncio REPL now respects the -I flag
    (isolated mode). Previously, it would load and execute
    PYTHONSTARTUP even if the flag was set. Contributed by
    Bartosz Sławecki.
  - gh-142991: Fixed socket operations such as recvfrom() and
    sendto() for FreeBSD divert(4) socket.
  - gh-143010: Fixed a bug in mailbox where the precise timing
    of an external event could result in the library opening an
    existing file instead of a file it expected to create.
  - gh-142881: Fix concurrent and reentrant call of
    atexit.unregister().
  - gh-112127: Fix possible use-after-free in
    atexit.unregister() when the callback is unregistered
    during comparison.
  - gh-142783: Fix zoneinfo use-after-free with descriptor
    _weak_cache. a descriptor as _weak_cache could cause
    crashes during object creation. The fix ensures proper
    reference counting for descriptor-provided objects.
  - gh-142754: Add the ownerDocument attribute to
    xml.dom.minidom elements and attributes created by directly
    instantiating the Element or Attr class. Note that this way
    of creating nodes is not supported; creator functions like
    xml.dom.Document.documentElement() should be used instead.
  - gh-142784: The asyncio REPL now properly closes the loop
    upon the end of interactive session. Previously, it could
    cause surprising warnings. Contributed by Bartosz Sławecki.
  - gh-142555: array: fix a crash in a[i] = v when converting
    i to an index via i.__index__ or i.__float__ mutates the
    array.
  - gh-142594: Fix crash in TextIOWrapper.close() when the
    underlying buffer’s closed property calls detach().
  - gh-142451: hmac: Ensure that the HMAC.block_size attribute
    is correctly copied by HMAC.copy. Patch by Bénédikt Tran.
  - gh-142495: collections.defaultdict now prioritizes
    __setitem__() when inserting default values from
    default_factory. This prevents race conditions where
    a default value would overwrite a value set before
    default_factory returns.
  - gh-142651: unittest.mock: fix a thread safety issue where
    Mock.call_count may return inaccurate values when the mock
    is called concurrently from multiple threads.
  - gh-142595: Added type check during initialization of the
    decimal module to prevent a crash in case of broken stdlib.
    Patch by Sergey B Kirpichev.
  - gh-142517: The non-compat32 email policies now correctly
    handle refolding encoded words that contain bytes that can
    not be decoded in their specified character set. Previously
    this resulted in an encoding exception during folding.
  - gh-112527: The help text for required options in argparse
    no longer extended with “ (default: None)”.
  - gh-142315: Pdb can now run scripts from anonymous pipes
    used in process substitution. Patch by Bartosz Sławecki.
  - gh-142282: Fix winreg.QueryValueEx() to not accidentally
    read garbage buffer under race condition.
  - gh-75949: Fix argparse to preserve | separators in mutually
    exclusive groups when the usage line wraps due to length.
  - gh-68552: MisplacedEnvelopeHeaderDefect and Missing header
    name defects are now correctly passed to the handle_defect
    method of policy in FeedParser.
  - gh-142006: Fix a bug in the email.policy.default folding
    algorithm which incorrectly resulted in a doubled newline
    when a line ending at exactly max_line_length was followed
    by an unfoldable token.
  - gh-105836: Fix asyncio.run_coroutine_threadsafe() leaving
    underlying cancelled asyncio task running.
  - gh-139971: pydoc: Ensure that the link to the online
    documentation of a stdlib module is correct.
  - gh-139262: Some keystrokes can be swallowed in the new
    PyREPL on Windows, especially when used together with the
    ALT key. Fix by Chris Eibl.
  - gh-138897: Improved license/copyright/credits display in
    the REPL: now uses a pager.
  - gh-79986: Add parsing for References and In-Reply-To
    headers to the email library that parses the header content
    as lists of message id tokens. This prevents them from
    being folded incorrectly.
  - gh-109263: Starting a process from spawn context in
    multiprocessing no longer sets the start method globally.
  - gh-90871: Fixed an off by one error concerning the backlog
    parameter in create_unix_server(). Contributed by Christian
    Harries.
  - gh-133253: Fix thread-safety issues in linecache.
  - gh-132715: Skip writing objects during marshalling once
    a failure has occurred.
  - gh-127529: Correct behavior of
    asyncio.selector_events.BaseSelectorEventLoop._accept_connection()
    in handling ConnectionAbortedError in a loop. This improves
    performance on OpenBSD.
  - IDLE
  - gh-143774: Better explain the operation of Format / Format
    Paragraph.
  - Documentation
  - gh-140806: Add documentation for enum.bin().
  - Core and Builtins
  - gh-144307: Prevent a reference leak in module teardown at
    interpreter finalization.
  - gh-144194: Fix error handling in perf jitdump
    initialization on memory allocation failure.
  - gh-141805: Fix crash in set when objects with the same hash
    are concurrently added to the set after removing an element
    with the same hash while the set still contains elements
    with the same hash.
  - gh-143670: Fixes a crash in ga_repr_items_list function.
  - gh-143377: Fix a crash in _interpreters.capture_exception()
    when the exception is incorrectly formatted. Patch by
    Bénédikt Tran.
  - gh-143189: Fix crash when inserting a non-str key into
    a split table dictionary when the key matches an existing
    key in the split table but has no corresponding value in
    the dict.
  - gh-143228: Fix use-after-free in perf trampoline when
    toggling profiling while threads are running or during
    interpreter finalization with daemon threads active. The
    fix uses reference counting to ensure trampolines are not
    freed while any code object could still reference them.
    Pach by Pablo Galindo
  - gh-142664: Fix a use-after-free crash in
    memoryview.__hash__ when the __hash__ method of the
    referenced object mutates that object or the view. Patch by
    Bénédikt Tran.
  - gh-142557: Fix a use-after-free crash in bytearray.__mod__
    when the bytearray is mutated while formatting the %-style
    arguments. Patch by Bénédikt Tran.
  - gh-143195: Fix use-after-free crashes in bytearray.hex()
    and memoryview.hex() when the separator’s __len__() mutates
    the original object. Patch by Bénédikt Tran.
  - gh-143135: Set sys.flags.inspect to 1 when PYTHONINSPECT is
    0. Previously, it was set to 0 in this case.
  - gh-143003: Fix an overflow of the shared empty buffer in
    bytearray.extend() when __length_hint__() returns 0 for
    non-empty iterator.
  - gh-143006: Fix a possible assertion error when comparing
    negative non-integer float and int with the same number of
    bits in the integer part.
  - gh-142776: Fix a file descriptor leak in import.c
  - gh-142829: Fix a use-after-free crash in
    contextvars.Context comparison when a custom __eq__ method
    modifies the context via set().
  - gh-142766: Clear the frame of a generator when
    generator.close() is called.
  - gh-142737: Tracebacks will be displayed in fallback mode
    even if io.open() is lost. Previously, this would crash the
    interpreter. Patch by Bartosz Sławecki.
  - gh-142554: Fix a crash in divmod() when
    _pylong.int_divmod() does not return a tuple of length two
    exactly. Patch by Bénédikt Tran.
  - gh-142560: Fix use-after-free in bytearray search-like
    methods (find(), count(), index(), rindex(), and rfind())
    by marking the storage as exported which causes
    reallocation attempts to raise BufferError. For contains(),
    split(), and rsplit() the buffer protocol is used for this.
  - gh-142343: Fix SIGILL crash on m68k due to incorrect
    assembly constraint.
  - gh-141732: Ensure the __repr__() for ExceptionGroup and
    BaseExceptionGroup does not change when the exception
    sequence that was original passed in to its constructor is
    subsequently mutated.
  - gh-100964: Fix reference cycle in exhausted generator
    frames. Patch by Savannah Ostrowski.
  - gh-140373: Correctly emit PY_UNWIND event when generator
    object is closed. Patch by Mikhail Efimov.
  - gh-138568: Adjusted the built-in help() function so that
    empty inputs are ignored in interactive mode.
  - gh-127773: Do not use the type attribute cache for types
    with incompatible MRO.
  - C API
  - gh-142571: PyUnstable_CopyPerfMapFile() now checks that
    opening the file succeeded before flushing.
  - Build
  - gh-142454: When calculating the digest of the JIT stencils
    input, sort the hashed files by filenames before adding
    their content to the hasher. This ensures deterministic
    hash input and hence deterministic hash, independent on
    filesystem order.
  - gh-141808: When running make clean-retain-profile, keep the
    generated JIT stencils. That way, the stencils are not
    generated twice when Profile-guided optimization (PGO) is
    used. It also allows distributors to supply their own
    pre-built JIT stencils.
  - gh-138061: Ensure reproducible builds by making JIT stencil
    header generation deterministic.
- Remove upstreamed patches:
  - CVE-2024-6923-follow-up-EOL-email-headers.patch
  - gh138131-exclude-pycache-from-digest.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1773403200">- Add CVE-2026-2297-SourcelessFileLoader-io_open_code.patch
  ensuring that `SourcelessFileLoader` uses `io.open_code` when
  opening `.pyc` files (bsc#1259240, CVE-2026-2297).</changelog>
  <changelog author="mmachova@suse.com" date="1773748800">- Adapt %suse_version checks to support new %suse_version design for
  16.1 and following (jsc#PED-15850)</changelog>
  <changelog author="mcepl@cepl.eu" date="1773835200">- Fix changelog</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267200">- Add CVE-2026-3644-cookies-Morsel-update-II.patch to reject
  control characters in http.cookies.Morsel.update() and
  http.cookies.BaseCookie.js_output (bsc#1259734, CVE-2026-3644).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267201">- Add CVE-2026-4224-expat-unbound-C-recursion.patch avoiding
  unbound C recursion in conv_content_model in pyexpat.c
  (bsc#1259735, CVE-2026-4224).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774440000">- Add CVE-2025-13462-tarinfo-header-parse.patch which skips
  TarInfo DIRTYPE normalization during GNU long name handling
  (bsc#1259611, CVE-2025-13462).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774612800">- Add CVE-2026-4519-webbrowser-open-dashes.patch to reject
  leading dashes in webbrowser URLs (bsc#1260026, CVE-2026-4519,
  gh#python/cpython#143930).</changelog>
  <changelog author="mcepl@cepl.eu" date="1775131200">- Add CVE-2026-3479-pkgutil_get_data.patch pkgutil.get_data() has
  the same security model as open(). The documented limitations
  ensure compatibility with non-filesystem loaders; Python
  doesn't check that. (bsc#1259989, CVE-2026-3479,
  gh#python/cpython#146121).</changelog>
  <changelog author="mcepl@cepl.eu" date="1775649600">- Update to 3.13.13
  - Security
  - gh-145986: xml.parsers.expat: Fixed a crash caused by
    unbounded C recursion when converting deeply nested XML
    content models with ElementDeclHandler(). This addresses
    CVE 2026-4224 (bsc#1259735, CVE-2026-4224).
  - gh-145599: Reject control characters in http.cookies.Morsel
    update() and js_output(). This addresses CVE 2026-3644
    (bsc#1259734, CVE-2026-3644).
  - gh-145506: Fixes CVE 2026-2297 by ensuring that
    SourcelessFileLoader uses io.open_code() when opening .pyc
    files (bsc#1259240, CVE-2026-2297).
  - gh-144370: Disallow usage of control characters in status
    in wsgiref.handlers to prevent HTTP header injections.
    Patch by Benedikt Johannes.
  - gh-143930: Reject leading dashes in URLs passed to
    webbrowser.open() (bsc#1260026, CVE-2026-4519).
  - Library
  - gh-144503: Fix a regression introduced in 3.14.3 and
    3.13.12 where the multiprocessing forkserver start method
    would fail with BrokenPipeError when the parent process had
    a very large sys.argv. The argv is now passed to the
    forkserver as separate command-line arguments rather than
    being embedded in the -c command string, avoiding the
    operating system’s per-argument length limit.
  - gh-146613: itertools: Fix a crash in itertools.groupby()
    when the grouper iterator is concurrently mutated.
  - gh-146080: ssl: fix a crash when an SNI callback tries to
    use an SSL object that has already been garbage-collected.
    Patch by Bénédikt Tran.
  - gh-146090: sqlite3: fix a crash when
    sqlite3.Connection.create_collation() fails with
    SQLITE_BUSY. Patch by Bénédikt Tran.
  - gh-146090: sqlite3: properly raise MemoryError instead of
    SystemError when a context callback fails to be allocated.
    Patch by Bénédikt Tran.
  - gh-145633: Fix struct.pack('f', float): use PyFloat_Pack4()
    to raise OverflowError. Patch by Sergey B Kirpichev and
    Victor Stinner.
  - gh-146310: The ensurepip module no longer looks for
    pip-*.whl wheel packages in the current directory.
  - gh-146083: Update bundled libexpat to version 2.7.5.
  - gh-146076: zoneinfo: fix crashes when deleting _weak_cache
    from a zoneinfo.ZoneInfo subclass.
  - gh-146054: Limit the size of encodings.search_function()
    cache. Found by OSS Fuzz in #493449985.
  - gh-145883: zoneinfo: Fix heap buffer overflow reads from
    malformed TZif data. Found by OSS Fuzz, issues #492245058
    and #492230068.
  - gh-145750: Avoid undefined behaviour from signed integer
    overflow when parsing format strings in the struct module.
    Found by OSS Fuzz in #488466741.
  - gh-145492: Fix infinite recursion in
    collections.defaultdict __repr__ when a defaultdict
    contains itself. Based on analysis by KowalskiThomas in
    gh-145492.
  - gh-145623: Fix crash in struct when calling repr() or
    __sizeof__() on an uninitialized struct.Struct object
    created via Struct.__new__() without calling __init__().
  - gh-145616: Detect Android sysconfig ABI correctly on 32-bit
    ARM Android on 64-bit ARM kernel
  - gh-145376: Fix null pointer dereference in unusual error
    scenario in hashlib.
  - gh-145551: Fix InvalidStateError when cancelling process
    created by asyncio.create_subprocess_exec() or
    asyncio.create_subprocess_shell(). Patch by Daan De Meyer.
  - gh-145417: venv: Prevent incorrect preservation of SELinux
    context when copying the Activate.ps1 script. The script
    inherited the SELinux security context of the system
    template directory, rather than the destination project
    directory.
  - gh-145301: hashlib: fix a crash when the initialization of
    the underlying C extension module fails.
  - gh-145264: Base64 decoder (see binascii.a2b_base64(),
    base64.b64decode(), etc) no longer ignores excess data
    after the first padded quad in non-strict (default) mode.
    Instead, in conformance with RFC 4648, section 3.3, it now
    ignores the pad character, “=”, if it is present before the
    end of the encoded data.
  - gh-145158: Avoid undefined behaviour from signed integer
    overflow when parsing format strings in the struct module.
  - gh-144984: Fix crash in
    xml.parsers.expat.xmlparser.ExternalEntityParserCreate()
    when an allocation fails. The error paths could dereference
    NULL handlers and double-decrement the parent parser’s
    reference count.
  - gh-88091: Fix unicodedata.decomposition() for Hangul
    characters.
  - gh-144835: Added missing explanations for some parameters
    in glob.glob() and glob.iglob().
  - gh-144833: Fixed a use-after-free in ssl when SSL_new()
    returns NULL in newPySSLSocket(). The error was reported
    via a dangling pointer after the object had already been
    freed.
  - gh-144259: Fix inconsistent display of long multiline
    pasted content in the REPL.
  - gh-144156: Fix the folding of headers by the email library
    when RFC 2047 encoded words are used. Now whitespace is
    correctly preserved and also correctly added between
    adjacent encoded words. The latter property was broken by
    the fix for gh-92081, which mostly fixed previous failures
    to preserve whitespace.
  - gh-66305: Fixed a hang on Windows in the tempfile module
    when trying to create a temporary file or subdirectory in
    a non-writable directory.
  - gh-140814: multiprocessing.freeze_support() no longer sets
    the default start method as a side effect, which previously
    caused a subsequent multiprocessing.set_start_method() call
    to raise RuntimeError.
  - gh-144475: Calling repr() on functools.partial() is now
    safer when the partial object’s internal attributes are
    replaced while the string representation is being
    generated.
  - gh-144538: Bump the version of pip bundled in ensurepip to
    version 26.0.1
  - gh-144363: Update bundled libexpat to 2.7.4
  - gh-143637: Fixed a crash in socket.sendmsg() that could
    occur if ancillary data is mutated re-entrantly during
    argument parsing.
  - gh-143880: Fix data race in functools.partial() in the free
    threading build.
  - gh-143543: Fix a crash in itertools.groupby that could
    occur when a user-defined __eq__() method re-enters the
    iterator during key comparison.
  - gh-140652: Fix a crash in _interpchannels.list_all() after
    closing a channel.
  - gh-143698: Allow scheduler and setpgroup arguments to be
    explicitly None when calling os.posix_spawn() or
    os.posix_spawnp(). Patch by Bénédikt Tran.
  - gh-143698: Raise TypeError instead of SystemError when the
    scheduler in os.posix_spawn() or os.posix_spawnp() is not
    a tuple. Patch by Bénédikt Tran.
  - gh-143304: Fix ctypes.CDLL to honor the handle parameter on
    POSIX systems.
  - gh-142781: zoneinfo: fix a crash when instantiating
    ZoneInfo objects for which the internal class-level cache
    is inconsistent.
  - gh-142763: Fix a race condition between zoneinfo.ZoneInfo
    creation and zoneinfo.ZoneInfo.clear_cache() that could
    raise KeyError.
  - gh-142787: Fix assertion failure in sqlite3 blob subscript
    when slicing with indices that result in an empty slice.
  - gh-142352: Fix asyncio.StreamWriter.start_tls() to transfer
    buffered data from StreamReader to the SSL layer,
    preventing data loss when upgrading a connection to TLS
    mid-stream (e.g., when implementing PROXY protocol
    support).
  - gh-141707: Don’t change tarfile.TarInfo type from AREGTYPE
    to DIRTYPE when parsing GNU long name or link headers
    (bsc#1259611, CVE-2025-13462).
  - gh-139933: Improve AttributeError suggestions for classes
    with a custom __dir__() method returning a list of
    unsortable values. Patch by Bénédikt Tran.
  - gh-138891: Fix SyntaxError when inspect.get_annotations(f,
    eval_str=True) is called on a function annotated with a PEP
    646 star_expression
  - gh-137335: Get rid of any possibility of a name conflict
    for named pipes in multiprocessing and asyncio on Windows,
    no matter how small.
  - gh-80667: Support lookup for Tangut Ideographs in
    unicodedata.
  - bpo-40243: Fix unicodedata.ucd_3_2_0.numeric() for
    non-decimal values.
  - Documentation
  - gh-126676: Expand argparse documentation for type=bool with
    a demonstration of the surprising behavior and pointers to
    common alternatives.
  - gh-145450: Document missing public wave.Wave_write getter
    methods.
  - Core and Builtins
  - gh-148157: Fix an unlikely crash when parsing an invalid
    type comments for function parameters. Found by OSS Fuzz in
    [#492782951].
  - gh-146615: Fix a crash in __get__() for METH_METHOD
    descriptors when an invalid (non-type) object is passed as
    the second argument. Patch by Steven Sun.
  - gh-146128: Fix a bug which could cause constant values to
    be partially corrupted in AArch64 JIT code. This issue is
    theoretical, and hasn’t actually been observed in
    unmodified Python interpreters.
  - gh-146250: Fixed a memory leak in SyntaxError when
    re-initializing it.
  - gh-146245: Fixed reference leaks in socket when audit hooks
    raise exceptions in socket.getaddrinfo() and
    socket.sendto().
  - gh-146227: Fix wrong type in _Py_atomic_load_uint16 in the
    C11 atomics backend (pyatomic_std.h), which used a 32-bit
    atomic load instead of 16-bit. Found by Mohammed Zuhaib.
  - gh-146056: Fix repr() for lists containing NULLs.
  - gh-145990: python --help-env sections are now sorted by
    environment variable name.
  - gh-145376: Fix GC tracking in structseq.__replace__().
  - gh-142183: Avoid a pathological case where repeated calls
    at a specific stack depth could be significantly slower.
  - gh-145783: Fix an unlikely crash in the parser when certain
    errors were erroneously not propagated. Found by OSS Fuzz
    in #491369109.
  - gh-145701: Fix SystemError when __classdict__ or
    __conditional_annotations__ is in a class-scope inlined
    comprehension. Found by OSS Fuzz in #491105000.
  - gh-145335: Fix a crash in os.pathconf() when called with -1
    as the path argument.
  - gh-145234: Fixed a SystemError in the parser when an
    encoding cookie (for example, UTF-7) decodes to carriage
    returns (\r). Newlines are now normalized after decoding in
    the string tokenizer.
  - Patch by Pablo Galindo.
  - gh-130555: Fix use-after-free in dict.clear() when the
    dictionary values are embedded in an object and
    a destructor causes re-entrant mutation of the dictionary.
  - gh-145008: Fix a bug when calling certain methods at the
    recursion limit which manifested as a corruption of
    Python’s operand stack. Patch by Ken Jin.
  - gh-144872: Fix heap buffer overflow in the parser found by
    OSS-Fuzz.
  - gh-144766: Fix a crash in fork child process when perf
    support is enabled.
  - gh-144759: Fix undefined behavior in the lexer when start
    and multi_line_start pointers are NULL in
    _PyLexer_remember_fstring_buffers() and
    _PyLexer_restore_fstring_buffers(). The NULL pointer
    arithmetic (NULL - valid_pointer) is now guarded with
    explicit NULL checks.
  - gh-144601: Fix crash when importing a module whose PyInit
    function raises an exception from a subinterpreter.
  - gh-143636: Fix a crash when calling
    SimpleNamespace.__replace__() on non-namespace instances.
    Patch by Bénédikt Tran.
  - gh-143650: Fix race condition in importlib where a thread
    could receive a stale module reference when another
    thread’s import fails.
  - gh-140594: Fix an out of bounds read when a single NUL
    character is read from the standard input. Patch by Shamil
    Abdulaev.
  - gh-91636: While performing garbage collection, clear
    weakrefs to unreachable objects that are created during
    running of finalizers. If those weakrefs were are not
    cleared, they could reveal unreachable objects.
  - gh-130327: Fix erroneous clearing of an object’s __dict__
    if overwritten at runtime.
  - gh-80667: Literals using the \N{name} escape syntax can now
    construct CJK ideographs and Hangul syllables using
    case-insensitive names.
  - Build
  - gh-146541: The Android testbed can now be built for 32-bit
    ARM and x86 targets.
  - gh-146450: The Android build script was modified to improve
    parity with other platform build scripts.
  - gh-145801: When Python build is optimized with GCC using
    PGO, use -fprofile-update=atomic option to use atomic
    operations when updating profile information. This option
    reduces the risk of gcov Data Files (.gcda) corruption
    which can cause random GCC crashes. Patch by Victor
    Stinner.
  - gh-129259: Fix AIX build failures caused by incorrect
    struct alignment in _Py_CODEUNIT and _Py_BackoffCounter by
    adding AIX-specific #pragma pack directives.
  - Tests
  - gh-144418: The Android testbed’s emulator RAM has been
    increased from 2 GB to 4 GB.
  - gh-146202: Fix a race condition in regrtest: make sure that
    the temporary directory is created in the worker process.
    Previously, temp_cwd() could fail on Windows if the “build”
    directory was not created. Patch by Victor Stinner.
  - gh-144739: When Python was compiled with system expat older
    then 2.7.2 but tests run with newer expat, still skip
    test.test_pyexpat.MemoryProtectionTest.
- Removed upstreamed patches:
  - CVE-2025-13462-tarinfo-header-parse.patch
  - CVE-2026-2297-SourcelessFileLoader-io_open_code.patch
  - CVE-2026-3479-pkgutil_get_data.patch
  - CVE-2026-3644-cookies-Morsel-update-II.patch
  - CVE-2026-4224-expat-unbound-C-recursion.patch
  - CVE-2026-4519-webbrowser-open-dashes.patch</changelog>
</package>
<package pkgid="3e1b3364c872f7ca4892fb56f7b45e462ba3d5857e75702d31c1bac16dffb308355b1049c1633d8cf12004e53e72be6b7cbcfe8cd9b30bdb8307f647a6cfbbbd" name="libqat4" arch="x86_64">
  <version epoch="0" ver="24.09.0" rel="160000.2.2"/>
  <changelog author="duwe@suse.com" date="1612785600">- re-add _service file, but "disabled".</changelog>
  <changelog author="rpm@fthiessen.de" date="1625313600">- Update to version 21.05.0:
  * Added support for AES-CCM 192/265
  * Added support for SHA3-224/384/512 (no partials support)
  * Added support for ChaCha20-Poly1305
  * Added support for PKE 8K (RSA, DH, ModExp, ModInv)
  * Fixed device enumeration on different nodes
  * Fixed pci_vfio_set_command for 32 bit builds</changelog>
  <changelog author="duwe@suse.com" date="1633521600">- Update to 21.08.0
  * Add support for Compression Deflate algorithm
  * Add communication path to PF driver (PFVFcomms)
  * Enable services based on VF capabilities.
  * Stop service correctly during uninstallation
  * Fix qatmgr foreground option -f
  * Add qatmgr -v option to display version
  * Add version check between qatlib and qatmgr
  * Suppress deprecated warnings from OpenSSL3
  * Fix build with clang</changelog>
  <changelog author="duwe@suse.com" date="1633521601">- Update to 21.05.0
  * Add support for Compression Deflate algorithm
  * Add communication path to PF driver (PFVFcomms)
  * Enable services based on VF capabilities.
  * Stop service correctly during uninstallation
  * Fix qatmgr foreground option -f
  * Add qatmgr -v option to display version
  * Add version check between qatlib and qatmgr
  * Suppress deprecated warnings from OpenSSL3
  * Fix build with clang</changelog>
  <changelog author="meissner@suse.com" date="1651060800">- use source url, switch to .tar.gz as this is used in github upstream</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 22.07.2:
  * Changed from yasm to nasm for assembly compilation
  * Added configuration option to use C implementation of soft CRC
    implementation instead of asm
  * Added support for pkg-config
  * Added missing lock around accesses to some global data in qatmgr
  * Fix for QATE-86605 – improve error checking on size param used by qatmgr
    debug function.
  * Fix for issue #10
  * Fixed link to Programmer's Guide
  * Added support for Compression LZ4 and LZ4s algorithms
  * Added support for Compression end-to-end integrity checks
  * Added support for PKE Generic Point Multiply APIs
  * Added support for CPM2.0b
  * Updated library to support new version of QAT APIs
  * Updated qat service to allow compression only and crypto only
    configurations
  * Created qatlib-tests rpm package
  * Added option to configure script to skip building sample code</changelog>
  <changelog author="jengelh@inai.de" date="1685448000">- Implement shared library packaging guidelines
- Drop R/TM signs as per
  https://en.opensuse.org/openSUSE:Package_description_guidelines</changelog>
  <changelog author="duwe@suse.com" date="1704283200">- update to 23.11.0:
  * use new --enable-legacy-algorithms to avoid regressions
  * add support for data compression chaining (hash then compress)
  * add support for additional configuration profiles
  * add support DC NS (NoSession) APIs
  * add support DC CompressBound APIs
  * add Support for Chinese SM{2,3,4} ciphers
  * bump shared library major to 4
  * refactoring, bug fixes and documentation updates</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 24.02.0
  * Support DC NS (NoSession) APIs
  * Support Symmetric Crypto SM3 &amp; SM4
  * Support Asymmetric Crypto SM2
  * Support DC CompressBound APIs
  * Bug Fixes. See Resolved section in README.md</changelog>
  <changelog author="duwe@suse.com" date="1733486400">- update to 24.09.0:
  * Improved performance scaling in multi-thread applications
  * Set core affinity mapping based on NUMA
    (libnuma now required for building)
  * bug fixes, see https://github.com/intel/qatlib#resolved-issues</changelog>
</package>
<package pkgid="02426b0350f42110ca5dce28ecf40ea7eff15ce647a350217cebbdfa891159e2e40061d8d4af30638315067e385703d2b3a6cc9fa8dc247ae52923da41075c7c" name="libqatzip3" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="160000.2.2"/>
  <changelog author="duwe@suse.com" date="1637841600">- copy from home:zm627 and polish</changelog>
  <changelog author="duwe@suse.com" date="1638446400">- apply shared library naming policy
- submit for jira feature SLE-20906</changelog>
  <changelog author="duwe@suse.com" date="1639051200">- fix devel dependency that was missed at the shared library
  policy enforcement.
- submit for jira feature SLE-20906</changelog>
  <changelog author="dimstar@opensuse.org" date="1656676800">- Add qatzip-fortify_source=3.patch: Use distro default CFLAGS.
  Resolves a clash between source defined FORTIFY_SOURCE=3 and
  distro defined FORTIFY_SOURCE=3.</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.1.0:
  * Add dependancy update tool file
  * Updated New "Crc" series API
  * Bug fix
  * Enable static link QATzip into Envoy
  * Support autoconf &amp; automake to build QATzip
  * Change the API for ABI/API compatibility
  * Change the default installation directory of QATzip lib to
    /usr/local/lib
  * Bug fix</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to v1.1.1:
  * Add support for pkg-config in QATzip
  * Fix Coverity issues
  * Change lz4s with frame header to lz4s block
  * Move lz4(s) related functions to qatzip_lz4.c
  * Move functions outputHeader* outputFooter* to qatzip_utils.c
  * Fix bugs</changelog>
  <changelog author="mli@suse.com" date="1697716800">- update to 1.1.2:
  * Test: fix overflow on large files
  * Test: fix crash when perf test with svm
  * Fix Clang compile error
  * Fix MiniMatch bug
  * Fix compile error on QAT1.7
  * Update QAT1.7 / QAT2.0 config files
  * Update README
  * Update year in copyright information to 2023
  * Remove QAT device ID dependency
  * Update version, spec file, API PDF
  * Add missing QZ_PARAMS return code</changelog>
  <changelog author="jgwang@suse.com" date="1715428800">- Update to version 1.2.0
  * Implement the Software fallback when Hardware down
  * Improve Software fallback's performance
  * Fix file permission change after decompression
  * Add more instance capability check
  * Limit LZ4s format to only support compression direction.
  * QATzip API update
  * Rename test app to qatzip-test and add it into package
  * Update Document and Manual
  * Fix Coverity issues
  * Fix bugs</changelog>
</package>
<package pkgid="f6b13ec96d0754f92202bc952f5fc8ac9df8b70119ac16687db2b776875538c8cf63da4058cb26ea49d73615df8ca81640a322807ad3dbefd6ff28da8de151d1" name="libqmi-glib5" arch="x86_64">
  <version epoch="0" ver="1.34.0" rel="160000.2.2"/>
  <changelog author="mardnh@gmx.de" date="1629892800">- Update to version 1.28.8
  * libqmi-glib:
  - Fix CTL "Set Data Format" output TLV prerequisites.
  - Fix double free in the qmiwwan based net port manager.</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 1.30.2:
  * libqmi-glib:
  * * Added support for 'hsic', 'bam-dmux' and 'unknown' endpoint types.
  * * Added support for QMAPv2, QMAPv3 and QMAPv4 data aggregation types.
  * * Added support for 'NGRAN' access technology identifier.
  * * New 'qmi_device_add_link_with_flags()' method, in order to give e.g. rmnet
  specific checksum offload related flags when creating a new link.
  * qmicli:
  * * New '--nas-get-preferred-networks' command.
  * * New '--nas-set-preferred-networks' command.
  * * New '--uim-get-configuration' command.
  * * New '--uim-depersonalization' command.
  * * New '--wms-get-routes' command.
  * * New '--dpm-open-port' command.
  * * New '--dpm-close-port' command.
  * * Updated '--wds-create-profile' with an additional 'apn-type-mask' setting.
  * * Updated '--wds-modify-profile' with an additional 'apn-type-mask' setting.
  * * Updated '--link-add' with an additional optional 'flags' setting.
  * qmi-network:
  * * New PROFILE configuration setting to allow specifying which WDS profile to
  use when connecting.
  * * New IP-TYPE configuration setting to allow selecting the IP type requested
  * collections:
  * * basic: added voice call management operations.
  * * basic: added voice supplementary service related operations.
  * * basic: added NAS preferred networks related operations.
  * * basic: added NAS network reject indications.
  * * basic: added UIM depersonalization related operations.
  * Several other minor improvements and fixes.
- add gpg validation</changelog>
  <changelog author="mardnh@gmx.de" date="1640001601">- Mention libqmi.keyring</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 1.30.4:
  * * meson: switch to use the new python module in meson.
  * * meson: added a new boolean 'man' option in the meson setup to explicitly
    enable or disable building the man pages.
  * * meson: removed the option to detect if rmnet is supported.
  * * meson: multiple updates to use newer meson features like install_dir(),
    install_mode() or summary().
  * * meson: options 'mbim_qmux' and 'qrtr' are enabled by default and must be
    explicitly disabled if they're not needed, there is no attempt to
    autodetect whether they can be enabled or not.
  * qmi-proxy:
  * * Remove assert when attempting to close ghost device.
  * qmi-firmware-update:
  * * Use defaults if FLASH variables not reported, enabling support to flash
    the new Sierra Wireless EM9190 and EM9191 modules.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="christophe@krop.fr" date="1651752000">- Update to 1.30.6
  * meson: fix 'export_packages' in GIR setup.
  * net-port-manager: use unaligned netlink attribute length.
- Drop the unneeded rpmlintrc file</changelog>
  <changelog author="gmbr3@opensuse.org" date="1653480000">- Enable QRTR support</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- update to 1.30.8:
  * dms: new 'Foxconn FCC authentication v2' request/response.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680523200">- Update to version 1.32.4:
  * libqmi-glib: Schedule indications with G_PRIORITY_DEFAULT to
    ensure correct processing order between responses and
    ndications.
  * build: If QRTR enabled the pkg-config should publicly require
    libqrtr-glib.
- Changes from version 1.32.2:
  * libqmi-glib: fixed message header validation to avoid reading
    out of bounds.
  * qmi-proxy: added --verbose-full flag to allow printing logs
    with personal info included.
- Changes from version 1.32.0:
  * There is no longer an upstream-provided source tarball, please
    use the signed git tag '1.32.0' instead to refer to the sources
    of this release.
  * The verbose message logging will now by default hide all fields
    that are considered personal information. Extended message
    logging including all field contents should be explicitly
    requested.
  * Build:
  - The GNU autotools (autoconf/automake/libtool) support has
    been fully removed, this release requires the use of the
    meson build system.
  - The 'instrospection' meson option is now a boolean.
  - New boolean 'man' meson option to allow disabling the man
    page generation.
  * New services: New 'FOX' service for operations defined by
    Foxconn, including "Get Firmware Version" for now.
  * qmicli:
  - New '--verbose-full' option to request enabling logs that
    include personal information.
  - New '--pdc-monitor-refresh' command.
  - New '--gas-dms-set-usb-composition' and
    '--gas-dms-get-usb-composition' commands.
  - New '--wms-set-routes' command.
  - New '--dsd-get-system-status' command.
  - Updated the '--wda-set-data-format' command with new optional
    fields to configure the uplink data aggregation max size and
    max datagrams.
  * Several other minor improvements and fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add help2man, pkgconfig(bash-completion) and
  pkgconfig(gobject-introspection-1.0) BuildRequires: New
  dependencies.
- Use ldconfig_scriptlets macro.
- New home, URL and Source.
- Drop sig and keyfile, no longer available.</changelog>
  <changelog author="dmueller@suse.com" date="1699617600">- update to update to 1.34.0:
  * New services:
  * * New 'ATR' service to support AT commands over QMI,
    defined by Telit, including "Send" request and "Received"
    indication.
  * * New 'IMS' service, including "Get IMS Services Enabled
    Setting" request/response.
  * * New 'IMSA' (IMS Application) service, including "Get
    IMS Registration Status" and "Get IMS Services Status"
    request/responses.
  * * New 'IMSP' (IMS Presence) service, including "Get
    Enabler State" request/response.
  * * New 'SSC' service (Qualcomm Snapdragon Sensor Core),
    including the "Control" request/response, and
    "Report Small"/"Report Large" indications.
  * * nas: added the "WCDMA RSCP" TLV in "Get Signal Info"
    response and "Signal Info" indication.
  * * wds: added the "Report Profile Changes" TLV in
  * * Support for 16-bit service ids added, used in the QRTR
    backend.
  * * Response and indication parser messages are now
    published in the API.
  * * The library now allows connecting to a unix domain
    socket named 'qmux_socket' instead of a device file.
  * * Extended the 'QmiWdsProfileType' enum type with EPC and
    ALL values.
  * * Extended the
    'QmiUimCardApplicationPersonalizationFeature' enum type with
    additional GW-related values.
  * * New 'QmiUimCardApplicationPersonalizationFeatureStatus'
    enum type.
  * * New 'QmiImspEnablerState' enum type, used in the IMPS
  service.
  * * New 'QmiImsaImsRegistrationStatus',
    'QmiImsaServiceStatus' and
  * qmicli:
  * * New '--uim-remote-unlock' command.
  * * New '--imsp-get-enabler-state' command.
  * * New '--imsa-get-ims-registration-status' and</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Add patch:
  * 0001-message-fix-16bit-service-on-big-endian.patch
  - Fixes 16-bit service indications on big endian architectures.
    Cherry-picked from upstream qmi-1-34 branch</changelog>
</package>
<package pkgid="377d74c53e096aafca2c0010102d621bee6406d8ce301bf08bebb4dfb9c24f2e52656c26864dd94a352bac1bc03ba902d1c8652aae5507196b24d23dde86ef93" name="libqmi-tools" arch="x86_64">
  <version epoch="0" ver="1.34.0" rel="160000.2.2"/>
  <changelog author="mardnh@gmx.de" date="1629892800">- Update to version 1.28.8
  * libqmi-glib:
  - Fix CTL "Set Data Format" output TLV prerequisites.
  - Fix double free in the qmiwwan based net port manager.</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 1.30.2:
  * libqmi-glib:
  * * Added support for 'hsic', 'bam-dmux' and 'unknown' endpoint types.
  * * Added support for QMAPv2, QMAPv3 and QMAPv4 data aggregation types.
  * * Added support for 'NGRAN' access technology identifier.
  * * New 'qmi_device_add_link_with_flags()' method, in order to give e.g. rmnet
  specific checksum offload related flags when creating a new link.
  * qmicli:
  * * New '--nas-get-preferred-networks' command.
  * * New '--nas-set-preferred-networks' command.
  * * New '--uim-get-configuration' command.
  * * New '--uim-depersonalization' command.
  * * New '--wms-get-routes' command.
  * * New '--dpm-open-port' command.
  * * New '--dpm-close-port' command.
  * * Updated '--wds-create-profile' with an additional 'apn-type-mask' setting.
  * * Updated '--wds-modify-profile' with an additional 'apn-type-mask' setting.
  * * Updated '--link-add' with an additional optional 'flags' setting.
  * qmi-network:
  * * New PROFILE configuration setting to allow specifying which WDS profile to
  use when connecting.
  * * New IP-TYPE configuration setting to allow selecting the IP type requested
  * collections:
  * * basic: added voice call management operations.
  * * basic: added voice supplementary service related operations.
  * * basic: added NAS preferred networks related operations.
  * * basic: added NAS network reject indications.
  * * basic: added UIM depersonalization related operations.
  * Several other minor improvements and fixes.
- add gpg validation</changelog>
  <changelog author="mardnh@gmx.de" date="1640001601">- Mention libqmi.keyring</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 1.30.4:
  * * meson: switch to use the new python module in meson.
  * * meson: added a new boolean 'man' option in the meson setup to explicitly
    enable or disable building the man pages.
  * * meson: removed the option to detect if rmnet is supported.
  * * meson: multiple updates to use newer meson features like install_dir(),
    install_mode() or summary().
  * * meson: options 'mbim_qmux' and 'qrtr' are enabled by default and must be
    explicitly disabled if they're not needed, there is no attempt to
    autodetect whether they can be enabled or not.
  * qmi-proxy:
  * * Remove assert when attempting to close ghost device.
  * qmi-firmware-update:
  * * Use defaults if FLASH variables not reported, enabling support to flash
    the new Sierra Wireless EM9190 and EM9191 modules.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="christophe@krop.fr" date="1651752000">- Update to 1.30.6
  * meson: fix 'export_packages' in GIR setup.
  * net-port-manager: use unaligned netlink attribute length.
- Drop the unneeded rpmlintrc file</changelog>
  <changelog author="gmbr3@opensuse.org" date="1653480000">- Enable QRTR support</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- update to 1.30.8:
  * dms: new 'Foxconn FCC authentication v2' request/response.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680523200">- Update to version 1.32.4:
  * libqmi-glib: Schedule indications with G_PRIORITY_DEFAULT to
    ensure correct processing order between responses and
    ndications.
  * build: If QRTR enabled the pkg-config should publicly require
    libqrtr-glib.
- Changes from version 1.32.2:
  * libqmi-glib: fixed message header validation to avoid reading
    out of bounds.
  * qmi-proxy: added --verbose-full flag to allow printing logs
    with personal info included.
- Changes from version 1.32.0:
  * There is no longer an upstream-provided source tarball, please
    use the signed git tag '1.32.0' instead to refer to the sources
    of this release.
  * The verbose message logging will now by default hide all fields
    that are considered personal information. Extended message
    logging including all field contents should be explicitly
    requested.
  * Build:
  - The GNU autotools (autoconf/automake/libtool) support has
    been fully removed, this release requires the use of the
    meson build system.
  - The 'instrospection' meson option is now a boolean.
  - New boolean 'man' meson option to allow disabling the man
    page generation.
  * New services: New 'FOX' service for operations defined by
    Foxconn, including "Get Firmware Version" for now.
  * qmicli:
  - New '--verbose-full' option to request enabling logs that
    include personal information.
  - New '--pdc-monitor-refresh' command.
  - New '--gas-dms-set-usb-composition' and
    '--gas-dms-get-usb-composition' commands.
  - New '--wms-set-routes' command.
  - New '--dsd-get-system-status' command.
  - Updated the '--wda-set-data-format' command with new optional
    fields to configure the uplink data aggregation max size and
    max datagrams.
  * Several other minor improvements and fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add help2man, pkgconfig(bash-completion) and
  pkgconfig(gobject-introspection-1.0) BuildRequires: New
  dependencies.
- Use ldconfig_scriptlets macro.
- New home, URL and Source.
- Drop sig and keyfile, no longer available.</changelog>
  <changelog author="dmueller@suse.com" date="1699617600">- update to update to 1.34.0:
  * New services:
  * * New 'ATR' service to support AT commands over QMI,
    defined by Telit, including "Send" request and "Received"
    indication.
  * * New 'IMS' service, including "Get IMS Services Enabled
    Setting" request/response.
  * * New 'IMSA' (IMS Application) service, including "Get
    IMS Registration Status" and "Get IMS Services Status"
    request/responses.
  * * New 'IMSP' (IMS Presence) service, including "Get
    Enabler State" request/response.
  * * New 'SSC' service (Qualcomm Snapdragon Sensor Core),
    including the "Control" request/response, and
    "Report Small"/"Report Large" indications.
  * * nas: added the "WCDMA RSCP" TLV in "Get Signal Info"
    response and "Signal Info" indication.
  * * wds: added the "Report Profile Changes" TLV in
  * * Support for 16-bit service ids added, used in the QRTR
    backend.
  * * Response and indication parser messages are now
    published in the API.
  * * The library now allows connecting to a unix domain
    socket named 'qmux_socket' instead of a device file.
  * * Extended the 'QmiWdsProfileType' enum type with EPC and
    ALL values.
  * * Extended the
    'QmiUimCardApplicationPersonalizationFeature' enum type with
    additional GW-related values.
  * * New 'QmiUimCardApplicationPersonalizationFeatureStatus'
    enum type.
  * * New 'QmiImspEnablerState' enum type, used in the IMPS
  service.
  * * New 'QmiImsaImsRegistrationStatus',
    'QmiImsaServiceStatus' and
  * qmicli:
  * * New '--uim-remote-unlock' command.
  * * New '--imsp-get-enabler-state' command.
  * * New '--imsa-get-ims-registration-status' and</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Add patch:
  * 0001-message-fix-16bit-service-on-big-endian.patch
  - Fixes 16-bit service indications on big endian architectures.
    Cherry-picked from upstream qmi-1-34 branch</changelog>
</package>
<package pkgid="2acbd4b18b05cf7032b3d23e4e1b8b7d07baa0a000a4dad457e3131f4f23df9f19b5cd2ddfba6056ee5ed48a1d95ce5392cec610e134e2fbe198352780430661" name="libqrencode4" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1360929600">- build also against libpng16
  * libpng16.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1374840000">- Update to 3.4.2:
  * Memory leak bug has been fixed.
  * Micro QR Code encoding bug has been fixed.
  * String splitting has been improved.
- Removed qrencode-libpng16.patch (fixed upstream).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1384603200">- Update to 3.4.3:
  * New option "--rle" has been added to the command line tool.
  * Bug fixes in the library and command line tool.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf, needed for kdebase4-workspace-libs-32bit</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1412337600">- Update to 3.4.4
  * Bugfix release. See the changelog file for the list of changes.
  * New option "--verbose" has been added to the command line tool.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to github as an url so people can see the progress
  * web is not really up-to-date
- Remove compat support for sle11</changelog>
  <changelog author="christophe@krop.fr" date="1516795200">- Update to 4.0.0
  * EPS output now supports foreground and background color
  * XPM and PNG32 support added
  * CMake support added
  * Various bugs and performance fixes
- Add qrencode-fix-installation.patch. Fixes installation for x86_64
  targets.</changelog>
  <changelog author="aloisio@gmx.com" date="1567771200">- Update to version 4.0.2
  * Build script fixes. (Thanks to @mgorny)
  version 4.0.1
  * CMake support improved.
  * New test scripts have been added.
  * Some compile time warnings have been fixed.
- Refreshed qrencode-fix-installation.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599912000">- update to 4.1.0:
  * Command line tool "qrencode" has been improved:
  * New option "--inline" has been added. (Thanks to @jp-bennett)
  * New option "--strict-version" has been added.
  * UTF8 mode now supports ANSI256 color. (Thanks to András Veres-
    Szentkirályi)
  * Micro QR Code no longer requires to specify the version number.
  * 'make check' allows to run the test programs. (Thanks to Jan Tojnar)
  * Some compile time warnings have been fixed.
  * Various CMake support improvements. (Thanks to @mgorny and @sdf5)
  * Some minor bug fixes. (Thanks to Lonnie Abelbeck and Frédéric Wang)
  * Some documentation/manpage improvements. (Thanks to Dan Jacobson)
  * Some performance improvements. (Thanks to @4061N and Mika Lindqvist)
- remove qrencode-fix-installation.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1602763200">- update to 4.1.1 (jsc#PED-7296):
  * Some minor bugs in Micro QR Code generation have been fixed.
  * The data capacity calculations are now correct. These bugs probably did not
    affect the Micro QR Code generation.</changelog>
</package>
<package pkgid="abfd02eef736fa0e4c538574d637b41cc3319252035cb9676561aad0fad947da029052cb77d9028da2a38131fcf48206ffb1cc078bc743091514da6ae38136c5" name="libqrtr-glib0" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="160000.3.2"/>
  <changelog author="gmbr3@opensuse.org" date="1653134400">- Initial package version 1.2.2</changelog>
</package>
<package pkgid="0533815efba80a8f202896cfcac0089669d5ac1ee86f5f03334f3ec68a12f0ca5bfa6faea307847953562578f785ae27da998059598680b6efc442f936eb54a0" name="librados2" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="3a6276c736404497f0e890104059a330f851d1fc52f731741e2f546588e7c33958e8bfb70826c7adf9868d4d2528b47e26bed8d5ce37636c7af1f9b0a56669c7" name="librbd1" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="f68b1625117d720cd62c9f8f719e1bf693c3ed77d87016f210f0a5116f40638d0010e812ea9ff424b38a0937dad47d92b1121ccbb371ef9eca223fa3bcf4d472" name="librdmacm1" arch="x86_64">
  <version epoch="0" ver="56.1" rel="160000.2.2"/>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="nicolas.morey@suse.com" date="1739966400">- Update to rdma-core v56.0 (jsc#PED11323)
  - No release notes available</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743681600">- Update to rdma-core v56.1 (jsc#PED-11289, jsc#PED-11323)
  - Bug fixes for all providers</changelog>
</package>
<package pkgid="ec2b188bdaaf11f29c50dd82eeec47714f9dd0545cc76425ab7ec349629c00ea4831360845be6e08161f86871d2f8c087618d3b2e908ce32fe086a90e5b8afab" name="libreadline8" arch="x86_64">
  <version epoch="0" ver="8.2.13" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1651147200">- Update to readline-8.2-beta
  a. There is now an HS_HISTORY_VERSION containing the version number of the
    history library for applications to use.
  b. History expansion better understands multiple history expansions that may
    contain strings that would ordinarily inhibit history expansion (e.g.,
    `abc!$!$').
  c. There is a new framework for readline timeouts, including new public
    functions to set timeouts and query how much time is remaining before a
    timeout hits, and a hook function that can trigger when readline times
    out. There is a new state value to indicate a timeout.
  d. Automatically bind termcap key sequences for page-up and page-down to
    history-search-backward and history-search-forward, respectively.
  e. There is a new `fetch-history' bindable command that retrieves the history
    entry corresponding to its numeric argument. Negative arguments count back
    from the end of the history.
  f. `vi-undo' is now a bindable command.
  g. There is a new option: `enable-active-region'. This separates control of
    the active region and bracketed-paste. It has the same default value as
    bracketed-paste, and enabling bracketed paste enables the active region.
    Users can now turn off the active region while leaving bracketed paste
    enabled.
  h. rl_completer_word_break_characters is now `const char *' like
    rl_basic_word_break_characters.
  i. Readline looks in $LS_COLORS for a custom filename extension
    (*.readline-colored-completion-prefix) and uses that as the default color
    for the common prefix displayed when `colored-completion-prefix' is set.
  j. Two new bindable string variables: active-region-start-color and
    active-region-end-color. The first sets the color used to display the
    active region; the second turns it off. If set, these are used in place
    of terminal standout mode.
  k. New readline state (RL_STATE_EOF) and application-visible variable
    (rl_eof_found) to allow applications to detect when readline reads EOF
    before calling the deprep-terminal hook.
  l. There is a new configuration option: --with-shared-termcap-library, which
    forces linking the shared readline library with the shared termcap (or
    curses/ncurses/termlib) library so applications don't have to do it.
- Remove upstream patches and their signatures now obsolete
  * readline81-001
  * readline81-001.sig
  * readline81-002
  * readline81-002.sig
- Port patches
  * readline-5.2-conf.patch
  * readline-6.2-metamode.patch
  * readline-6.2-xmalloc.dif
  * readline-6.3-input.dif
  * readline-6.3-rltrace.patch
  * readline-7.0-screen.patch
- Port patch readline-8.1.dif and rename it to readline-8.2.dif</changelog>
  <changelog author="werner@suse.de" date="1655899200">- use https:// for source urls
- Update to readline-8.2-rc1</changelog>
  <changelog author="werner@suse.de" date="1658923200">- Update to readline-8.2-rc2</changelog>
  <changelog author="werner@suse.de" date="1663070400">- Update to readline-8.2-rc4
  m. Readline now checks for changes to locale settings (LC_ALL/LC_CTYPE/LANG)
    each time it is called, and modifies the appropriate locale-specific display
    and key binding variables when the locale changes.
- Port patch readline-8.2.dif</changelog>
  <changelog author="werner@suse.de" date="1664280000">- Update to final readline-8.2
  r. When replacing a history entry, make sure the existing entry has a non-NULL
    timestamp before copying it; it may have been added by the application, not
    the history library.</changelog>
  <changelog author="werner@suse.de" date="1665057600">- Add patch readline82-001 and its signing readline82-001
  * Starting a readline application with an invalid locale
    specification for LC_ALL/LANG/LC_CTYPE can cause it crash on
    the first call to readline.</changelog>
  <changelog author="werner@suse.de" date="1666353600">- Extend version linker map file to detect usage of new symbols (boo#1204336)</changelog>
  <changelog author="werner@suse.de" date="1700568000">- Add upstream patch readline82-002
  * It's possible for readline to try to zero out a line that's not null-
    terminated, leading to a memory fault.
- Add upstream patch readline82-003
- Add upstream patch readline82-004
- Add upstream patch readline82-005
  * If an application is using readline in callback mode, and a signal arrives
    after readline checks for it in rl_callback_read_char() but before it
    restores the application's signal handlers, it won't get processed until the
    next time the application calls rl_callback_read_char(). Readline needs to
    check for and resend any pending signals after restoring the application's
    signal handlers.
- Add upstream patch readline82-006
  * This is a variant of the same issue as the one fixed by patch 5. In this
    case, the signal arrives and is pending before readline calls rl_getc().
    When this happens, the pending signal will be handled by the loop, but may
    alter or destroy some state that the callback uses. Readline needs to treat
    this case the same way it would if a signal interrupts pselect/select, so
    compound operations like searches and reading numeric arguments get cleaned
    up properly.
- Add upstream patch readline82-007
  * If readline is called with no prompt, it should display a newline if return
    is typed on an empty line. It should still suppress the final newline if
    return is typed on the last (empty) line of a multi-line command.</changelog>
  <changelog author="werner@suse.de" date="1705406400">- Add upstream patch readline82-008
  * Add missing prototypes for several function declarations
- Add upstream patch readline82-009
  * Fix issue where the directory name portion of the word to be
    completed (the part that is passed to opendir()) requires both
    tilde expansion and dequoting.  Readline only performed tilde
    expansion in this case, so filename completion would fail.
- Add upstream patch readline82-010
  * Fix the case where text to be completed from the line buffer
    (quoted) is compared to the common prefix of the possible
    matches (unquoted) and the quoting makes the former appear to
    be longer than the latter. Readline assumes the match doesn't
    add any characters to the word and doesn't display multiple matches.
- Port patches
  * readline-5.2-conf.patch
  * readline-6.2-metamode.patch
  * readline-7.0-screen.patch
  * readline-8.2.dif</changelog>
  <changelog author="werner@suse.de" date="1724068800">- Add upstream patches
  * readline82-011
  Some systems (e.g., macOS) send signals early on in interactive
  initialization, so readline should retry a failed open of the init file.
  * readline82-012
    If a user happens to bind do-lowercase-version to something that isn't a
    capital letter, so _rl_to_lower doesn't change anything and the result is
    still bound to do-lowercase-version, readline can recurse infinitely.
  * readline82-013
    When readline is accumulating bytes until it reads a complete multibyte
    character, reading a byte that makes the multibyte character invalid can
    result in discarding the bytes in the partial character.
- Port patch readline-8.2.dif</changelog>
</package>
<package pkgid="1bc73495fba986f15a0115b295dac4a66dae47b501bad006f2036dc4445ce18b3df504d5b7d725193ce1fcef5b72b0b6c90595413e7108eb60d911990e98be45" name="libref_array1" arch="x86_64">
  <version epoch="0" ver="0.1.5" rel="160000.2.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="5081ee47aa08c9d29b6737485590eb822d56f49f22672e503c30c1423f4487a9b58cae72f26c9d7a8d19db99c1238a5cd3566abb016618cb4ce30bcc02dfd754" name="librpmbuild10" arch="x86_64">
  <version epoch="0" ver="4.20.1" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1736251200">- make misuses of %global with %buildroot work again
  * new patch: undefbuildroot.diff</changelog>
  <changelog author="adrian@suse.de" date="1738238400">- enable config.guess/sub update also for loongarch64 architecture
- update config.guess/sub files to current state from autoconf-2.72</changelog>
  <changelog author="mls@suse.de" date="1738238401">- Split unshare plugin configuration into a new "rpm-plugin-unshare"
  subpackage. This disables the plugin unless the new package
  is installed.</changelog>
  <changelog author="mls@suse.de" date="1738584000">- allow to have the primary binding signature in the unhashed area
  * updated rpmpgp_legacy-1.0.tar.gz to rpmpgp_legacy-1.1.tar.gz</changelog>
  <changelog author="mls@suse.de" date="1739361600">- make the rpm package not depend on libarchive
  * move the rpmuncompress tool to rpm-build
  * rewrite rpm2archive to not use libarchive for cpio/tar writing
  * new patch: rpm2archive.diff
- revert buildroot macro setting that did more harm than good
- add set_to_buildtime and set_to_source_date_epoch mtime policy
  support
  * new patch: mtime_policy_set.diff
- drop unused 0001-Add-option-to-set-mtime-of-files-in-rpms.patch
  patch
- do not output debug messages in rpmspec -q if a buildsystem is
  used
  * new patch: buildsys.diff</changelog>
  <changelog author="mls@suse.de" date="1741348800">- update to rpm-4.20.1
  * add support for fully locked user accounts in sysusers.d
  * fix unmodified %config files being removed in case of an
    unpack failure
  * fix lua deprecation warnings being shown packages built with
    old rpm versions
  * ignore all files in macro directories that do not end with an
    alphanumeric character
- refreshed patches:
  * rpmqpack.diff
  * unshare.diff
  * rpm2archive.diff
- dropped patches:
  * debugpackage.diff
  * nextfiles.diff
  * buildsys.diff</changelog>
  <changelog author="mls@suse.de" date="1742990400">- Backport check_c_compiler_flag cmake tests fix from upstream
  The old code would pick up -fhardened by accident
  * new patch: cmake_fhardened.diff</changelog>
  <changelog author="mls@suse.de" date="1745582400">- print scriptlet messages in --runposttrans
  * needed to fix leaking tmp files [bsc#1218459]
  * updated patch: posttrans.diff
- backport architecture check fix from upstream
  * new patch: archcheck.diff
- backport empty password fix from upstream
  * new patch: emptypw.diff
- backport buildsys specific prep fix from upstream
  * new patch: buildsysprep.diff
- fix memory leak in str2locale [bsc#1241052]
  * updated patch: localetag.diff</changelog>
  <changelog author="mls@suse.de" date="1747828800">- fix posttrans scriptlet argument in the update case [bsc#1243279]
  * updated patch: posttrans.diff
- fix postuntrans scriptlets not being run if dump_posttrans is set</changelog>
  <changelog author="mls@suse.de" date="1748865600">- use the pubkey modification time instead of the creation time
  as the release number, as it was with older rpm versions
  * new patch: pgpreleasemtime.diff</changelog>
</package>
<package pkgid="22445be3928c3968ceb16f38a2203d2634b5d66b5326049d9e457f80edad0a60a20f71f4817f227405325650c8fa0a39db28b26dc9daff26de46e54ca82d0b8d" name="librscg1_0" arch="x86_64">
  <version epoch="0" ver="2022.10.16" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="20ad31a708faa875eca906836a686c545faa901d9d8b16476039d7f241ade44afd7e86180a7619218ae1d256e21961c2f59ac27b27044ed12c3164d9a88e02ee" name="librsvg-2-2" arch="x86_64">
  <version epoch="0" ver="2.60.2" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1726488000">- Update to version 2.59.0:
  + The biggest change in this release is that librsvg now uses the
    Meson build system instead of autotools.
  + With Meson, librsvg now builds a lot more reliably on Windows
    and MacOS.
  + Librsvg now uses Meson instead of Autotools
  + There is a -Davif meson option to include support for AVIF in
    the image-rs crate, which librsvg uses to load raster images.
  + Librsvg now explicitly builds only its supported raster formats
    for image-rs: JPEG, PNG, GIF, WEBP, and optional compile-time
    support for AVIF). Other raster image formats are not
    supported, to minimize the attack surface.
  + Librsvg now supports cancellable rendering; you can start
    rendering an RsvgHandle in one thread, and stop it from another
    thread with a GCancellable. In the C API, you can use the
    rsvg_handle_set_cancellable_for_rendering() function; in the
    Rust API, CairoRenderer now has a with_cancellable() method.
  + For Rust users, there is now a 'librsvg-rebind' crate that
    binds the C API for use from Rust. Internally this links to the
    system's librsvg shared library, in contrast with the 'librsvg'
    crate, which is statically linked and which has a native Rust
    API. The 'librsvg-rebind' crate is for cases where the
    additional code size from static linking is not desired. This
    librsvg-rebind crate is available from crates.io.
  + A bunch of fixes to bugs found through fuzz testing.
- Use ldconfig_scriptlets macro for some of the post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727524800">- Update to version 2.59.1:
  + Two mitigations for crashes found throuh fuzz testing:
  - Cairo is easy to crash by giving it path coordinates that are
    outside of the range that it can represent internally with
    its fixed-point arithmetic. Fuzzers usually produce SVGs with
    very large numbers for coordinates, which overflow Cairo's
    arithmetic.
    This is just a *mitigation*, not a complete fix: librsvg will
    now check if path coordinates are outside of Cairo's
    supported range, and it will not render shapes with
    problematic coordinates. However, fuzzers may still produce
    coordinates that are in range but that still make Cairo
    crash. I am starting to learn Cairo's code to see if this can
    be fixed gradually.</changelog>
  <changelog author="dimstar@opensuse.org" date="1730289600">- Update to version 2.59.2:
  + Fix stack overflow due to unbounded recursion.  Now there is
    a hard limit on the number of nested layers that an SVG
    document may have.  This is not a hard limit on the amount of
    stack space consumed, but it is a general mitigation.
  + Fix regression when rendering paths with very flat elliptical
    arcs.  This bug was introduced in 2.59.1 as part of the
    mitigation for paths with coordinates that Cairo is unable to
    handle.
  + Fix centering and text-anchor in general for scaled text.
  + Fix building with Rust 1.82 on Windows (Christoph Reiter).
  + Make cancellation work for all the resource loading
    functions.
  + Add documentation for rsvg-bench to the development guide.
  + Slight improvement in memory consumption for language tags.
  + Many updates to the developer's documentation, for Outreachy
    interns.</changelog>
  <changelog author="mgorse@suse.com" date="1730376000">- Change license to LGPL-2.1-or-later AND MIT.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1739275200">- Update to version 2.59.90 (Unstable):
  + Basic support for the dominant-baseline property.
  + Report errors correctly from the parsers for attribute values.
  + Slightly improved test coverage.
  + Don't use defined() in C macro definitions, since it is not
    portable.
  + Parse the white-space property. It is not processed yet; this
    will come after the Outreachy internship.
  + Documentation fixes.
  + Many build fixes.
  + Improvements for cross builds.
  + Fix CRLF characters in Python sources.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.59.91 (Unstable):
  + Fix linkage on Illumos.
  + Fix the build of the static library on MinGW.
  + Fix versioning of library name.
  + Enable cross-compilation of the gdk-pixbuf loader if meson/qemu
    can handle it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742385600">- Update to version 2.60.0:
  + The minimum supported Rust version (MSRV) is 1.77.2.
  + Many build fixes for various platforms.
  + Basic support for the dominant-baseline property.
  + Parse the white-space property. It is not processed yet; this
    is part of the work to support SVG2 text layout.
  + Report errors correctly from the parsers for attribute values.
  + Portability fixes to the C header files.</changelog>
  <changelog author="federico@suse.com" date="1764936000">- Update to version 2.60.1 -
  (CVE-2024-12224 / bsc#1243867),
  (CVE-2024-43806 / bsc#1229950)
  + This is a security release for RUSTSEC-2024-0421, RUSTSEC-2024-0404,
    and GHSA-c827-hfw6-qwvm (CVE-2024-43806 / bsc#1229376).
  - glgo#GNOME/librsvg#1193 - RUSTSEC-2024-0421 - idna accepts Punycode
    labels that do not produce any non-ASCII when decoded.
  - RUSTSEC-2024-0404 - Unsoundness in anstream.
  - GHSA-c827-hfw6-qwvm - Memory explosion in rustix.  Note that librsvg
    does not use rustix except in the test suite.</changelog>
  <changelog author="federico@suse.com" date="1769601600">- Update to version 2.60.2:
  + Fix the check for the cargo-cbuild version.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1776427200">- Add librsvg-CVE-2026-25727.patch: Fix denial of service when
  parsing rfc2822. (bsc#1257922, CVE-2026-25727)</changelog>
</package>
<package pkgid="49b3b837f18136e4b9f281201193290d6da00bfb7c2e3fb7b35f27067beb096bda3e0686981f3e2ab1bfe9a65c14eace5a03c72ce21e9306d2c0055955e33778" name="libsasl2-3" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="3d7f4f5a24f1208160b50dab5fa8bc4b9b6ae6e6311b03c6daf7eda90ead7a50781856ae268c30e2d58becdcdc1f06e8395d631cb1b6fb8961e950764a54b35e" name="libscg1_0" arch="x86_64">
  <version epoch="0" ver="2022.10.16" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="a878ef56638448d99b9124fdf9b7be552ccdbf938e755ad3d89547616eefe250998acef13336760761270a3b2a443aa7d819cb3d679fc154d2e54dde5a7179be" name="libscgcmd1_0" arch="x86_64">
  <version epoch="0" ver="2022.10.16" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="357911e19aedc5ec0b450afe234963fe5b7e5cb24cef777ca255b57957e0740e0abbb5079beefa8413e5769a082c6abd50fe05a944a9dc56041a40ce1b34eaa1" name="libschily2_0" arch="x86_64">
  <version epoch="0" ver="2022.10.16" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="0bb8302651c26016dff16ba252642df8d4e88817319271c905fb8057b4967fc5a6928979062261c1510874e4ac0650601bb9fe93d451a4dff96357d62808fac5" name="libseccomp2" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1636286400">- Update to release 2.5.3
  * Update the syscall table for Linux v5.15
  * Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2
  * Document that seccomp_rule_add() may return -EACCES</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- reenable python bindings at least for the distro default python3
  package:
  - adds make-python-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1642420800">- buildrequire python-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1650542400">- Update to release 2.5.4
  * Update the syscall table for Linux v5.17.
  * Fix minor issues with binary tree testing and with empty
    binary trees.
  * Minor documentation improvements including retiring the
    mailing list.</changelog>
  <changelog author="jengelh@inai.de" date="1651320000">- Deactive python3 by default, it's just not a good idea for ring0.</changelog>
  <changelog author="rfrohl@suse.com" date="1656504000">- Use multibuild to get python3 support back</changelog>
  <changelog author="mrueckert@suse.de" date="1656676800">- fix build of python3 bindings so that the debug* package names do
  not overlay with the main package</changelog>
  <changelog author="jengelh@inai.de" date="1701518400">- Update to release 2.5.5
  * Update the syscall table for Linux v6.7-rc3</changelog>
  <changelog author="jengelh@inai.de" date="1737720000">- Update to release 2.6.0
  * Multiplexed syscall support for ppc
  * Add support for the SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV flag
  * Add support for transactions with the
    seccomp_transaction_start(), seccomp_transaction_commit(), and
    seccomp_transaction_reject() APIs
  * Add support for binary tree filters without syscalls
  * Add support for the kernel’s implementation change of
    SECCOMP_IOCTL_NOTIF_ID_VALID</changelog>
  <changelog author="suse-beta@cboltz.de" date="1738670400">- add 62-sim-arch_transactions-remove-fuzzer.patch to fix s390x build
  (https://github.com/seccomp/libseccomp/issues/455)</changelog>
</package>
<package pkgid="698cffd87d6bff48a4d17bcadc0ed52807b81e3b74c0c276c7503df308844dac6d8aec141935e90df6a7f1a0d2ad54f13087b71f54557500c2fdce755f7a29b6" name="libselinux1" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="mcepl@suse.com" date="1691150400">- (bsc#1212618) Divide libselinux and libselinux-bindings again.
  libselinux itself is in Ring0 so it has to have absolutely
  minimal dependencies, so it is better to separate
  libselinux-bindings into a separate pacakge.</changelog>
  <changelog author="dimstar@opensuse.org" date="1691496000">- Do not BuildRequire swig and ruby-devel in the main build phase:
  those are only needed for the bindings.</changelog>
  <changelog author="georg.pfuetzenreuter@suse.com" date="1696161600">- Repair initrd libselinux check in selinux-ready</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * libselinux: performance optimization for duplicate detection
  * Introduce getpolicyload - a helper binary to print the number of policy reloads on the running system
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes
  * libselinux/utils/selabel_digest: drop unsupported option -d
  * libselinux/utils: improve compute_av output
  * libselinux: fail selabel_open(3) on invalid option
  * Improved man pages
  * Improvements
  * libselinux, libsepol: Add CFLAGS and LDFLAGS to Makefile checks
  * libselinux: enable usage with pedantic UB sanitizers
  * libselinux: support huge passwd/group entries
  * Bugfixes:
  * libselinux/utils/selabel_digest: avoid buffer overflow
  * libselinux: avoid pointer dereference before check
  * libselinux/utils/selabel_digest: pass BASEONLY only for file backend
  * libselinux: free empty scandir(3) result
  * libselinux: free data on selabel open failure
  * libselinux: use reentrant strtok_r(3)</changelog>
  <changelog author="cathy.hu@suse.com" date="1720699200">- Fix segfault caused by upstream changes in selabel_open():
  libselinux-set-free-d-data-to-NULL.patch
  Can be removed once it is upstream.</changelog>
  <changelog author="cathy.hu@suse.com" date="1730980800">- Drop check_runlevel from selinux-ready script and remove restorecond
  from check_packages as we don't require it to be selinux-ready.</changelog>
  <changelog author="jsegitz@suse.com" date="1737720000">- Update selinux-ready to clarify that kernel options aren't necessary
  on newer (open)SUSE versions</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libselinux: deprecate security_disable(3)
  * libselinux/utils: introduce selabel_compare
  * improved selabel_lookup performance
  * libselinux: support parallel usage of selabel_lookup(3)
  * Improved man pages
  * Always build for LFS mode on 32-bit archs.
  * Binary fcontext files format changed, files using old format are ignored
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Drop libselinux-set-free-d-data-to-NULL.patch: included upstream
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
</package>
<package pkgid="900c2674c22ed3b2ba137b9abe5e223f580836105b1a8f91c370d2cb859f66a27581c740dea696014e6a6da5daf1e3dbf674ed5a6c80e20aeac4720762d0f34f" name="libsemanage-conf" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO now (boo#1138812).</changelog>
  <changelog author="jsegitz@suse.com" date="1679659200">- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jsegitz@suse.com" date="1692014400">- Remove build counter syncing for real</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701086400">- Remove dependency on /usr/bin/python3, making scripts to depends on
  the real python3 binary, not the link. bsc#1212476</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * Bugfixes:
  * libsemanage: support huge passwd entries</changelog>
  <changelog author="jsegitz@suse.com" date="1729512000">- Not conflict but obsolete libsemanage1 (bsc#1229757)</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsemanage: Preserve file context and ownership in policy store
  * libsemanage: Optionally allow duplicate declarations
  * Improved man pages
  * libsemanage: Mute error messages from selinux_restorecon introduced in 3.8-rc1
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * libsemanage: improved performance of semanage store rebuild</changelog>
</package>
<package pkgid="59907303cc6292babf60e51414ecf898574e3c004f9091f9704be9555618ce442ac098705e0e3d97582b66fc524372587fdba696e0a430947d8118ff418eb0eb" name="libsemanage2" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO now (boo#1138812).</changelog>
  <changelog author="jsegitz@suse.com" date="1679659200">- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="jsegitz@suse.com" date="1692014400">- Remove build counter syncing for real</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701086400">- Remove dependency on /usr/bin/python3, making scripts to depends on
  the real python3 binary, not the link. bsc#1212476</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * Bugfixes:
  * libsemanage: support huge passwd entries</changelog>
  <changelog author="jsegitz@suse.com" date="1729512000">- Not conflict but obsolete libsemanage1 (bsc#1229757)</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsemanage: Preserve file context and ownership in policy store
  * libsemanage: Optionally allow duplicate declarations
  * Improved man pages
  * libsemanage: Mute error messages from selinux_restorecon introduced in 3.8-rc1
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * libsemanage: improved performance of semanage store rebuild</changelog>
</package>
<package pkgid="f54a4a0bff8e44cebc34976c314811ffd7febf2391225aa0a15fe2125630884be017a4a47f76731ba9127d6d2f8483255e31195a25bc31bb2645d7cf74afc966" name="libsensors4" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="160000.2.2"/>
  <changelog author="smar@smar.fi" date="1575374400">- Removed upstreamed patch lm_sensors-3.4.0-sensors-detect-ppc64le.patch
- Update to version 3.6.0:
  + configs: Added a number of new configuration files
  + fancontrol: AVERAGE env variable can be used to set the number of previous readings to average
  + Makefile: The MACHINE variable has been renamed to ARCH
  + sensord: Add an option -1/--oneline to print chip and adapter on the same line
  + sensors: Fixed a stray comma bug in the JSON output
  * Fixed Fahrenheit conversion with raw and JSON output
  * Scale voltage and current values in the default output format
  + sensors-detect: Add detection of AMD Family 17h, models 30h, 70h
  * Add detection of some AMD Family 15h models
  * Add detection of AMD Family 16h model 30h power sensors
  * Add detection of Hygon Family 18h thermal sensors
  * Add detection of Nuvoton NCT6797D
  * Add detection of Nuvoton NCT6798D
  * Add detection of Nuvoton NCT6112D/NCT6114D/NCT6116D
  * Fix printing CPU info on non-x86 arches
  * Fix printing lm_sensors version
  * Mark Fintek F75387SG/RG as supported by the f75375s driver</changelog>
  <changelog author="jdelvare@suse.com" date="1589284800">- lm_sensors-3.6.0-sensors-detect-fix-driver-for-w83677hgi.patch:
  Point owners of Nuvoton W83677HG-I and compatible chipsets to
  the nct6775 driver, as support was just removed from the
  w83627ehf driver (bsc#1169316).</changelog>
  <changelog author="jdelvare@suse.com" date="1613044800">- pwmconfig-handle-fan-input-error.patch: pwmconfig: Deal
  gracefully with unreadable fan inputs (boo#1181890).
- pwmconfig-raise-fan-threshold.patch: pwmconfig: Further raise the
  fan threshold (boo#1181890).</changelog>
  <changelog author="jdelvare@suse.com" date="1619438400">- change-pidfile-path-from-var-run-to-run.patch: Change PIDFile
  path from /var/run to /run (bsc#1185183).
- var-run-deprecated.patch: /var/run is deprecated (bsc#1185183).</changelog>
  <changelog author="jengelh@inai.de" date="1629460800">- Trim ExcludeArch, package build is successful.</changelog>
  <changelog author="jsegitz@suse.com" date="1637064000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_fancontrol.service.patch
  * harden_lm_sensors.service.patch
  * harden_sensord.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1638187200">- Remove ProtectKernelTunables from harden_lm_sensors.service.patch,
  breaks service (boo#1193149)</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Also remove ProtectKernelTunables from harden_fancontrol.service.patch,
  breaks service (boo#1193149)</changelog>
  <changelog author="msuchanek@suse.com" date="1703505600">- Update to version 3.6.1:
  * configs: Added a number of new configuration files
  * fancontrol: Add executable commands as temp sensors
  * pwmconfig, fancontrol: Allow read-only pwm*_enable
  * sensors: Handle json trailing ',' when no features are listed
    Add support for rated values
    Only do conversion to Fahrenheit on temperatures
  * sensors-detect: Add support for NCT6687D
    Add support for AMD CPU Family 19h
    Add support for FTS Teutates Chip
    Fix the driver for Nuvoton W83677HG-I
  * sensord: Add support of emergency alarm
    Change PIDFile path from /var/run to /run
  * Allow subfeatures to be ignored too
  * Flag allow-no-sensors added
  * Add support for dev_name formatted like "a000000.wifi"
  * Add ZSH completion for sensors and sensors-detect
  * Add ISA ACPI sensor driver name support
  * Add support for static only build
  * Add SDIO attached sensor support
  * Add PWM and frequency sensor support
- Drop trailing space from hardedning patches
  * harden_fancontrol.service.patch
  * harden_lm_sensors.service.patch
  * harden_sensord.service.patch
- Refresh
  * lm_sensors-3.4.0-sensord-service-extra-args.patch
  * var-run-deprecated.patch
- Add rrd-drop-useless-cast.patch
- Drop usptreamed patches
  * change-pidfile-path-from-var-run-to-run.patch
  * lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  * lm_sensors-3.6.0-sensors-detect-fix-driver-for-w83677hgi.patch
  * pwmconfig-handle-fan-input-error.patch
- Drop obsolete spec file constructs, use autopatch.</changelog>
  <changelog author="msuchanek@suse.com" date="1705147200">- Update to version 3.6.2:
  * sensor quantitiy and units
  * new json format
  * SENSORS_SYSFS_ROOT environment variable
  * service files updated
- Drop upstreamed patches
  * harden_fancontrol.service.patch
  * harden_lm_sensors.service.patch
  * harden_sensord.service.patch
  * lm_sensors-3.4.0-sensord-service-extra-args.patch
  * var-run-deprecated.patch
  * rrd-drop-useless-cast.patch
  * pwmconfig-raise-fan-threshold.patch
  * sysfs-Expand-filename-buffer-to-quiet-warning.patch
- Run tests</changelog>
</package>
<package pkgid="2577833b3e3eb362b0aacdaa357699315565ff32af9751f23a72d04db51ef17a0840cdf53e237aa61ef9ecdd55fe3bffc10fda05e34dc0e8e733e276336e0c4f" name="libsepol2" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="jsegitz@suse.com" date="1625486400">- Fix use-after-free in __cil_verify_classperms (CVE-2021-36085, 1187965).
  Added CVE-2021-36085.patch
- Fix use-after-free in cil_reset_classpermission (CVE-2021-36086, 1187964).
  Added CVE-2021-36086.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1626868800">- Fix heap-based buffer over-read in ebitmap_match_any (CVE-2021-36087, 1187928.
  Added CVE-2021-36087.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO now (boo#1138813).</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * struct cond_expr_t bool renamed to boolean
    The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * libsepol: improve policy lookup failure message
  * libsepol: include prefix for module policy versions
  * libsepol: validate type-attribute-map for old policies
  * libsepol: only exempt gaps checking for kernel policies
  * Bugfixes:
  * libsepol/src/Makefile: fix reallocarray detection
  * libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  * libsepol: ensure transitivity in compare functions
  * oss-fuzz fixes:
  * libsepol: check scope permissions refer to valid class
  * libsepol: validate attribute-type maps
  * libsepol: reject self flag in type rules in old policies
  * libsepol: validate class permissions
  * libsepol: validate access vector permissions
  * libsepol: reject MLS support in pre-MLS policies
  * libsepol: Fix buffer overflow when using sepol_av_to_string()
  * libsepol: Use a dynamic buffer in sepol_av_to_string()</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsepol: Support nlmsg extended permissions
  * libsepol: Add policy capability netlink_xperm
  * libsepol: add support for xperms in conditional policies
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
</package>
<package pkgid="04b79efb294a790b4186fef9d91b5e4ee19bf5500e15c8b86ad5f46fa499a49cc5657faaa29b30c07dda184e998609f8035339e2d640a3cd7feae5468244dee6" name="libsgutils2-1_48-2" arch="x86_64">
  <version epoch="0" ver="1.48~20221101+5.c6a1f6b8" rel="160000.1.1"/>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option; sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1773144000">- Update to version 1.48~20221101+5.c6a1f6b8:
  * rescan-scsi-bus.sh: Fix invocation of udevadm (boo#1258664)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
    without -u (bsc#1215720, bsc#1216355)</changelog>
</package>
<package pkgid="b3ed8d158ddb3aa2f616b4f5c8e43dd87760ea7ed55b7badd721b349c9cc4ffe3b10a414fb9e0e24fe59baf92e922695595881a3310e458b1bf4c0b36bd0c60f" name="libsha1detectcoll1" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="160000.2.2"/>
  <changelog author="astieger@suse.com" date="1488283200">- CLI to check for SHA-1 collisions bsc#1026646 - CVE-2005-4900
- initial package (cli only)</changelog>
  <changelog author="astieger@suse.com" date="1491825600">- update to 1.0.3:
  * SIMD code removed
  * performance improvements
- package library
- conflicts with libmd-devel</changelog>
  <changelog author="astieger@suse.com" date="1495454400">- better printing of errors, and allow hashing stdin
  add sha1collisiondetection-1.0.3-io-fixes.patch</changelog>
  <changelog author="tiwai@suse.de" date="1501848000">- Fix include header path to /usr/include/sha1dc/sha1.h as supposed
  by upstream installation
- Remove conflicts with libmd-devel, as we changed the header path</changelog>
  <changelog author="ro@suse.de" date="1517400000">- add sha1collisiondetection-endian_detection.patch
  fix detection of endianness at compile time</changelog>
  <changelog author="ro@suse.de" date="1517400001">- cleaner solution for the endian detection issue:
  include the proper header file</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="8455f3c59add890ac56efd23187e11d55315e26865431c8c7d861447c1876fcd040e37c6ae80bc55299664b0e8f753a99804b94ee46bd14dc5fb3ac648aa77fb" name="libsigc-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="160000.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585137600">- Update to version 2.10.3:
  + Add Meson build, alongside the existing Autotools build.
  + Improve MSVC builds on Windows.
  + meson.build: Check if .git is a directory or file.
  + docs/reference/meson.build: Check if perl is found.
  + README: Describe building with Meson and Autotools.
  + Tests: Make test_track_obj.cc compile with clang++.</changelog>
  <changelog author="dimstar@opensuse.org" date="1601985600">- Update to version 2.10.4:
  + Build:
  - Meson build: Set default value of the 'warnings' option to
    'min'
  - NMake Makefiles: Several improvements
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Updated documentation.
- Switch to meson build system:
  + Add meson, and remove m4 BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install macros.
  + No longer ship the htmldoc as part of the devel package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1606305600">- Update to version 2.10.6:
  + Build: Meson build: Fix versioning on macOS.
  + Documentation:
  - sigc++/sigc++.h: Describe how to use libsigc++ with Meson.
  - Update links to the web page, now at
    libsigcplusplus.github.io/libsigcplusplus.</changelog>
  <changelog author="dimstar@opensuse.org" date="1621598400">- Update to version 2.10.7:
  + Meson build:
  - Make it possible to use sigc++ as a subproject.
  - Fix dependency on files generated from .h.m4 files.
  - No implicit_include_directories.
  - Make quiet installations possible.
  - Fix build as subproject without building documentation.
  + Documentation fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.10.8:
  + Build:
  - Meson build: Perl is not required by new versions of
    mm-common
  - NMake Makefiles: Support building with VS2022
  + Documentation: Upgrade the manual from DocBook 4.1 to DocBook
    5.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1677499200">- Update to version 2.12.0:
  + Add track_object(), deprecate track_obj().
  + Examples, tests:
  - examples/member_method: Make on_print() non-virtual.
  - test_limit_reference.cc: Don't use auto where a slot is
    required.
  + Build:
  - Meson:
    . Avoid configuration warnings.
    . Detect if we build from a git subtree.
    . Simplify lookup of python command.
    . Add build_tests option.
  - Meson, MSVC: Compensate for the lack of
    msvc_recommended_pragmas.h.
  - Fix build with -Dbuild-deprecated-api=false.</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add libsigc++2-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libsigc-2_0-0/NEWS(bsc#1209094,bsc#1209140).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696161600">- Update to version 2.12.1:
  + Documentation:
  - slot, signal: Describe the slot&lt;void(int)&gt; syntax more
  - connection: Improve the class documentation
  - Improve Visual Studio build documentation
  - Remove AUTHORS and add general information to README.md
  + Build:
  - Meson:
    . Don't copy files with configure_file()
    . Fix the evaluation of is_git_build on Windows
  - Visual Studio: Support static builds
- Use ldconfig_scriptlets macro for post(un) handling.
- Update URL to new home.</changelog>
</package>
<package pkgid="25d7e28b004ce9164453a124c31df481b35ca29306bfbb5785508277c992f62e5d429e664065ac2e95563147cd25cb665f6f8cd0854fb0ba05a8dc6eb61a8962" name="libslang2" arch="x86_64">
  <version epoch="0" ver="2.3.3+git16.89d32bb" rel="160000.2.2"/>
  <changelog author="crrodriguez@opensuse.org" date="1519992000">- BuildRequire default libpng on the system, builds and test
  pass fine. (drops slang-libpng12-linker-flag.patch)</changelog>
  <changelog author="ro@suse.de" date="1521115200">- handle s390 like s390x</changelog>
  <changelog author="schwab@suse.de" date="1537790400">- overflow.patch: fix overflow checks not to depend on undefined behaviour</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="adam.majer@suse.de" date="1586174400">- slang 2.3.2:
  * It is now possible to use reserved words as struct
  field names without quoting them.  For example, it is now possible
  to write
    s = struct { public = value };
  Previously, this required the field name to be quoted:
    s = struct { "public" = value };
- drop static library and its LTO workaround
- git-6dd5ade9a97b52ace4ac033779a6d3c1c51db4d1.patch: upstreamed
- slang-fsuid.patch: refreshed</changelog>
  <changelog author="coolo@suse.com" date="1664193600">- slang 2.3.3:
  * This version includes a number of backward-compatible enhancements to
    the interpreter and its modules, as well as support for so-called
    user-defined terminfo extensions.  It is also binary compatible with
    prior 2.x.y versions of the library.
  * See changes.txt
- obsolete overflow.patch and rebase autoconf.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709294400">- Drop slsh/lib/test/test_timestamp.sl: Do not test timestamps but
  trust on upstream (calculations in leap years are off in the
  test).</changelog>
  <changelog author="kkaempf@suse.de" date="1736251200">- Update to version 2.3.3+git16.89d32bb:
  * pre2.3.4-16: Removed unnecessary chack for a NULL string in keymap.c:find_the_key, and corrected a potential memory leak in the sltoken.c:compile_byte_compiled_multistring function
  * pre2.3.4-15: Added UTF-16 surrogate handling to the expand_escaped_string function and json module
  * pre2.3.4-14: Added fcntl_getpipe_sz and fcntl_setpipe_sz functions to the fcntl module to get and set the buffer size for pipes
  * pre2.3.4-13: Initialize the variables provided by the %g operator to zero to not leak uninitialized data from the stack if not set by %P. (Miroslav Lichvar)
  * pre2.3.4-12: modules/chksum_sha2.c: Use memcpy to avoid type-punning warning
  * pre2.3.4-11: lib/timestamp.sl: Fixed a bug involving leap years
  * pre2.3.4-10: Updated the Unicode tables to v15 from v10
  * pre2.3.4-9: src/slang.ver: Removed the undefined symbol SLang_Rline_Quit, which was causing a link error on Gentoo Linux (Michal Rostecki)
  * pre2.3.4-8: check for NULL return value from the ctime function
  * pre2.3.4-7: mkfiles/makefile.m32: Added install1 target to work with versions of mingw make that cannot process the install target.  Previously this required editing the makefile (windows-specific)
- download from git://git.jedsoft.org/git/slang.git
  * drop slang-2.3.3.tar.bz2.asc and slang.keyring
- rename patches
  * slang.patch to 0001-Use-termcap.patch
  * slang-autoconf.patch to 0002-Fix-CFLAGS-and-generate-sl-config.h.patch
  * slang-fsuid.patch to 0003-Enforce-use-of-setfsuid.patch</changelog>
  <changelog author="ana.guerrero@suse.com" date="1744027200">- Drop pcre module, it hasn't been ported to pcre2 yet.</changelog>
</package>
<package pkgid="922c6625a9c541116f0a8cc6a421dec0a33e48c6c90a848c68d1f475ba3b9c7505b4a0633c840650ef7af90e6f859c117151b97e215a61ce6a3e3298cb967785" name="libslirp0" arch="x86_64">
  <version epoch="0" ver="4.8.0+2" rel="160000.2.2"/>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release
- fixes [bsc#1201551]</changelog>
  <changelog author="novell@tower-net.de" date="1626436800">- Update to version 4.6.0:
  * build-sys: forgot to bump version to 4.6.0
  * changelog: post-release
  * Release v4.6.0
  * udp: check upd_input buffer size
  * tftp: introduce a header structure
  * tftp: check tftp_input buffer size
  * upd6: check udp6_input buffer size
  * bootp: check bootp_input buffer size
  * bootp: limit vendor-specific area to input packet memory buffer
  * Revert "Set macOS deployment target to macOS 10.4"
- fixes CVE-2021-3592 [bsc#1187364], CVE-2021-3593 [bsc#1187365],
    CVE-2021-3594 [bsc#1187367],CVE-2021-3595[bsc#1187366]</changelog>
  <changelog author="mrostecki@suse.com" date="1626868800">- Update to version 4.6.1:
  * Release v4.6.1
  * Fix "DHCP broken in libslirp v4.6.0"
- fixes [bsc#1198773]</changelog>
  <changelog author="fvogt@suse.com" date="1626955200">- Update to version 4.6.1+7:
  * Haiku: proper path to resolv.conf for DNS server
  * Fix for Haiku
  * dhcp: Always send DHCP_OPT_LEN bytes in options
- Commit _servicedata to fix changelogs
- Don't include .git in source archive, not needed
- Run set_version together with obs_scm</changelog>
  <changelog author="fvogt@suse.com" date="1658145600">- Update to version 4.7.0+44 (current git master):
  * Fix vmstate regression
  * msvc: use char* for pointer arithmetic
  * Align outgoing packets
  * Bump incoming packet alignment to 8 bytes
  * msvc: fix some gcc-specific pragma warnings
  * msvc: enable vmstate code on !gnuc
  * vmstate: only enable when building under GNU C
  * ncsitest: Fix build with msvc
  * Avoid running git-version-gen when building with MS VC
  * windows: export symbols
  * win32: replace strcasecmp with g_ascii_strcasecmp
  * Drop spurious inline
  * Avoid returning void
  * Fix arithmetic on void *
  * Avoid using ##__VA_ARGS__ gcc extension
  * Fix bitfields order for MSVC
  * Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
  * Do not use ssize_t on Windows
  * Do not include unistd.h on windows, it does not have it
  * Accept build-aux/git-version-gen failing to run
  * container_of: avoid using __extension__
  * ncsi: Add Mellanox Get Mac Address handler
  * slirp: Add out-of-band ethernet address
  * ncsi: Add OEM command handler
  * ncsi: Add basic test for Get Version ID response
  * ncsi: Use response header for payload length
  * ncsi: Pass command header to response handlers
  * src/slirp.h: Bump the minimum Windows version to Windows 7
  * ncsi: Add Get Version ID command
  * ncsi: Pass Slirp structure to response handlers
  * slirp: Add manufacturer's ID
  * Add support for Haiku to meson.build
  * meson: add extra warnings
  * win32: declare some local functions as static
  * Include &lt;sys/socket.h&gt; and &lt;arpa/inet.h&gt; for AF_INET6 and inet_pton
  * Release v4.7.0
  * bump ABI version and age
  * slirp: invoke client callback before creating timers
  * pingtest: port to timer_new_opaque
  * introduce timer_new_opaque callback
  * introduce slirp_timer_new wrapper
  * icmp6: make ndp_send_ra static
  * Add sanitizers CI runs
  * socket: Handle ECONNABORTED from recv
  * bootp: fix g_str_has_prefix warning/critical
  * slirp: Don't duplicate packet in tcp_reass
  * Rename insque/remque -&gt; slirp_[ins|rem]que
  * mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
  * Replace inet_ntoa() with safer inet_ntop()
  * Add VMS_END marker
  * bootp: add support for UEFI HTTP boot
  * IPv6 DNS proxying support
  * Add missing scope_id in caching
  * Drop fixed TODO
  * socket: Move closesocket(so-&gt;s_aux) to sofree
  * socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
  * socket: Add s_aux field to struct socket for storing auxilliary socket
  * socket: Initialize so_type in socreate
  * socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
  * Allow to disable internal DHCP server
  * slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
  * CI: run integration tests with slirp4netns
  * socket: Check address family for Unix-to-inet accept translation
  * socket: Add debug args for tcpx_listen (inet and Unix sockets)
  * socket: Restore original definition of fhost
  * socket: Move &lt;sys/un.h&gt; include to socket.h
  * Support Unix sockets in hostfwd
  * resolv: fix IPv6 resolution on Darwin
  * Use the exact sockaddr size in getnameinfo call
  * Initialize sin6_scope_id to zero
  * slirp_socketpair_with_oob: Connect pair through 127.0.0.1
  * resolv: fix memory leak when using libresolv
  * pingtest: Add a trivial ping test
  * icmp: Support falling back on trying a SOCK_RAW socket</changelog>
  <changelog author="pgajdos@suse.com" date="1668168000">- added patches
  fix https://gitlab.freedesktop.org/slirp/libslirp/-/issues/64
  + libslirp-semicolon.patch</changelog>
  <changelog author="lnussel@suse.com" date="1702468800">- Update to version 4.7.0+60:
  * Avoid including &lt;sys/param.h&gt; on windows
  * Document functions
  * icmp: Handle ICMP packets as IPPROTO_IP on BSD
  * ip: Enforce strict aliasing
  * Fix including BaseTsd.h on mingw
  * Use SSIZE_T from BaseTsd.h on windows
  * Detach UDP socket if errno is ENOTCONN (Socket is not connected)
  * slirp: use localhost as dns when /etc/resolv.conf empty
  * missing semicolon
  * Drop unused UDP_UDPDATALEN macro
  * Reject domain-search when any entry ends with ".."
  * Use target address from Neighbor Advertisement
- removed libslirp-semicolon.patch, now included</changelog>
  <changelog author="pgajdos@suse.com" date="1716292800">- Update to version 4.8.0+2:
  * Fix actually linking the library
  * Use simpler test linker script for detectiong --version-script option
  * Release v4.8.0
  * Explicit that -Dstatic=True is not meant for distributing a static library
  * icmp6: Add echo request forwarding support
  * fuzz: Fix icmp6 matching and checksum computation
  * fuzz: Drop debugging
  * fuzz: Drop debugging
  * fuzz: Add ARP and NDP cases
  * fuzz: Add IPv6 cases
  * mbuf: Do not reallocate when the requested size already fits exactly
  * mbuf: Fix copying headers
  * oss-fuzz: Fix udp-h and tcp-h corpuses
  * fuzz: comment coherency
  * fuzz: Simplify TCP checksum code
  * Note changes that can probably be security issues
  * Add changelog for next release
  * eth: pad ethernet frames to 60 bytes
  * udp: Make cleanup loop clearer
  * fuzz: Fix tftp fuzz actually receiving a file
  * tftp: cleanup sessions remaining at slirp shutdown
  * tftp: Fix use-after-free
  * Add fuzzing CI
  * fuzz: Add ip filtering
  * tcp: hack syn/ack
  * fuzzing: Increase coverage
  * First attempt at fuzzing with libFuzzer based on @elmarco work
  * Start some fuzzing test
  * tcp: Fix testing for last fragment
  * icmp: Fix msg duplication for debugging
  * tcp: Fix allocating room
  * mbuf: Be extra careful with freed pointer
  * mbuf: remove '#define if*' member accessors
  * m_cleanup_list: Fix missing cleanup packets from the same session
  * tcp-input: inline TCP_REASS
  * ip: remove second argument from ip_stripoptions()
  * Document endianness of slirp_add_hostfwd parameters</changelog>
</package>
<package pkgid="83d30b6323446b8208e6c838fc78645958fab67f1577a5f2354f057fc6e0b6ebcbbca877fd7fd4807a0a54cb62e1611850d90b91546ae0e936224b970c17abf5" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.41.1" rel="160000.3.1"/>
  <changelog author="sbrabec@suse.com" date="1744027200">- Update to version 2.41:
  * agetty: Fixed an issue where issue files were not being printed
    from additional locations, such as /run or /usr/lib. This
    change now allows for the use of local information from /etc,
    in addition to generated files from /run and
    distribution-specific files from /usr/lib.
  * cfdisk and sfdisk: Added support for the --sector-size command
    line option.
  * sfdisk: Added a new option, --discard-free.
  * fdisk: Added a new command, 'T', to discard sectors.
  * chrt: The --sched-runtime now supports SCHED_{OTHER,BATCH}
    policies.
  * column: Can now handle ANSI SGR colors inside OSC 8 hyperlink
    escape codes and sequences.
  * enosys: Can now dump defined filters.
  * libmount:
  * Added experimental support for statmount() and listmount()
    syscalls.
  * This new functionality can be accessed using "findmnt
  - -kernel=listmount".
  * Added a new mount option,
    X-mount.nocanonicalize[=source|target].
  * Added new mount extensions to the "ro" flag (ro[=vfs,fs]).
  * Added a new option, X-mount.noloop, to disable automatic loop
    device creation.
  * Now supports bind symlinks over symlinks.
  * Reads all kernel info/warning/error messages from new API
    syscalls (and mount(8) prints them).
  * libuuid: Now supports RFC9562 UUIDs.
  * findmnt, lsblk, and lsfd: Added a new --hyperlink command line
    option to print paths as terminal hyperlinks.
  * findmnt: Can now address filesystems using --id and --uniq-id
    (requires listmount() kernel support).
  * flock: Added support for the --fcntl command line option.
  * hardlink: Can now prioritize specified trees on the command
    line using --prioritize-trees.
  * Can exclude sub-trees using --exclude-subtree or keep them in
    the current mount using --mount.
  * Duplicates can now be printed using --list-duplicates.
  * hwclock: Added a new --param-index option to address position
    for RTC_PARAM_{GET,SET} ioctls.
  * kill: Can now decode signal masks (e.g. as used in /proc) to
    signal names.
  * libblkid: Made many changes to improve detection, including
    exfat, GPT, LUKS2, bitlocker, etc.
  * login: Added support for LOGIN_ENV_SAFELIST in /etc/login.def.
  * lsfd: Now supports pidfs and AF_VSOCK sockets.
  * lsipc, ipcmk, ipcrm: Now supports POSIX ipc.
  * lslogins: Now supports lastlog2.
  * lsns: Added support for the --filter option.
  * build by meson: Now supports translated man pages and has fixed
    many bugs.
  * mkswap: The option --file should now be usable on btrfs.
  * nsenter: Improved support for pidfd and can now join target
    process's socket net namespace.
  * scriptlive: Added a new option, --echo &lt;never|always|auto&gt;.
  * zramctl: Now supports COMP-RATIO and --algorithm-params.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41-ReleaseNotes
- Update util-linux-login_defs-check.sh:
  * Make instructions up to date.
  * Update checksum reflecting the shadow update.
- Refresh libmount-print-a-blacklist-hint-for-unknown-filesyst.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1744891200">- Enable mountfd support again (jsc#PED-9752).
  BREAKING CHANGE
  Mountfd is nearly completely compatible with the old mount. There
  is a special case that cannot be handled by mountfd, and it needs
  to be handled by applications:
  Mountfd discriminates between physical mount layer and virtual
  mount layer. Once the physical mount layer is read-only,
  read-write mount on the virtual layer is not possible.
  If the first mount is read only, then the physical filesystem is
  mounted read-only, and later mount of the same file system as
  read-write is not possible. To solve this problem, the first
  mount needs to be read-only only on the virtual layer, keeping
  the physical layer read-write.
  The user space fix is simple:
  Instead of
    mount -oro
  use
    mount -oro=vfs
  This will keep the physical layer read-write, but the virtual
  file system layer (and the user space access) will be read-only.</changelog>
  <changelog author="sbrabec@suse.com" date="1747742400">- Fix segfault of findmnt (boo#1242705,
  gh#util-linux/util-linux#3574,
  util-linux-libblkid-econf-parse.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1748520000">- Add ul_ prefix to functions with common names. Fixes btrfsprogs
  build failure (gh#util-linux/util-linux#3603,
  util-linux-rename-common-symbols-1.patch,
  util-linux-rename-common-symbols-2.patch,
  util-linux-rename-common-symbols-3.patch,
  util-linux-rename-common-symbols-4.patch).</changelog>
  <changelog author="nicolas@belouin.fr" date="1749556800">- Fix libmount --no-canonicalize regression (boo#1244251,
  gh#util-linux/util-linux#3479,
  libmount-fix-no-canonicalize-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1750766400">- Update to version 2.41.1:
  * cfdisk: fix memory leak and possible NULL dereference
  * fdisk: fix possible memory leak
  * findmnt: fix -k option parsing regression (boo#1242705,
    drop util-linux-libblkid-econf-parse.patch)
  * hardlink: fix performance regression
  * include/cctype: fix string comparison
  * libblkid:
  * Fix crash while parsing config with libeconf
  * befs fix underflow
  * avoid strcasecmp() for ASCII-only strings
  * libblkid/src/topology/dm: fix fscanf return value check to
    match expected number of parsed items
  * libmount:
  * (subdir) restrict for real mounts only
  * (subdir) remove unused code
  * avoid calling memset() unnecessarily
  * fix --no-canonicalize regression (boo#1244251,
    drop libmount-fix-no-canonicalize-regression.patch)
  * lsblk:
  * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE
  * avoid strcasecmp() for ASCII-only strings
  * lscpu:
  * fix possible buffer overflow in cpuinfo parser
  * Fix loongarch op-mode output with recent kernel
  * lsfd:
  * scan the protocol field of /proc/net/packet as a hex number
  * fix the description for PACKET.PROTOCOL column
  * lsns:
  * enhance compilation without USE_NS_GET_API
  * fix undefined reference to add_namespace_for_nsfd #3483
  * more:
  * fix broken ':!command' command key
  * fix implicit previous shell_line execution #3508
  * tests: (test_mkfds::mapped-packet-socket) add a new parameter,
    protocol
  * treewide:
  * add ul_ to parse_timestamp() function name
    (drop util-linux-rename-common-symbols-4.patch)
  * add ul_ to parse_switch() function name
    (drop util-linux-rename-common-symbols-3.patch)
  * add ul_ to parse_size() function name
    (drop util-linux-rename-common-symbols-2.patch)
  * add ul_ to parse_range() function name
    (drop util-linux-rename-common-symbols-1.patch)
  * fix optional arguments usage
  * avoid strcasecmp() for ASCII-only strings
  * Wipefs: improve --all descriptions for whole-disks
  * Misc: Do not call exit() on code ending in shared libraries
  * Other fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes
- Fix problem with uname26 listed twice.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
</package>
<package pkgid="65238762ab2a3d15d608a7513c4d15afc90d7772cb77dba51a45aa170a0ec7d1bb39c9d33300f380ba392659f78dd46628f7847ea658cc8f25f60a68ea3d43bf" name="libsnapper7" arch="x86_64">
  <version epoch="0" ver="0.12.1" rel="160000.2.2"/>
  <changelog author="aschnell@suse.com" date="1713355200">- reverted some parts of PR#884 to fix build in obs</changelog>
  <changelog author="aschnell@suse.com" date="1713441600">- async cleanup of stale btrfs qgroups (bsc#1222847)
- version 0.11.0</changelog>
  <changelog author="aschnell@suse.com" date="1716379200">- fixed error message (gh#openSUSE/snapper#907)</changelog>
  <changelog author="aschnell@suse.com" date="1720180800">- handle content-length of stomp in zypper plugin
  (gh#openSUSE/snapper#918)
- version 0.11.1</changelog>
  <changelog author="aschnell@suse.com" date="1724932800">- use .snapshots dir for 'btrfs qgroup clear-stale' (bsc#1229904)
- version 0.11.2</changelog>
  <changelog author="aschnell@suse.com" date="1728648000">- generate dsc file for Ubuntu 24.10</changelog>
  <changelog author="aschnell@suse.com" date="1729857600">- support creating empty snapshots (gh#openSUSE/snapper#944)</changelog>
  <changelog author="aschnell@suse.com" date="1730808000">- provide backup program for btrfs snapshots
- version 0.12.0</changelog>
  <changelog author="aschnell@suse.com" date="1733140800">- added new workflow using only two steps to installation-helper
  (gh#openSUSE/snapper#944)</changelog>
  <changelog author="aschnell@suse.com" date="1734436800">- make some binary paths used in snbk configurable
  (gh#openSUSE/snapper#970)
- version 0.12.1</changelog>
</package>
<package pkgid="21ca307246e1e3ba940fad604f65b3af87400811c9445be1a21adf40dc17a4542065d032d27ef8150c3907a9b6d1875342ccd617c0a36b8ed7937322a2ee87c2" name="libsnappy1" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626177600">- Update to 1.1.9:
  * Performance improvements
- Add fix-always-inline.patch
- Add use-system-test-libs.patch
- Add a hardcoded snappy.pc file</changelog>
  <changelog author="tserong@suse.com" date="1635336000">- Re-enable RTTI, without which other applications can't subclass
  snappy::Source (this breaks Ceph, as one example)
- Add reenable-rtti.patch</changelog>
  <changelog author="dmueller@suse.com" date="1699617600">- update to 1.1.10:
  * Performance improvements
  * Compilation fixes for various environments
- drop fix-always-inline.patch (obsolete)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711368000">- Fix build with GTest 1.14.0 by using C++14, bsc#1221872</changelog>
</package>
<package pkgid="92b17c3359d17408cf71d3488be5ed599c985d6bbc77d6c6874f2a201ff5053d2d048518331084de2e5e5e649f4aee862908d291a6ee908a0e69f49561be8235" name="libsnmp40" arch="x86_64">
  <version epoch="0" ver="5.9.4" rel="160000.3.1"/>
  <changelog author="schubi@suse.com" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="abergmann@suse.com" date="1656936000">- update to 5.9.2 (bsc#1201103):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
- Refactor two patches to work with version number 5.9.2:
  delete:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  add:
  * net-snmp-5.9.2-pie.patch
  * net-snmp-5.9.2-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1657627200">- Rename libsnmp40 subpackage to libsnmp39: the libraries are all
  having soversion 39.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="abergmann@suse.com" date="1663761600">- update to 5.9.3:
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.</changelog>
  <changelog author="abergmann@suse.com" date="1664280000">- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1664798400">- change egrep/fgrep to grep -E/-F to avoid warnings boo#1203096
  add net-snmp-5.9.3-grep.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).
- Use new MFD rewrites of mib modules, where available.
- Disable legacy DES encryption and MD5 authentication protocols.</changelog>
  <changelog author="abergmann@suse.com" date="1731585600">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  * net-snmp-5.9.3-grep.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.2-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.2-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
- logrotate should use reload instead of restart (bsc#1232030)</changelog>
  <changelog author="abergmann@suse.com" date="1768219200">- Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).
  Add net-snmp-5.9.4-fix-out-of-bounds-trapOid-access.patch</changelog>
</package>
<package pkgid="1162c469ec888a00459911e275994387fe21e11a0b75e06f9b81bc00d9e68abf65b39c2caa00a05cc9039d869a1d7269604442d44372191b2eea18bf3e9ffc5a" name="libsodium26" arch="x86_64">
  <version epoch="0" ver="1.0.20" rel="160000.3.1"/>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
  <changelog author="ecsos@opensuse.org" date="1549108800">- Update to 1.0.17
  - Bug fix: sodium_pad() didn't properly support block sizes
    &gt;= 256 bytes.
  - JS/WebAssembly: some old iOS versions can't instantiate the
    WebAssembly module; fall back to Javascript on these.
  - JS/WebAssembly: compatibility with newer Emscripten versions.
  - Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and
    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't
    returnEINVAL` on input strings with a short length, unlike
    their high-level counterpart.
  - Added a workaround for Visual Studio 2010 bug causing CPU
    features not to be detected.
  - Portability improvements.
  - Test vectors from Project Wycheproof have been added.
  - New low-level APIs for arithmetic mod the order of the prime
    order group:
  - crypto_core_ed25519_scalar_random(),
    crypto_core_ed25519_scalar_reduce(),
  - crypto_core_ed25519_scalar_invert(),
    crypto_core_ed25519_scalar_negate(),
  - crypto_core_ed25519_scalar_complement(),
    crypto_core_ed25519_scalar_add() and
    crypto_core_ed25519_scalar_sub().
  - New low-level APIs for scalar multiplication without clamping:
    crypto_scalarmult_ed25519_base_noclamp() and
    crypto_scalarmult_ed25519_noclamp().
    These new APIs are especially useful for blinding.
  - sodium_sub() has been implemented.
  - Support for WatchOS has been added.
  - getrandom(2) is now used on FreeBSD 12+.
  - The nonnull attribute has been added to all relevant
    prototypes.
  - More reliable AVX512 detection.
  - Javascript/Webassembly builds now use dynamic memory growth.</changelog>
  <changelog author="ecsos@opensuse.org" date="1560686400">- Update to 1.0.18
  - Enterprise versions of Visual Studio are now supported.
  - Visual Studio 2019 is now supported.
  - 32-bit binaries for Visual Studio 2010 are now provided.
  - A test designed to trigger an OOM condition didn't work on
    Linux systems with memory overcommit turned on. It has been
    removed in order to fix Ansible builds.
  - Emscripten: print and printErr functions are overridden to send
    errors to the console, if there is one.
  - Emscripten: UTF8ToString() is now exported since
    Pointer_stringify() has been deprecated.
  - Libsodium version detection has been fixed in the CMake recipe.
  - Generic hashing got a 10% speedup on AVX2.
  - New target: WebAssembly/WASI
    (compile with dist-builds/wasm32-wasi.sh).
  - New functions to map a hash to an edwards25519 point
    or get a random point:
    core_ed25519_from_hash() and core_ed25519_random().
  - crypto_core_ed25519_scalar_mul() has been implemented for
    scalar*scalar (mod L) multiplication.
  - Support for the Ristretto group has been implemented for
    interoperability with wasm-crypto.
  - Improvements have been made to the test suite.
  - Portability improvements have been made.
  - getentropy() is now used on systems providing this system call.
  - randombytes_salsa20 has been renamed to randombytes_internal.
  - Support for NativeClient has been removed.
  - Most ((nonnull)) attributes have been relaxed to allow 0-length
    inputs to be NULL.
  - The -ftree-vectorize and -ftree-slp-vectorize compiler switches
    are now used, if available, for optimized builds.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">-  Add libsodium_configure_cpuid_chg.patch and call autoconf
  to regenerate configure script with proper CPUID checking.
  Required at least for PowerPC and ARM now that LTO enabled.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566820800">-  Revert previous change about cpuid as previous change rejected
  in https://build.opensuse.org/request/show/724809
-  Disable LTO as bypass boo#1148184</changelog>
  <changelog author="lucas.mulling@suse.com" date="1734350400">- Update to 1.0.20
  * When using the traditional build system, -O3 is used instead of -Ofast.
  * Improved detection of the compiler flags required on aarch64.
  * Improved compatibility with custom build systems on aarch64.
  * crypto_kdf_hkdf_sha512_statebytes() was added.
  * Compatibility issues with LLVM 18 and AVX512 have been addressed.
    For the full changelog see: https://github.com/jedisct1/libsodium/releases/tag/1.0.20-RELEASE
  * Update baselibs.conf
- Included from 1.0.19
  * New AEADs: AEGIS-128L and AEGIS-256 are now available in the
    crypto_aead_aegis128l_*() and crypto_aead_aegis256_*() namespaces. AEGIS is
    a family of authenticated ciphers for high-performance applications,
    leveraging hardware AES acceleration on x86_64 and aarch64. In addition to
    performance, AEGIS ciphers have unique properties making them easier and
    safer to use than AES-GCM. They can also be used as high-performance MACs.
  * The HKDF key derivation mechanism, required by many standard protocols, is
    now available in the crypto_kdf_hkdf_*() namespace. It is implemented for
    the SHA-256 and SHA-512 hash functions.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767873600">- Security fix: [bsc#1256070, CVE-2025-15444]
  * check Y==Z in addition to X==0
  * Add patch libsodium-CVE-2025-15444.patch</changelog>
</package>
<package pkgid="e6dfe8410b82dd532d5cef108505695bfa5df325aa297e8c78976f6b7095e75aef567247b2bb933bff1af67d264838331cf0ba1d44002138971e3a333ee0941f" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.112" rel="160000.2.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="f2c90c7aeae3ffdd58804aa15b304a1fa962052a789d2b95a6b6e30abe99d0caf5ac8892960ba2c89bf12b5ea446e28306d4d6d6e9e41ead19229dc05c64228c" name="libsolv-tools-base" arch="x86_64">
  <version epoch="0" ver="0.7.36" rel="160000.1.1"/>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
  <changelog author="mls@suse.de" date="1754308800">- fixed rare crash in the handling of allowuninstall in combination
  with forcebest updates
- new pool_satisfieddep_map feature to test if a set of packages
  satisfies a dependency
- bump version to 0.7.35</changelog>
  <changelog author="mls@suse.de" date="1773316800">- respect the "default" attribute in environment optionlist in
  the comps parser
- support suse namespace deps in boolean dependencies [bsc#1258193]
- support for the Elbrus2000 (e2k) architecture
- support language() suse namespace rewriting
- bump version to 0.7.36</changelog>
</package>
<package pkgid="37d982635438de179b4f1b26f6e5ce313a009de6f0d47d4f7a64f82c62b98fa57caca5bacbef0feeea0d5d243fa1613de57f7adff55ebeae3cdd79cbdaca6d93" name="libsoup-3_0-0" arch="x86_64">
  <version epoch="0" ver="3.6.6" rel="160000.1.1"/>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767960000">- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768219200">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771070400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add libsoup-CVE-2026-2708.patch: do not allow adding multiple
  content length values to headers (bsc#1258508 CVE-2026-2708
  glgo#GNOME/libsoup#500).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1771588800">- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).</changelog>
  <changelog author="dimstar@opensuse.org" date="1771588801">- Update to version 3.6.6:
  + websocket: Fix out-of-bounds read in process_frame
  + Check nulls returned by soup_date_time_new_from_http_string()
  + Numerous fixes to handling of Range headers
  + server: close the connection after responsing a request
    containing Content-Length and Transfer-Encoding
  + Use CRLF as line boundary when parsing chunked enconding data
  + websocket: do not accept messages frames after closing due to
    an error
  + Sanitize filename of content disposition header values
  + Always validate the headers value when coming from untrusted
    source
  + uri-utils: do host validation when checking if a GUri is valid
  + multipart: check length of bytes read
    soup_filter_input_stream_read_until()
  + message-headers: Reject duplicate Host headers
  + server: null-check soup_date_time_to_string()
  + auth-digest: fix crash in
    soup_auth_digest_get_protection_space()
  + session: fix 'heap-use-after-free' caused by 'finishing' queue
    item twice
  + cookies: Avoid expires attribute if date is invalid
  + http1: Set EOF flag once content-length bytes have been read
  + date-utils: Add value checks for date/time parsing
  + multipart: Fix multiple boundry limits
  + Fixed multiple possible memory leaks
  + message-headers: Correct merge of ranges
  + body-input-stream: Correct chunked trailers end detection
  + server-http2: Correctly validate URIs
  + multipart: Fix read out of buffer bounds under
    soup_multipart_new_from_message()
  + headers: Ensure Request-Line comprises entire first line
  + tests: Fix MSVC build error
  + Fix possible deadlock on init from gmodule usage
  + Updated translations.
- Drop upstream merged patches:
  + libsoup-CVE-2025-11021.patch
  + libsoup-CVE-2025-12105.patch
  + libsoup-CVE-2025-14523.patch
  + libsoup-CVE-2025-32907.patch
  + libsoup-CVE-2025-32908.patch
  + libsoup-CVE-2025-32914.patch
  + libsoup-CVE-2025-4476.patch
  + libsoup-CVE-2025-4945.patch
  + libsoup-CVE-2025-4948.patch
  + libsoup-CVE-2025-4969.patch
  + libsoup-CVE-2026-0716.patch
  + libsoup-CVE-2026-1536.patch
  + libsoup-CVE-2026-1761.patch
  + libsoup-CVE-2026-2369.patch
  + libsoup-CVE-2026-2443.patch
  + libsoup-CVE-2026-1467.patch
  + libsoup-CVE-2026-1760.patch
- libsoup-CVE-2026-2708.patch temporarily disabled while we need to
  rebase it.</changelog>
  <changelog author="mgorse@suse.com" date="1771588802">- Rebase and re-enable libsoup-CVE-2026-2708.patch.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
</package>
<package pkgid="030d49cdd07480bd45dd736293e3af65bb63771a6cda9e44ab66f93d002a678d9c19a00e29300a0f09a1cb11ce3f2229e55345031e4cd8dead6b8f20741aa07a" name="libspice-server1" arch="x86_64">
  <version epoch="0" ver="0.15.1" rel="160000.2.2"/>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="9+suse@cirno.systems" date="1578657600">- Enable video codec support (VPX and MJPEG)</changelog>
  <changelog author="brogers@suse.com" date="1582891200">- Update to v0.14.3 release
  The main changes are WebSocket and support for Windows.
  * Add support for WebSocket, this will allow to use spice-html5
    without proxy
  * Support Windows, now Qemu Windows can be build enabling Spice
  * Fix some alignment problem
  * Converted some documentation to Asciidoc format to make easier
    to update, updated some
  * Minor compatibility fix for PPC64EL and ARMHF
  * Minor fixes for big endian machines like MIPS
  * Avoid some crashes with some buggy guest drivers, simply
    ignore the invalid request
  * Fix for old OpenSSL versions
  * Minor fix for Windows clients and brushes, fixed an issue with
    Photoshop under Windows 7
  * Add ability to query video-codecs
  * Small use-after-free fix
  * Fix for debugging recording/replaying using QUIC images
  * Fix a regression where spice reported no monitors to the client
  * Fix DoS in spicevmc if WebDAV used
  * Updated and improved test migration script
  * Some minor fixes to smartcard support
  * Avoid possible disconnection using proxies using a in-flow
    keepalive mechanism
- The NEWS file is now named CHANGELOG.md, and the previously
  provided ChangeLog, which was a summary of the git log is no
  longer provided</changelog>
  <changelog author="brogers@suse.com" date="1583755200">- Clean up some spec file conditionals that are no longer helpful</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vunerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="brogers@suse.com" date="1602244800">- Note: The Mar 9, 2020 spec file cleanup and the following change
  satisfy jsc#SLE-15520
- Remove gstreamer-plugins-libav and gstreamer-plugins-good as
  BuildRequires. Even though the configure step of the package
  build does report detection of features from these packages, the
  build is actually not otherwise influenced by the presence of
  these packages. It is at runtime when these plugin packages are
  utilized, so leave the Recommends for these in the package spec,
  so that if the packages are available in a distro they can get
  installed and utilized.</changelog>
  <changelog author="carnold@suse.com" date="1620388800">- Update to v0.15.0 release
  This is the first release in the new 0.15.x stable series.
  * Minor updates to CI
  * Some compatibility with OpenSSL
  * Change the behavior of handle_dev_start ignoring multiple start requests
  * Ignore multiple calls to handle_dev_stop
  * Pick up newer spice-common to fix a buffer overflow issue
- Dropped patches contained in new tarball
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1648036800">- Add patch to let spice build with gstreamer 1.20.x
  (https://gitlab.freedesktop.org/spice/spice/-/merge_requests/207)
  * fix-build-with-gstreamer-1.20.patch</changelog>
  <changelog author="carnold@suse.com" date="1669723200">- Update to v0.15.1 release
  * This is a bug fix release with no upstream changelog
- Drop fix-build-with-gstreamer-1.20.patch</changelog>
</package>
<package pkgid="20677bc9ec6bc7ac8cd512af610801700d7d564cf352110a3690d04d6b6dd4b005c3ed1f773acba96c16840d9084d2cb551e1cc483c02d75a8959928b273f8bc" name="libsqlite3-0" arch="x86_64">
  <version epoch="0" ver="3.51.3" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1746619200">- Update to release 3.49.2:
  * Fix a bug in the NOT NULL optimization of version 3.40.0 that
    can lead to a memory error if abused.
  * Fix the count-of-view optimization so that it does not give an
    incorrect answer for a DISTINCT query.
  * Fix a possible incorrect answer that can result if a UNIQUE
    constraint of a table contains the PRIMARY KEY column and that
    UNIQUE constraint is used by an IN operator.
  * Fix obscure problems with the generate_series() extension
    function.
  * Incremental improvements to the configure/make.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1749470400">- Update to 3.50 (3.50.1):
  * Improved handling and robust output of control characters
  * sqlite3_rsync no longer requires WAL mode and needs less
    bandwidth
  * Bug fixes and optimized JSON handling
  * Performance optimizations and developer visible fixes</changelog>
  <changelog author="max@suse.com" date="1751371200">- Update to 3.50.2:
  * Fix the concat_ws() SQL function so that it includes empty
    strings in the concatenation.
  * Avoid writing frames with no checksums into the wal file if a
    savepoint is rolled back after dirty pages have already been
    spilled into the wal file.
  * Fix the Bitvec object to avoid stack overflow when the
    database is within 60 pages of its maximum size.
  * Fix a problem with UPDATEs on fts5 tables that contain BLOB
    values.
  * Fix an issue with transitive IS constraints on a RIGHT JOIN.
  * CVE-2025-6965, bsc#1246597:
    Raise an error early if the number of aggregate terms in a
    query exceeds the maximum number of columns, to avoid
    downstream assertion faults.
  * Ensure that sqlite3_setlk_timeout() holds the database mutex.</changelog>
  <changelog author="max@suse.com" date="1752753600">- Update to version 3.50.3:
  * Fix a possible memory error that can occur if a query is made
    against against FTS5 index that has been deliberately corrupted
    in a very specific way (CVE-2025-7709, bsc#1254670).
  * Fix the parser so that it ignored SQL comments in all places of
    a CREATE TRIGGER statement. This resolves a problem that was
    introduced by the introduction of the
    SQLITE_DBCONFIG_ENABLE_COMMENTS feature in version 3.49.0.
  * Fix an incorrect answer due to over-optimization of an AND
    operator.</changelog>
  <changelog author="max@suse.com" date="1754913600">- Update to version 3.50.4:
  * Fix two long-standings cases of the use of uninitialized
    variables in obscure circumstances.</changelog>
  <changelog author="max@suse.com" date="1756209600">- bsc#1248586: Fix icu-enabled build.</changelog>
  <changelog author="max@suse.com" date="1761048000">- bsc#1252217: Add a %license file.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Update to version 3.51.1:
  * Fix incorrect results from nested EXISTS queries caused by the
    optimization in item 6b in the 3.51.0 release.
  * Fix a latent bug in fts5vocab virtual table, exposed by new
    optimizations in the 3.51.0 release
- Changes in version 3.51.0:
  * New macros in sqlite3.h:
  - SQLITE_SCM_BRANCH → the name of the branch from which the
    source code is taken.
  - SQLITE_SCM_TAGS → space-separated list of tags on the source
    code check-in.
  - SQLITE_SCM_DATETIME → ISO-8601 date and time of the source
    code check-in.
  * Two new JSON functions, jsonb_each() and jsonb_tree() work the
    same as the existing json_each() and json_tree() functions
    except that they return JSONB for the "value" column when the
    "type" is 'array' or 'object'.
  * The carray and percentile extensions are now built into the
    amalgamation, though they are disabled by default and must be
    activated at compile-time using the -DSQLITE_ENABLE_CARRAY
    and/or -DSQLITE_ENABLE_PERCENTILE options, respectively.
  * Enhancements to TCL Interface:
  - Add the -asdict flag to the eval command to have it set the
    row data as a dict instead of an array.
  - User-defined functions may now break to return an SQL NULL.
  * CLI enhancements:
  - Increase the precision of ".timer" to microseconds.
  - Enhance the "box" and "column" formatting modes to deal with
    double-wide characters.
  - The ".imposter" command provides read-only imposter tables
    that work with VACUUM and do not require the --unsafe-testing
    option.
  - Add the --ifexists option to the CLI command-line option and
    to the .open command.
  - Limit columns widths set by the ".width" command to 30,000 or
    less, as there is not good reason to have wider columns, but
    supporting wider columns provides opportunity to malefactors.
  * Performance enhancements:
  - Use fewer CPU cycles to commit a read transaction.
  - Early detection of joins that return no rows due to one or
    more of the tables containing no rows.
  - Avoid evaluation of scalar subqueries if the result of the
    subquery does not change the result of the overall expression.
  - Faster window function queries when using
    "BETWEEN :x FOLLOWING AND :y FOLLOWING" with a large :y.
  * Add the PRAGMA wal_checkpoint=NOOP; command and the
    SQLITE_CHECKPOINT_NOOP argument for sqlite3_wal_checkpoint_v2().
  * Add the sqlite3_set_errmsg() API for use by extensions.
  * Add the sqlite3_db_status64() API, which works just like the
    existing sqlite3_db_status() API except that it returns 64-bit
    results.
  * Add the SQLITE_DBSTATUS_TEMPBUF_SPILL option to the
    sqlite3_db_status() and sqlite3_db_status64() interfaces.
  * In the session extension add the sqlite3changeset_apply_v3()
    interface.
  * For the built-in printf() and the format() SQL function, omit
    the leading '-' from negative floating point numbers if the '+'
    flag is omitted and the "#" flag is present and all displayed
    digits are '0'. Use '%#f' or similar to avoid outputs like
    '-0.00' and instead show just '0.00'.
  * Improved error messages generated by FTS5.
  * Enforce STRICT typing on computed columns.
  * Improved support for VxWorks
  * JavaScript/WASM now supports 64-bit WASM. The canonical builds
    continue to be 32-bit but creating one's own 64-bit build is
    now as simple as running "make".
  * Improved resistance to database corruption caused by an
    application breaking Posix advisory locks using close().</changelog>
  <changelog author="max@suse.com" date="1769083200">- Update to version 3.51.2:
  * bsc#1259619, CVE-2025-70873: zipfile extension may disclose
    uninitialized heap memory during inflation.
  * Fix an obscure deadlock in the new broken-posix-lock detection
    logic.
  * Fix multiple problems in the EXISTS-to-JOIN optimization.
  * Other minor bug fixes.</changelog>
  <changelog author="max@suse.com" date="1773403200">- Update to version 3.51.3:
  * Fix the WAL-reset database corruption bug:
    https://sqlite.org/wal.html#walresetbug
  * Other minor bug fixes.</changelog>
</package>
<package pkgid="daec347c5115f2ff0c5dabbb73e940a191b3d8d0ff3dd386eb2d3e60aacfda423c8c67dfd867dfceaab92233515b2342d97983dd7e131e1db995911c654f53c8" name="libssh-config" arch="noarch">
  <version epoch="0" ver="0.11.2" rel="160000.2.2"/>
  <changelog author="asn@cryptomilk.org" date="1703332800">- Fix regression parsing IPv6 addresses provided as hostname
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712923200">- Don't change the path for crypto-policies libssh.config (bsc#1222716)</changelog>
  <changelog author="asn@cryptomilk.org" date="1723204800">- Update to version 0.11.0
  https://www.libssh.org/2024/08/08/libssh-0-11-0-release/
- Updated 0001-disable-timeout-test-on-slow-buildsystems.patch
- Removed libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Set BuildArch: noarch for the config package as it only ships
  configuration files.</changelog>
  <changelog author="pmonreal@suse.com" date="1726228801">- Update to version 0.11.1:
  * Fixed default TTY modes that are set when stdin is not
    connected to tty.
  * Fixed zlib cleanup procedure, which could crash on i386.
  * Various test fixes improving their stability.
  * Remove 0001-disable-timeout-test-on-slow-buildsystems.patch
    to enable slow tests also in s390 s390x ppc64le.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738670400">- Do not Require cmake from the devel package: there is no
  requirement that consumers would be using cmake.
- Own %{_libdir}/cmake to not leave traces when uninstalling the
  package and being the only one left installing files to that
  directory.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1739880000">- Move global config dir to /usr/etc/libssh (bsc#1222716)
  * Add patch libssh-cmake-Add-option-WITH_HERMETIC_USR.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1745409600">- Fix build and tests with OpenSSH &gt;= 10.0
  * Use %make_build instead of naked make
  * Add patches:
  - libssh-CmakeLists-Fix-multiple-digit-major-version-for-OpenSSH.patch
  - libssh-misc-Fix-OpenSSH-banner-parsing.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748520000">- Fix hang in torture_session test (bsc#1243799)
  * Add patch libssh-tests-Fix-an-issue-where-torture_session-request-a-SIGTERM-too-early.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1750766400">- Update to version 0.11.2
  * Security:
  * CVE-2025-4877 - Write beyond bounds in binary to base64 conversion (bsc#1245309)
  * CVE-2025-4878 - Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * CVE-2025-5318 - Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * CVE-2025-5351 - Double free in functions exporting keys (bsc#1245312)
  * CVE-2025-5372 - ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * CVE-2025-5449 - Likely read beyond bounds in sftp server message decoding (bsc#1245316)
  * CVE-2025-5987 - Invalid return code for chacha20 poly1305 with OpenSSL (bsc#1245317)
  * Compatibility
  * Fixed compatibility with CPM.cmake
  * Compatibility with OpenSSH 10.0
  * Tests compatibility with new Dropbear releases
  * Removed p11-kit remoting from the pkcs11 testsuite
  * Bugfixes
  * Implement missing packet filter for DH GEX
  * Properly process the SSH2_MSG_DEBUG message
  * Allow escaping quotes in quoted arguments to ssh configuration
  * Do not fail with unknown match keywords in ssh configuration
  * Process packets before selecting signature algorithm during authentication
  * Do not fail hard when the SFTP status message is not sent by noncompliant
    servers
- Removed libssh-CmakeLists-Fix-multiple-digit-major-version-for-OpenSSH.patch
- Removed libssh-misc-Fix-OpenSSH-banner-parsing.patch</changelog>
</package>
<package pkgid="e91a4db2bffff915009850f407eb541556e30c5aa7ae5f69f1a6504968ee63dea29e78f6a91589625ae6cbc065089b8343c706c86acc42665041b4d6312c0135" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="160000.3.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561032000">- Version update to 1.9.0:
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patch libssh2-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729598400">- Update to 1.11.1:
  * build: enable '-pedantic-errors'
  * build: add 'LIBSSH2_NO_DEPRECATED' option
  * build: stop requiring libssl from openssl
  * disable DSA by default
  * hostkey: do not advertise ssh-rsa when SHA1 is disabled
  * kex: prevent possible double free of hostkey
  * kex: always check for null pointers before calling _libssh2_bn_set_word
  * kex: fix a memory leak in key exchange
  * kex: always add extension indicators to kex_algorithms
  * md5: allow disabling old-style encrypted private keys at build-time
  * openssl: free allocated resources when using openssl3
  * openssl: fix memory leaks in '_libssh2_ecdsa_curve_name_with_octal_new'
    and '_libssh2_ecdsa_verify'
  * openssl: fix calculating DSA public key with OpenSSL 3
  * openssl: initialize BIGNUMs to NULL in 'gen_publickey_from_dsa' for OpenSSL 3
  * openssl: fix cppcheck found NULL dereferences
  * openssl: delete internal 'read_openssh_private_key_from_memory()'
  * openssl: use OpenSSL 3 HMAC API, add 'no-deprecated' CI job
  * openssl: make a function static, add '#ifdef' comments
  * openssl: fix DSA code to use OpenSSL 3 API
  * openssl: fix 'EC_KEY' reference with OpenSSL 3 'no-deprecated' build
  * openssl: use non-deprecated APIs with OpenSSL 3.x
  * openssl: silence '-Wunused-value' warnings
  * openssl: add missing check for 'LIBRESSL_VERSION_NUMBER' before use
  * packet: properly bounds check packet_authagent_open()
  * pem: fix private keys encrypted with AES-GCM methods
  * reuse: provide SPDX identifiers
  * scp: fix missing cast for targets without large file support
  * session: support server banners up to 8192 bytes
  * session: add 'libssh2_session_callback_set2()'
  * session: handle EINTR from send/recv/poll/select to try again as the error is not fatal
  * sftp: increase SFTP_HANDLE_MAXLEN back to 4092
  * sftp: implement posix-rename@openssh.com
  * src: implement chacha20-poly1305@openssh.com
  * src: check the return value from '_libssh2_bn_*()' functions
  * src: support RSA-SHA2 cert-based authentication (rsa-sha2-512_cert and rsa-sha2-256_cert)
  * src: check hash update/final success
  * src: check hash init success
  * src: add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * transport: fix unstable connections over non-blocking sockets
  * transport: check ETM on remote end when receiving
  * transport: fix incorrect byte offset in debug message
  * userauth: avoid oob with huge interactive kbd response
  * userauth: add a new structure to separate memory read and file read
  * userauth: check whether '*key_method' is a NULL pointer instead of 'key_method'
  * Rebase libssh2-ocloexec.patch
  * Remove patches fixed upstream:
  - libssh2_org-CVE-2023-48795.patch
  - libssh2_org-CVE-2023-48795-ext.patch
  - libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="2471a5fc400fa4ae140d976f62c2e1424c691b1d76cc70eb7074eb85035cafa2aba658eec1bc5e06e5183ee9b5b7a413f66ac313c8a7d61c1f8a6fd1fa824b30" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.11.2" rel="160000.2.2"/>
  <changelog author="asn@cryptomilk.org" date="1703332800">- Fix regression parsing IPv6 addresses provided as hostname
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712923200">- Don't change the path for crypto-policies libssh.config (bsc#1222716)</changelog>
  <changelog author="asn@cryptomilk.org" date="1723204800">- Update to version 0.11.0
  https://www.libssh.org/2024/08/08/libssh-0-11-0-release/
- Updated 0001-disable-timeout-test-on-slow-buildsystems.patch
- Removed libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Set BuildArch: noarch for the config package as it only ships
  configuration files.</changelog>
  <changelog author="pmonreal@suse.com" date="1726228801">- Update to version 0.11.1:
  * Fixed default TTY modes that are set when stdin is not
    connected to tty.
  * Fixed zlib cleanup procedure, which could crash on i386.
  * Various test fixes improving their stability.
  * Remove 0001-disable-timeout-test-on-slow-buildsystems.patch
    to enable slow tests also in s390 s390x ppc64le.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738670400">- Do not Require cmake from the devel package: there is no
  requirement that consumers would be using cmake.
- Own %{_libdir}/cmake to not leave traces when uninstalling the
  package and being the only one left installing files to that
  directory.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1739880000">- Move global config dir to /usr/etc/libssh (bsc#1222716)
  * Add patch libssh-cmake-Add-option-WITH_HERMETIC_USR.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1745409600">- Fix build and tests with OpenSSH &gt;= 10.0
  * Use %make_build instead of naked make
  * Add patches:
  - libssh-CmakeLists-Fix-multiple-digit-major-version-for-OpenSSH.patch
  - libssh-misc-Fix-OpenSSH-banner-parsing.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748520000">- Fix hang in torture_session test (bsc#1243799)
  * Add patch libssh-tests-Fix-an-issue-where-torture_session-request-a-SIGTERM-too-early.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1750766400">- Update to version 0.11.2
  * Security:
  * CVE-2025-4877 - Write beyond bounds in binary to base64 conversion (bsc#1245309)
  * CVE-2025-4878 - Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * CVE-2025-5318 - Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * CVE-2025-5351 - Double free in functions exporting keys (bsc#1245312)
  * CVE-2025-5372 - ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * CVE-2025-5449 - Likely read beyond bounds in sftp server message decoding (bsc#1245316)
  * CVE-2025-5987 - Invalid return code for chacha20 poly1305 with OpenSSL (bsc#1245317)
  * Compatibility
  * Fixed compatibility with CPM.cmake
  * Compatibility with OpenSSH 10.0
  * Tests compatibility with new Dropbear releases
  * Removed p11-kit remoting from the pkcs11 testsuite
  * Bugfixes
  * Implement missing packet filter for DH GEX
  * Properly process the SSH2_MSG_DEBUG message
  * Allow escaping quotes in quoted arguments to ssh configuration
  * Do not fail with unknown match keywords in ssh configuration
  * Process packets before selecting signature algorithm during authentication
  * Do not fail hard when the SFTP status message is not sent by noncompliant
    servers
- Removed libssh-CmakeLists-Fix-multiple-digit-major-version-for-OpenSSH.patch
- Removed libssh-misc-Fix-OpenSSH-banner-parsing.patch</changelog>
</package>
<package pkgid="ca677c40aa9147d13bb32b086e347117db72e6667e2fee060e76160b8b1677fb14f26a8219dbaea2be0dec118c96cb13a4c8c23407fde355910f973270d662a1" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.9.5" rel="160000.3.1"/>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1742904000">- Add python3-setuptools build dependency
- Drop nscd build dependency</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="c2daaeff6443fa873e0178219293ad595980dc348ee9e92a99080458c1500cceb2746330b3b285602c4f8d7075c13cbda90177322f85bfcd06d5a609a95bf192" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.9.5" rel="160000.3.1"/>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1742904000">- Add python3-setuptools build dependency
- Drop nscd build dependency</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="ccc7bf7953fb2a356e0c7df33edd5525955b5bd55c2f17f062372f7752f5fcb7e6eb3d19eccd73b0f92d186ade6e8260ab508ff3c7371be20a678a898dba7ea8" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="327f58086e6c5b7e6d13cfa29bf37b3ddaffe007604cec2b47bdde93cbc99403c7365e1170f3b5e4269eb62a4d1da3cf237bc2f91947d19fb21192573970eaf5" name="libstemmer1d" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1620734400">- Initial package, version 2.1.0, based on work by darix and dabian</changelog>
  <changelog author="dimstar@opensuse.org" date="1696939200">- Update to version 2.2.0:
  + New code generator: Ada generator.
  + Javascript: Fix generated code to use integer division rather
    than floating point division.
  + Python:
  - Python 2 is no longer actively supported.
  - Fix code generated for division.  Previously the Python code
    we generated used integer division but rounded negative
    fractions towards negative infinity rather than zero under
    Python 2, and under Python 3 used floating point division.
  + For more information, see shipped NEWS file.
- Rebase build-options.diff and shared-library.diff.
- Bump libstemmer.so.0d to libstemmer.so.1d: we have no guarantee
  that upstreams static-only-library maintains any kind of ABI.</changelog>
</package>
<package pkgid="e6c01f39aa196ec1abdb7010a4dae180d88cf9c804962f7cbca67f35f8a3dd0c6a54eaae7f6c34df63fd86c949d8db1d7513610a91378d73aea33dabf9f68444" name="libsubid5" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="160000.2.2"/>
  <changelog author="mvetter@suse.com" date="1711281600">- Update to 4.15.1:
  * Fix a bug that caused spurious error messages about unknown
    login.defs configuration options #967
  * Adding checks for fd omission #964
  * Use temporary stat buffer #974
  * Fix wrong french translation #975
- Drop shadow-4.15.0-fix-definition.patch</changelog>
  <changelog author="mvetter@suse.com" date="1718798400">- Update to 4.16.0:
  * The shadow implementations of id(1) and groups(1) are deprecated
    in favor of the GNU coreutils and binutils versions.
    They will be removed in 4.17.0.
  * The rlogind implementation has been removed.
  * The libsubid major version has been bumped, since it now requires
    specification of the module's free() implementation.
- Update shadow-login_defs-suse.patch
- Add shadow-4.16.0-econf.patch:
  Replace deprecated econf_readDirs with econf_readConfig</changelog>
  <changelog author="mvetter@suse.com" date="1719230400">- bsc#1226850: Drop incorrect econf patch (until time to fix it)
  Drop shadow-4.16.0-econf.patch</changelog>
  <changelog author="scabrero@suse.de" date="1720440000">- Disable flushing sssd caches. The sssd's files provider is no
  longer available.</changelog>
  <changelog author="mvetter@suse.com" date="1733486400">- Update to 4.17.0 RC1:
  Pre-release without changelog</changelog>
  <changelog author="mvetter@suse.com" date="1735300800">- Update to 4.17.0:
  * Fix the lower part of the domain of csrand_uniform()
  * Fix use of volatile pointer
  * Use 'dist-hook' to clean up &lt;tests/unit/Makefile&gt;
  * Use str2[u]l() instead of atoi(3)
  * Use a2i() in various places
  * Fix const correctness
  * Use uid_t for holding UIDs (and GIDs)
  * Move all sprintf(3)-like APIs to a subdirectory
  * Move all copying APIs to a subdirectory
  * Fix forever loop on ENOMEM
  * Fix REALLOC() nmemb calculation
  * Remove id(1)
  * Remove groups(1)
  * Use local time for human-readable dates
  * Use %F instead of %Y-%m-%d with strftime(3)
  * is_valid{user,group}_name(): Set errno to distinguish the reasons
  * Recommend --badname only if it is useful
  * Add fmkomstemp() to fix mode of &lt;/etc/default/useradd&gt;
  * Fix use-after-free bug in sgetgrent()
  * Update Catalan translation
  * Remove references to cppw, cpgr
  * groupadd, groupmod: Update gshadow file with -U
  * Added option -a for listing active users only, optimized using if aflg,return
  * Added information in lastlog man page for new option '-a'
  * Plenty of code cleanup and clarifications</changelog>
  <changelog author="mvetter@suse.com" date="1735646400">- Update to 4.17.1:
  * Fix `su -` regression #1163</changelog>
  <changelog author="mvetter@suse.com" date="1736596800">- Update to 4.17.2:
  * src/login_nopam.c: Fix compiler warnings #1170
  * lib/chkname.c: Put limits for LOGIN_NAME_MAX and sysconf(_SC_LOGIN_NAME_MAX) #1169
  * Use HTTPS in link to Wikipedia article on password strength #1164
  * lib/attr.h: use C23 attributes only with gcc &gt;= 10 #1172
  * login: Fix no-pam authorization regression #1174
  * man: Add Portuguese translation #1178
  * Update French translation #1177
  * Add cheap defense mechanisms #1171
  * Add Romanian translation #1176</changelog>
  <changelog author="mvetter@suse.com" date="1737374400">- bsc#1235453: Set SYS_{UID,GID}_MIN to 201:
  After repeated similar requests to change the ID ranges we set the
  above mentioned value to 201. The max value will stay at 499.
  This range should be sufficient and will give us leeway for the
  future.
  It's not straightforward to find out which static UIDs/GIDs are
  used in all packages.
  Update shadow-login_defs-suse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1744200000">- shadow-util-linux.patch: util-linux-2.41 introduced new variable:
  LOGIN_ENV_SAFELIST. Recognize it and update dependencies. The
  patch includes gh/shadow-maint/shadow/pull#1248.
- shadow-login_defs-check-login_defs.lst: Make the util-linux.spec
  multibuild file compatible with quilt. Make it working with new
  quilt.</changelog>
</package>
<package pkgid="2c4f84010bd3b34e8596df0292a9fa19d8d9de578f05b87846c49d3da5d8ce91bd5c9a1b5704d477ef74de3dec19b909518bac1869a48955c9ffdb65480dbc6b" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="257.13" rel="160000.1.1"/>
  <changelog author="fbui@suse.com" date="1767787200">- Drop %filetriggers build flag. It was introduced to ease backport of
  Base:System to SLE distros where file-triggers were unreliable but that is no
  longer the case on the latest SLE distros.</changelog>
  <changelog author="fbui@suse.com" date="1767960000">- Drop most of the workarounds contained in the fixlets.
  These workarounds were hold to address old issues that no longer exist in
  recent versions of systemd. For systems upgrading to this version, we assume
  these issues have already been fixed by the fixlet scripts still shipped by
  the previous distribution.
  Only the logig warning users about the deprecated usage of the main
  configuration files (favoring drop-in files) is preserved.</changelog>
  <changelog author="fbui@suse.com" date="1767960001">- systemd.spec: don't reexecute PID1 on transactional updates.</changelog>
  <changelog author="fbui@suse.com" date="1767960002">- systemd-update-helper: clean up the flags immediately after they have been
  consumed (no functional changes).</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1770206400">- Import commit fb9d92682b2469aa205d4df3ffea61e4806ed0e9
  fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)
  80ec26cee0 core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1770292800">- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853)
  This was originally intended to ensure these paths had a designated package
  owner. However the existing list was neither exhaustive nor up to date. To
  better support immutable images, we are removing these entries and will now
  keep only /var/lib/systemd as owned by the systemd package. Maintaining the
  broader list provided little value due to its ongoing inconsistency anyways.</changelog>
  <changelog author="fbui@suse.com" date="1772107200">- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)</changelog>
  <changelog author="fbui@suse.com" date="1772452800">- Import commit 3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654 (merge of v257.11)
  This merge includes the following fix:
  54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/358010e6e90269570025c598b1430afa1e2ff6ca...3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654</changelog>
  <changelog author="fbui@suse.com" date="1773662400">- Import commit d349fc5cd4f9ee2b7884c2610647e92806d14b28 (merge of v257.13)
  This merge includes the following fix:
  6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28</changelog>
</package>
<package pkgid="d348df23e5af96e37d2ae9df90430527fc3ce91ab7e68c11d210fc5dbd9b6b17d5ff938a08907621764b2f1bdacb34bd4c4408217bd493045095cf06f4945811" name="libtalloc2" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="scabrero@suse.de" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="nopower@suse.com" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="scabrero@suse.de" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="asn@cryptomilk.org" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dimstar@opensuse.org" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="nopower@suse.com" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="scabrero@suse.de" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="4866008b982b160a7e66cf7f81a2419186bdfce23ac9d9d75992fff50eb971d41cd87b26e7a86f2cd6a2b6ce75adf4dbadd6bfafade563a1d991c093c9aa20b9" name="libtasn1-6" arch="x86_64">
  <version epoch="0" ver="4.21.0" rel="160000.1.1"/>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564574400">- libtasn1 4.14:
  * New #defines for version checking
  * other developer visible changes
- drop libtasn1-object-id-recursion.patch, incorporating the
  upstream fix for boo#1105435 CVE-2018-1000654</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1574424000">- libtasn1 4.15.0:
  * The generated tree no longer contains ASN.1 built-in types
    even if they are explicitly defined in the description.
    Previously a warning was printed when these types were seen,
    now they are ignored.
  * Several fixes in ASN.1 definition parser, preventing several
    crashes and leaks in the tools due to improper ASN.1.
  * Switched to semantic versioning</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1580644800">- libtasn1 4.16.0:
  * asn1_decode_simple_ber: added support for constructed definite
    octet strings
  * asn1_get_object_id_der: enhance the range of decoded OIDs
  * asn1_object_id_der: New function</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621252800">- libtasn1 4.17.0:
  * Print deprecation messages for deprecated macros
  * Fix some clang issues due to illegal pointers
  * Restore handling of SIZE nodes
  * Fix memory leak caught by oss-fuzz
  * Gtk-doc fixes
  * Fix bugs unveiled by Static Analysis
  * Update gnulib files and many build fixes
- move tools to -tools packages and clarify licenses
- update upstream signing keyring
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636632000">- libtasn1 4.18.0:
  * Improve GTK-DOC manual
  * Improve --help and --version for tools with gnulib
  * Update gnulib files and various maintenance fixes
- drop libtasn1-rpmlintrc due to no longer being required on TW</changelog>
  <changelog author="pmonreal@suse.com" date="1636632001">- Update libtasn1.keyring with upstream keys</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1661342400">- libtasn1 4.19.0:
  * Clarify libtasn1.map license
  * Fix ETYPE_OK out of bounds read
  * Update gnulib files and various maintenance fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1738843200">- libtasn1 4.20.0:
  * Fix CVE-2024-12133: Potential DoS in handling of numerous
    SEQUENCE OF or SET OF elements (boo#1236878)
  * The release tarball is now reproducible
  * Update gnulib files and various build/maintenance fixes.
- update upstream signing key</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Update to libtasn1 4.21.0: [bsc#1256341, CVE-2025-13151]
  * Undocumented asn1Decoding --debug flag removed.
  * Code coverage for src/ went from 35% to 82%.
  * Fix of ASN.1 typo in manual.
  * NEWS renamed to NEWS.md and uses markdown syntax.
  * Update gnulib files and various build/maintenance fixes.
  * Fix for vulnerability CVE-2025-13151 Stack-based buffer overflow:
  - libtasn1: stack-based buffer overflow in asn1_expend_octet_string()</changelog>
</package>
<package pkgid="551ebbfa5e2724092c1a9f3e34ac8ee7d2651d928ad20b9c027f4d85eb54a5c996e466cb2028358f11fea1340cc9b41d74d5e29ee6a52801b0a8fc439c4857ac" name="libtdb1" arch="x86_64">
  <version epoch="0" ver="1.4.13" rel="160000.2.2"/>
  <changelog author="jmcdonough@suse.com" date="1570104000">- Update to version 1.4.2
  + Build fixes
  + Improve the performance by inlining the tdb_oob() checks
  + Do not propogate any errors from tdb_repack() to
    tdb_transaction_commit();  (bso#13952)
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + New minor version to allow Samba 4.10 to release a tdb if
    required from that branch</changelog>
  <changelog author="nopower@suse.com" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="jcnengel@gmail.com" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="dmueller@suse.com" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="scabrero@suse.de" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="nopower@suse.com" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="nopower@suse.com" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="scabrero@suse.de" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="fc5eb31154e54923820845afe274be3267134f1ac59a314b50b6f34424d5a4a59b3a1baf6a68b4b6b7bacd4c23e1dfff913f8ba151040dab484abd15af840972" name="libtevent0" arch="x86_64">
  <version epoch="0" ver="0.16.2" rel="160000.2.2"/>
  <changelog author="nopower@suse.com" date="1583582400">- Update to version 0.10.2
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="dmulder@suse.com" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="nopower@suse.com" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="scabrero@suse.de" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="dimstar@opensuse.org" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="nopower@suse.com" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="jgwang@suse.com" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="scabrero@suse.de" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="60d6ae32a0ce8c199797f34f28263e103f8c361237f3a250459a13f435dca206becd0d7a3c87b5049fbf5229faca15f747ec599cab3660bda77c0d0217e087c3" name="libtextstyle0" arch="x86_64">
  <version epoch="0" ver="0.22.5" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dcermak@suse.com" date="1712232000">- Add missing Requires: find to gettext-tools</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Require this-is-only-for-build-envs by the -mini packages: ensure
  those mini packages never find their way onto a system, even when
  published.</changelog>
  <changelog author="dcermak@suse.com" date="1715688000">- Split out envsubst into a separate package
  This allows us to pull in envsubst into containers without enlarging them
  substantially. Additionally, this binary is standalone and useful outside of
  the context of gettext.</changelog>
  <changelog author="schwab@suse.de" date="1716292800">- Require glibc-gconv-modules-extra by the gettext-tools packages</changelog>
  <changelog author="dcermak@suse.com" date="1717502400">- add optional -mini suffix to envsubst package</changelog>
  <changelog author="dimstar@opensuse.org" date="1717675200">- Fix envsubst-mini:
  + Conflicts with the 'full' envsubst
  + Require 'this-is-only-for-build-envs': ensure this does not
    find it's way out of OBS onto installations.</changelog>
  <changelog author="bwiedemann@suse.com" date="1721131200">- Use %autosetup</changelog>
  <changelog author="dcermak@suse.com" date="1726142400">- Move envsubst requires into main package, gettext.sh is not part of
  gettext-tools, but gettext-runtime (fixes boo#1227070)</changelog>
  <changelog author="sbrabec@suse.com" date="1740571200">- Fix crash while handling po files with malformed header and
  process them properly
  (0003-Fix-malformed-header-processing.patch, boo#1227316).</changelog>
</package>
<package pkgid="4cb90feb34e0aa6fb6c735f029443882ae55f278b7b9cbbddf226a6e0ba4f73c5e6999adb98217c115666bcf3d2802b934b926a19282b08de4476353aee8b6be" name="libthai-data" arch="x86_64">
  <version epoch="0" ver="0.1.29" rel="160000.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Update to version 0.1.22:
  + Updated word break dictionary.
  + Improve word breaking performance by 0.38%.
  + No timestamp on Doxygen-generated doc.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447329600">- Update to version 0.1.23:
  + Correctly check doxygen version on configure.
  + Threadsafe word breaking.
  + Improve word breaking performance by 0.1%.
  + Updated word break dictionary.</changelog>
  <changelog author="dimstar@opensuse.org" date="1448884800">- Update to version 0.1.24:
  + Fix infinite loop caused by optimization in previous version.
    (deb#805703).
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467374400">- Update to version 0.1.25:
  + New word break APIs for more thread-safety.
  + Fix compilation error and warning with GCC 6.
  + Do not test word breaking if dictionary is disabled.
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481889600">- Update to version 0.1.26:
  + Updated word break dictionary.</changelog>
  <changelog author="fezhang@suse.com" date="1509537600">- Update to version 0.1.27:
  + Fix another reproducibility issue in the generated
    documentation, caught by Debian Reproducible.
  + Updated word break dictionary.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update descriptions.</changelog>
  <changelog author="dmueller@suse.com" date="1598270400">- update to 0.1.28:
  * Fix missing includes in wchar-related headers.
  * More C90 (ANSI C) compliance.
  * Updated word break dictionary.</changelog>
  <changelog author="andythe_great@pm.me" date="1640088000">- Update to version 0.1.29.
  * Rewritten thbrk test.
  * More compliance with UAX#14 (Unicode Line Breaking Algorithm)
    for thbrk.
  * Fix a typo in TIS-620 character name in tis.h.
  * Updated word break dictionary.</changelog>
</package>
<package pkgid="f09f49d0504dabfd25adae3ce61d30fb302a1bade5d7f99e35639efed3d2bb35a8ebfe47a271e4d4a2230b51916a1133f531e09d4f2e87ac5dfc260abb59c497" name="libthai0" arch="x86_64">
  <version epoch="0" ver="0.1.29" rel="160000.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Update to version 0.1.22:
  + Updated word break dictionary.
  + Improve word breaking performance by 0.38%.
  + No timestamp on Doxygen-generated doc.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447329600">- Update to version 0.1.23:
  + Correctly check doxygen version on configure.
  + Threadsafe word breaking.
  + Improve word breaking performance by 0.1%.
  + Updated word break dictionary.</changelog>
  <changelog author="dimstar@opensuse.org" date="1448884800">- Update to version 0.1.24:
  + Fix infinite loop caused by optimization in previous version.
    (deb#805703).
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467374400">- Update to version 0.1.25:
  + New word break APIs for more thread-safety.
  + Fix compilation error and warning with GCC 6.
  + Do not test word breaking if dictionary is disabled.
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481889600">- Update to version 0.1.26:
  + Updated word break dictionary.</changelog>
  <changelog author="fezhang@suse.com" date="1509537600">- Update to version 0.1.27:
  + Fix another reproducibility issue in the generated
    documentation, caught by Debian Reproducible.
  + Updated word break dictionary.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update descriptions.</changelog>
  <changelog author="dmueller@suse.com" date="1598270400">- update to 0.1.28:
  * Fix missing includes in wchar-related headers.
  * More C90 (ANSI C) compliance.
  * Updated word break dictionary.</changelog>
  <changelog author="andythe_great@pm.me" date="1640088000">- Update to version 0.1.29.
  * Rewritten thbrk test.
  * More compliance with UAX#14 (Unicode Line Breaking Algorithm)
    for thbrk.
  * Fix a typo in TIS-620 character name in tis.h.
  * Updated word break dictionary.</changelog>
</package>
<package pkgid="b73640963b53c9cd6c9f605c901b1a4ed1fcfa30093fdd785850c928e6c5ffb163304aa8c8f0e668dbd464af01f5866d6bbfe7e42723feec84c3063473c3f004" name="libtheoradec1" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="160000.2.2"/>
  <changelog author="adrian@suse.de" date="1253966400">- update to version 1.1.0
  * minor fixes since beta 3</changelog>
  <changelog author="adrian@suse.de" date="1254916800">- update to version 1.1.1
  * minor bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Disable doxygen documentation to avoid build dates in
  - devel packages.
- add missing BuildRequires libpng-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1311768000">- remove fno-strict-aliasing from CFLAGS as it is no longer
  needed and will slow down things.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- remove examples that fail to build, also SDL and png
  are only needed for those, so remove from buildrequires.</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="idonmez@suse.com" date="1369310400">- Update descriptions, thanks to Perry Werneck</changelog>
  <changelog author="jengelh@inai.de" date="1409400000">- Split libtheoradec/enc from libtheora0 as they have different
  SO numbers
- Trim huge description; improve on RPM group classificaiton</changelog>
  <changelog author="mcepl@suse.com" date="1624276800">- Remove completely unnecessary python BR</changelog>
</package>
<package pkgid="6f2245f292ff429e997e8edf23db7adf8f73be8631a3a738e7a4ae4b4d0dc2aac129f53a9c82156b40c548a5850d914a50d87fe11a3ccbe4abc1c7865a3c63f8" name="libtheoraenc1" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="160000.2.2"/>
  <changelog author="adrian@suse.de" date="1253966400">- update to version 1.1.0
  * minor fixes since beta 3</changelog>
  <changelog author="adrian@suse.de" date="1254916800">- update to version 1.1.1
  * minor bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Disable doxygen documentation to avoid build dates in
  - devel packages.
- add missing BuildRequires libpng-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1311768000">- remove fno-strict-aliasing from CFLAGS as it is no longer
  needed and will slow down things.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- remove examples that fail to build, also SDL and png
  are only needed for those, so remove from buildrequires.</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="idonmez@suse.com" date="1369310400">- Update descriptions, thanks to Perry Werneck</changelog>
  <changelog author="jengelh@inai.de" date="1409400000">- Split libtheoradec/enc from libtheora0 as they have different
  SO numbers
- Trim huge description; improve on RPM group classificaiton</changelog>
  <changelog author="mcepl@suse.com" date="1624276800">- Remove completely unnecessary python BR</changelog>
</package>
<package pkgid="5d4f40354cf9f93bda5ef06a5bad9849d6ae12b36c70e2e0d6dcf9960e535fd63bc6be2599fcc046c34cc4b600880784471437736275b4462529915f79a157ee" name="libtiff6" arch="x86_64">
  <version epoch="0" ver="4.7.1" rel="160000.1.1"/>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1758196800">- Update to 4.7.1:
  Software configuration changes:
  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is &lt; 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)
  Library changes:
  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.
  Bug fixes:
  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
  * Do not error out on a tag whose tag count value is zero, just issue a warning.
    Fix parsing a private tag 0x80a6 (fixes issue #647)
  * TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24
    Fixes https://github.com/OSGeo/gdal/issues/10875)
  * tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
  * Fix writing a Predictor=3 file with non-native endianness
  * _TIFFVSetField(): fix potential use of unallocated memory (out-of-bounds
  * read / nullptr dereference) in case of out-of-memory situation when dealing with
    custom tags (fixes issue #663)
  * tif_fax3.c: Error out for CCITT fax encoding if SamplesPerPixel is not equal 1 and
    PlanarConfiguration = Contiguous (fixes issue #26)
  * tif_fax3.c: error out after a number of times end-of-line or unexpected bad code
    words have been reached. (fixes issue #670)
  * Fix memory leak in TIFFSetupStrips() (fixes issue #665)
  * tif_zip.c: Provide zlib allocation functions. Otherwise for zlib built with
  - DZ_SOLO inflating will fail.
  * Fix memory leak in _TIFFSetDefaultCompressionState. (fixes issue #676)
  * tif_predict.c: Don’t overwrite input buffer of TIFFWriteScanline() if "prediction"
    is enabled. Use extra working buffer in PredictorEncodeRow(). (fixes issue #5)
  * tif_getimage.c: update some integer overflow checks (fixes issue #79)
  * tif_getimage.c: Fix buffer underflow crash for less raster rows at
    TIFFReadRGBAImageOriented() (fixes issue #704, bsc#1250413, CVE-2025-9900)
  * TIFFReadRGBAImage(): several fixes to avoid buffer overflows.
  * Correct passing arguments to TIFFCvtIEEEFloatToNative() and TIFFCvtIEEEDoubleToNative()
    if HAVE_IEEEFP is not defined. (fixes issue #699)
  * LZWDecode(): avoid nullptr dereference when trying to read again after EOI marker
    has been found with remaining output bytes (fixes issue #698)
  * TIFFSetSubDirectory(): check _TIFFCheckDirNumberAndOffset() return.
  * TIFFUnlinkDirectory() and TIFFWriteDirectorySec(): clear tif_rawcp when clearing
    tif_rawdata (fixes issue #711)
  * JPEGEncodeRaw(): error out if a previous scanline failed to be written, to avoid
    out-of-bounds access (fixes issue #714)
  * tif_jpeg: Fix bug in JPEGDecodeRaw() if JPEG_LIB_MK1_OR_12BIT is defined for 8/12bit
    dual mode, introduced in libjpeg-turbo 2.2, which was actually released as 3.0.
    Fixes issue #717
  * add assert for TIFFReadCustomDirectory infoarray check.
  * ppm2tiff: Fix bug in pack_words trailing bytes, where last two bytes of each line
    were written wrongly. (fixes issue #467)
  * fax2ps: fix regression of commit 28c38d648b64a66c3218778c4745225fe3e3a06d where
    TIFFTAG_FAXFILLFUNC is being used rather than an output buffer (fixes issue #649)
  * tiff2pdf: Check TIFFTAG_TILELENGTH and TIFFTAGTILEWIDTH (fixes issue #650)
  * tiff2pdf: check h_samp and v_samp for range 1 to 4 to avoid division by zero.
    Fixes issue #654
  * tiff2pdf: avoid null pointer dereference. (fixes issue #741)
  * Improve non-secure integer overflow check (comparison of division result with
    multiplicant) at compiler optimisation in tiffcp, rgb2ycbcr and tiff2rgba.
    Fixes issue #546
  * tiff2rgba: fix some "a partial expression can generate an overflow before it is
    assigned to a broader type" warnings. (fixes issue #682)
  * tiffdither/tiffmedian: Don't skip the first line of the input image. (fixes issue #703)
  * tiffdither: avoid out-of-bounds read identified in issue #733
  * tiffmedian: error out if TIFFReadScanline() fails (fixes issue #707)
  * tiffmedian: close input file. (fixes issue #735)
  * thumbail: avoid potential out of bounds access (fixes issue #715)
  * tiffcrop: close open TIFF files and release allocated buffers before exiting in case
    of error to avoid memory leaks. (fixes issue #716)
  * tiffcrop: fix double-free and memory leak exposed by issue #721
  * tiffcrop: avoid buffer overflow. (fixes issue #740)
  * tiffcrop: avoid nullptr dereference. (fixes issue #734)
  * tiffdump: Fix coverity scan issue CID 1373365: Passing tainted expression *datamem
    to PrintData, which uses it as a divisor or modulus.
  * tiff2ps: check return of TIFFGetFiled() for TIFFTAG_STRIPBYTECOUNTS and
    TIFFTAG_TILEBYTECOUNTS to avoid NULL pointer dereference. (fixes issue #718)
  * tiffcmp: fix memory leak when second file cannot be opened. (fixes issue #718 and issue #729)
  * tiffcp: fix setting compression level for lossless codecs. (fixes issue #730)
  * raw2tiff: close input file before exit (fixes issue #742)
  Tools changes:
  * tiffinfo: add a -W switch to warn about unknown tags.
  * tiffdither: process all pages in input TIFF file.
  Documentation:
  * TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation
    from 5 (LeftTop) to 8 (LeftBottom) in the raster.
  * TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
  * Update "Defining New TIFF Tags" description. (fixes issue #642)
  * Fix return type of TIFFReadEncodedTile()
  * Update the documentation to reflect deprecated typedefs.
  * TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image
    data and not for IFD data.
  * Update documentation on re-entrancy and thread safety.
  * Remove dead links to no more existing Awaresystems web-site.
  * Updating BigTIFF specification and some miscelaneous editions.
  * Replace some last links and remove last todos.
  * Added hints for correct allocation of TIFFYCbCrtoRGB structure and its
    associated buffers. (fixes issue #681)
  * Added chapter to "Using the TIFF Library" with links to handling multi-page TIFF
    and custom directories. (fixes issue #43)
  * update TIFFOpen.rst with the return values of mapproc and unmapproc. (fixes issue #12)
- Drop upstreamed patches:
  * tiff-4.7.0-test_directory.patch
  * tiff-CVE-2025-8176.patch
  * tiff-CVE-2025-8177.patch
  * tiff-4.7.0-bsc1243503.patch
  * tiff-CVE-2025-8534.patch
  * tiff-CVE-2025-9165.patch
  * tiff-CVE-2024-13978.patch
  * tiff-CVE-2025-8961.patch</changelog>
</package>
<package pkgid="ff99129305491879fe7a7e6ab4cf9f5c38bdf0642b5a3f4368212a694ce89b57b662f381ca4b0225cd9fd5f7a4af1a71494edef08619d5c375b97f6b993f1fc1" name="libtirpc-netconfig" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="160000.2.2"/>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- install libraries to %{_libdir} (boo#1029961)</changelog>
  <changelog author="pvorel@suse.cz" date="1606910400">- Update to libtirpc 1.3.1
  - Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  - svc_dg: Free xp_netid during destroy
  - Fix memory management issues of fd locks
  - libtirpc: replace array with list for per-fd locks
  - __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  - __rpc_dtbsize: rlim_cur instead of rlim_max
  - pkg-config: use the correct replacements for libdir/includedir</changelog>
  <changelog author="dimstar@opensuse.org" date="1608724800">- Fix sed call to fixup libtirpc.pc.in: as we want our tirpc to be
  a transparent drop-in-replacement for rpc, we move the files
  from /usr/include/tirpc to /usr/include. Due to an upstream
  change in libtirpc.pc.in, though, the existing sed call no longer
  matched and no longer corrected the information according to our
  package.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS</changelog>
  <changelog author="pvorel@suse.cz" date="1631707200">- Backport DoS vulnerability fix 0001-Fix-DoS-vulnerability-in-libtirpc.patch
- Replace %setup with %autosetup</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  * rpcb_clnt.c add mechanism to try v2 protocol first
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1697544000">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage</changelog>
  <changelog author="thomas.blume@suse.com" date="1739793600">- update to 1.3.6:
  * configure.ac: Using autoupdate updated to the latest autoconf macros
  * svc_fd_create: skip getsockname on a non-network socket
  * detect whether linker supports --version-script
  * check for gss_pname_to_uid or hardcode an early return if we can't use aname to localname
  * test for IPV6_PKTINFO and potentially define __APPLE_USE_RFC_3542 to expose
  * macos uses the same mutex primitives as linux and so can use these defines
  * check for struct rpcent in netdb.h before redefining
  * include string.h when we need a memset prototype for
  * attempt to use machine/endian.h if endian.h does not exist
  * updated macOS support for tirpc [2/7] SOL_IP vs IPPROTO_IP
  * check for getpeereid
  * rpcb_prot.x: Update _PATH_RPCBINDSOCK
  * Move rpcbind.sock to /run
- update to 1.3.5:
  * Try using a new abstract address when connecting to rpcbind
  * Change local_rpcb() to take a targaddr pointer.
  * Allow working with abstract AF_UNIX addresses.
  * rpcb_clnt.c: memory leak in destroy_addr
  * _rpc_dtablesize: Decrease the value of size.
  * netconfig: remove tcp6, udp6 on --disable-ipv6
  * gssapi: fix rpc_gss_seccreate passed in cred
  * Revert commit f5b6e6fdb1e6 "gss-api: expose gss major/minor
    error in authgss_refresh()".</changelog>
</package>
<package pkgid="cfeb178417da9529eee3e0d5f4608f482adaa7238cbdd657ac736d294a0cf4b52f7472819a1ec24cbae0eee48e851f48b4ed1615213fca43a308182c513ab840" name="libtirpc3" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="160000.2.2"/>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- install libraries to %{_libdir} (boo#1029961)</changelog>
  <changelog author="pvorel@suse.cz" date="1606910400">- Update to libtirpc 1.3.1
  - Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  - svc_dg: Free xp_netid during destroy
  - Fix memory management issues of fd locks
  - libtirpc: replace array with list for per-fd locks
  - __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  - __rpc_dtbsize: rlim_cur instead of rlim_max
  - pkg-config: use the correct replacements for libdir/includedir</changelog>
  <changelog author="dimstar@opensuse.org" date="1608724800">- Fix sed call to fixup libtirpc.pc.in: as we want our tirpc to be
  a transparent drop-in-replacement for rpc, we move the files
  from /usr/include/tirpc to /usr/include. Due to an upstream
  change in libtirpc.pc.in, though, the existing sed call no longer
  matched and no longer corrected the information according to our
  package.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS</changelog>
  <changelog author="pvorel@suse.cz" date="1631707200">- Backport DoS vulnerability fix 0001-Fix-DoS-vulnerability-in-libtirpc.patch
- Replace %setup with %autosetup</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  * rpcb_clnt.c add mechanism to try v2 protocol first
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1697544000">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage</changelog>
  <changelog author="thomas.blume@suse.com" date="1739793600">- update to 1.3.6:
  * configure.ac: Using autoupdate updated to the latest autoconf macros
  * svc_fd_create: skip getsockname on a non-network socket
  * detect whether linker supports --version-script
  * check for gss_pname_to_uid or hardcode an early return if we can't use aname to localname
  * test for IPV6_PKTINFO and potentially define __APPLE_USE_RFC_3542 to expose
  * macos uses the same mutex primitives as linux and so can use these defines
  * check for struct rpcent in netdb.h before redefining
  * include string.h when we need a memset prototype for
  * attempt to use machine/endian.h if endian.h does not exist
  * updated macOS support for tirpc [2/7] SOL_IP vs IPPROTO_IP
  * check for getpeereid
  * rpcb_prot.x: Update _PATH_RPCBINDSOCK
  * Move rpcbind.sock to /run
- update to 1.3.5:
  * Try using a new abstract address when connecting to rpcbind
  * Change local_rpcb() to take a targaddr pointer.
  * Allow working with abstract AF_UNIX addresses.
  * rpcb_clnt.c: memory leak in destroy_addr
  * _rpc_dtablesize: Decrease the value of size.
  * netconfig: remove tcp6, udp6 on --disable-ipv6
  * gssapi: fix rpc_gss_seccreate passed in cred
  * Revert commit f5b6e6fdb1e6 "gss-api: expose gss major/minor
    error in authgss_refresh()".</changelog>
</package>
<package pkgid="b6816f3722e3357409e1582df559376c1f020573af7612016d0b6dc4798e4349771ccc375542c1a1314d9a1335f559ef1e31cb944d286cb62b838a8a79a35b6f" name="libtpm_unseal1" arch="x86_64">
  <version epoch="0" ver="1.3.9.2" rel="160000.2.2"/>
  <changelog author="meissner@suse.com" date="1339502400">- Updated to 1.3.8
  - bugfixes
  - pcr/nvram sealing options</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412251200">- Remove a number of unused build requires, probably copy/paste
  error, never used.</changelog>
  <changelog author="mpluskal@suse.com" date="1427976000">- Cleanup spec file with spec-cleaner
- Remove tpm-tools-rpmlintrc
- Use automake and autoconf as recomended by upstream
- Split library, devel adn pkcs11 package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434715200">- Do not use -Werror.</changelog>
  <changelog author="mailaender@opensuse.org" date="1483272000">- Update to version 1.3.9</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- updated to 1.3.9.1 (FATE#321450)
  - bugfixes after openssl 1.1 porting</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1510228800">- 0001-Fix-build-against-OpenSSL-1.1.0.patch: fix openssl 1.1.0 build in the
  P11 code. Upstream has not reacted to a pull request to fix this for some
  months now. This is my own patch (that doesn't violate C89 declaration rules
  and is backward compatible to openssl. 1.0.x)).
  For comparison see: https://sourceforge.net/p/trousers/tpm-tools/merge-requests/2/</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1614772800">- upgrade to minor version 1.3.9.2:
  - upstream now provide openssl 1.1 compatibility on their own
- dropped 0001-Fix-build-against-OpenSSL-1.1.0.patch since the tarbal is now
  compatible.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1633435200">- fix undefined and binary data being output in the tpm_version command
  (bsc#1114793)
  - add 0001-tpm_version-avoid-outputting-NULL-bytes-from-tpmVend.patch
  - add 0001-tpm_version-avoid-outputting-undefined-data-on-stder.patch</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- changed source url to https</changelog>
</package>
<package pkgid="b094ef9e1de15f3f62a685b23837ed241f48391e87be92655711916c948515be43ab2611cc627528104c0467d70686e41a7c2254c2f763e7ede6f233a7b8b1e7" name="libtpms0" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="160000.4.2"/>
  <changelog author="gmbr3@opensuse.org" date="1628337600">- Update to version 0.8.4:
  * Reset too large size indicators in TPM2B to avoid access
    beyond buffer
  * Restore original value in buffer if unmarshalled one was
    illegal</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1639051200">- Update to version 0.9.1
  * Downgrade to previous versions is not possible, as the size of
    the context gap has been adjusted to 0xffff from 0xff.
  * Enabled Camellia symmetric key encryption algorithm
  * tpm2: Update to TPM 2 spec rev 164
  * tpm2: Added a cache for private exponent D and prime Q
  * tpm2: bug fixes
- Drop upstream fixed libtpms-CVE-2021-3746.patch
- Fixed CVE-2021-3623 (bsc#1187767)
- Used in SLE:
  0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 0.9.3:
  * build-sys: Add probing for -fstack-protector
  * tpm2: Do not call EVP_PKEY_CTX_set0_rsa_oaep_label() for label of size
  * (OSSL 3)
  * tpm2: When writing state initialize s_ContextSlotMask if not set</changelog>
  <changelog author="pgajdos@suse.com" date="1669377600">- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 0.9.5:
  * tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore
  * tpm2: Fix a potential overflow expression (coverity)
  * tpm2: Fix size check in CryptSecretDecrypt
  * tpm: #undef printf in case it is #define'd (OSS-Fuzz)
  * tpm2: Check return code of BN_div()
  * tpm2: Initialize variables due to gcc complaint (s390x, false positive)
  * tpm12: Initialize variables due to gcc complaint (s390x, false positive)
  * build-sys: Fix configure script to support _FORTIFY_SOURCE=3</changelog>
  <changelog author="aplanas@suse.com" date="1678104000">- Update to 0.9.6:
  * CVE-2023-1018: tpm2: Fixed out of bounds read in CryptParameterDecryption (bsc#1206023)
  * CVE-2023-1017: tpm2: Fixed out of bounds write in CryptParameterDecryption (bsc#1206022)
- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch: upstreamed</changelog>
  <changelog author="aplanas@suse.com" date="1733313600">- Add tpm2-Add-padding-to-OBJECT-for-32bit-targets.patch
- Update to 0.10.0:
  * tpm2: Support for profiles: default-v1 &amp; custom
  * tpm2: Add new API call TPMLIB_SetProfile to enable user to set a
    profile
  * tpm2: Extende TPMLIB_GetInfo to return profiles-related info
  * tpm2: Implemented crypto tests and restrictions on crypto related
    to FIPS-140-3; can be enabled with profiles
  * tpm2: Enable Camellia-192 and AES-192
  * tpm2: Implement TPMLIB_WasManufactured API call
  * tpm2: Fixes for issues detected by static analyzers
  * tpm2: Use OpenSSL-based KDFe implementation if possible
  * tpm2: Update to TPM 2 spec rev 183 (many changes)
  * tpm2: Better support for OpenSSL 3.x
  * tpm2: Use Carmichael function for RSA priv. exponent D (&gt;= 2048
    bits)
  * tpm2: Fixes for CVE-2023-1017 and CVE-2023-1018
  * tpm2: Fix of SignedCompareB().
- NOTE: This fix may result in backwards compatibility issues with PCR
  policies used by TPM2_PolicyCounterTimer and TPM2_PolicyNV when
  upgrading from v0.9 to v0.10.</changelog>
  <changelog author="manfred.h@gmx.net" date="1733486400">- Use gcc/g++-13 on Leap to fix the following failure:
  "tpm2_setprofile.c:49:24: error: initializer element is not constant"</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248486).</changelog>
</package>
<package pkgid="e56525e88d433965fc46b8f8cd558bfa73d5c78de850b052048b1ab775e26b4802eb5e8bab6b6740179e6537d7de642906d0e0b29c32f35f2e956966443d8168" name="libtspi1" arch="x86_64">
  <version epoch="0" ver="0.3.15" rel="160000.2.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1589976000">- get rid of %pre/%post logic that fixes the old packaging bug. Turns out
  %pretrans and %posttrans had their purpose before, because the logic needed
  to run before old files owned by the package got deleted. But I'm not
  reimplementing this strange logic in Lua ... users that didn't get the fix
  yet will have to live with it.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1591099200">- add gcc-10.patch: fixes the build on gcc 10 by removing unused global
  variables. This patch was posted on the TrouSerS mailing list [1].
  [1]: https://sourceforge.net/p/trousers/mailman/message/36951419/</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1595851200">- In a previous commit the Requires line for the tss user got accidentally
  dropped. This change reintroduces it.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1604577600">- update to new upstream version 0.3.15:
  - Corrected mutliple security issues that existed if the tcsd is started by
    root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331
  - Replaced use of _no_optimize with asm memory barrier
  - Fixed multiple potential instances of use after free memory handling
  - Removed unused global variables which caused build issue on some distros
- drop gcc-10.patch: now contained in upstream tarball
- drop bsc1164472.patch: now contained in upstream tarball
- adjusted %setup macro invocation which seemed to be wrong</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1633435200">- move libraries to /usr/lib (bsc#1191102)</changelog>
  <changelog author="jsegitz@suse.com" date="1637841600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * tcsd.service</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- changed urls to https (except main URL which has no https)</changelog>
  <changelog author="dimstar@opensuse.org" date="1661169600">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1703937600">- add Requires(post): udev, Requires(post): coreutils
  * the post scriptlet uses udevamd and chown</changelog>
  <changelog author="pgajdos@suse.com" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="d93ac17136e11c204062a4f7a11532717128373ae7f025ee2870d14ecd9dd5658f78b14233ae97708c2ddac21f01e8de3959478216c8ef51369910a6a443967b" name="libtss2-esys0" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="4705fddcd603eeefdb753e996ae47d6657f336f78d652a2f6a13c8987d370bdc2197e9eaa423b7667c781393c7fa47dce0f7df3d0782070474526d4541f3374c" name="libtss2-fapi-common" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="ba2e7a84f1f71f2deeed6875eca6eea274c327f64fb19f11c39a30fb5fcb7228b9ca2a7128596fdd323b54ec6d2faadf116796788f424c3e0d06067cc68771d1" name="libtss2-fapi1" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="d755a76eb8ec34b19d8ff2f20098466dad753c45a7fb4f93f0d7b8dbb5398e20ddf1e00c79b42d8b86c71d98e0a43d20b57b6d8d1cce865e4f7a8653a8f351e0" name="libtss2-mu0" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="fb67bfed391e39642bcee9dfc5ea0c2393555151d83b9d4f899e43fe86fd5bea2f720eae97878650fa666b7bfcbfcc64823f2d6a76f2355c9c94473115029908" name="libtss2-rc0" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="366f6a05700c45e3dccb39265fb9726fdd2db86b19af871a27d1db9d40aa493a4c1123d98bd42d39e94343825b8b443bfba6a225472cd749a81173915b96a21c" name="libtss2-sys1" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="07fa1cd9e2ce4e60dae68bc77956d92038af76afb2095fd3e46d2b65a37731f3e9e14fb6981fe4494dabd33909deb6dd7d19af979fadc16da95e6905aea93a9b" name="libtss2-tcti-device0" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="2413e58e040f4d55203655e9819abfc21f14f33aba037ed092811402a7cec25cfdb12fa90c60e4f2e47f4bba248e83241feb001e74b2508eae893637784bbde7" name="libtss2-tcti-tabrmd0" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638187200">- Warp selinux into a bcond</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 2.4.0
  + remover syslog deprecation warning (bsc#1185154)
  + cover update to 2.3.3 (jsc#SLE-17366)
  + contains reload fix (bsc#1166936)
  + fix tcti loading using short / long names (bsc#1159176)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1649073600">- dbus-access.patch: restrict D-Bus access to tpm2-abrmd to members of the tss
  group (bsc#1197532). This prevents arbitrary users from meddling with TPM
  state and thus potential denial-of-service vectors.</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Version 2.4.1
  + Added
    Contributor Covenant Code of Conduct.
  + Fixed
  * superflous warning messages about tcti status.
    WARNING **: 11:00:56.205: tcti_conf before: "(null)"
    WARNING **: 11:00:56.205: tcti_conf after: "mssim"
  * GCC 11 build error: error: argument 2 of __atomic_load’ discards
    'volatile' qualifier
  * Initialize gerror pointer variable to NULL to fix use of
    unitialized memory and segfault.
  * Updated missing defaults in manpage.
  * Port CI to composite actions in tpm2-software/ci.
  + Removed
    Dependency on 'which' utility in configure.ac.
    ubuntu-16.04 from CI.</changelog>
  <changelog author="aplanas@suse.com" date="1670500800">- Version 3.0.0
  + Fixed
  * A bug in special command processing in TPM2_GetCapability when
    an audit session is in use cuased tpm2-abrmd to abort.
  + Added
  * New SELinux interfaces for communication with keylime
  + Changed
  * DBUS permissions in tpm2-abrmd.conf to match the in-kernel RM,
    ie /dev/tpmrm0, permissions. Now users MUST be in the tss group
    to send to tpm2-abrmd over DBUS.
- Drop dbus-access.patch (merged in PR#805)</changelog>
  <changelog author="aplanas@suse.com" date="1684843200">- Cover ALP via the %{suse_version} macro</changelog>
  <changelog author="jsegitz@suse.com" date="1722513600">- Update harden_tpm2-abrmd.service.patch to contain necessary SELinux
  changes (bsc#1209831)</changelog>
  <changelog author="cathy.hu@suse.com" date="1723550400">- Fix SELinux sbin/bin merge (bsc#1229047)
  1229047-fix-bin-sbin-selinux.patch
  Can be dropped once https://github.com/tpm2-software/tpm2-abrmd/pull/846
  is merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1742990400">- also enable SELinux features for SLE-16 (bsc#1240070). On SLE-16 abrmd does
  not work, because the SELinux configuration is missing and thus its
  operations are denied. Include SLE-16 to fix this.</changelog>
</package>
<package pkgid="e29c42f026ce6b4de0ff2657b008036c3e3012a045e2d29c3451dfbb71bf98914870c74ccda9088f555e38b516d7575819aa61077c3e155dc272b8c4c626bde5" name="libtss2-tctildr0" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="19152551cce8ff5ad545ad58b85574bf84a6356bde270a758560183ebeb5d73f50445967ae1fb0ff43480505bfd9391eb9e0b8239331aea8bdb55aacd35b5e50" name="libtukit4" arch="x86_64">
  <version epoch="0" ver="5.0.7" rel="160000.1.2"/>
  <changelog author="iforster@suse.com" date="1736683200">- Version 5.0.0
  - Rework /etc handling; instead of maintaining complex overlay
    mount layers use a btrfs subvolume of the corresponding
    snapshot instead.
    Syncing changes before the reboot will be done by during boot
    (or during apply) by transactional-update-sync-etc-state
    instead. [jsc#SMO-367]
    Also resolves: [boo#1140472],
    [gh#openSUSE/transactional-update#117]
  - Add EXPERIMENTAL support for performing updates using a
    container image [gh#openSUSE/transactional-update#128]. Note
    that this command is only available via
    `transactional-update apply-oci ...` for now and cannot be
    triggered from the API or D-Bus interface. Moreover the syntax
    may and probably will change in future releases.
  - Removed `status` command - it was disabled by default for a
    long time already and unmaintained
  - tukit: Fix snippet directory in man page
  - t-u: Don't apply again if snapshot is current already
  - t-u: Prevent self-updates between major t-u versions because
    these usually require additional files
  - Fix missing files when using `make dist`
  - Unified Copyright headers
  - Make Bash scripts shellcheck compatible
  - Replace tabs with spaces in Shell scripts to avoid the complex
    tab / space changes
  - Various other minor internal optimizations and fixes</changelog>
  <changelog author="fvogt@suse.com" date="1744113600">- Version 5.0.1
  - Fix path to rebootmgrctl [bsc#1236908]</changelog>
  <changelog author="fvogt@suse.com" date="1744891200">- Version 5.0.2
  - Fix continuing from an already booted snapshot
  - Fix check for overlayfs when using tukit open with --discard</changelog>
  <changelog author="fvogt@suse.com" date="1745496000">- Version 5.0.3
  - When continuing a transaction that was based on the running
    system, sync new changes from /etc into the new snapshot.
    This way it behaves as-if the snapshot was booted into
    before continuing the transaction, which matches the
    behaviour of versions &lt; 5.0.
  - Fix syncing of file times and ownership
  - Do not sync /etc/etc.syncpoint/ into the running system
    (or parent snapshot) when using --discard</changelog>
  <changelog author="fvogt@suse.com" date="1749729600">- Version 5.0.4
  - Don't override soft-reboot with hard reboot
  - Fix stdio when returning from selfupdate [boo#1243910],
    [gh#openSUSE/transactional-update#151]</changelog>
  <changelog author="iforster@suse.com" date="1750420800">- Add correct SELinux policy version dependency for SLE 16</changelog>
  <changelog author="iforster@suse.com" date="1751630400">- Version 5.0.5
  - Add support for kdump 2.1.0 [bsc#1243758]
  - Integrate test to support `make check`</changelog>
  <changelog author="iforster@suse.com" date="1752062400">- Version 5.0.6
  - Fix missing x-initrd.mount in fstab on migration [boo#1246139]
    When migrating overlayfs based /etc to btrfs subvolumes, then
    the attribute was not set - this may result in failures from
    services operating on /etc during initrd phase such as SELinux
    relabelling
  - Optimize execution time of tests</changelog>
  <changelog author="iforster@suse.com" date="1753099200">- Version 5.0.7
  - Add sysext compatibility [bsc#1246140]
  - Fix soft-reboot with btrfs subvolume based /etc
  - Sync /etc layers also on soft-reboot
  - Bind mount /run/systemd/journal to allow log calls
    [gh#openSUSE/transactional-update#149]
  - Use rootlesskit instead of fakeroot for tests
  - Small coding style fixes
- Temporarily disabling the testsuite because it doesn't run in
  the build environment so far</changelog>
  <changelog author="iforster@suse.com" date="1753272000">- Add journalmount.patch to bind mount systemd journal only when
  available</changelog>
</package>
<package pkgid="950a9a09eb42e79190ff9085f08c8584becc3bc640bfa3cae20c18faafde2ac41e447cfb522d08a2fcd770911bb326cf07ce09e06afb4b0e63b39d70b4610254" name="libudev1" arch="x86_64">
  <version epoch="0" ver="257.13" rel="160000.1.1"/>
  <changelog author="fbui@suse.com" date="1767787200">- Drop %filetriggers build flag. It was introduced to ease backport of
  Base:System to SLE distros where file-triggers were unreliable but that is no
  longer the case on the latest SLE distros.</changelog>
  <changelog author="fbui@suse.com" date="1767960000">- Drop most of the workarounds contained in the fixlets.
  These workarounds were hold to address old issues that no longer exist in
  recent versions of systemd. For systems upgrading to this version, we assume
  these issues have already been fixed by the fixlet scripts still shipped by
  the previous distribution.
  Only the logig warning users about the deprecated usage of the main
  configuration files (favoring drop-in files) is preserved.</changelog>
  <changelog author="fbui@suse.com" date="1767960001">- systemd.spec: don't reexecute PID1 on transactional updates.</changelog>
  <changelog author="fbui@suse.com" date="1767960002">- systemd-update-helper: clean up the flags immediately after they have been
  consumed (no functional changes).</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1770206400">- Import commit fb9d92682b2469aa205d4df3ffea61e4806ed0e9
  fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)
  80ec26cee0 core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1770292800">- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853)
  This was originally intended to ensure these paths had a designated package
  owner. However the existing list was neither exhaustive nor up to date. To
  better support immutable images, we are removing these entries and will now
  keep only /var/lib/systemd as owned by the systemd package. Maintaining the
  broader list provided little value due to its ongoing inconsistency anyways.</changelog>
  <changelog author="fbui@suse.com" date="1772107200">- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)</changelog>
  <changelog author="fbui@suse.com" date="1772452800">- Import commit 3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654 (merge of v257.11)
  This merge includes the following fix:
  54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/358010e6e90269570025c598b1430afa1e2ff6ca...3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654</changelog>
  <changelog author="fbui@suse.com" date="1773662400">- Import commit d349fc5cd4f9ee2b7884c2610647e92806d14b28 (merge of v257.13)
  This merge includes the following fix:
  6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28</changelog>
</package>
<package pkgid="27faf18ca6ebfc07c58209e71ff91c9990b5816d932969a4240df3c77458462417a425c9741646ddb608cab70457ba11c35f43574dca8d68f7153b656568e360" name="libudisks2-0" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="160000.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in
    HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with
    symlinks
  * mount options: Allow 'nosymfollow' mount option for
    unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup
    lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for
    mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent()
    out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- Drop udisks2-Fix-memory-leaks.patch, and
  udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637150400">- Update to version 2.9.4:
  + Many fixes, improvements, and additions to the code.
  + Mount options:
  - Always use errors=remount-ro for ext filesystems;
  - Add ntfs3 kernel driver options.
  + Build: Remove warnings unknown to clang.
  + Tests: Adapt to clang differences when causing a segfault.
- Changes from version 2.9.3:
  + Many fixes, improvements, and additions to the code and test.
- Add "%tmpfiles_create %{_tmpfilesdir}/udisks2.conf" call in %post
  section to make sure /run/media will be created right after the
  instalation of udisks2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging libudisks_vdo standalone module, it is deprecated.
  Do this via passing explicit disable-vdo to configure and
  dropping libblockdev-vdo-devel BuildRequires. Add a
  libudisks2_0_vdo Obsoletes to ease updates.
- No longer remove upstream config files, we want to be able to
  load modules on demand. Note that we move an example file to docs
  to keep sysconfdir clean of non-conf files.
- Add a default_luks_encryption define, and set it to luks2, sed
  this macro into source, future versions of udisks will not need
  this, as upstream moves to luks2 by default.
- Ghost a dir/file created by us.
- Split out API docs into separate docs sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Drop gtk-doc BuildRequires, and pass disable-gtk-doc to
  configure, the included gtk-docs are fine, we do not need to
  build them ourselves.</changelog>
  <changelog author="jsegitz@suse.com" date="1653048000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_udisks2-zram-setup@.service.patch
  * harden_udisks2.service.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1668600000">- fix crash during shutdown (bsc#1205371)
  * add:
    0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669118400">- avoid wakening spun-down disks on unrelated events (bsc#1120608)
  * add:
    0001-udisksata-Move-the-low-level-PM-state-call.patch
    0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch
    0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- Drop rcFOO symlinks for CODE16 (PED-266).
- update to version 2.10.1
  - Update Ukrainian translation
  - tests: Wipe used devices for LVM2 RAID tests
  - tests: Settle down before checking the LVM RAID MissingPhysicalVolumes property
  - tests: Rescan vdevs after lvm raid tests
  - Update German translation
  - tests: Mark UDF fstab filesystem tests as unstable
  - tests: Add offline and online filesystem grow tests
  - doc: Clarify the Filesystem.Size property presence
  - udiskslinuxfilesystem: Force native tools for mounted XFS fs size retrieval
  - udiskslinuxfilesystem: Refactor internal whitelists
  - tests: Fix Python class invocation in nvme tests
  - udisksctl: Add "--no-partition-scan" option for "loop-setup" command
  - tests: Fix regex escaping
  - integration-test: Fix invalid escaping
  - tests: Mark LVM RAID tests as unstable
  - tests: Fix LSM drive objects crawl
  - iscsi: Fix login on firmware-discovered nodes
  - udiskslinuxmanager: Properly handle disabled modules
  - tests: Replace deprecated unittest assert calls
  - udisksctl: Guard object lookup
  - Update ka.po
  - udiskslinuxloop: Avoid warnings on empty loop devices
  - Update Polish translation
  - Limit getting filesystem size only to Ext and XFS
  - build: Check for gobject-introspection m4 macro presence
  - tests: start the polkitd mock with the corresponding user if it exists
- Add Obsoletes tags for libudisks2-0_bcache and libudisks2-0_zram
  modules, dropped on latest version bump, so they get removed from
  end users' systems upon system upgrade.
- Drop unnecessary/discouraged %{?systemd_requires} from spec file.
- Update to version 2.10.0:
  + This release brings large number of internal changes, while
    keeping the promise of API stability. This development cycle
    was mostly driven by libblockdev 3.0 API overhaul.
  + Partitioning was ported to libfdisk.
  + The kbd and vdo libblockdev plugins were removed and so were
    zram, bcache and vdo udisks modules.
  + Definition of supported filesystems was moved to libblockdev
    and filesystem operations were unified.
  + Native NVMe support has been added through libnvme.
  + Syntax of configurable mount options was extended to separate
    filesystem signature and filesystem driver used for mounting.
  + A number of workarounds was placed around the
    org.freedesktop.UDisks2.Filesystem.Size property value
    retrieval to avoid excessive I/O traffic whenever possible.
  + Bash and Zsh completion enhancements.
  + lvm2 module uevent handling improvements.
  + ATA Secure Erase is now allowed only on top-level block
    objects.
  + Extra iSCSI node parameters are now honoured properly.
  + FIPS mode fixes.
  + Added support for resolving devices by PARTLABEL and PARTUUID.
  + Full support for setting filesystem and partition UUIDs.
  + Dynamic mountpoint name sanitization and ACL fixes.
  + Added support for LVM2 RAID.
  + UUID of Bitlocker volumes is now properly exposed.
  + Added an option to force/avoid creation of mdraid write-intent
    bitmap.
  + Updated translations.
- Drop default_luks_encryption macro definition. It's no longer
  needed as upstream defaults to LUKS2 now.
- Drop bcache, vdo and zram sub-packages, following upstream
  changes, and libblockdev-kbd(-devel) BuildRequires/Requires.
- Drop bogus build requirement on libblockdev-lvm-dbus-devel, and
  move libblockdev-lvm-devel BuildRequires to the lvm2 module
  sub-package.
- Move libconfig and libstoragemgmt pkgconfig() BuildRequires to
  the lsm module sub-package, and libblockdev-btrfs-devel
  BuildRequires to the btrfs modules sub-package, which is where
  they belong.
- Add libblockdev-nvme-devel BuildRequires and libblockdev-nvme
  Requires as new required dependencies.
- Drop harden_udisks2-zram-setup@.service.patch: It's unneeded now
  that the zram module has been deprecated.
- Drop merged upstream patches:
  0001-udisksata-Move-the-low-level-PM-state-call.patch,
  0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch,
  0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch,
  0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch.
- Split Bash and Zsh (new to this release) completion scripts to
  sub-packages of their own.
- Amend GPL-2.0-or-later License tags to LGPL-2.0-or-later for the
  btrfs, lvm2 and lsm UDisks modules sub-packages. This correction
  is based on what's explicitly stated on the source code from
  UDisks modules' folders under the modules/ top-level directory.</changelog>
  <changelog author="thomas.blume@suse.com" date="1766404800">- (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds
  read in udisks daemon (bsc#1248502)
  + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch
- Fix dbus daemon requires, it's dbus-service, not dbus-1</changelog>
</package>
<package pkgid="3c0a6958e7e6b77df853eaf9071b3574f66752d9c8b93daeac9c8615f76d0ba44ba56fdec925fa35cea3a3e2d1fe28767325f433e11a79265a970206974326bd" name="libudisks2-0_btrfs" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="160000.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in
    HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with
    symlinks
  * mount options: Allow 'nosymfollow' mount option for
    unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup
    lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for
    mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent()
    out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- Drop udisks2-Fix-memory-leaks.patch, and
  udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637150400">- Update to version 2.9.4:
  + Many fixes, improvements, and additions to the code.
  + Mount options:
  - Always use errors=remount-ro for ext filesystems;
  - Add ntfs3 kernel driver options.
  + Build: Remove warnings unknown to clang.
  + Tests: Adapt to clang differences when causing a segfault.
- Changes from version 2.9.3:
  + Many fixes, improvements, and additions to the code and test.
- Add "%tmpfiles_create %{_tmpfilesdir}/udisks2.conf" call in %post
  section to make sure /run/media will be created right after the
  instalation of udisks2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging libudisks_vdo standalone module, it is deprecated.
  Do this via passing explicit disable-vdo to configure and
  dropping libblockdev-vdo-devel BuildRequires. Add a
  libudisks2_0_vdo Obsoletes to ease updates.
- No longer remove upstream config files, we want to be able to
  load modules on demand. Note that we move an example file to docs
  to keep sysconfdir clean of non-conf files.
- Add a default_luks_encryption define, and set it to luks2, sed
  this macro into source, future versions of udisks will not need
  this, as upstream moves to luks2 by default.
- Ghost a dir/file created by us.
- Split out API docs into separate docs sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Drop gtk-doc BuildRequires, and pass disable-gtk-doc to
  configure, the included gtk-docs are fine, we do not need to
  build them ourselves.</changelog>
  <changelog author="jsegitz@suse.com" date="1653048000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_udisks2-zram-setup@.service.patch
  * harden_udisks2.service.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1668600000">- fix crash during shutdown (bsc#1205371)
  * add:
    0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669118400">- avoid wakening spun-down disks on unrelated events (bsc#1120608)
  * add:
    0001-udisksata-Move-the-low-level-PM-state-call.patch
    0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch
    0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- Drop rcFOO symlinks for CODE16 (PED-266).
- update to version 2.10.1
  - Update Ukrainian translation
  - tests: Wipe used devices for LVM2 RAID tests
  - tests: Settle down before checking the LVM RAID MissingPhysicalVolumes property
  - tests: Rescan vdevs after lvm raid tests
  - Update German translation
  - tests: Mark UDF fstab filesystem tests as unstable
  - tests: Add offline and online filesystem grow tests
  - doc: Clarify the Filesystem.Size property presence
  - udiskslinuxfilesystem: Force native tools for mounted XFS fs size retrieval
  - udiskslinuxfilesystem: Refactor internal whitelists
  - tests: Fix Python class invocation in nvme tests
  - udisksctl: Add "--no-partition-scan" option for "loop-setup" command
  - tests: Fix regex escaping
  - integration-test: Fix invalid escaping
  - tests: Mark LVM RAID tests as unstable
  - tests: Fix LSM drive objects crawl
  - iscsi: Fix login on firmware-discovered nodes
  - udiskslinuxmanager: Properly handle disabled modules
  - tests: Replace deprecated unittest assert calls
  - udisksctl: Guard object lookup
  - Update ka.po
  - udiskslinuxloop: Avoid warnings on empty loop devices
  - Update Polish translation
  - Limit getting filesystem size only to Ext and XFS
  - build: Check for gobject-introspection m4 macro presence
  - tests: start the polkitd mock with the corresponding user if it exists
- Add Obsoletes tags for libudisks2-0_bcache and libudisks2-0_zram
  modules, dropped on latest version bump, so they get removed from
  end users' systems upon system upgrade.
- Drop unnecessary/discouraged %{?systemd_requires} from spec file.
- Update to version 2.10.0:
  + This release brings large number of internal changes, while
    keeping the promise of API stability. This development cycle
    was mostly driven by libblockdev 3.0 API overhaul.
  + Partitioning was ported to libfdisk.
  + The kbd and vdo libblockdev plugins were removed and so were
    zram, bcache and vdo udisks modules.
  + Definition of supported filesystems was moved to libblockdev
    and filesystem operations were unified.
  + Native NVMe support has been added through libnvme.
  + Syntax of configurable mount options was extended to separate
    filesystem signature and filesystem driver used for mounting.
  + A number of workarounds was placed around the
    org.freedesktop.UDisks2.Filesystem.Size property value
    retrieval to avoid excessive I/O traffic whenever possible.
  + Bash and Zsh completion enhancements.
  + lvm2 module uevent handling improvements.
  + ATA Secure Erase is now allowed only on top-level block
    objects.
  + Extra iSCSI node parameters are now honoured properly.
  + FIPS mode fixes.
  + Added support for resolving devices by PARTLABEL and PARTUUID.
  + Full support for setting filesystem and partition UUIDs.
  + Dynamic mountpoint name sanitization and ACL fixes.
  + Added support for LVM2 RAID.
  + UUID of Bitlocker volumes is now properly exposed.
  + Added an option to force/avoid creation of mdraid write-intent
    bitmap.
  + Updated translations.
- Drop default_luks_encryption macro definition. It's no longer
  needed as upstream defaults to LUKS2 now.
- Drop bcache, vdo and zram sub-packages, following upstream
  changes, and libblockdev-kbd(-devel) BuildRequires/Requires.
- Drop bogus build requirement on libblockdev-lvm-dbus-devel, and
  move libblockdev-lvm-devel BuildRequires to the lvm2 module
  sub-package.
- Move libconfig and libstoragemgmt pkgconfig() BuildRequires to
  the lsm module sub-package, and libblockdev-btrfs-devel
  BuildRequires to the btrfs modules sub-package, which is where
  they belong.
- Add libblockdev-nvme-devel BuildRequires and libblockdev-nvme
  Requires as new required dependencies.
- Drop harden_udisks2-zram-setup@.service.patch: It's unneeded now
  that the zram module has been deprecated.
- Drop merged upstream patches:
  0001-udisksata-Move-the-low-level-PM-state-call.patch,
  0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch,
  0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch,
  0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch.
- Split Bash and Zsh (new to this release) completion scripts to
  sub-packages of their own.
- Amend GPL-2.0-or-later License tags to LGPL-2.0-or-later for the
  btrfs, lvm2 and lsm UDisks modules sub-packages. This correction
  is based on what's explicitly stated on the source code from
  UDisks modules' folders under the modules/ top-level directory.</changelog>
  <changelog author="thomas.blume@suse.com" date="1766404800">- (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds
  read in udisks daemon (bsc#1248502)
  + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch
- Fix dbus daemon requires, it's dbus-service, not dbus-1</changelog>
</package>
<package pkgid="da381522519e5474e5790931a1d483b643ad456674b1c3d2597890c4e48cdce5e549f534bdbf8c907915bec536ec04a0362a6bd90d7a91c84ac0da7c5411fd74" name="libudisks2-0_lvm2" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="160000.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in
    HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with
    symlinks
  * mount options: Allow 'nosymfollow' mount option for
    unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup
    lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for
    mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent()
    out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- Drop udisks2-Fix-memory-leaks.patch, and
  udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637150400">- Update to version 2.9.4:
  + Many fixes, improvements, and additions to the code.
  + Mount options:
  - Always use errors=remount-ro for ext filesystems;
  - Add ntfs3 kernel driver options.
  + Build: Remove warnings unknown to clang.
  + Tests: Adapt to clang differences when causing a segfault.
- Changes from version 2.9.3:
  + Many fixes, improvements, and additions to the code and test.
- Add "%tmpfiles_create %{_tmpfilesdir}/udisks2.conf" call in %post
  section to make sure /run/media will be created right after the
  instalation of udisks2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging libudisks_vdo standalone module, it is deprecated.
  Do this via passing explicit disable-vdo to configure and
  dropping libblockdev-vdo-devel BuildRequires. Add a
  libudisks2_0_vdo Obsoletes to ease updates.
- No longer remove upstream config files, we want to be able to
  load modules on demand. Note that we move an example file to docs
  to keep sysconfdir clean of non-conf files.
- Add a default_luks_encryption define, and set it to luks2, sed
  this macro into source, future versions of udisks will not need
  this, as upstream moves to luks2 by default.
- Ghost a dir/file created by us.
- Split out API docs into separate docs sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Drop gtk-doc BuildRequires, and pass disable-gtk-doc to
  configure, the included gtk-docs are fine, we do not need to
  build them ourselves.</changelog>
  <changelog author="jsegitz@suse.com" date="1653048000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_udisks2-zram-setup@.service.patch
  * harden_udisks2.service.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1668600000">- fix crash during shutdown (bsc#1205371)
  * add:
    0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669118400">- avoid wakening spun-down disks on unrelated events (bsc#1120608)
  * add:
    0001-udisksata-Move-the-low-level-PM-state-call.patch
    0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch
    0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- Drop rcFOO symlinks for CODE16 (PED-266).
- update to version 2.10.1
  - Update Ukrainian translation
  - tests: Wipe used devices for LVM2 RAID tests
  - tests: Settle down before checking the LVM RAID MissingPhysicalVolumes property
  - tests: Rescan vdevs after lvm raid tests
  - Update German translation
  - tests: Mark UDF fstab filesystem tests as unstable
  - tests: Add offline and online filesystem grow tests
  - doc: Clarify the Filesystem.Size property presence
  - udiskslinuxfilesystem: Force native tools for mounted XFS fs size retrieval
  - udiskslinuxfilesystem: Refactor internal whitelists
  - tests: Fix Python class invocation in nvme tests
  - udisksctl: Add "--no-partition-scan" option for "loop-setup" command
  - tests: Fix regex escaping
  - integration-test: Fix invalid escaping
  - tests: Mark LVM RAID tests as unstable
  - tests: Fix LSM drive objects crawl
  - iscsi: Fix login on firmware-discovered nodes
  - udiskslinuxmanager: Properly handle disabled modules
  - tests: Replace deprecated unittest assert calls
  - udisksctl: Guard object lookup
  - Update ka.po
  - udiskslinuxloop: Avoid warnings on empty loop devices
  - Update Polish translation
  - Limit getting filesystem size only to Ext and XFS
  - build: Check for gobject-introspection m4 macro presence
  - tests: start the polkitd mock with the corresponding user if it exists
- Add Obsoletes tags for libudisks2-0_bcache and libudisks2-0_zram
  modules, dropped on latest version bump, so they get removed from
  end users' systems upon system upgrade.
- Drop unnecessary/discouraged %{?systemd_requires} from spec file.
- Update to version 2.10.0:
  + This release brings large number of internal changes, while
    keeping the promise of API stability. This development cycle
    was mostly driven by libblockdev 3.0 API overhaul.
  + Partitioning was ported to libfdisk.
  + The kbd and vdo libblockdev plugins were removed and so were
    zram, bcache and vdo udisks modules.
  + Definition of supported filesystems was moved to libblockdev
    and filesystem operations were unified.
  + Native NVMe support has been added through libnvme.
  + Syntax of configurable mount options was extended to separate
    filesystem signature and filesystem driver used for mounting.
  + A number of workarounds was placed around the
    org.freedesktop.UDisks2.Filesystem.Size property value
    retrieval to avoid excessive I/O traffic whenever possible.
  + Bash and Zsh completion enhancements.
  + lvm2 module uevent handling improvements.
  + ATA Secure Erase is now allowed only on top-level block
    objects.
  + Extra iSCSI node parameters are now honoured properly.
  + FIPS mode fixes.
  + Added support for resolving devices by PARTLABEL and PARTUUID.
  + Full support for setting filesystem and partition UUIDs.
  + Dynamic mountpoint name sanitization and ACL fixes.
  + Added support for LVM2 RAID.
  + UUID of Bitlocker volumes is now properly exposed.
  + Added an option to force/avoid creation of mdraid write-intent
    bitmap.
  + Updated translations.
- Drop default_luks_encryption macro definition. It's no longer
  needed as upstream defaults to LUKS2 now.
- Drop bcache, vdo and zram sub-packages, following upstream
  changes, and libblockdev-kbd(-devel) BuildRequires/Requires.
- Drop bogus build requirement on libblockdev-lvm-dbus-devel, and
  move libblockdev-lvm-devel BuildRequires to the lvm2 module
  sub-package.
- Move libconfig and libstoragemgmt pkgconfig() BuildRequires to
  the lsm module sub-package, and libblockdev-btrfs-devel
  BuildRequires to the btrfs modules sub-package, which is where
  they belong.
- Add libblockdev-nvme-devel BuildRequires and libblockdev-nvme
  Requires as new required dependencies.
- Drop harden_udisks2-zram-setup@.service.patch: It's unneeded now
  that the zram module has been deprecated.
- Drop merged upstream patches:
  0001-udisksata-Move-the-low-level-PM-state-call.patch,
  0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch,
  0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch,
  0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch.
- Split Bash and Zsh (new to this release) completion scripts to
  sub-packages of their own.
- Amend GPL-2.0-or-later License tags to LGPL-2.0-or-later for the
  btrfs, lvm2 and lsm UDisks modules sub-packages. This correction
  is based on what's explicitly stated on the source code from
  UDisks modules' folders under the modules/ top-level directory.</changelog>
  <changelog author="thomas.blume@suse.com" date="1766404800">- (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds
  read in udisks daemon (bsc#1248502)
  + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch
- Fix dbus daemon requires, it's dbus-service, not dbus-1</changelog>
</package>
<package pkgid="e3cea9fad622ce384c165990c42a36143ec6e98efa466b017e4a253680d51b6390e71eaa59864a5b5fd3a13b08a26b7f90fdc90e41f39fab9b58547817a84e92" name="libunbound8" arch="x86_64">
  <version epoch="0" ver="1.24.1" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1728302400">- Update to 1.21.1:
  Security Fixes:
  * Fix CVE-2024-8508, unbounded name compression could lead to
    denial of service.
    [CVE-2024-8508, bsc#1231284]
- Update keyring</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729252800">- Update to 1.22.0:
  Features:
  * Add iter-scrub-ns, iter-scrub-cname and max-global-quota
    configuration options.
  * Merge patch to fix for glue that is outside of zone, with
    `harden-unverified-glue`, from Karthik Umashankar (Microsoft).
    Enabling this option protects the Unbound resolver against bad
    glue, that is unverified out of zone glue, by resolving them.
    It uses the records as last resort if there is no other working
    glue.
  * Add redis-command-timeout: 20 and redis-connect-timeout: 200,
    that can set the timeout separately for commands and the
    connection set up to the redis server. If they are not
    specified, the redis-timeout value is used.
  * Log timestamps in ISO8601 format with timezone. This adds the
    option `log-time-iso: yes` that logs in ISO8601 format.
  * DNS over QUIC. This adds `quic-port: 853` and `quic-size: 8m`
    that enable dnsoverquic, and the counters `num.query.quic` and
    `mem.quic` in the statistics output. The feature needs to be
    enabled by compiling with libngtcp2, with
    `--with-libngtcp2=path` and libngtcp2 needs openssl+quic, pass
    that with `--with-ssl=path` to compile unbound as well.
  Bug Fixes:
  * unbound-control-setup hangs while testing for openssl presence
    starting from version 1.21.0.
  * Fix error: "memory exhausted" when defining more than 9994
    local-zones.
  * Fix documentation for cache_fill_missing function.
  * Fix Loads of logs: "validation failure: key for validation
    &lt;domain&gt;. is marked as invalid because of a previous" for
    non-DNSSEC signed zone.
  * Fix that when rpz is applied the message does not get picked up
    by the validator. That stops validation failures for the
    message.
  * Fix that stub-zone and forward-zone clauses do not exhaust
    memory for long content.
  * Fix to print port number in logs for auth zone transfer
    activities.
  * b.root renumbering.
  * Add new IANA trust anchor.
  * Fix config file read for dnstap-sample-rate.
  * Fix alloc-size and calloc-transposed-args compiler warnings.
  * Fix to limit NSEC and NSEC3 TTL when aggressive nsec is enabled
    (RFC9077).
  * Fix dns64 with prefetch that the prefetch is stored in cache.
  * Attempt to further fix doh_downstream_buffer_size.tdir
    flakiness.
  * More clear text for prefetch and minimal-responses in the
    unbound.conf man page.
  * Fix cache update when serve expired is used. Expired records
    are favored over resolution and validation failures when
    serve-expired is used.
  * Fix negative cache NSEC3 parameter compares for zero length
    NSEC3 salt.
  * Fix unbound-control-setup hangs sometimes depending on the
    openssl version.
  * Fix Cannot override tcp-upstream and tls-upstream with
    forward-tcp-upstream and forward-tls-upstream.
  * Fix to limit NSEC TTL for messages from cachedb. Fix to limit
    the prefetch ttl for messages after a CNAME with short TTL.
  * Fix to disable detection of quic configured ports when quic is
    not compiled in.
  * Fix harden-unverified-glue for AAAA cache_fill_missing lookups.
  * Fix contrib/aaaa-filter-iterator.patch for change in call
    signature for cache_fill_missing.
  * Fix to display warning if quic-port is set but dnsoverquic is
    not enabled when compiled.
  * Fix dnsoverquic to extend the number of streams when one is
    closed.
  * Fix for dnstap with dnscrypt and dnstap without dnsoverquic.
  * Fix for dnsoverquic and dnstap to use the correct dnstap
    environment.
- Update keyring</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732708800">- add workaround for bug
  https://github.com/NLnetLabs/unbound/issues/509
  Starting up with 127.0.0.1 in the /etc/resolv.conf leads to long
  delays if the anchor update is being run as ExecStartPre in the
  unbound service</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1745496000">- Update to 1.23.0:
  Features:
  * Increase the default of max-global-quota to 200 from 128 after
    operational feedback. Still keeping the possible amplification
    factor (CAMP related issues) in the hundreds.
  * Fix #1175: serve-expired does not adhere to secure-by-default
    principle. The default value of serve-expired-client-timeout
    is set to 1800 as suggested by RFC8767.
  * For #1175, the default value of serve-expired-ttl is set to 86400
    (1 day) as suggested by RFC8767.
  * For #1207: [FR] Support for RESINFO RRType 261 (RFC9606), add
    LDNS_RR_TYPE_RESINFO similar to LDNS_RR_TYPE_TXT.
  * Add resolver.arpa and service.arpa to the default locally served
    zones.
  * Merge #1042: Fast Reload. The unbound-control fast_reload is added.
    It reads changed config in a thread, then only briefly pauses the
    service threads, that keep running. DNS service is only interrupted
    briefly, less than a second.
  * Merge #1019: Redis read-only replica support.
    Introduces new 'redis-replica-*' options for the Redis cache backend.
  * Merge #902: DNS Error Reporting (RFC 9567). Introduces new
    configuration option 'dns-error-reporting' and new statistics for
    'num.dns_error_reports'.
  Bug Fixes:
  * Fix #1154: Tag Incorrectly Applying for Other Interfaces
    Using the Same IP. This fix is not for 1.22.0.
  * Fix #1163: Typos in unbound.conf documentation.
  * Merge #1159: Stats for discard-timeout and wait-limit.
  * Add test case for #1159.
  * Some clean up for stat_values.test.
  * Merge #1170 from Melroy van den Berg, Fix chroot manpage
    description.
  * Merge #1157 from Liang Zhu, Fix heap corruption when calling
    ub_ctx_delete in Windows.
  * Fix redis that during a reload it does not fail if the redis
    server does not connect or does not respond. It still logs the
    errors and if the server is up checks expiration features.
  * Merge #1167: Makefile.in: fix occasional parallel build failures
    around bison rule.
  * Fix SETEX check during Redis (re)initialization.
  * Fix for the serve expired DNSSEC information fix, it would not allow
    current delegation information be updated in cache. The fix allows
    current delegation and validation recursion information to be
    updated, but as a consequence no longer has certain expired
    information around for later dnssec valid expired responses.
  * Fix to log redis timeout error string on failure.
  * More descriptive text for 'harden-algo-downgrade'.
  * Complete fix for max-global-quota to 200.
  * Fix #1183: the data being used is released in method
    nsec3_hash_test_entry.
  * Fix for #1183: release nsec3 hashes per test file.
  * Merge #1169 from Sergey Kacheev, fix: lock-free counters for
    auth_zone up/down queries.
  * Fix comparison to help static analyzer.
  * For #1175, update serve-expired tests.
  * Merge #1189: Fix the dname_str method to cause conversion errors
    when the domain name length is 255.
  * Merge #1197: dname_str() fixes.
  * Merge #1198: Fix log-servfail with serve expired and no useful cache
    contents.
  * Safeguard alias loop while looking in the cache for expired answers.
  * Merge #1187: Create the SSL_CTX for QUIC before chroot and privilege
    drop.
  * Fix typo in log_servfail.tdir test.
  * Merge #1204: ci: set persist-credentials: false for actions/checkout
    per zizmor suggestion.
  * Merge #1174: Serve expired cache update fixes. Fixes a regression bug
    with serve-expired that appeared in 1.22.0 and would not allow the
    iterator to update the cache with not-yet-validated entries resulting
    in increased outgoing traffic.
  * Merge #1214: Use TCP_NODELAY on TLS sockets to speed up the TLS
    handshake.
  * Fix #1213: Misleading error message on default access control causing
    refuse.
  * Merge #1221: Consider auth zones when checking for forwarders.
  * Merge #1222: Unique DoT and DoH SSL contexts to allow for different
    ALPN.
  * Create the quic SSL listening context only when needed.
  * Fix compile of interface check code when dnscrypt or quic is
    disabled.
  * Fix encoding of RR type ATMA.
  * Fix to check length in ATMA string to wire.
  * Merge #1229: check before use daemon-&gt;shm_info.
  * Use the same interface listening port discovery code for all needed
    protocols.
  * Port to string only when needed before getaddrinfo().
  * Do not open unencrypted channels next to encrypted ones on the same
    port.
  * Merge #1224 from Theo Buehler: Do not use DSA API unless USE_DSA is
    set.
  * Merge #1220 from Petr Menšík, Add unbound members group access to
    control key.
  * Make the default value of module-config "validator iterator"
    regardless of compilation options. --enable-subnet would implicitly
    change the value to enable the subnetcache module by default in the
    past.
  * Fix #986: Resolving sas.com with dnssec-validation fails though
    signed delegations seem to be (mostly) correct.
    Consider reconfigurations when calculating the still_useful_timeout
    for servers in the infrastructure cache.
  * Fix static analysis report about unhandled EOF on error conditions
    when reading anchor key files.
  * Merge #1241: Fix infra-keep-probing for low infra-cache-max-rtt
    values.
  * Fix hash calculation for cachedb to ignore case. Previously, cached
    records there were only relevant for same case queries (if not
    already in Unbound's internal cache).
  * Merge #1243: Do not shadow tm on line 236.
  * Merge #1238: Prefer SOURCE_DATE_EPOCH over actual time.
    Add --help output description for the SOURCE_DATE_EPOCH variable.
  * Fix 'unbound-control flush_negative' when reporting removed data;
    reported by David 'eqvinox' Lamparter.
  * Fix representation of types GPOS and RESINFO, add rdf type for
    unquoted str.
  * Fix #1251: WSAPoll first argument cannot be NULL.
  * Fix for windows compile create ssl contexts.
  * Fix print of RR type NSAP-PTR, it is an unquoted string.
  * Fix #1253: Cache entries fail to be removed from Redis cachedb
    backend with unbound-control flush* +c.
  * Fix for #1253: Fix for redis cachedb backend to expect an integer
    reply for the EXPIRE command.
  * Fix #1254: send failed: Socket is not connected and
    remote address is 0.0.0.0 port 53.
  * Fix #1255: Multiple pinnings to vulnerable copies of libexpat.
  * For #1255, for ios use an older expat version that does not require
    C++11 language features.
  * For #1255, for ios disable building tests that require C++11.
  * For #1255, for ios try the latest expat version again.
  * Fix unit test dname log printout typecast.
  * Fix for ci test, expat is installed on the osx image.
  * iana portlist update.
  * Skip the unit tests for auth_tls.tdir and auth_tls_failcert.tdir.
  * Fix escape more characters when printing an RR type with an unquoted
    string.
  * Enable the auth_tls.tdir and auth_tls_failcert.tdir tests.
  * Fix unbound-control test so it counts the new flush_negative output,
    also answers the _ta probe from testns and prints command output
    and skip a thread specific test when no threads are available.
  * Fix that ub_event has the facility to deal with callbacks for
    fast reload, doq, windows-stop and dnstap.
  * Fix fast reload test to check if pid exists before acting on it.
  * Merge #1262 from markyang92, fix build with
    'gcc-15 -Wbuiltin-declaration-mismatch' error in compat/malloc.c.
  * For #1262, ifdef is no longer needed.
  * Fix #1263: Exempt loopback addresses from wait-limit.
  * Fix wait-limit-netblock and wait-limit-cookie-netblock config parse
    to allow two arguments.
  * Fix ub_event and include dnstap and win_svc headers.
  * Fix test for stat_values for wait limit defaults for localhost.
  * Fix parameter unused warning in net_help.c.
  * Fix mesh_copy_client_info to omit null contents from copy.
  * Fix comment name in the rpz nsdname test.
  * Fix nettle compile for warnings and ticket keys.
  * Fix redis_replica test for unused option defaults and log printout.
  * Fix test to speed up common.sh script kill_pid.
  * Fix to update common.sh for speed of kill_pid.
  * Update to the manpage for the fast_reload part.
  * Fix fast_reload to print chroot with config file name.
  * Fix to detect if atomic_store links in configure.
  * Fix #1264: unbound 1.22.0 leaks memory when doing DoH.
  * Fix for print of connection type in log-replies for dot and doh.
  * Merge #1265: Fix WSAPoll.</changelog>
  <changelog author="mia@0x0.st" date="1753012800">- Remove leftover dependency on sudo (not required)
  See also: boo#1215628</changelog>
  <changelog author="mrueckert@suse.de" date="1754827200">- prepare enabling quic support:
  currently fails on missing quic support in openssl. aws-lc is
  sadly not a drop in replacement for unbound.
- enable TCP Fast Open for the server and client
- remove unused --with-ldns option
- enable cachedb including hiredis support on Tumbleweed
  new BuildRequires pkgconfig(libhiredis)</changelog>
  <changelog author="mrueckert@suse.de" date="1754827201">- Update to 1.23.1: (boo#1246625)
  Bug Fixes:
  * Fix RebirthDay Attack CVE-2025-5994, reported by Xiang Li from
    AOSP Lab Nankai University.
  - our package was not built with EDNS subnet support up to this
    point and therefor was not affected.</changelog>
  <changelog author="mrueckert@suse.de" date="1754913600">- enable EDNS subnet handling</changelog>
  <changelog author="mrueckert@suse.de" date="1754913601">- simplify python handling. python2 support is dropped and python3
  is built by default. Conditionals for the latter are removed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Update to 1.24.1:
  Security Fixes:
  * Fix CVE-2025-11411 (possible domain hijacking attack)
    [bsc#1252525]
  Features:
  * Increase default to num-queries-per-thread: 2048, when unbound
    is compiled with libevent. It makes saturation of the task
    queue more resource intensive and less practical.
  * Auto-configure '-slabs' values.
  * Change default for so-sndbuf to 1m, to mitigate a cross-layer
    issue where the UDP socket send buffers are exhausted waiting
    for ARP/NDP resolution.
  * Adjusted so-sndbuf default to 4m.
  * Add extra statistic to track the number of signature validation
    operations. Adds 'num.valops' to extended statistics.
  * [FR] Disable TLSv1.2.
  * unbound-control cache_lookup prints the cached rrsets and
    messages for those.
  * unbound-control cache_lookup +t allows tld and root names. And
    subnet cache contents are printed.
  * [FR] zone status for Unbound auth-zones.
  Bug Fixes:
  * Fix assertion failure testcode/unitverify.c:202.
  * Use macros for the fr_check_changed* functions.
  * Fix for parallel build of dnstap protoc-c output.
  * Fix dnstap to use protoc.
  * Sync unbound and unbound-checkconf log output for unknown
    modules.
  * Fix forward-zone "name: ." conflicts with auth-zone "name: ."
    in 1.23.0, but worked in 1.22.0.
  * Fix unsafe usage of atoi() while parsing the configuration
    file.
  * Fix auth nsec3 code. Fixes NSEC3 code to not break on broken
    auth zones that include unsigned out of zone (above apex) data.
    Could lead to hang while trying to prove a wildcard answer.
  * Fix NULL pointer deref in az_find_nsec_cover() (latent bug) by
    adding a log_assert() to safeguard future development.
  * Fix log-destaddr fail on long ipv6 addresses.
  * Fix config of slab values when there is no config file.
  * Fix for cname chain length with qtype ANY and qname
    minimisation.
  * RST man pages. It introduces restructuredText man pages to sync
    the online and source code man page documentation. The
    templated man pages (*.in) are still part of the repo but
    generated with docutils from their .rst counterpart.
    Documentation on how to generate those (mainly for core
    developers) is in README.man.
  * Add more checks about respip in unbound-checkconf. Also fixes
    unbound-checkconf not reporting RPZ configuration error.
  * [FR] Improve fuzzing of unbound by adapting the netbound
    program.
  * Small manpage corrections for the 'disable-dnssec-lame-check'
    option.
  * Fix unbound-anchor certificate file read for line ends and end
    of file.
  * Fix comment for the dname_remove_label_limit_len function.
  * iana portlist updated.
  * Fix bitwise operators in conditional expressions with
    parentheses.
  * Fix conditional expressions with parentheses for bitwise and.
  * Fix header return value description for skip_pkt_rrs and
    parse_edns_from_query_pkt.
  * Fix to check control-interface addresses in unbound-checkconf.
  * Fix Windows 32-bit binaries download seems to be missing dll
    dependency.
  * Fix for consistent use of local zone CNAME alias for configured
    auth zones. Now it also applies to downstream configured auth
    zones.
  * Fix DNS over QUIC depends on a very outdated version of ngtcp2.
    Fixed so it works with ngtcp2 1.13.0 and OpenSSL 3.5.0.
  * edns-subnet: fix NULL_AFTER_DEREF on subnetmod.
  * Fix rrset cache create allocation failure case.
  * Fix EDE 6 is attached to insecure cached answers when client
    sends the CD bit.
  * Fix forward-first: ssl handshake failed on root nameservers.
  * Turn off fetch-policy for delegation when looking into parent
    side name servers that may not update the addresses and hit
    NXNS limits.
  * Replay test (added tcp_transport to outnet_serviced_query).
  * Generate ltmain.sh and configure again.
  * Fix is 'sock-queue-timeout' a linux only feature.
  * Implement sock-queue-timeout for FreeBSD as well.
  * Fix layout of comm_point_udp_ancil_callback.
  * Fix to improve dnstap discovery on Fedora.
  * Fix detection of SSL_CTX_set_tmp_ecdh function.
  * Fix configure cant find SSL_is_quic in OpenSSL 3.5.1.
  * Test num.valops in existing stat_values.tdir.
  * Add num.valops in the unbound-control man page.
  * Add unit tests for non-ecs aggregation.
  * Fix to not set rlimits in the unit tests.
  * iana portlist updated.
  * Redis checks for server down and throttles reconnects.
  * Fix redis cachedb module gettimeofday init failure.
  * Fix testbound test program to accurately output packets from
    hex.
  * Fix incorrectly reclaimed tcp handler can cause data corruption
    and segfault.
  * Fix to use assertions for consistency checks in reclaimed tcp
    handlers.
  * Fix edns subnet, so that the subquery without subnet is stored
    in global cache if the querier used 0.0.0.0/0 and the name and
    address do not receive subnet treatment. If the name and
    address are configured for subnet, it is stored in the subnet
    cache.
  * Fix dname_str for printout of long names.
  * Fix that edns-subnet failure to create a subquery errors as
    servfail, and not formerror.
  * Fix to whitespace in dname_str.
  * Fix that unbound-control dump_cache releases the cache locks
    every so often, so that the server stays responsive.
  * Fix to remove debug from cache_lookup.
  * Fix to unlock cache_lookup message for malformed records.
  * Fix to increase responsiveness of dump_cache.
  * Fix to decouple file descriptor activity and cache lookups in
    dump_cache.
  * Fix cache_lookup subnet printout to wipe zero part of the
    prefix.
  * Fix cache_lookup subnet print to not print messages without
    rrsets and perform in-depth check on node in the addrtree.
  * Fix to check for extraneous command arguments for
    unbound-control, when the command takes no arguments but there
    are arguments present.
  * Fix contrib/unbound.service comment path for systemd network
    configuration.
  * Fix compile warnings for DoH compile on windows.
  * Fix sha1 enable environment variable in test code on windows.
  * Fix that the zone acquired timestamp is set after the zonefile
    is read.
  * Fix unbound-control dump_cache for double unlock of lruhash
    table.
  * Fix setup_listen_sslctx warning for nettle compile.
  * Limit the number of consecutive reads on an HTTP/2 session.
  * Fix to free edns options scratch in ratelimit case.
  * Fix outdated Python2 code in unbound/pythonmod/examples/log.py.
  * Fix memory leak in 'msgparse.c' in
    'parse_edns_options_from_query(...)'.
  * Fix indentation in tcp-mss option parsing.
  * Fix make depend.
  * Update documentation for using "SET ... EX" in Redis.
  * Document max buffer sizes for Redis commands.
  * Update man pages.
  * Fix CNAME chains are sometimes not followed when RPZs add a
    local CNAME rewrite.
  * Update contrib/aaaa-filter-iterator.patch so it applies on
    1.24.0.
  * Small debug output improvement when attaching an EDE.
  * Fix to print warning for when so-sndbuf setsockopt is not
    granted.
  * Too many quotes for the EDE message debug printout.</changelog>
</package>
<package pkgid="3eead957d913b532868c4b400bc3e025a7c7bfe4dfebe8c94055253ac18d5f580f2afc7fbf1d7584304fddde1c277af9efe65eeabb0ba67cbe04e976c491bfe1" name="libunistring5" arch="x86_64">
  <version epoch="0" ver="1.3" rel="160000.3.2"/>
  <changelog author="astieger@suse.com" date="1519819200">- update to 0.9.9:
  * Fixed a multithread-safety bug</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Fix RPM groups and summaries.</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 0.9.10:
  * The functions
    u8_casing_prefix_context, u8_casing_prefixes_context,
    u8_casing_suffix_context, u8_casing_suffixes_context,
    u16_casing_prefix_context, u16_casing_prefixes_context,
    u16_casing_suffix_context, u16_casing_suffixes_context,
    u32_casing_prefix_context, u32_casing_prefixes_context,
    u32_casing_suffix_context, u32_casing_suffixes_context,
    that are documented since version 0.9.1, are now actually
    implemented.</changelog>
  <changelog author="mliska@suse.cz" date="1552046400">- Add disable-broken-tests.patch in order to fix broken
  tests (bnc#1128460).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649505600">- Update to 1.0:
  * Unicode 14.0.0 support
  * License changed to LGPL-3.0-or-later OR GPL-2.0-or-later
  * *_uctomb functions now support strings larger than 2 GiB
  * linebreak functions now make it easier to work with strings
    that contain CR-LF sequences
  * New properties for recognizing pictographics symbols and
    regional indicators
- drop disable-broken-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666699200">- Update to 1.1:
  * The data tables and algorithms have been updated to Unicode
    version 15.0.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to GPL-3.0-or-later or LGPL-3.0-or-later.</changelog>
  <changelog author="schwab@suse.de" date="1693224000">- Run testsuite also under qemu emulation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1708776000">- update to 1.2:
  * Support Unicode 15.1.0
  * Improve UTF-8 decoder Unicode Standard compliance
  * The *printf functions no longer support the %n directive, for
    security reasons.
  * Fixed a bug in the *printf functions: In the %U, %lU, %llU
    directives, a negative width given as an argument did not
    trigger left-justification.
  * The functions u16_strstr and u32_strstr now operate in worst-case linear time.
  * Useful API function extensions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1729166400">- update to 1.3:
  * Support Unicode version 16.0.0</changelog>
</package>
<package pkgid="424cfb7ba054ce88412896f63caecb645d7ab0c5c16f8dd1b53466d7b3b021263938577b28cf53492f513fbb0a7d7fa70e667089b6f4421df9f24dde34aed102" name="libunwind8" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1652702400">- Add Conflict markers for earlier combined libunwind.</changelog>
  <changelog author="jengelh@inai.de" date="1652875200">- Adjust baselibs.conf for shlib guideline.</changelog>
  <changelog author="schwab@suse.de" date="1653307200">- Fix dependencies
- Fix file list</changelog>
  <changelog author="pmonreal@suse.com" date="1687521600">- Update to 1.7.0:
  * DWARF: dwarf4 fix cie parsing.
  * x86_64: Stop aliasing RSP and CFA.
  * Prefer EXTBL unwinding on ARM.
  * [GCC pedantic] Fix "error: comma at end of enumerator list"
    when linking to libunwind.
  * Fix table indexing in dwarf_search_unwind_table.
  * Expose function-pointer-to-name API.
  * Add port for Linux on LoongArch.
  * Add more POSIX polyfills for nix cross-build on win.
  * DWARF: avoid a data race.
  * skip latex2man check with --disable-documentation.
  * Skip init_mem_validate calls during remote unwind.
  * [Loongarch64] amend the LoongArch64's CMakeLists.txt and compiling error.
  * Update license in pal-single-threaded.c.
  * Fix to malloc call in tdep_get_elf_image.
  * Updated to determine PAGE_SIZE dynamically.
  * Unwind with pointer authentication on arm64.
  * Make some structs non-empty.
  * DWARF: avoid invalid memory access with invalid CFI.
  * fix incorrect store in AArch64 getcontext.
  * avoid leaking registers across sigreturn.
  * Use constant for array size in os-linux.
  * added coredump support for s390x.
  * Allow an alternate LOG_DRIVER to be specified.
  * Remove bashisms from tests/check-namespace.sh.
  * Add autodetection of procfs_status type.
  * Add remote unwinding support for macOS.
  * Expose get_proc_info_in_range API.
  * Autodetect presence of elf_fpregset_t.
  * coredump: stop assuming .text and .eh_frame are both in the first
    segment of an ELF file.
  * Make sigaltstack() optional.
  * Add support for arm fp registers unwind.
  * updated dist to focal for s390x jobs.
  * Add RISC-V machine value in remote unwind.
  * Fix SOFTFP case for arm getcontext.
  * Added support for unwinding from the vsyscall region.
  * Stop the autotools nag about AC_CONFIG_MACRO_DIRS.
  * Fix make distcheck due to missing coredump header.
  * Fix undefined behavior issues in aarch64.
  * Account for lr in aarch64's uc_addr.
  * tests/run-coredump-unwind: Skip test if no coredump has been created.
  * [LoongArch64] Update the port to latest kernel ABI.
  * arm64: Add support for unwinding in SVE functions
  * check-namespace.sh: adjust aarch64 symbols.
  * Updated to determine PAGE_SIZE dynamically for loongarch64.
  * Gia64-test-nat.c: #include &lt;signal.h&gt; for sigaction().
  * Fix for unw_backtrace fast path does not work on x86_64.
  * fix the way load offset is detected so it works with lld linker.
  * Remove the unused powerpc setcontext() dummies.
  * Add unw_backtrace2 function.
- Include the man pages, README and LICENSE files.
- Update libunwind.keyring file.</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Update to 1.7.1:
  * Bump to release 1.7.1 to fix source tarball naming issue</changelog>
  <changelog author="pmonreal@suse.com" date="1693396800">- Update to 1.7.2:
  * Don't override sp on arm and mips64.
  * Add direct dependent libraries to remotes.
  * Fix make install failure.</changelog>
  <changelog author="pmonreal@suse.com" date="1706616000">- Update to 1.8.0:
  * Improve unwinding through a bad function pointer on x86_64
  * Fix UMRs indicated by valgrind (x86_64)
  * fix byte_order_is_valid function logic
  * Use size_t to match R.H.S
  * Move get_proc_info_in_range under dwarf/
  * Bump actions/checkout@v2 to @V3
  * dwarf_find_unwind_table: Find load_base correctly when current
    segment does not start at segbase
  * Add introspection for march=armv8-a+sve
  * Linux: Make get_elf_image guaranteed AS-safe
  * Provide syscall wrappers for mmap and munmap
  * Allow to use a custom dl_iterate_phdr implementation
  * aarch64: unw_step() validates address before calling dwarf_get
  * Provide AS-safe allocator to LZMA
  * Rework register load in aarch64_local_resume()
  * Fix arm postdecrement
  * Added support for unwinding through PPC64 PLT entries
  * Fix array indexing bug in dwarf_search_unwind_table
  * Fix unaligned memory accesses in */Ginit.c
  * Get filename and offset from ip
  * Fix maps leak if caller's pathlen is too small
  * Adjust DYNAMIC addrs in loaded image
  * Fix crash in elf_w(valid_object)
  * Fix segfault on QNX</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable LTO on aarch64 until upstream fix the issue:
  https://github.com/libunwind/libunwind/issues/693</changelog>
  <changelog author="pmonreal@suse.com" date="1708689600">- Update to 1.8.1:
  * Fix issue #713 by @cshung in #717
  * Add do-release script by @bregma in #725
  * Backport dotnet-runtime fixes to the 1.8 branch by @bregma in #726
  * [v1.8] Make tests installable by @bregma in #722
  * Bump version to 1.8.1 by @bregma in #727</changelog>
  <changelog author="fvogt@suse.com" date="1711108800">- Drop BuildRequires on latex2man, the tarball has manpages already.
  This avoids a large dependency chain:
  * Add dont-disable-documentation-without-latex2man.patch</changelog>
</package>
<package pkgid="8a592eaf13f778f006357aafbecb7224ca9ee17fcd7040540432587068fc8be15bcda59b4e565f12da36dc42ae38c38de6c6e9fd8b5d45e55b4d2fc476d25008" name="liburcu8" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1443528000">- remove dependency on gpg-offline, is done by source validator
- drop userspace-rcu-ppc64le.patch, included in
  userspace-rcu-aarch64.patch</changelog>
  <changelog author="dvaleev@suse.com" date="1458043200">- userspace-rcu-ppc64le.patch use ppc for ppc64le
  http://git.lttng.org/?p=userspace-rcu.git;a=commit;h=61126bd9c901fa403315db71d8d5351d716717cb</changelog>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 0.10.0 for SLE15 (bsc#1055683)
  Drop patch: userspace-rcu-aarch64.patch (upstream v0.9.0~99)
  Drop patch: userspace-rcu-ppc64le.patch (upstream v0.9.0~24)
  Adjust library soname to 6
  Update keyring</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Add baselibs.conf: create liburcu6-32bit package as a dependency
  to liblttng-ust0-32bit.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 0.12.1:
  * Fix: tls-compat.h exposes compiler-dependent public configuration
  * Fix: tap array subscript has type char warning
  * tls-compat.h: introduce DEFINE_URCU_TLS_INIT
  * Use _umtx_op for futex on FreeBSD
  * Add FreeBSD, DragonFly to syscall-compat.h
  * urcu-bp: perform thread registration on urcu_bp_register_thread
  * Require automake &gt;= 1.12
  * cds_lfht_is_node_deleted parameter can be marked const
  * Fix: provide errno as argument to urcu_die()
  * Fix: rculfhash worker needs to unblock to SIGRCU
  * Cleanup: test_perthreadlock_timing: handle pthread mutex errors
  * Fix: SONAME bump to 6.1.0
  * Cleanup: remove unused variable from configure.ac check
  * Fix: urcu/futex.h: users of struct timespec should include time.h
  * Bump library version to 6:0:1
  * Cleanup: update code layout to fix old gcc warning
  * Fix: typo CPPLAGS in examples Makefile
  * Harmonize pprint macro across projects
  * Check for TLS support after CC detection
  * Update macros from the autotools archive
  * tap-driver.sh: flush stdout after each test result
  * Update dead link in lgpl-relicensing.txt
  * Add multiflavor compat identifiers
  * Cleanup: missing sign compare fixes
  * Cleanup: enable signed/unsigned compare compiler warning
  * Cleanup: compiler warning on 32-bit architectures
  * config.h.in: rename CONFIG_RCU_MULTIFLAVOR to CONFIG_RCU_HAVE_MULTIFLAVOR
  * rculfhash: implement iterator debugging config option
  * Fix: examples silent rules on Solaris
  * Add missing fall through annotations
  * Fix: symbol aliases with TLS compat
  * Port: no symbols aliases on MacOS
  * Add -Wextra to CFLAGS
  * Add silent mode to examples Makefiles
  * doc: update examples to API changes
  * test multiflavor single compile unit
  * Update README following API changes
  * Use new header locations for includes from urcu code
  * Update call-rcu.h and defer.h comments and include guards
  * rculfqueue.h: do not include urcu-call-rcu.h
  * rculfhash: support use with multiple flavors per compile unit
  * rculfhash: do not include urcu-call-rcu.h from public API
  * Refactor liburcu to support many flavors per compile unit
  * Fix: only wait if work queue is empty in real-time mode
  * Fix: don't wait after completion of a work queue job batch
  * Fix: don't wait after completion of job batch if work queue is empty
  * Fix: workqueue: struct urcu_work vs rcu_head mixup
  * Cleanup: workqueue: update comments referring to call-rcu
  * Fix: mixup between URCU_WORKQUEUE_RT and URCU_CALL_RCU_RT
  * test_rwlock: Add per-thread count to verbose output
  * Add *.exe to gitignore for Cygwin
  * Fix: pthread_rwlock initialization on Cygwin
  * Fix: compat_futex_noasync on Cygwin
  * wfcqueue: allow defining CDS_WFCQ_WAIT_SLEEP to override `poll'
  * Update documentation for call_rcu before/after fork
  * Add support for the RISC-V architecture
  * Tests: Add tap-driver.sh for automake &lt; 1.12
  * Tests: Replace prove by autotools tap runner
  * liburcu-bp: Use membarrier private expedited when available
  * liburcu: Use membarrier private expedited when available
  * rculfhash: improve error handling of mmap backend
  * Fix: don't use overlapping mmap mappings on Cygwin
  * Tests fix: errors in shell scripts
  * Revert "Use initial-exec tls model"
  * Use initial-exec tls model
  * Fix: don't use membarrier SHARED syscall command in liburcu-bp
  * Tests fix: add missing Cygwin thread id
  * Fix: assignment from incompatible pointer type warnings
  * Tests fix: unused variable warnings
  * Fix: add missing m68k headers to dist</changelog>
  <changelog author="dmueller@suse.com" date="1615204800">- update to 0.12.2:
  * fix: exclude clang from GCC version blacklists
  * aarch64: blacklist gcc prior to 5.1
  * Fix: configure: support Autoconf 2.70
  * fix: bump tests thread limit to 4096
  * cleanup: Improve wording of CONFIG_RCU_DEBUG description
  * fix: explicitly include urcu/config.h in files using CONFIG_RCU_ defines
  * Fix typo in README.md
  * fix: add -lurcu-common to pkg-config libs for each flavor
  * call_rcu: Fix race between rcu_barrier() and call_rcu_data_free()</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 0.13.0:
  * The Userspace RCU 0.13 release is mostly a library soname version bump
    to address an ABI incompatibility between the 0.10 and { 0.11, 0.12 }
    releases. see https://lists.lttng.org/pipermail/lttng-dev/2021-June/030023.html</changelog>
  <changelog author="dmueller@suse.com" date="1642939200">- update to 0.13.1:
  * fix: properly detect 'cmpxchg' on x86-32
  * fix: use urcu-tls compat with c++ compiler
  * fix: remove autoconf features default value in help message
  * fix: add missing pkgconfig file for memb flavour lib
  * Make temporary variable in _rcu_dereference non-const
  * Fix: x86 and s390: uatomic __hp() macro C++ support
  * Fix: x86 and s390: uatomic __hp() macro clang support
  * Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1660910400">- Update to version 0.13.2:
  * Revert "Fix: remove type constness in URCU_FORCE_CAST's C++
    version".
  * Fix: futex.h: include headers outside extern C.
  * Fix: add missing unused attribute to _rcu_dereference.
  * Fix: change method used by _rcu_dereference to strip type constness.
  * Fix: remove type constness in URCU_FORCE_CAST's C++ version.
  * Move extern "C" down in include/urcu/urcu-bp.h.
  * Fix: ifdef linux specific cpu count compat.
  * Set git-review branch to stable-0.13.
  * Fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id.
  * Fix: revise obsolete command in README.md.
  * Fix: workqueue: remove unused variable "ret".
  * Fix: futex wait: handle spurious futex wakeups.
  * Fix: Use %lu rather than %ld to print count.</changelog>
  <changelog author="dmueller@suse.com" date="1678276800">- update to 0.14.0:
  * Fix: urcu-bp: only teardown call-rcu worker in destructor
  * Fix: rculfhash: urcu_die() takes positive error value
  * Fix: call_rcu: teardown default call_rcu worker on
    application exit
  * Fix: join worker thread in call_rcu_data_free
  * Docs: clarify grace period polling API
  * Document grace period polling in rcu-api.md
  * Implement poll rcu stress test in rcutorture
  * urcu-memb,mb,signal: Implement grace period polling
  * Fix: auto-resize hash table destroy deadlock
  * Fix building on MSYS2
  * rculfhash: Include rculfhash-internal.h from local directory
  * Remove "Darwin" from "should also work on list"
  * Merge branch 'adah1972-improve-md'
  * Add semicolons at the end of function prototypes
  * Wrap a file name in backticks
  * Wrap command-line options in backticks
  * Fix a wrong format
  * Wrap URLs in angle brackets
  * Fix Markdown issues
  * Fix: Always check pthread_create for failures
  * Disable signals in URCU background threads
  * Fix: futex.h: include headers outside extern C
  * Fix: add missing unused attribute to _rcu_dereference
  * Fix: change method used by _rcu_dereference to strip type
    constness
  * Fix: remove type constness in URCU_FORCE_CAST's C++ version
  * Move extern "C" down in include/urcu/urcu-bp.h
  * fix: ifdef linux specific cpu count compat
  * Add unit tests for possible_cpus_array_len
  * fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu
    id
  * Fix: revise obsolete command in README.md
  * Fix: workqueue: remove unused variable "ret"
  * Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
  * Fix: urcu: futex wait: handle spurious futex wakeups
  * Fix: urcu-wait: futex wait: handle spurious futex wakeups
  * Fix: defer_rcu: futex wait: handle spurious futex wakeups
  * Fix: call_rcu: futex wait: handle spurious futex wakeups
  * Fix: workqueue: futex wait: handle spurious futex wakeups
  * Fix: Use %lu rather than %ld to print count
  * Update ABI definition files
  * Bump version current and age
  * alpha: allocate membarrier system call number
  * Bump version to 0.14.0-pre
  * Improved test framework
  * rculfhash: introduce cds_lfht_node_init_deleted
  * cleanup: i386 arch detection
  * fix: properly detect 'cmpxchg' on x86-32
  * fix: use urcu-tls compat with c++ compiler
  * Fix typo
  * fix: remove autoconf features default value in help message
  * fix: add missing pkgconfig file for memb flavour lib
  * Cleanup: Tests: Remove useless pre-C99 compatibility code
    from tap.h
  * Document C99 and C++11 requirement in README.md
  * Always use '__thread' for Thread local storage except on MSVC
  * Fix: powerpc32: transparent unions alter calling convention
  * fix: don't use C++ thread_local on MacOs
  * wfcqueue API: implement overloaded wrappers with templates
  * wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
  * wfstack C++ API: implement overloaded wrappers with templates
  * lfstack C++ API: implement overloaded wrappers with templates
  * wfstack: combine C++ API cds_wfs_stack_cast with overloading
  * lfstack: combine C++ API cds_lfs_stack_cast with overloading
  * fix: test_build tap plan
  * Test C++ build of list head init
  * Fix order of initializers in CDS_LIST_HEAD_INIT
  * unit tests: test wfcqueue, wfstack, lfstack empty check
    functions in C++
  * wfcqueue: implement C++ API based on function overloading
  * wfstack: implement C++ API based on function overloading
  * lfstack: implement C++ API based on function overloading
  * Fix tap.h: remove extra semicolon in pass/fail macros
  * Add C++ build tests
  * Build and run regression and unit tests as C++ programs
  * Add --enable-Werror configure switch
  * Add `urcu_posix_assert()` as `assert()` replacement
  * Rename `urcu_assert()` to `urcu_assert_debug()`
  * cleanup: spelling fixes in comments
  * Make temporary variable in _rcu_dereference non-const
  * (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
  * Fix: x86 and s390: uatomic __hp() macro clang support
  * Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11</changelog>
</package>
<package pkgid="9b548292a6ac5349b2a932118d703f621af0fed55c6b4f34f6ea354327da81ca7aeea5c7f9268e69d02f3146a1ba7f9f337a0bc4b826a5ef2e7d0f4a0688831a" name="liburing2" arch="x86_64">
  <version epoch="0" ver="2.8" rel="160000.3.1"/>
  <changelog author="jslaby@suse.cz" date="1719576000">- Update to 2.6:
  * Add getsockopt and setsockopt socket commands
  * Add test cases to test/hardlink
  * Man page fixes
  * Add futex support, and test cases
  * Add waitid support, and test cases
  * Add read multishot, and test cases
  * Add support for IORING_SETUP_NO_SQARRAY
  * Use IORING_SETUP_NO_SQARRAY as the default
  * Add support for IORING_OP_FIXED_FD_INSTALL
  * Add io_uring_prep_fixed_fd_install() helper
  * Support for napi busy polling
  * Improve/add test cases
  * Man page fixes
  * Add sample 'proxy' example
- Remove (they are upstream)
  * test-no-mmap-inval-0-return-is-fine-too.patch
  * test-recv-multishot-wait-for-the-right-amount-of-CQE.patch
- exclude buf-ring-nommap.t test (crashes)</changelog>
  <changelog author="ddiss@suse.com" date="1720785600">- Fix buf-ring-nommap.t test failure
  * test-buf-ring-nommap-zero-the-ringbuf-memory.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1723118400">- Skip test buf-ring-nommap.t if ENOMEM appears (happens in ppc64le arch).
  * test-buf-ring-nommap-skip-the-test-on-queue-init-ENO.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1733313600">- switch URLs to the current location on github
- Update to 2.8
  * Add support for incrementally/partially consumed provided buffers,
    usable with the provided buffer ring support.
  * Add support for foo_and_wait_min_timeout(), where it's possible to
    define a minimum timeout for waiting to get batches of completions,
    but if that fails, extend for a longer timeout without having any
    extra context switches.
  * Add support for using different clock sources for completion waiting.
  * Great increase coverage of test cases, test case improvements and
    fixes.
  * Don't leak _GNU_SOURCE via pkb-config --cflags
  * Support for address sanitizer
  * Add examples/kdigest sample program
  * Add discard helper, test, and man page
  * Man page updates
  * Sync with kernel 6.10
  * send/recv bundle support
  * accept nowait and CQE_F_MORE
  * Add and update test cases
  * Fix io_uring_queue_init_mem() returning a value that was too small,
    potentially causing memory corruption in userspace by overwriting
    64 bytes beyond the returned value. Also add test case for that.
  * Add 64-bit length variants of io_uring_prep_{m,f}advise()
  * Add BIND/LISTEN support and helpers / man pages
  * Add io_uring_enable_rings.3 man page
  * Fix bug in io_uring_prep_read_multishot()
  * Fixup bundle test cases
  * Add fixed-hugepage test case
  * Fix io_uring_prep_fixed_fd_install.3 man page
  * Note 'len' == 0 requirement in io_uring_prep_send.3 man page
  * Fix some test cases for skipping on older kernels
- drop (they are upstream)
  * test-buf-ring-nommap-skip-the-test-on-queue-init-ENO.patch
  * test-buf-ring-nommap-zero-the-ringbuf-memory.patch
- add
  * 0001-test-init-mem-zero-the-ringbuf-memory.patch
  * 0001-test-rsrc_tags-use-correct-buffer-index-for-test.patch
- cleanup spec file</changelog>
  <changelog author="jslaby@suse.cz" date="1733486400">- switch to signed tarball -- thanks to Andreas.Stieger@gmx.de</changelog>
  <changelog author="jslaby@suse.cz" date="1736164800">- disable some tests for older kernels &amp; strange archs</changelog>
  <changelog author="jslaby@suse.cz" date="1737979200">- disable more tests on s390x</changelog>
  <changelog author="cgoll@suse.com" date="1738324800">- disable sqwait.t and nop.t for 15.6</changelog>
  <changelog author="jslaby@suse.cz" date="1739275200">- disable even more tests</changelog>
  <changelog author="gabriel.bertazi@suse.com" date="1757419200">- Add upstream patch to fix test on ppc64le
  * 0001-test-recvsend_bundle-enlarge-recv-buf-ring-to-2-MiB-.patch</changelog>
</package>
<package pkgid="25ad50bb1afbd479773c30f18b85f646e3d63d5345b38d8fa258f96c5be98fc280266d182e476f8495c49bfdf6eadf2ead643b1eb24ecfe8f60a58b828ef18ee" name="libusb-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.0.28" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use dos2unix to generate the non-windows trailing on files
- Remove sle11 support as it got borged with last commit and
  we don't mostly need it to build there</changelog>
  <changelog author="jengelh@inai.de" date="1521720000">- Fix SRPM group.</changelog>
  <changelog author="mardnh@gmx.de" date="1521979200">- Update to version 1.0.22
  * Core: Refactor code related to transfer flags and timeout handling
  * Linux: Support preallocating kernel memory for zerocopy USB
  * Linux: Deal with receiving POLLERR before all transfers have completed
  * Prevent attempts to recursively handle events
  * Fix race condition in handle_timeout()
  * Allow transferred argument to be optional in bulk APIs
  * Various other bug fixes and improvements
  * Fix the inclusion of "sys/time.h" on PowerPC (bsc#1178376)</changelog>
  <changelog author="mardnh@gmx.de" date="1567080000">- Update to version 1.0.23
  * Core: abandon synchronous transfers when device closure is
    detected.
  * Core: fix error in handling the removal of file descriptors
    while handling events.
  * New API libusb_set_log_cb() to redirect global and per context
    log messages to the provided log handling function.
  * New API libusb_wrap_sys_device to allow the user to specify
    the usb device to use.
  * Various other bug fixes and improvements.</changelog>
  <changelog author="mardnh@gmx.de" date="1607601600">- Update to version 1.0.24
  * Add new platform abstraction (#252).
  * Add Null POSIX backend.
  * Add support for eventfd.
  * New API libusb_hotplug_get_user_data().
  * Linux: Drop support for kernel older than 2.6.32.
  * Linux: Provide an event thread name. (#689).
  * Linux: Wait until all USBs have been reaped before freeing
    them. (#607)
  * Documentation fixes and improvements.
  * Various other bug fixes and improvements.</changelog>
  <changelog author="simon.vogl@gmx.net" date="1610884800">- Add 0001-fix-descriptor-parsing.patch to fix detection of some devices.</changelog>
  <changelog author="mardnh@gmx.de" date="1643716800">- Update to version 1.0.25
  * Fix regression with some particular devices
  * Fix regression with libusb_handle_events_timeout_completed()
  * Fix regression with cpu usage in libusb_bulk_transfer
  * New NO_DEVICE_DISCOVERY option replaces WEAK_AUTHORITY option
  * Various other bug fixes and improvements
- Drop not longer needed patch:
  * 0001-fix-descriptor-parsing.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1649592000">- Update to version 1.0.26
  * Fix regression with transfer free's after closing device
  * Fix regression with destroyed context if API is misused
  * Workaround for applications using missing default context
  * Fix hotplog enumeration regression
  * Build fixes for various platforms and configurations
  * Add interface bound checking for broken devices
  * Add umockdev tests on Linux</changelog>
  <changelog author="meissner@suse.com" date="1706788800">- Update to version 1.0.27
  * New libusb_init_context API to replace libusb_init
  * New libusb_get_max_alt_packet_size API
  * New libusb_get_platform_descriptor API (BOS)
  * Allow setting log callback with libusb_set_option/libusb_init_context
  * New WebAssembly + WebUSB backend using Emscripten
  * Fix regression in libusb_set_interface_alt_setting
  * Fix sync transfer completion race and use-after-free
  * Fix hotplug exit ordering
  * Linux: NO_DEVICE_DISCOVERY option set per context
- added signature and keyring. (key received via keyserver)</changelog>
  <changelog author="meissner@suse.com" date="1742472000">- Update to version 1.0.28
  * New libusb_get_ssplus_usb_device_capability_descriptor API
    for query of SuperSpeed+ Capability Descriptors
  * API support for reporting USB 3.2 Gen2x2 speeds
  * macOS: Fix Zero-Length Packet for multiple packets per frame
  * Windows: Base HID device descriptor on OS-cached values
  * Build fixes for Haiku and SunOS
  * Many code correctness fixes</changelog>
</package>
<package pkgid="39cc22c295cbd905edbbdcffe491a9dabb2b2e0ac7349080bc0da29e10347b8cc1c6e5f42cd90707fd5d809f22c1f8e814886fdc3c4f662c9d799ddf3e7c3951" name="libusbredirparser1" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="160000.2.2"/>
  <changelog author="brogers@suse.com" date="1537185600">- Update to version 0.8.0
  + usbredirfilter:
  - Fix busy wait due endless recursion when interface_count is zero
  + usbredirhost:
  - Fix leak on error
  + usbredirserver:
  - Use 'busnum-devnum' instead of 'usbbus-usbaddr'
  - Add support for bind specific address -4 for ipv4, -6 for ipv6
  - Reject empty vendorid from command line
  - Enable TCP keepalive</changelog>
  <changelog author="brogers@suse.com" date="1617624000">- Update to version 0.9.0
  + Changes noted in ChangeLog.md:
    !2 Add usbredirect tool with feature parity with usbredirserver
    !6 Add fuzzer for usbredirparser
    !12 Add MSI installer for usbredirect tool
    !11 Add meson build: autotool will be removed in a future release
    !5 Limit packet's length to 65 kB
    !4 Fix wrong up-cast when checking for package's length
    Require LLVM's compiler-rt (optional: for fuzzer)
    Require glib2 &gt;= 2.44 (optional: for usbredirect)
    Deprecate usbredirserver in favor of usbredirect
  + Require libusb-1.0 &gt;= 1.22 due to libusb_set_option() usage
  + Require meson &gt;= 0.48 due to dictionary usage
  + Change docs to be in markdown format
  + add usbredir TCP client
  + add meson build support (which we now use to build package)
- Package the new usbredir TCP client: 'usbredirect'
- Fix meson include directory paths
  + meson-Fix-include-directories-needed-to-build.patch
- Fix pkgconfig data used in meson build
  + meson-Fix-pkgconfig-required-library-name-reference.patch</changelog>
  <changelog author="ro@suse.de" date="1629806400">- add patch usbredir-CVE-2021-3700.patch
  fix use-after-free in usbredirparser_serialize
  (CVE-2021-3700,bsc#1189491)</changelog>
  <changelog author="msuchanek@suse.de" date="1629806401">- Update to version 0.11.0
  - Avoid use-after-free in serialization (CVE-2021-3700, bsc#1189491)
  - Add local directory to include search path for meson
  - Fix generated by meson libusbredirhost.pc
- Remove upstreamed patches
  - meson-Fix-include-directories-needed-to-build.patch
  - meson-Fix-pkgconfig-required-library-name-reference.patch
  - usbredir-CVE-2021-3700.patch</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 0.12.0:
  * Implement dropping packets from isochronous devices
    when buffer is owned by usbredirparser library
  * Use packet size limit on deserialization
  * Fix possible bad state in deserialization logic
  * Fix possible memory leak in serialization logic
  * Fix (un)serialization with empty write buffers
  * Improvements to usbredirparserfuzz</changelog>
  <changelog author="dimstar@opensuse.org" date="1641384000">- Drop unknown llvm-fuzz meson paramerter: meson 0.60 is strict and
  fails when unknown parameters are being passed.</changelog>
  <changelog author="mliska@suse.cz" date="1649764800">- Add 0001-Use-D_FORTIFY_SOURCE-instead-of-Wp-D_FORTIFY_SOURCE.patch
  that enables future switch to -D_FORTIFY_SOURCE=3
  (gl#spice/usbredir#60).</changelog>
  <changelog author="dimstar@opensuse.org" date="1654689600">- Add upstream backported patches (boo#1199354):
  + 9426fdb1.patch: Check header length unserialising data.
  + dffc41c3.patch: usbredirect: fix leak on bad input.</changelog>
  <changelog author="dimstar@opensuse.org" date="1660046400">- Update to version 0.13.0:
  + Fix regression on unserialize data
  + Removes usbredirserver
  + Improved header length checks when unserialising data
  + Fix usage of command line argument in usbredirect
  + Fix small memory leak on usbredirect
- Drop 9426fdb1.patch and dffc41c3.patch: fixed upstream.
- Drop
  0001-Use-D_FORTIFY_SOURCE-instead-of-Wp-D_FORTIFY_SOURCE.patch:
  fixed upstream.
- Add keyring to validate source signature.</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.14.0:
  * usbredirect: Fix redirecting identical devices
  * usbredirect: Fix CPU tight loop when run as TCP server
  * usbredirect: Fix some minor memory leaks
  * usbredirect: Add documentation about bus-device option
  * usbredirtestclient: Fix build on MacOS 10.5</changelog>
</package>
<package pkgid="257173d8fb8717299dabba71de109de30f45bfbafc68517b415bc3922894afdc1ab2426c646fad6382bf6798d3e5b5b60dba5f5c2e8f1d353c3c7663edfeb002" name="libusdm0" arch="x86_64">
  <version epoch="0" ver="24.09.0" rel="160000.2.2"/>
  <changelog author="duwe@suse.com" date="1612785600">- re-add _service file, but "disabled".</changelog>
  <changelog author="rpm@fthiessen.de" date="1625313600">- Update to version 21.05.0:
  * Added support for AES-CCM 192/265
  * Added support for SHA3-224/384/512 (no partials support)
  * Added support for ChaCha20-Poly1305
  * Added support for PKE 8K (RSA, DH, ModExp, ModInv)
  * Fixed device enumeration on different nodes
  * Fixed pci_vfio_set_command for 32 bit builds</changelog>
  <changelog author="duwe@suse.com" date="1633521600">- Update to 21.08.0
  * Add support for Compression Deflate algorithm
  * Add communication path to PF driver (PFVFcomms)
  * Enable services based on VF capabilities.
  * Stop service correctly during uninstallation
  * Fix qatmgr foreground option -f
  * Add qatmgr -v option to display version
  * Add version check between qatlib and qatmgr
  * Suppress deprecated warnings from OpenSSL3
  * Fix build with clang</changelog>
  <changelog author="duwe@suse.com" date="1633521601">- Update to 21.05.0
  * Add support for Compression Deflate algorithm
  * Add communication path to PF driver (PFVFcomms)
  * Enable services based on VF capabilities.
  * Stop service correctly during uninstallation
  * Fix qatmgr foreground option -f
  * Add qatmgr -v option to display version
  * Add version check between qatlib and qatmgr
  * Suppress deprecated warnings from OpenSSL3
  * Fix build with clang</changelog>
  <changelog author="meissner@suse.com" date="1651060800">- use source url, switch to .tar.gz as this is used in github upstream</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 22.07.2:
  * Changed from yasm to nasm for assembly compilation
  * Added configuration option to use C implementation of soft CRC
    implementation instead of asm
  * Added support for pkg-config
  * Added missing lock around accesses to some global data in qatmgr
  * Fix for QATE-86605 – improve error checking on size param used by qatmgr
    debug function.
  * Fix for issue #10
  * Fixed link to Programmer's Guide
  * Added support for Compression LZ4 and LZ4s algorithms
  * Added support for Compression end-to-end integrity checks
  * Added support for PKE Generic Point Multiply APIs
  * Added support for CPM2.0b
  * Updated library to support new version of QAT APIs
  * Updated qat service to allow compression only and crypto only
    configurations
  * Created qatlib-tests rpm package
  * Added option to configure script to skip building sample code</changelog>
  <changelog author="jengelh@inai.de" date="1685448000">- Implement shared library packaging guidelines
- Drop R/TM signs as per
  https://en.opensuse.org/openSUSE:Package_description_guidelines</changelog>
  <changelog author="duwe@suse.com" date="1704283200">- update to 23.11.0:
  * use new --enable-legacy-algorithms to avoid regressions
  * add support for data compression chaining (hash then compress)
  * add support for additional configuration profiles
  * add support DC NS (NoSession) APIs
  * add support DC CompressBound APIs
  * add Support for Chinese SM{2,3,4} ciphers
  * bump shared library major to 4
  * refactoring, bug fixes and documentation updates</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 24.02.0
  * Support DC NS (NoSession) APIs
  * Support Symmetric Crypto SM3 &amp; SM4
  * Support Asymmetric Crypto SM2
  * Support DC CompressBound APIs
  * Bug Fixes. See Resolved section in README.md</changelog>
  <changelog author="duwe@suse.com" date="1733486400">- update to 24.09.0:
  * Improved performance scaling in multi-thread applications
  * Set core affinity mapping based on NUMA
    (libnuma now required for building)
  * bug fixes, see https://github.com/intel/qatlib#resolved-issues</changelog>
</package>
<package pkgid="791c7fed5dfd808ffad8e2fa713263702f05f8d74e1f5b77fe4ea964776b6fa9c4ae9306c1c0c78e784ac7edb8d263fc16fe840619d231eea442b0d9eca0d2a1" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.41.1" rel="160000.3.1"/>
  <changelog author="sbrabec@suse.com" date="1744027200">- Update to version 2.41:
  * agetty: Fixed an issue where issue files were not being printed
    from additional locations, such as /run or /usr/lib. This
    change now allows for the use of local information from /etc,
    in addition to generated files from /run and
    distribution-specific files from /usr/lib.
  * cfdisk and sfdisk: Added support for the --sector-size command
    line option.
  * sfdisk: Added a new option, --discard-free.
  * fdisk: Added a new command, 'T', to discard sectors.
  * chrt: The --sched-runtime now supports SCHED_{OTHER,BATCH}
    policies.
  * column: Can now handle ANSI SGR colors inside OSC 8 hyperlink
    escape codes and sequences.
  * enosys: Can now dump defined filters.
  * libmount:
  * Added experimental support for statmount() and listmount()
    syscalls.
  * This new functionality can be accessed using "findmnt
  - -kernel=listmount".
  * Added a new mount option,
    X-mount.nocanonicalize[=source|target].
  * Added new mount extensions to the "ro" flag (ro[=vfs,fs]).
  * Added a new option, X-mount.noloop, to disable automatic loop
    device creation.
  * Now supports bind symlinks over symlinks.
  * Reads all kernel info/warning/error messages from new API
    syscalls (and mount(8) prints them).
  * libuuid: Now supports RFC9562 UUIDs.
  * findmnt, lsblk, and lsfd: Added a new --hyperlink command line
    option to print paths as terminal hyperlinks.
  * findmnt: Can now address filesystems using --id and --uniq-id
    (requires listmount() kernel support).
  * flock: Added support for the --fcntl command line option.
  * hardlink: Can now prioritize specified trees on the command
    line using --prioritize-trees.
  * Can exclude sub-trees using --exclude-subtree or keep them in
    the current mount using --mount.
  * Duplicates can now be printed using --list-duplicates.
  * hwclock: Added a new --param-index option to address position
    for RTC_PARAM_{GET,SET} ioctls.
  * kill: Can now decode signal masks (e.g. as used in /proc) to
    signal names.
  * libblkid: Made many changes to improve detection, including
    exfat, GPT, LUKS2, bitlocker, etc.
  * login: Added support for LOGIN_ENV_SAFELIST in /etc/login.def.
  * lsfd: Now supports pidfs and AF_VSOCK sockets.
  * lsipc, ipcmk, ipcrm: Now supports POSIX ipc.
  * lslogins: Now supports lastlog2.
  * lsns: Added support for the --filter option.
  * build by meson: Now supports translated man pages and has fixed
    many bugs.
  * mkswap: The option --file should now be usable on btrfs.
  * nsenter: Improved support for pidfd and can now join target
    process's socket net namespace.
  * scriptlive: Added a new option, --echo &lt;never|always|auto&gt;.
  * zramctl: Now supports COMP-RATIO and --algorithm-params.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41-ReleaseNotes
- Update util-linux-login_defs-check.sh:
  * Make instructions up to date.
  * Update checksum reflecting the shadow update.
- Refresh libmount-print-a-blacklist-hint-for-unknown-filesyst.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1744891200">- Enable mountfd support again (jsc#PED-9752).
  BREAKING CHANGE
  Mountfd is nearly completely compatible with the old mount. There
  is a special case that cannot be handled by mountfd, and it needs
  to be handled by applications:
  Mountfd discriminates between physical mount layer and virtual
  mount layer. Once the physical mount layer is read-only,
  read-write mount on the virtual layer is not possible.
  If the first mount is read only, then the physical filesystem is
  mounted read-only, and later mount of the same file system as
  read-write is not possible. To solve this problem, the first
  mount needs to be read-only only on the virtual layer, keeping
  the physical layer read-write.
  The user space fix is simple:
  Instead of
    mount -oro
  use
    mount -oro=vfs
  This will keep the physical layer read-write, but the virtual
  file system layer (and the user space access) will be read-only.</changelog>
  <changelog author="sbrabec@suse.com" date="1747742400">- Fix segfault of findmnt (boo#1242705,
  gh#util-linux/util-linux#3574,
  util-linux-libblkid-econf-parse.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1748520000">- Add ul_ prefix to functions with common names. Fixes btrfsprogs
  build failure (gh#util-linux/util-linux#3603,
  util-linux-rename-common-symbols-1.patch,
  util-linux-rename-common-symbols-2.patch,
  util-linux-rename-common-symbols-3.patch,
  util-linux-rename-common-symbols-4.patch).</changelog>
  <changelog author="nicolas@belouin.fr" date="1749556800">- Fix libmount --no-canonicalize regression (boo#1244251,
  gh#util-linux/util-linux#3479,
  libmount-fix-no-canonicalize-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1750766400">- Update to version 2.41.1:
  * cfdisk: fix memory leak and possible NULL dereference
  * fdisk: fix possible memory leak
  * findmnt: fix -k option parsing regression (boo#1242705,
    drop util-linux-libblkid-econf-parse.patch)
  * hardlink: fix performance regression
  * include/cctype: fix string comparison
  * libblkid:
  * Fix crash while parsing config with libeconf
  * befs fix underflow
  * avoid strcasecmp() for ASCII-only strings
  * libblkid/src/topology/dm: fix fscanf return value check to
    match expected number of parsed items
  * libmount:
  * (subdir) restrict for real mounts only
  * (subdir) remove unused code
  * avoid calling memset() unnecessarily
  * fix --no-canonicalize regression (boo#1244251,
    drop libmount-fix-no-canonicalize-regression.patch)
  * lsblk:
  * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE
  * avoid strcasecmp() for ASCII-only strings
  * lscpu:
  * fix possible buffer overflow in cpuinfo parser
  * Fix loongarch op-mode output with recent kernel
  * lsfd:
  * scan the protocol field of /proc/net/packet as a hex number
  * fix the description for PACKET.PROTOCOL column
  * lsns:
  * enhance compilation without USE_NS_GET_API
  * fix undefined reference to add_namespace_for_nsfd #3483
  * more:
  * fix broken ':!command' command key
  * fix implicit previous shell_line execution #3508
  * tests: (test_mkfds::mapped-packet-socket) add a new parameter,
    protocol
  * treewide:
  * add ul_ to parse_timestamp() function name
    (drop util-linux-rename-common-symbols-4.patch)
  * add ul_ to parse_switch() function name
    (drop util-linux-rename-common-symbols-3.patch)
  * add ul_ to parse_size() function name
    (drop util-linux-rename-common-symbols-2.patch)
  * add ul_ to parse_range() function name
    (drop util-linux-rename-common-symbols-1.patch)
  * fix optional arguments usage
  * avoid strcasecmp() for ASCII-only strings
  * Wipefs: improve --all descriptions for whole-disks
  * Misc: Do not call exit() on code ending in shared libraries
  * Other fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes
- Fix problem with uname26 listed twice.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
</package>
<package pkgid="c57eb7e2f9fb8fa84aa573d98d4920e322d9dadf015e4544d1a0e0ab427cce836f2edc312a5db33284e5b4805dcb3d3a8363c58fbd490cc1b49e103b40d7ae7f" name="libva-drm2" arch="x86_64">
  <version epoch="0" ver="2.22.0" rel="160000.3.2"/>
  <changelog author="mrueckert@suse.de" date="1669636800">- Added propagate-dpy.patch: (boo#1202828)
  Patch taken from https://github.com/intel/libva/issues/479</changelog>
  <changelog author="mrueckert@suse.de" date="1669636801">- Make sure make runs with verbose builds so we see the gcc
  cmdlines</changelog>
  <changelog author="dmueller@suse.com" date="1673870400">- update to 2.17.0:
  * win: Simplify signature for driver name loading
  * win: Rewrite driver registry query and fix some
    bugs/leaks/inefficiencies
  * win: Add missing null check after calloc
  * va: Update security disclaimer
  * dep:remove the file .cvsignore
  * pkgconfig: add 'with-legacy' for emgd, nvctrl and fglrx
  * meson: add 'with-legacy' for emgd, nvctrl and fglrx
  * x11: move all FGLRX code to va_fglrx.c
  * x11: move all NVCTRL code to va_nvctrl.c
  * meson: stop using deprecated meson.source_root()
  * meson: stop using configure_file copy=true
  * va: correctly include the win32 (local) headers
  * win: clean-up the coding style
  * va: dos2unix all the files
  * drm: remove unnecessary dri2 version/extension query
  * trace: annotate internal functions with DLL_HIDDEN
  * build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_
    support level attribute instead
  * meson: Check support for -Wl,-version-script and build link_args
    accordingly
  * meson: Set va_win32 soversion to '' and remove the install_data rename
  * fix: resouce check null
  * va_trace: Add Win32 memory types in va_TraceSurfaceAttributes
  * va_trace: va_TraceSurfaceAttributes should check the
    VASurfaceAttribMemoryType
  * va: Adds Win32 Node and Windows build support
  * va: Adds compat_win32 abstraction for Windows build and prepares va
    common code for windows build
  * pkgconfig: Add Win32 package for when WITH_WIN32 is enabled
  * meson: Add with_win32 option, makes libdrm non-mandatory on Win
  * x11: add basic DRI3 support
  * drm: remove VA_DRM_IsRenderNodeFd() helper
  * drm: add radeon drm + radeonsi mesa combo</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681387200">- Update to version 2.18.0:
  * doc: Add build and install libva informatio in home page.
  * fix:
  - Add libva.def into distribution package
  - NULL check before calling strncmp.
  - Remove reference to non-existent symbol
  * meson: docs:
  - Add encoder interface for av1
  - Use libva_version over project_version()
  * va:
  - Add VAProfileH264High10
  - Always build with va-messaging API
  - Fix the codying style of CHECK_DISPLAY
  - Remove Android pre Jelly Bean workarounds
  - Remove dummy isValid() hook
  - Remove unused drm_sarea.h include &amp; ANDROID references in
    va_dricommon.h
  - va/sysdeps.h: remove Android section
  * x11:
  - Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var
  - Use LIBVA_DRI3_DISABLE in GetNumCandidates
- Switch to multibuild style. Drop libva-gl.spec|changes and
  pre_checkin.sh.
- Switch to meson build system, add meson BuildRequires, drop
  libtool and xz BuildRequires, and replace gcc-c++ with generic
  c++_compiler.
- Use autosetup and ldconfig_scriptlets macros.
- Add libva-wayland to baselibs.conf, now that its build have moved
  to the main part of spec, source validator should no longer
  complain on SLE.
- Drop propagate-dpy.patch: The upstream issue was closed without
  the patch ever getting applied, and the issue that it fixed was
  deemed to not be a libva issue. See upstream issue:
  https://github.com/intel/libva/issues/479</changelog>
  <changelog author="sndirsch@suse.com" date="1682596800">- reintroduce propagate-dpy.patch (regression fix), since the issue
  still hasn't been fixed in libva-vdpau-driver ...</changelog>
  <changelog author="info@paolostivanin.com" date="1689940800">- Update to 2.19.0:
  * add: Add mono_chrome to VAEncSequenceParameterBufferAV1
  * add: Enable support for license acquisition of multiple protected
    playbacks
  * fix: use secure_getenv instead of getenv
  * trace: Improve and add VA trace log for AV1 encode
  * trace: Unify va log message, replace va_TracePrint with va_TraceMsg.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Update to version 2.20.0:
  * av1: Revise offsets comments for av1 encode
  * drm:
  - Limit the array size to avoid out of range
  - Remove no longer used helpers
  * jpeg: add support for crop and partial decode
  * trace:
  - Add trace for vaExportSurfaceHandle
  - Unlock mutex before return
  - Fix minor issue about printf data type and value range
  * va/backend:
  - Annotate vafool as deprecated
  - Document the vaGetDriver* APIs
  * va/x11/va_fglrx: Remove some dead code
  * va/x11/va_nvctrl: Remove some dead code
  * va:
  - Add new VADecodeErrorType to indicate the reset happended in
    the driver
  - Add vendor string on va_TraceInitialize
  - Added Q416 fourcc (three-plane 16-bit YUV 4:4:4)
  - Drop no longer applicable vaGetDriverNames check
  - Fix:don't leak driver names, when override is set
  - Fix:set driver number to be zero if vaGetDriverNames failed
  - Optimize code of getting driver name for all protocols/os
    (wayland,x11,drm,win32,android)
  - Remove legacy code paths
  - Remove unreachable "DRIVER BUG"
  * win32:
  - Only print win32 driver messages in DEBUG builds
  - Remove duplicate adapter_luid entry
  * x11/dri2: limit the array handling to avoid out of range access
  * x11:
  - Allow disabling DRI3 via LIBVA_DRI3_DISABLE env var
  - Implement vaGetDriverNames
  - Remove legacy code paths
- Refresh propagate-dpy.patch with quilt.</changelog>
  <changelog author="sndirsch@suse.com" date="1701691200">- This includes latest version of one of the components needed for
  Video (processing) hardware support on Intel GPUs (bsc#1217770)</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- update to 2.21.0:
  * va: Add allow_content_tools and force_intger_mv to AV1 enc
  * va: add VASurfaceAttribAlignmentSize
  * va: Re-add drm_state and fd checks to VA_DRM_GetDriverNames
  * va: export symbol vaGetLibFunc for Windows
  * va: Add PRIME3 defination and correct the value
  * va: add driver name map for new intel KMD xe
  * va: export symbol vaMapBuffer2 for Windows
  * va: add new interface vaMapBuffer2 for map operation
    optimization
  * va: Add VAConfigAttribEncMaxTileRows and
    VAConfigAttribEncMaxTileCols
  * va: fix handling when all wayland backends fail
  * va_trace:add return value trace for vaPutSurfaces</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1720008000">- Update to version 2.22.0:
  * va:Add VVC decode LibVA interface.
  * va: fix --version-script detection for lld &gt;= 17
  * wayland: add support for linux-dmabuf
  * meson:remove autogen.sh from the meson script
  * trace: Add bit_depth capturing in trace log</changelog>
</package>
<package pkgid="45e6fd4b9513f6cbbfa173fe4a93320c2885151760d4ce570d8b52c2c4ce637971ae7a19908b2a8405d7698ab19a2d78bb7d8e95bf766976fe9bfcedc896c135" name="libva2" arch="x86_64">
  <version epoch="0" ver="2.22.0" rel="160000.3.2"/>
  <changelog author="mrueckert@suse.de" date="1669636800">- Added propagate-dpy.patch: (boo#1202828)
  Patch taken from https://github.com/intel/libva/issues/479</changelog>
  <changelog author="mrueckert@suse.de" date="1669636801">- Make sure make runs with verbose builds so we see the gcc
  cmdlines</changelog>
  <changelog author="dmueller@suse.com" date="1673870400">- update to 2.17.0:
  * win: Simplify signature for driver name loading
  * win: Rewrite driver registry query and fix some
    bugs/leaks/inefficiencies
  * win: Add missing null check after calloc
  * va: Update security disclaimer
  * dep:remove the file .cvsignore
  * pkgconfig: add 'with-legacy' for emgd, nvctrl and fglrx
  * meson: add 'with-legacy' for emgd, nvctrl and fglrx
  * x11: move all FGLRX code to va_fglrx.c
  * x11: move all NVCTRL code to va_nvctrl.c
  * meson: stop using deprecated meson.source_root()
  * meson: stop using configure_file copy=true
  * va: correctly include the win32 (local) headers
  * win: clean-up the coding style
  * va: dos2unix all the files
  * drm: remove unnecessary dri2 version/extension query
  * trace: annotate internal functions with DLL_HIDDEN
  * build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_
    support level attribute instead
  * meson: Check support for -Wl,-version-script and build link_args
    accordingly
  * meson: Set va_win32 soversion to '' and remove the install_data rename
  * fix: resouce check null
  * va_trace: Add Win32 memory types in va_TraceSurfaceAttributes
  * va_trace: va_TraceSurfaceAttributes should check the
    VASurfaceAttribMemoryType
  * va: Adds Win32 Node and Windows build support
  * va: Adds compat_win32 abstraction for Windows build and prepares va
    common code for windows build
  * pkgconfig: Add Win32 package for when WITH_WIN32 is enabled
  * meson: Add with_win32 option, makes libdrm non-mandatory on Win
  * x11: add basic DRI3 support
  * drm: remove VA_DRM_IsRenderNodeFd() helper
  * drm: add radeon drm + radeonsi mesa combo</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681387200">- Update to version 2.18.0:
  * doc: Add build and install libva informatio in home page.
  * fix:
  - Add libva.def into distribution package
  - NULL check before calling strncmp.
  - Remove reference to non-existent symbol
  * meson: docs:
  - Add encoder interface for av1
  - Use libva_version over project_version()
  * va:
  - Add VAProfileH264High10
  - Always build with va-messaging API
  - Fix the codying style of CHECK_DISPLAY
  - Remove Android pre Jelly Bean workarounds
  - Remove dummy isValid() hook
  - Remove unused drm_sarea.h include &amp; ANDROID references in
    va_dricommon.h
  - va/sysdeps.h: remove Android section
  * x11:
  - Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var
  - Use LIBVA_DRI3_DISABLE in GetNumCandidates
- Switch to multibuild style. Drop libva-gl.spec|changes and
  pre_checkin.sh.
- Switch to meson build system, add meson BuildRequires, drop
  libtool and xz BuildRequires, and replace gcc-c++ with generic
  c++_compiler.
- Use autosetup and ldconfig_scriptlets macros.
- Add libva-wayland to baselibs.conf, now that its build have moved
  to the main part of spec, source validator should no longer
  complain on SLE.
- Drop propagate-dpy.patch: The upstream issue was closed without
  the patch ever getting applied, and the issue that it fixed was
  deemed to not be a libva issue. See upstream issue:
  https://github.com/intel/libva/issues/479</changelog>
  <changelog author="sndirsch@suse.com" date="1682596800">- reintroduce propagate-dpy.patch (regression fix), since the issue
  still hasn't been fixed in libva-vdpau-driver ...</changelog>
  <changelog author="info@paolostivanin.com" date="1689940800">- Update to 2.19.0:
  * add: Add mono_chrome to VAEncSequenceParameterBufferAV1
  * add: Enable support for license acquisition of multiple protected
    playbacks
  * fix: use secure_getenv instead of getenv
  * trace: Improve and add VA trace log for AV1 encode
  * trace: Unify va log message, replace va_TracePrint with va_TraceMsg.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Update to version 2.20.0:
  * av1: Revise offsets comments for av1 encode
  * drm:
  - Limit the array size to avoid out of range
  - Remove no longer used helpers
  * jpeg: add support for crop and partial decode
  * trace:
  - Add trace for vaExportSurfaceHandle
  - Unlock mutex before return
  - Fix minor issue about printf data type and value range
  * va/backend:
  - Annotate vafool as deprecated
  - Document the vaGetDriver* APIs
  * va/x11/va_fglrx: Remove some dead code
  * va/x11/va_nvctrl: Remove some dead code
  * va:
  - Add new VADecodeErrorType to indicate the reset happended in
    the driver
  - Add vendor string on va_TraceInitialize
  - Added Q416 fourcc (three-plane 16-bit YUV 4:4:4)
  - Drop no longer applicable vaGetDriverNames check
  - Fix:don't leak driver names, when override is set
  - Fix:set driver number to be zero if vaGetDriverNames failed
  - Optimize code of getting driver name for all protocols/os
    (wayland,x11,drm,win32,android)
  - Remove legacy code paths
  - Remove unreachable "DRIVER BUG"
  * win32:
  - Only print win32 driver messages in DEBUG builds
  - Remove duplicate adapter_luid entry
  * x11/dri2: limit the array handling to avoid out of range access
  * x11:
  - Allow disabling DRI3 via LIBVA_DRI3_DISABLE env var
  - Implement vaGetDriverNames
  - Remove legacy code paths
- Refresh propagate-dpy.patch with quilt.</changelog>
  <changelog author="sndirsch@suse.com" date="1701691200">- This includes latest version of one of the components needed for
  Video (processing) hardware support on Intel GPUs (bsc#1217770)</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- update to 2.21.0:
  * va: Add allow_content_tools and force_intger_mv to AV1 enc
  * va: add VASurfaceAttribAlignmentSize
  * va: Re-add drm_state and fd checks to VA_DRM_GetDriverNames
  * va: export symbol vaGetLibFunc for Windows
  * va: Add PRIME3 defination and correct the value
  * va: add driver name map for new intel KMD xe
  * va: export symbol vaMapBuffer2 for Windows
  * va: add new interface vaMapBuffer2 for map operation
    optimization
  * va: Add VAConfigAttribEncMaxTileRows and
    VAConfigAttribEncMaxTileCols
  * va: fix handling when all wayland backends fail
  * va_trace:add return value trace for vaPutSurfaces</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1720008000">- Update to version 2.22.0:
  * va:Add VVC decode LibVA interface.
  * va: fix --version-script detection for lld &gt;= 17
  * wayland: add support for linux-dmabuf
  * meson:remove autogen.sh from the meson script
  * trace: Add bit_depth capturing in trace log</changelog>
</package>
<package pkgid="e9976e39d395dc24385124bbb763ae284e5d11ff597af7b3c9ae0e2c5e8b0da095520488de5bf2d3f4d8d50c26ca49da1a8f3ba3e199fbd1fe49017f95c1aa7a" name="libvdeplug3" arch="x86_64">
  <version epoch="0" ver="2.3.2+svn587" rel="160000.2.2"/>
  <changelog author="andrea@opensuse.org" date="1305806400">- split out slirpvde to fix legal issues in bug bnc694822
- fixed descriptions on libraries subpackages</changelog>
  <changelog author="andrea@opensuse.org" date="1334577600">- new upstream version 2.3.2 (bug fix release)
- disabled paralled job that break build
- added python support</changelog>
  <changelog author="coolo@suse.com" date="1359892800">- update license to new format</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Drop README.SUSE we are better of with the online guides
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1500465601">- Add patch to build with our gcc checks:
  * vde2-buffer-overflow.patch
- Switch to svn checkout service in order to get something newer
  than 2011 tarball
- Update to version 2.3.2+svn587:
  * allow pipes on stdin for daemonized switches
  * vde_vxlan initial release
  * Add format string to fprintf calls.
  * Clean up unused variables.
  * In 2014, I think we can stop trying to outsmart the compiler. Remove
  * "register" storage class.
  * Add missing headers in vde_router Makefile.am.
  * Add missing format string in snprintf.
  * Add missing source files in vde_vxlan Makefile.am.
  * Enable vde_over_ns when header is present.
  * Remove unused variable in vde_over_ns.
  * vde_autolink: Add missing null entry in getopt_long array.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rename devel subpackages according to shared library guideline.
- Rectify RPM groups.</changelog>
  <changelog author="vcizek@suse.com" date="1505131200">- Patch for openssl 1.1 compatibility
  * add vde2-openssl_1.1_compatibility.patch from Debian</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Drop python2 from the buildrequirements
  * This means we lose python bindings but as the package is no
    longer developed there is 0 chance to obtain python3 bindings
    and the code is not compatible</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="mjambor@suse.com" date="1721044800">- Added vde2-C99.patch to avoid a C99 violation preventing the package
  to be built with GC 14.  [boo#1225950]</changelog>
</package>
<package pkgid="ff560cf74074725f36922488271ccd8bada1b0fe601b9b575578866eda744fd795af1c20d33d70b15f9f8496ce0b02cc071fe70b0aa8fa36347bbbd1e1bffc49" name="libverto1" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="160000.2.2"/>
  <changelog author="pth@suse.de" date="1431086400">- Name shared library packages according to policy.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1432987200">- Add baselibs.conf to enable multilib.
- Spec cleanup.</changelog>
  <changelog author="hguo@suse.com" date="1434974400">- Remove irrelevant changelog entries from changelog file.</changelog>
  <changelog author="mlin@suse.com" date="1463400000">- Split off libev, glib and tevent module to sub-package</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- [fate#320326](https://fate.suse.com/320326)</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add libverto-devel baselib for use by libkrb5-devel-32bit,
  for use by Wine 32bit.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="dmueller@suse.com" date="1598529600">- update to 0.3.1:
  * Fix rare leak of DSO in module_load
  * Turn off -Wcast-function-type
  * Work around libev not being c89-compliant
  * Minor release bumps for verto_cleanup()
  * Leak fixes
  * Enforce strict c89 compliance for portability
  * Many warning fixes
  * Fix memleak in libverto:vfree
  * Update mutex usage to improve debugging
  * Add verto_cleanup() to free loaded_modules
  * Make C99 requirement explicit</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 0.3.2:
  * Fix use-after-free in verto_reinitialize
  * Fix use-after-free in verto_free()
  * Remove broken tevent support</changelog>
  <changelog author="dimstar@opensuse.org" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="14222ad6cbb95b5be09168861088ea971b16141fe57a5d577700c71ef07d355bd3252d2a180a779d08ca58a2d35da67177aceeeb705f3f5ba9c0631bb647363a" name="libvirglrenderer1" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="160000.2.2"/>
  <changelog author="brogers@suse.com" date="1580817600">- Avoid potential DoS in texture allocation (CVE-2020-8003
  boo#1162521)
  vrend-Don-t-free-resource-struct-in-_resource_alloca.patch
- Avoid potential DoS if grid launched without prior Compute Shader
  (CVE-2020-8002 boo#1162519)
  vrend-Don-t-try-launching-a-grid-if-no-CS-is-availab.patch
- Avoid deleting wrong object, in use by others
  vrend-Use-the-original-context-to-delete-objects.patch
- Avoid potential use after free when deleting context
  vrend-Don-t-switch-to-ctx0-when-deleting-ctx0.patch</changelog>
  <changelog author="brogers@suse.com" date="1581508800">- Update package to 0.8.2
  Release is all bug fixes it seems. It includes these patches in
  the release tarball:
  vrend-Don-t-free-resource-struct-in-_resource_alloca.patch
  vrend-Don-t-try-launching-a-grid-if-no-CS-is-availab.patch
  vrend-Use-the-original-context-to-delete-objects.patch
  vrend-Don-t-switch-to-ctx0-when-deleting-ctx0.patch</changelog>
  <changelog author="brogers@suse.com" date="1617537600">- Update package to 0.9.0
  Highlights include:
  + multi-client support
  + supports newer glsl version
  + add ETC2 compressed formats
  + performance improvements
  + misc. bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1619697600">- Update to version 0.9.1:
  * Various small bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1642420800">- security update
- added patches
  fix CVE-2022-0175 [bsc#1194601], VUL-0: CVE-2022-0175: virglrenderer: Missing initialization of res-&gt;ptr
  + virglrenderer-CVE-2022-0175.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1642766400">- Pick up the full upstream patch for bsc#1194601, so we know from where it comes
  * No functional change intended</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- security update
  * Fix OOB in read_transfer_data() (CVE-2022-0135 bsc#1195389)
    Add virglrenderer-CVE-2022-0135.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697630400">- Update to version 1.0.0:
  + Switch to Venus protocol version 1.0.0
  + Drop experimental tag from Venus configuration flag and update
    API.
  + Support passing fences from guest to host for waiting
    and inter-context fence sharing/syncing.
- Drop virglrenderer-CVE-2022-0175.patch and
  virglrenderer-CVE-2022-0135.patch: fixed upstream.</changelog>
  <changelog author="mantarimay@pm.me" date="1700049600">- Add pkgconfig(libva) BuildRequires: Enable support for hardware
  video acceleration
- Add pkgconfig(vulkan) BuildRequires: Enable support for venus on
  Tumbleweed (build failed on leap)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 1.0.1:
  * Fix 17 bugs, most of them securety related
  * Fix a number of issues uncovered by Coverity
  * Add meson option to enable unstable APIs and add the info
    to pkg-config
  * vtest: Stabilize protocol version 3</changelog>
</package>
<package pkgid="b209144334a2ca66b26b388eeac6d60552f6b47c01701cb7d9ceea707ff1a315d3ee8174ea5fb6c57635e4ad882fa2273e10f961e52678913726f4a7dd93d217" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="2f6286c771eb57b92aa1f5bedc4a1c881db2cc87bc82b2dd93789435bcb6bd88402c0ef6bbf4421f84335db4038d0dec8d58ad00759d1df16237fd51cc6dfddd" name="libvirt-client-qemu" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="6ad449dc7d59a3d79839a01c521ae33a460dca4ca51c61e70ef5c21b8c0198e1b0f878c3f392576f662ff3cbf3a648f4de669f256166cbfb686544957ae0010c" name="libvirt-daemon-common" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="9f6c0beee1a40b80e7619b5c3eb63f13c2eceabdbbd3bf13c3fce0f3e219124bf6f513f0b009fac76a00af443c4565467d2db6247871ba04c9238ae73e711c7c" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="2ab7706f0cce0316582c0a20d8e1d8c2c9671e1e43ea19c94cf94fa94cb0ddd57f21682f8347976fc0ec04c59adbdc1f14f1c7546f4dfd7248400c499de302ab" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="068c559d126c9e6c2ae59d065212fa9c833a20067c3ef7e5f0335991e62d438436aa4ab11e7ab8fc9208edcdf247e424e80cd43a9ddd16c3f0b2e55ee7e65361" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="6ba46a6840c66878f3d162c6b87b6af867eb83a2180dc0f063362544fa959fd1783f61d762530ceccc2751dc850d95189c91cf2af50927da8b173cd6f95025a0" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="2ca5c985505b553322cd8a2a0c109adb0f96df8b96f4279de4ade33a35ccc63d3e662190388faa0e0ec3cd4d11e8eb23702b6d1d29305fc77e01ba5b8a94748d" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="527c42a9763afd076b824871f329ee94bf19342e1a828de569c93e67ce9aeea92ee0825945e9957c9d509c3a18809503dc9d02f4af38579e5e8e4d68bcb6fc65" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="02114da87408bf9311cee2794a7a22e58b7731f1984ff6662bfef4cd44d022a65a872fd9dba34f2c3b4bb1bf967b2b31b12343f76053b9885130be12f0f41e11" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="b749e164bba8c011ad8b65f6ab20ec274a40d8dcae0d6bc889e572253c780560f26f06174a13c667ed47a628e87a5147e65ca684537ea00dceb7174db4c40fda" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="cdd7db90144c5c70f9a202460f14b5d9aa18a0a53e26ad50775ebcc59bad66ca5718ca0a52b5279410c6e11430040e3a0c2b7921afcd36f7e1b7a66e0ca23f96" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="fb89f59a5eb8d78e73576b72655700ebf80f2e7cd3bad93f3e50b54d21a89e70a39133e5abadc2c26001532ce4a928bfb5ebaedae40d8eb5076821d065eb2d57" name="libvirt-daemon-driver-storage-iscsi-direct" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="14f7e767ab149d901e6d4197b9870d5732cd4389d6d2009c7577a8d13431632c499c26cc68efa23bdd4639d175ed0b9c514af1ad46b42b2ed5d3914b9fa14f90" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="731a8f619405f515399d450e6fa5e3522a35145b9ee8e0514a14e2be783e34173980b013c544d6a69fdd90dc689974aa5a0a5ed94631efacd936ccfb78d504cf" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="6e1cd12f83ffe0c0e05ce72eb0ea160fbde591b21b40626f2585b7be1fff60d481c4ec038323f852e32f98397f35d405ecbe63cbaf2b1e8251fe83ab36e8e408" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="aac01af2ab9756b51f2c07a27b304a47051f7fea253052efe2b758fc27ea22805432cc21c177531271450654bbfcc43045263d4edfdad6905e9f356dd4af1da6" name="libvirt-daemon-hooks" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="6e8e0e05140883e35e6849a92069a0e45f31d8c97a72a00b8a6a67d3c773f1879309c038eec1649969eab19b87caf6ffc67ed50a4ba35d9e11c559b0c0560ed1" name="libvirt-daemon-lock" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="860bac012993c99911ae21a980439eb24fd97ff8f0bd95d00cd1e67e75742fa96f0ff4fa398d550080708326030ca89ff86fa728eb549c8dcb9162ee97cd0d81" name="libvirt-daemon-log" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="0962808b542b7fad7311b413b60b669af45c1c0abf7038a176780f5633f0799c5c2239eabc516e2d394422e7757b1cf014a28003e127d009adc042ca4985c0fb" name="libvirt-daemon-plugin-lockd" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="10302295afe164c609379bd16ee434cdbccb97c4a17ee230c8beadcd60cb6cbfa9bc7b76c06bffdcd5eb17ccd2b2d9b9d4d3f7b26fe66de1c6165aec10a213a1" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="a073215fba734dc2817a88ae12a056ad10f351c4096808136ace545a30879144b91b6d21e712fbfa9536aa201aa9336f99bf24f44258fb23b66ba8246f29e7d4" name="libvirt-dbus" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="160000.3.2"/>
  <changelog author="lnussel@suse.de" date="1592395200">- initial package version 1.4.0</changelog>
  <changelog author="jfehlig@suse.com" date="1594123200">- spec: Switch from explicitly adding user:group to sysuser
  mechanism</changelog>
  <changelog author="lnussel@suse.de" date="1601899200">- Actually require sysuser package
- Backport patch from git to autostart dbus interface using systemd
  (libvirt-dbus-systemd.diff)</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- Fix syntax errors in system-user-libvirt-dbus.conf
  boo#1178530</changelog>
  <changelog author="jfehlig@suse.com" date="1622030400">- Add libvirtdbus user to libvirt group
  boo#1182538</changelog>
  <changelog author="jfehlig@suse.com" date="1647000000">- Update to version 1.4.1:
  * Release of libvirt-dbus 1.4.1
  * tests: allow running our tests against installed libvirt-dbus
  * tests: report proper error if `abs_top_builddir` is not defined
  * gitlab: use --fatal-meson-warnings in builds
  * meson: add git_werror option and only set if -Dwerror is not set
  * meson: honour meson warning_level setting
  * gitlab: adapt to use meson for libvirt-glib build
  * ci: refresh containers for CentOS-8 PowerTools repo rename
  * gitlab: replace "libvirt-" prefix with "ci-" in dockerfiles
  * gitlab: refresh containers with lcitool for fully minimized base
  * Dropped patches: libvirt-dbus-systemd.diff
- Add source service file
- Change system-user-libvirt-dbus subpackage to noarch
- Require libvirt group in system-user-libvirt-dbus subpackage
  bsc#1196968</changelog>
  <changelog author="gmbr3@opensuse.org" date="1647000001">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1647777600">- Avoid self cycle due to user</changelog>
</package>
<package pkgid="543fc55cc8755dda585ba986c67da1b57e05f8df287980d76b74add836673476038bacc48c342c2ced5c9dd127a6e833447f976c15080be0164d317af8febdc3" name="libvirt-glib-1_0-0" arch="x86_64">
  <version epoch="0" ver="5.0.0" rel="160000.3.2"/>
  <changelog author="cbosdonnat@suse.com" date="1436270400">- Fix setting file system type and format.
  bsc#936841 46897c1b-fs-type-fix.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 0.2.2:
  + Add API for getting interface MAC address.
  + Simplify implementation of object listing APIs.
  + Fix memory leaks of virConnect objects.
  + Port to use GTask instead of GSimpleAsyncResult.
  + Add API to get list of physical network interfaces.
  + Add API to get list of virtual networks.
  + Add API to get DHCP address of virtual networks.
  + Avoid overwriting filesystem type when setting format.
  + Include XML data for tests in dist.
  + Add support for UNIX chardev sources.
  + Fix test linking on platforms with strict linker deps.
  + Add ability to set video ram + vgamem.
- Drop 46897c1b-fs-type-fix.patch: Fixed upstream.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 0.2.3:
  + virt-admin and administration API.
  + Various improvements in virtio devices support.
  + Log daemon: logging improvements and protocol.
  + network: selectively disable -Wcast-align in
    virNetDevParseDadStatus.
  + log_manager: Include configmake.h last.
  + virtlogd:
  - Fix build without DBus.
  - Use %llu to print 64bit types.</changelog>
  <changelog author="zaitor@opensuse.org" date="1479211200">- Update to version 1.0.0:
  + Switch to new release numbering scheme, major digit incremented
    each year, minor for each release, micro for stable branches
    (if any).
  + Fix Libs.private variable in pkg-config file.
  + Fix git introspection warnings.
  + Add ability to set SPICE gl property.
  + Add support for virtio video model.
  + Add support for 3d accel property.
  + Add support for querying video model.
  + Add support for host device config for PCI devs.
  + Add docs for more APIs.
  + Avoid unused variable warnings.
  + Fix check for libvirt optional features to use pkg-config.
  + Delete manually written python binding. All apps should use
    PyGObject with gobject introspection.
  + Allow schema to be NULL on config objects.
  + Preserve unknown devices listed in XML.
  + Add further test coverage.
- Add gpg signed source.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546689600">- Update to version 2.0.0:
  + Increase min libvirt to 1.2.5.
  + Increase min glib to 2.38.
  + Fix example program event detail strings.
  + Set LC_CTYPE=en_US.UTF-8 when running python apps.
  + Don't relay on non-portable paths.
  + Fix sha-bang lines for portability.
  + Remove bogus casts for g_object_ref args.
  + Disable -Wcast-function-type warnings.
  + Modernize gobject macro usage.
  + Allow adding namespace to child nodes.
  + Add ICH9 audio support.
  + Add API for getting machine type.
  + Updated translations.
- Add fdupes BuildRequires and macro: Remove duplicates.</changelog>
  <changelog author="jfehlig@suse.com" date="1575374400">- Update to version 3.0.0
  + Add support for bochs video device
  + Add API to query firmware config
  + Improve testing coverage
  + Validate min/max glib API versions in use
  + Remove deprecated G_PARAM_PRIVATE
  + Fix docs build linking problems
  + Convert python demos to be python 3 compatible &amp; use
    modern best practice for pyobject introspection bindings
  + Add API to query domain capaibilities
  + Refresh translations
  + Simplify build process for handling translations
  + Fix some memory leaks
  + Add API for setting storage volume features
  + boo#1158282</changelog>
  <changelog author="dimstar@opensuse.org" date="1616155200">- Update to version 4.0.0:
  + Replace autotools build system with meson.
  + Mandate libvirt &gt;= 1.2.8.
  + Mandate libxml2 &gt;= 2.9.1.
  + Mandate glib &gt;= 2.48.0.
  + Mandate gobject-introspection &gt;= 1.46.0.
  + Fix docs incompatibility with gtk-doc &gt;= 1.30.
  + Misc API docs fixes.
  + Add constants related to NVRAM during domain delete.
  + Add domain config API for controller ports attribute.
  + Fix compat with newer glib by avoid volatile for enum types.
  + Updated translations.
- Switch build system to meson:
  + Drop libtool BuildRequires: no longer needed.
  + Add meson BuildRequires.
  + Add gtk-doc BuildRequires: new dependency.
  + Replace configure/make/make_install macros with
    meson/meson_build/meson_install variants.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701864000">- Update to version 5.0.0:
  + Fix compatiblity with libxml2 &gt;= 2.12.0
  + Bump min libvirt version to 2.3.0
  + Bump min meson to 0.56.0
  + Require use of GCC &gt;= 4.8 / CLang &gt; 3.4 / XCode CLang &gt; 5.1
  + Mark USB disks as removable by default
  + Add support for audio device backend config
  + Add support for DBus graphics backend config
  + Add support for controlling firmware feature flags
  + Improve compiler flag handling in meson
  + Extend library version script handling to FreeBSD
  + Fix pointer sign issue in capabilities config API
  + Fix compat with gnome.mkenums() in Meson 0.60.0
  + Avoid compiler warnings from gi-ir-scanner generated code by
    not setting glib version constraints
  + Be more robust about NULL GError parameters
  + Disable unimportant cast alignment compiler warnings
  + Use ‘pragma once’ in all header files
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
</package>
<package pkgid="ecd92e36d3207ebd39dd00f2f93e4b277d56685095ab306ecb5a1b143506aab15aca31de59c04d8f97eea722da036d3615442eb87e1fee09bd58eb770f466ea6" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="9b129fbb15903223881e4a06a26201316973345a24579c8238dcb632684a6f43cdd8f9f41b37fec39653b335f50aa609dde28e7b5b019a7690079b3e702d15b7" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.3.1"/>
  <changelog author="jfehlig@suse.com" date="1744286400">- cpu_map: Install Ampere-1 ARM CPU models
  bsc#1240922</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to libvirt 11.3.0
  - bsc#1241952
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-3-0-2025-05-02
- spec: Build with fuse3
  boo#1242081</changelog>
  <changelog author="jfehlig@suse.com" date="1748433600">- spec: Drop dependencies on the nwfilter driver (which requires
  iptables) for Factory and SLFO
  boo#1231798, jsc#PED-12034</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to libvirt 11.4.0
  - bsc#1241481, boo#1243740, bsc#1244488
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-4-0-2025-06-02
- spec: Drop support for old distros</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-12821</changelog>
  <changelog author="jfehlig@suse.com" date="1751976000">- qemu: ARM: Change default SCSI controller model from 'lsilogic'
  to 'virtio-scsi'
  bsc#1240762</changelog>
  <changelog author="cathy.hu@suse.com" date="1754481600">- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
  %post script (see comment 13 in bsc#1242998)</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Add support for Intel TDX
  jsc#PED-9265</changelog>
  <changelog author="jfehlig@suse.com" date="1763208000">- spec: Adjust dbus dependency
  bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1763553600">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703</changelog>
</package>
<package pkgid="c813c9bcf8cb446aa070fc2128e655aa0672874dcedae312f5f4072b122d014e08764f001453405676546f47a2e7811508714b4087142a4d3a302202ddddbb40" name="libvisual-0_4-0" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="160000.3.2"/>
  <changelog author="anixx@opensuse.org" date="1308916800">- added a patch from Debian to fix build</changelog>
  <changelog author="mls@suse.de" date="1319198400">- do not use /usr/src/packages in specfile</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="dvaleev@suse.com" date="1343304000">- defining inline causes problems trying to build against
  libvisual headers</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="jengelh@inai.de" date="1652270400">- Remove old specfile constructs
- Remove --with-pic, this is only useful with --enable-static
- Make %install sh-compatible
- Remove .la files, I do not think we will need it
- Repair rpmlint error "libvisual.x86_64: E:
  shlib-policy-name-error SONAME: libvisual-0.4.so.0, expected
  package suffix: 0_4-0"</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1718366400">- Imported C99 compatibility fixes from Fedora project:
  https://src.fedoraproject.org/rpms/libvisual/c/bcffd8eddbbcab5b00f930805396be5fdb55c5a7?branch=rawhide
  it fixes build error when using GCC14 (boo#1225859)
  (added libvisual-configure-c99.patch and libvisual-c99.patch).</changelog>
</package>
<package pkgid="30912036041eb6e0707b70e6f804a8f18e10703de0a26f9b95bcd01a0babad9af65bec26efeefa872e9fdd58fdb32b2081bceeeaedb95fc65f97a8f0a30e885e" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="13.0.10" rel="160000.1.1"/>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
</package>
<package pkgid="9e89c9f383229d5dcf37e2709381cbad8a01da19ad4729bba82c64865abbb524e7d2273ed07f9e76f2c573e621b2377134b907e40f8f9985715b9d7d19195e1e" name="libvorbis0" arch="x86_64">
  <version epoch="0" ver="1.3.7" rel="160000.3.2"/>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1594382400">- Update to version 1.3.7
  * Fix CVE-2018-10392 and CVE-2018-10393 - out-of-bounds read
    encoding very low sample rates
  * Fix CVE-2017-14160 - out-of-bounds read encoding very low
    sample rates.
  * Fix handling invalid bytes per sample arguments.
  * Fix handling invalid channel count arguments.
  * Fix invalid free on seek failure.
  * Fix negative shift reading blocksize.
  * Fix accepting unreasonable float32 values.
  * Fix tag comparison depending on locale.
  * Fix unnecessarily linking libm.
  * Fix memory leak in test_sharedbook.
  * Distribute CMake build files with the source package.
  * Remove unnecessary configure --target switch.
  * Add OSS-Fuzz support.
  * Build system and integration updates.
- Drop not longer needed patches (fixed by upstream):
  * vorbis-CVE-2017-14160.patch
  * vorbis-CVE-2018-10392.patch
  * vorbis-CVE-2018-10393.patch
- Add source verification</changelog>
  <changelog author="gmbr3@opensuse.org" date="1655294400">- Remove bad %defattr - not needed and causes SHLIB non-executable
  rpmlint error</changelog>
  <changelog author="mpluskal@suse.com" date="1678708800">- Build AVX2 enabled hwcaps library for x86_64-v3
- Small spec file cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="b08e1958f488bbbc8a1918c4e6d2c178c7d07fa93288f85c9deb3ba288bb3d8def3ebc20b304954a6669277ff10560c7f289ccd3c45fc2cee5048b736ab1f113" name="libvorbisenc2" arch="x86_64">
  <version epoch="0" ver="1.3.7" rel="160000.3.2"/>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1594382400">- Update to version 1.3.7
  * Fix CVE-2018-10392 and CVE-2018-10393 - out-of-bounds read
    encoding very low sample rates
  * Fix CVE-2017-14160 - out-of-bounds read encoding very low
    sample rates.
  * Fix handling invalid bytes per sample arguments.
  * Fix handling invalid channel count arguments.
  * Fix invalid free on seek failure.
  * Fix negative shift reading blocksize.
  * Fix accepting unreasonable float32 values.
  * Fix tag comparison depending on locale.
  * Fix unnecessarily linking libm.
  * Fix memory leak in test_sharedbook.
  * Distribute CMake build files with the source package.
  * Remove unnecessary configure --target switch.
  * Add OSS-Fuzz support.
  * Build system and integration updates.
- Drop not longer needed patches (fixed by upstream):
  * vorbis-CVE-2017-14160.patch
  * vorbis-CVE-2018-10392.patch
  * vorbis-CVE-2018-10393.patch
- Add source verification</changelog>
  <changelog author="gmbr3@opensuse.org" date="1655294400">- Remove bad %defattr - not needed and causes SHLIB non-executable
  rpmlint error</changelog>
  <changelog author="mpluskal@suse.com" date="1678708800">- Build AVX2 enabled hwcaps library for x86_64-v3
- Small spec file cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="3d180b596f5d7d6101e627063f6dcd00c94438f3be60373eb745b740e40269e5499d474d4cd5dd1ac523f4482b81c4ce4bb4b7de4349c2e4b93459c7d8dbb4de" name="libvulkan1" arch="x86_64">
  <version epoch="0" ver="1.4.309" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1692705600">- Update to release SDK-1.3.261.0
  * Warn when ICD Manifest version differs from
    vkEnumerateInstanceVersion
  * Enable VK_KHR_maintenance_5 support</changelog>
  <changelog author="jengelh@inai.de" date="1698408000">- Update to release SDK-1.3.268.0
  * Add VK_LOADER_LAYERS_ALLOW environment variable.
  * Add Debug extension support to test layer</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Align the fallback XDG config dirs with SUSE spec in-case it
  can't read it from the environment</changelog>
  <changelog author="stigpro@outlook.fr" date="1705579200">- Update to release SDK-1.3.275.0
  * Instance extensions unsupported by physical devices now return
    ERROR_EXTENSION_NOT_PRESENT
  * Unload drivers which report 0 physical devices</changelog>
  <changelog author="jengelh@inai.de" date="1710936000">- Update to release SDK-1.3.280.0
  * Bugfixes for Windows</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release SDK-1.3.283.0
  * Bugfixes for Windows</changelog>
  <changelog author="jengelh@inai.de" date="1721736000">- Update to release SDK-1.3.290
  * Remove faulty fallback for unknown functions
  * tests: Allow test ICD to handle NULL pApplicationInfo
  * Fix preloaded ICDs being freed with custom allocators
  * Fix RegCloseKey exeption when double-closing hKeys</changelog>
  <changelog author="jengelh@inai.de" date="1728388800">- Update to release SDK-1.3.296
  * Use ASM unknown function trampolines on GN
  * Fix vkCreateSharedSwapchainsKHR not unwrapping handles correctly
  * Remove unused VkIcdSurface struct members
  * Add VK_IMPLICIT_LAYER_APTH &amp; VK_ADD_IMPLICIT_LAYER_PATH env-vars
  * Fix windows_read_sorted_physical_devices buffer overrun</changelog>
  <changelog author="jengelh@inai.de" date="1734868800">- Update to tag 1.4.304
  * Emulate VK_EXT_surface_maintenance1 if not supported by a driver
  * Add handle checking to test instance &amp; device creation
  * Add settings test for layer control OFF &amp; VK_INSTANCE_LAYERS
  * Make Settings file "ON" take priority over disable env-var
  * Log what caused each layer to be enabled
  * Log when Filter Env-Vars act when settings file is active
  * Add more logging when the settings file has invalid members</changelog>
  <changelog author="jengelh@inai.de" date="1741867200">- Update to tag SDK-1.4.309.0
  * Make Xrandr not implicitly required when x11 is used
  * Make emulate_VK_EXT_surface_maintenance1 comply better with
    Vulkan spec
  * Support VK_GOOGLE_surfaceless_query</changelog>
</package>
<package pkgid="b4f019772ca67c43efed9fbec1a99c4d854aabdf931162480901dcc40c273b0a8244c3adf8aa64680f08a0ce5333753b981a1bd8edb627f493b8ce5f038d22d0" name="libwayland-client0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="160000.1.2"/>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="llyyr.public@gmail.com" date="1680609600">- Update to release 1.22.0
  * This new release adds explicit events for the preferred buffer scale
    and transform, adds an event to indicate the pointer's physical scroll
    direction, adds a few new convenience functions, and includes various
    spec clarifications and bug fixes.</changelog>
  <changelog author="joan.torres@suse.com" date="1718884800">- Update to release 1.23.0
  * A mechanism to set the size of the internal connection buffer used by
    libwayland
  * An enum-header mode for wayland-scanner to generate headers with only enums
  * wayland-scanner now generates validator functions for enums on the server
    side
  * Protocols can now indicate with a "deprecated-since" XML attribute that a
    request, event or enum entry is deprecated
  * An API to set a name for a queue to aid debugging
  * wl_client_get_user_data() and wl_client_set_user_data() to more easily attach
    custom data to a client
  * OpenBSD support
  * A wl_shm.release request for proper cleanup of this global</changelog>
  <changelog author="llyyr@yukari.in" date="1726574400">- Update to release 1.23.1:
  * meson: Fix use of install_data() without specifying install_dir
  * Put WL_DEPRECATED in front of the function declarations
  * client: Handle proxies with no queue
  * scanner: extract validator function emission to helper function
  * scanner: fix validator for bitfields
  * tests: add enum bitfield test</changelog>
  <changelog author="hillwood@opensuse.org" date="1742558400">- Disable test on loongarch.</changelog>
  <changelog author="schwab@suse.de" date="1749297600">- Skip tests in qemu emulation</changelog>
  <changelog author="jengelh@inai.de" date="1751803200">- Update to release 1.24
  * A new wl_fixes interface to add a request to destroy a
    wl_registry object.
  * A new wl_keyboard.key repeated state, to allow compositors to
    take over the responsibility of repeating keys, which is
    useful for remote desktop.
  * wl_display_dispatch_queue_timeout() and
    wl_display_dispatch_timeout(), to set a timeout when
    dispatching events.
  * wl_shm_buffer_ref() and wl_shm_buffer_unref(), to access
    wl_shm_buffer underlying storage after the protocol object
    has been destroyed (e.g. when a client is shutting down).
  * wl_proxy_get_interface() and wl_resource_get_interface(), to
    fetch the wl_interface of an object.
  * wl_resource_post_error_vargs(), as an alternative to
    wl_resource_post_error() when the compositor already has a
    va_list.</changelog>
</package>
<package pkgid="bbc0a33e2ea250caf3196b2a1d5e736b6ae5b13af6a6086ad8022c57ebe4c1e1c35335ab64dfd87a04014ad1625b4dd9b62b6a74483b0001dcda387a03fbe1fc" name="libwayland-cursor0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="160000.1.2"/>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="llyyr.public@gmail.com" date="1680609600">- Update to release 1.22.0
  * This new release adds explicit events for the preferred buffer scale
    and transform, adds an event to indicate the pointer's physical scroll
    direction, adds a few new convenience functions, and includes various
    spec clarifications and bug fixes.</changelog>
  <changelog author="joan.torres@suse.com" date="1718884800">- Update to release 1.23.0
  * A mechanism to set the size of the internal connection buffer used by
    libwayland
  * An enum-header mode for wayland-scanner to generate headers with only enums
  * wayland-scanner now generates validator functions for enums on the server
    side
  * Protocols can now indicate with a "deprecated-since" XML attribute that a
    request, event or enum entry is deprecated
  * An API to set a name for a queue to aid debugging
  * wl_client_get_user_data() and wl_client_set_user_data() to more easily attach
    custom data to a client
  * OpenBSD support
  * A wl_shm.release request for proper cleanup of this global</changelog>
  <changelog author="llyyr@yukari.in" date="1726574400">- Update to release 1.23.1:
  * meson: Fix use of install_data() without specifying install_dir
  * Put WL_DEPRECATED in front of the function declarations
  * client: Handle proxies with no queue
  * scanner: extract validator function emission to helper function
  * scanner: fix validator for bitfields
  * tests: add enum bitfield test</changelog>
  <changelog author="hillwood@opensuse.org" date="1742558400">- Disable test on loongarch.</changelog>
  <changelog author="schwab@suse.de" date="1749297600">- Skip tests in qemu emulation</changelog>
  <changelog author="jengelh@inai.de" date="1751803200">- Update to release 1.24
  * A new wl_fixes interface to add a request to destroy a
    wl_registry object.
  * A new wl_keyboard.key repeated state, to allow compositors to
    take over the responsibility of repeating keys, which is
    useful for remote desktop.
  * wl_display_dispatch_queue_timeout() and
    wl_display_dispatch_timeout(), to set a timeout when
    dispatching events.
  * wl_shm_buffer_ref() and wl_shm_buffer_unref(), to access
    wl_shm_buffer underlying storage after the protocol object
    has been destroyed (e.g. when a client is shutting down).
  * wl_proxy_get_interface() and wl_resource_get_interface(), to
    fetch the wl_interface of an object.
  * wl_resource_post_error_vargs(), as an alternative to
    wl_resource_post_error() when the compositor already has a
    va_list.</changelog>
</package>
<package pkgid="e447080c64eda820169e48d18da70b9a878173801830d82032a7b80543ba0e760cc6727b1a960d6269635ce79af8924df430558eaaa47b36d3e5e31ad9b96f31" name="libwayland-egl1" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="160000.1.2"/>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="llyyr.public@gmail.com" date="1680609600">- Update to release 1.22.0
  * This new release adds explicit events for the preferred buffer scale
    and transform, adds an event to indicate the pointer's physical scroll
    direction, adds a few new convenience functions, and includes various
    spec clarifications and bug fixes.</changelog>
  <changelog author="joan.torres@suse.com" date="1718884800">- Update to release 1.23.0
  * A mechanism to set the size of the internal connection buffer used by
    libwayland
  * An enum-header mode for wayland-scanner to generate headers with only enums
  * wayland-scanner now generates validator functions for enums on the server
    side
  * Protocols can now indicate with a "deprecated-since" XML attribute that a
    request, event or enum entry is deprecated
  * An API to set a name for a queue to aid debugging
  * wl_client_get_user_data() and wl_client_set_user_data() to more easily attach
    custom data to a client
  * OpenBSD support
  * A wl_shm.release request for proper cleanup of this global</changelog>
  <changelog author="llyyr@yukari.in" date="1726574400">- Update to release 1.23.1:
  * meson: Fix use of install_data() without specifying install_dir
  * Put WL_DEPRECATED in front of the function declarations
  * client: Handle proxies with no queue
  * scanner: extract validator function emission to helper function
  * scanner: fix validator for bitfields
  * tests: add enum bitfield test</changelog>
  <changelog author="hillwood@opensuse.org" date="1742558400">- Disable test on loongarch.</changelog>
  <changelog author="schwab@suse.de" date="1749297600">- Skip tests in qemu emulation</changelog>
  <changelog author="jengelh@inai.de" date="1751803200">- Update to release 1.24
  * A new wl_fixes interface to add a request to destroy a
    wl_registry object.
  * A new wl_keyboard.key repeated state, to allow compositors to
    take over the responsibility of repeating keys, which is
    useful for remote desktop.
  * wl_display_dispatch_queue_timeout() and
    wl_display_dispatch_timeout(), to set a timeout when
    dispatching events.
  * wl_shm_buffer_ref() and wl_shm_buffer_unref(), to access
    wl_shm_buffer underlying storage after the protocol object
    has been destroyed (e.g. when a client is shutting down).
  * wl_proxy_get_interface() and wl_resource_get_interface(), to
    fetch the wl_interface of an object.
  * wl_resource_post_error_vargs(), as an alternative to
    wl_resource_post_error() when the compositor already has a
    va_list.</changelog>
</package>
<package pkgid="3216976fa8860fc074fa156576e9ab8a5c71b40c336e40ca5fafdde69d5969c619c4cd064ddf599e4f70400ea451b9c9fae0db7954c8abfb4b23c3abe3fb4324" name="libwayland-server0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="160000.1.2"/>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="llyyr.public@gmail.com" date="1680609600">- Update to release 1.22.0
  * This new release adds explicit events for the preferred buffer scale
    and transform, adds an event to indicate the pointer's physical scroll
    direction, adds a few new convenience functions, and includes various
    spec clarifications and bug fixes.</changelog>
  <changelog author="joan.torres@suse.com" date="1718884800">- Update to release 1.23.0
  * A mechanism to set the size of the internal connection buffer used by
    libwayland
  * An enum-header mode for wayland-scanner to generate headers with only enums
  * wayland-scanner now generates validator functions for enums on the server
    side
  * Protocols can now indicate with a "deprecated-since" XML attribute that a
    request, event or enum entry is deprecated
  * An API to set a name for a queue to aid debugging
  * wl_client_get_user_data() and wl_client_set_user_data() to more easily attach
    custom data to a client
  * OpenBSD support
  * A wl_shm.release request for proper cleanup of this global</changelog>
  <changelog author="llyyr@yukari.in" date="1726574400">- Update to release 1.23.1:
  * meson: Fix use of install_data() without specifying install_dir
  * Put WL_DEPRECATED in front of the function declarations
  * client: Handle proxies with no queue
  * scanner: extract validator function emission to helper function
  * scanner: fix validator for bitfields
  * tests: add enum bitfield test</changelog>
  <changelog author="hillwood@opensuse.org" date="1742558400">- Disable test on loongarch.</changelog>
  <changelog author="schwab@suse.de" date="1749297600">- Skip tests in qemu emulation</changelog>
  <changelog author="jengelh@inai.de" date="1751803200">- Update to release 1.24
  * A new wl_fixes interface to add a request to destroy a
    wl_registry object.
  * A new wl_keyboard.key repeated state, to allow compositors to
    take over the responsibility of repeating keys, which is
    useful for remote desktop.
  * wl_display_dispatch_queue_timeout() and
    wl_display_dispatch_timeout(), to set a timeout when
    dispatching events.
  * wl_shm_buffer_ref() and wl_shm_buffer_unref(), to access
    wl_shm_buffer underlying storage after the protocol object
    has been destroyed (e.g. when a client is shutting down).
  * wl_proxy_get_interface() and wl_resource_get_interface(), to
    fetch the wl_interface of an object.
  * wl_resource_post_error_vargs(), as an alternative to
    wl_resource_post_error() when the compositor already has a
    va_list.</changelog>
</package>
<package pkgid="a75326155600eb99610697d10dfeab632dac87787b1c89212391b2f74ca5b666524efe398e265801fa7c122f40ee9ac0058959e186312f525fce5a6973d50fe0" name="libwrap0" arch="x86_64">
  <version epoch="0" ver="7.6" rel="160000.2.2"/>
  <changelog author="kukuk@suse.de" date="1459944000">- tcp_wrappers_7.6.diff: don't use public headers for own
  functions, make own yp_get_default_domain static.</changelog>
  <changelog author="meissner@suse.com" date="1496491200">- tcp_wrappers_7.6-optflags.diff: enable PIE for all binaries
  directly.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="mliska@suse.cz" date="1569326400">- Add tcp_wrappers_7.6-ipv6.fix.fix3.diff in order to fix
  boo#1149708.</changelog>
  <changelog author="kukuk@suse.com" date="1597406400">- tcp_wrappers_7.6-shared-lib.diff: Linux has STRERROR not SYS_ERRLIST
  [bsc#1175272]</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- Makefile is not parallel-safe</changelog>
  <changelog author="lnussel@suse.de" date="1662379200">- use _libdir (boo#1191098)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665489600">- Add hosts.allow and hosts.deny config files from the netcfg package,
  as they are tcpd specific, bsc#1099755</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1715688000">- build with gcc14
- added patches
  + tcp_wrappers_7.6-gcc14.patch</changelog>
</package>
<package pkgid="d9f5a0f3b8cec93b2f7167a953e1278e44269fe0dafd6bc46573976f3300733ea28885b8e21761569742d976b1591be8b45da73b0de4cdf1ec004e3dd94f51f2" name="libwtmpdb0" arch="x86_64">
  <version epoch="0" ver="0.74.0+git20250509.272b109" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1737115200">- Update to version 0.50.0+git20250117.a9b48cf:
  * wtmpdbd.service: secure more
  * wtmpdb: Implement json output for last (#20)</changelog>
  <changelog author="kukuk@suse.com" date="1737374400">- Update to version 0.60.0+git20250120.64d23d8:
  * Release version 0.60.0
  * Merge reader/write socket to one generic one
  * wtmpdbd: add Ping, SetLogLevel and GetEnvironment</changelog>
  <changelog author="kukuk@suse.com" date="1737460800">- Update to version 0.70.0+git20250121.3e409b5:
  * Fix installation of all wtmpdbd man page variants
  * Release version 0.70.0
  * Add wtmpdbd.8 manual page
  * wtmpdbd: fix printing help text
  * wtmpdbd: more fine granular log level filtering
  * wtmpdbd: implement varlink_event_loop_with_idle
  * wtmpdbd.socket: fix socket descriptor name
  * meson: no longer check for v258 sd-varlink function</changelog>
  <changelog author="kukuk@suse.com" date="1738584000">- Update to version 0.71.0+git20250203.86b8442:
  * Release version 0.71.0
  * zero struct tm before calling strptime()
  * Accept classic 'last -N' form for max entries
  * tst-varlink: fix order of error checking
  * CI: use valgrind
  * Run meson test in verbose mode
  * tst-varlink works only if run as root
  * Use meson feature and not combo options
  * Add CI for openSUSE
  * CI: make sure sqlite3 devel is installed</changelog>
  <changelog author="kukuk@suse.com" date="1738843200">- Update to version 0.71.0+git20250206.608632a:
  * Fix expected output of wtmpdb_rotate() test
  * Make header usable from C++</changelog>
  <changelog author="kukuk@suse.com" date="1741176000">- Update to version 0.72.0+git20250305.10803fd:
  * Release version 0.72.0
  * i386: fix integer format length errors
  * Add utmp format importer
  * Fix wtmp database path in documentation
  * test: schedule test logins on correct day
  * rotate: don't throw away microseconds calculating threshold</changelog>
  <changelog author="kukuk@suse.com" date="1744113600">- Update to version 0.73.0+git20250408.edb8638:
  * Release version 0.73.0
  * expand accepted time format options
  * use documented -t short option for last --until
  * hurd: avoid PATH_MAX
  * hurd: compat for lack of CLOCK_BOOTTIME</changelog>
  <changelog author="kukuk@suse.com" date="1745841600">- Update to version 0.74.0+git20250424.2e93e77:
  * Release version 0.74.0
  * Fix varlink interface name (rebootmgr vs wtmpdb)
  * import: match login by tty if non-zero pid does not match</changelog>
  <changelog author="kukuk@suse.com" date="1746619200">- Fix summary of libwtmpdb subpackage</changelog>
  <changelog author="kukuk@suse.com" date="1746792000">- Update to version 0.74.0+git20250509.272b109:
  * libwtmpdb: enhance/unify error messages</changelog>
</package>
<package pkgid="49d3219d9499c08eded3f2c277428b144e4f677a8f6d7483c239f887fb65cf676c8d04c7bd7c5b1e7a88296c32f138c0309ced6adf2e5749b0cb3fb7a564896c" name="libx86emu3" arch="x86_64">
  <version epoch="0" ver="3.7" rel="160000.3.2"/>
  <changelog author="wfeldt@opensuse.org" date="1629288000">- merge gh#wfeldt/libx86emu#35
- Fix x86test on musl
- 3.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#wfeldt/libx86emu#34
- Migrate CI to GitHub Actions
- 3.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1634731200">- merge gh#wfeldt/libx86emu#39
- fix test suite for 32-bit architectures
- 3.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1637236800">- merge gh#wfeldt/libx86emu#40
- decode extended nop instructions
- 3.5</changelog>
  <changelog author="dmueller@suse.com" date="1705579200">- fix build on non-suse distributions</changelog>
  <changelog author="wfeldt@opensuse.org" date="1740398400">- merge gh#wfeldt/libx86emu#41
- fix NEG remark typos</changelog>
  <changelog author="wfeldt@opensuse.org" date="1740398401">- merge gh#wfeldt/libx86emu#42
- Fix a bug in R/M 01 decoding</changelog>
  <changelog author="wfeldt@opensuse.org" date="1740398402">- merge gh#wfeldt/libx86emu#44
- prim_ops: fix some indentation</changelog>
  <changelog author="wfeldt@opensuse.org" date="1740398403">- merge gh#wfeldt/libx86emu#46
- fix a buffer overflow in x86emu_log (bsc#1237557)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1740398404">- merge gh#wfeldt/libx86emu#47
- fix building on non-x86 architectures
- 3.7</changelog>
</package>
<package pkgid="c3e5fb31b8ef2444b6f02850c95a706411bacaeee6311c739a21ae15b2d4faac3d7645724c4f6a1b4ff25719452f89967877e247643c69d434282484445a99dc" name="libxcb-dri3-0" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to version 1.16
  * gitlab CI: add a basic build test
  * configure.ac: drop dependency `pthread-stubs` on Solaris
  * configure.ac: Remove obsolete AC_HEADER_STDC
  * Raise minimum required version of Python from 2.6 to 3.0
  * Fix windows build.
  * Fix indentation.
  * Fix a compiler warning
  * Fix handling of documented enum parameters
  * Allow full paths to sockets on non-macOS
  * DISPLAY starting with / or unix: is always a socket path
  * Add tests for unix socket parsing
  * autogen.sh: use quoted string variables
  * c_client: Fix crash in xcb_randr_set_monitor
  * configure.ac: drop `pthread-stubs` dependency on DragonFly and FreeBSD
  * xcb_conn: Add a check for NULL to silence a UBSan runtime error
  * configure.ac: Require xcb-proto &gt;= 1.16.0
  * Fix xcb_connect() call with a custom xcb_auth_info_t
  * autogen: add default patch prefix
  * Build DOUBLE-BUFFER extension.
  * Require xcb-proto &gt;= 1.15.1, which has Dbe
  * configure.ac: drop dependency `pthread-stubs` on macOS
  * autogen.sh: use exec instead of waiting for configure to finish
  * Improve tutorial example
- adjusted bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
- added libxcb-dbe0 subpackage for libxcb-dbe.so.0*</changelog>
  <changelog author="sndirsch@suse.com" date="1707134400">- devel package: added missing Requires to libxcb-dbe0 (boo#1219572)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709467200">- Update to version 1.16.1
  * This release fixes build issues for Windows &amp; NetBSD platforms
  * For those building for 32-bit platforms, it also enables use of
    the "large file" APIs - though xcb mainly uses stat() calls on
    sockets, not normal files.</changelog>
  <changelog author="fvogt@suse.com" date="1709726400">- Fix n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch,
  the rebase in 1.16 caused an regression: It loops indefinitely if
  XAUTHLOCALHOSTNAME is unset (boo#1221078)</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * fixed build against GCC 14 (boo#1221703)</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 1.17.0
  * tests: fix -Werror=discarded-qualifiers errors in check_public.c
  * xcb_popcount: Use __builtin_popcount if compiler supports it
  * Add xcb-dri3 dependency to xcb-present.pc.in
  * configure.ac: Require xcb-proto &gt;= 1.17.0
  * Always write C code in UTF-8</changelog>
</package>
<package pkgid="891f7b0bfc65ff2f261f423d6aa819bd6514c1a6caa291769b2026c581ecf70b3dd76db62befcbbb2973fdb75524e29817ed1a21b1f9147d73004d57a86e93ad" name="libxcb-glx0" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to version 1.16
  * gitlab CI: add a basic build test
  * configure.ac: drop dependency `pthread-stubs` on Solaris
  * configure.ac: Remove obsolete AC_HEADER_STDC
  * Raise minimum required version of Python from 2.6 to 3.0
  * Fix windows build.
  * Fix indentation.
  * Fix a compiler warning
  * Fix handling of documented enum parameters
  * Allow full paths to sockets on non-macOS
  * DISPLAY starting with / or unix: is always a socket path
  * Add tests for unix socket parsing
  * autogen.sh: use quoted string variables
  * c_client: Fix crash in xcb_randr_set_monitor
  * configure.ac: drop `pthread-stubs` dependency on DragonFly and FreeBSD
  * xcb_conn: Add a check for NULL to silence a UBSan runtime error
  * configure.ac: Require xcb-proto &gt;= 1.16.0
  * Fix xcb_connect() call with a custom xcb_auth_info_t
  * autogen: add default patch prefix
  * Build DOUBLE-BUFFER extension.
  * Require xcb-proto &gt;= 1.15.1, which has Dbe
  * configure.ac: drop dependency `pthread-stubs` on macOS
  * autogen.sh: use exec instead of waiting for configure to finish
  * Improve tutorial example
- adjusted bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
- added libxcb-dbe0 subpackage for libxcb-dbe.so.0*</changelog>
  <changelog author="sndirsch@suse.com" date="1707134400">- devel package: added missing Requires to libxcb-dbe0 (boo#1219572)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709467200">- Update to version 1.16.1
  * This release fixes build issues for Windows &amp; NetBSD platforms
  * For those building for 32-bit platforms, it also enables use of
    the "large file" APIs - though xcb mainly uses stat() calls on
    sockets, not normal files.</changelog>
  <changelog author="fvogt@suse.com" date="1709726400">- Fix n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch,
  the rebase in 1.16 caused an regression: It loops indefinitely if
  XAUTHLOCALHOSTNAME is unset (boo#1221078)</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * fixed build against GCC 14 (boo#1221703)</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 1.17.0
  * tests: fix -Werror=discarded-qualifiers errors in check_public.c
  * xcb_popcount: Use __builtin_popcount if compiler supports it
  * Add xcb-dri3 dependency to xcb-present.pc.in
  * configure.ac: Require xcb-proto &gt;= 1.17.0
  * Always write C code in UTF-8</changelog>
</package>
<package pkgid="ffaf308edfda35f8266d9e5ca90b9f022ab087a5e5d9661d83f5da23077a9c339422684ae794308e50512a805f12adfed143d0bbec8a9f3a1efffbb3132dd9d0" name="libxcb-present0" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to version 1.16
  * gitlab CI: add a basic build test
  * configure.ac: drop dependency `pthread-stubs` on Solaris
  * configure.ac: Remove obsolete AC_HEADER_STDC
  * Raise minimum required version of Python from 2.6 to 3.0
  * Fix windows build.
  * Fix indentation.
  * Fix a compiler warning
  * Fix handling of documented enum parameters
  * Allow full paths to sockets on non-macOS
  * DISPLAY starting with / or unix: is always a socket path
  * Add tests for unix socket parsing
  * autogen.sh: use quoted string variables
  * c_client: Fix crash in xcb_randr_set_monitor
  * configure.ac: drop `pthread-stubs` dependency on DragonFly and FreeBSD
  * xcb_conn: Add a check for NULL to silence a UBSan runtime error
  * configure.ac: Require xcb-proto &gt;= 1.16.0
  * Fix xcb_connect() call with a custom xcb_auth_info_t
  * autogen: add default patch prefix
  * Build DOUBLE-BUFFER extension.
  * Require xcb-proto &gt;= 1.15.1, which has Dbe
  * configure.ac: drop dependency `pthread-stubs` on macOS
  * autogen.sh: use exec instead of waiting for configure to finish
  * Improve tutorial example
- adjusted bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
- added libxcb-dbe0 subpackage for libxcb-dbe.so.0*</changelog>
  <changelog author="sndirsch@suse.com" date="1707134400">- devel package: added missing Requires to libxcb-dbe0 (boo#1219572)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709467200">- Update to version 1.16.1
  * This release fixes build issues for Windows &amp; NetBSD platforms
  * For those building for 32-bit platforms, it also enables use of
    the "large file" APIs - though xcb mainly uses stat() calls on
    sockets, not normal files.</changelog>
  <changelog author="fvogt@suse.com" date="1709726400">- Fix n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch,
  the rebase in 1.16 caused an regression: It loops indefinitely if
  XAUTHLOCALHOSTNAME is unset (boo#1221078)</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * fixed build against GCC 14 (boo#1221703)</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 1.17.0
  * tests: fix -Werror=discarded-qualifiers errors in check_public.c
  * xcb_popcount: Use __builtin_popcount if compiler supports it
  * Add xcb-dri3 dependency to xcb-present.pc.in
  * configure.ac: Require xcb-proto &gt;= 1.17.0
  * Always write C code in UTF-8</changelog>
</package>
<package pkgid="12586c677c08df502531773ccf2f9323a4e4337ef1d0f045bb679f7c46076a60ae1b983f284c6de3e8f9760cc10a86df0b83ac950824930e3cbda5ed90be1998" name="libxcb-randr0" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to version 1.16
  * gitlab CI: add a basic build test
  * configure.ac: drop dependency `pthread-stubs` on Solaris
  * configure.ac: Remove obsolete AC_HEADER_STDC
  * Raise minimum required version of Python from 2.6 to 3.0
  * Fix windows build.
  * Fix indentation.
  * Fix a compiler warning
  * Fix handling of documented enum parameters
  * Allow full paths to sockets on non-macOS
  * DISPLAY starting with / or unix: is always a socket path
  * Add tests for unix socket parsing
  * autogen.sh: use quoted string variables
  * c_client: Fix crash in xcb_randr_set_monitor
  * configure.ac: drop `pthread-stubs` dependency on DragonFly and FreeBSD
  * xcb_conn: Add a check for NULL to silence a UBSan runtime error
  * configure.ac: Require xcb-proto &gt;= 1.16.0
  * Fix xcb_connect() call with a custom xcb_auth_info_t
  * autogen: add default patch prefix
  * Build DOUBLE-BUFFER extension.
  * Require xcb-proto &gt;= 1.15.1, which has Dbe
  * configure.ac: drop dependency `pthread-stubs` on macOS
  * autogen.sh: use exec instead of waiting for configure to finish
  * Improve tutorial example
- adjusted bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
- added libxcb-dbe0 subpackage for libxcb-dbe.so.0*</changelog>
  <changelog author="sndirsch@suse.com" date="1707134400">- devel package: added missing Requires to libxcb-dbe0 (boo#1219572)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709467200">- Update to version 1.16.1
  * This release fixes build issues for Windows &amp; NetBSD platforms
  * For those building for 32-bit platforms, it also enables use of
    the "large file" APIs - though xcb mainly uses stat() calls on
    sockets, not normal files.</changelog>
  <changelog author="fvogt@suse.com" date="1709726400">- Fix n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch,
  the rebase in 1.16 caused an regression: It loops indefinitely if
  XAUTHLOCALHOSTNAME is unset (boo#1221078)</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * fixed build against GCC 14 (boo#1221703)</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 1.17.0
  * tests: fix -Werror=discarded-qualifiers errors in check_public.c
  * xcb_popcount: Use __builtin_popcount if compiler supports it
  * Add xcb-dri3 dependency to xcb-present.pc.in
  * configure.ac: Require xcb-proto &gt;= 1.17.0
  * Always write C code in UTF-8</changelog>
</package>
<package pkgid="757bba77ac1d7c1af4059497b418d61d5f2651e1c404649652859ee901b8a654393c31dc42fea7f02b58f7db2c4fc6a77c4299592d90abcffbae38779fd9eac3" name="libxcb-render0" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to version 1.16
  * gitlab CI: add a basic build test
  * configure.ac: drop dependency `pthread-stubs` on Solaris
  * configure.ac: Remove obsolete AC_HEADER_STDC
  * Raise minimum required version of Python from 2.6 to 3.0
  * Fix windows build.
  * Fix indentation.
  * Fix a compiler warning
  * Fix handling of documented enum parameters
  * Allow full paths to sockets on non-macOS
  * DISPLAY starting with / or unix: is always a socket path
  * Add tests for unix socket parsing
  * autogen.sh: use quoted string variables
  * c_client: Fix crash in xcb_randr_set_monitor
  * configure.ac: drop `pthread-stubs` dependency on DragonFly and FreeBSD
  * xcb_conn: Add a check for NULL to silence a UBSan runtime error
  * configure.ac: Require xcb-proto &gt;= 1.16.0
  * Fix xcb_connect() call with a custom xcb_auth_info_t
  * autogen: add default patch prefix
  * Build DOUBLE-BUFFER extension.
  * Require xcb-proto &gt;= 1.15.1, which has Dbe
  * configure.ac: drop dependency `pthread-stubs` on macOS
  * autogen.sh: use exec instead of waiting for configure to finish
  * Improve tutorial example
- adjusted bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
- added libxcb-dbe0 subpackage for libxcb-dbe.so.0*</changelog>
  <changelog author="sndirsch@suse.com" date="1707134400">- devel package: added missing Requires to libxcb-dbe0 (boo#1219572)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709467200">- Update to version 1.16.1
  * This release fixes build issues for Windows &amp; NetBSD platforms
  * For those building for 32-bit platforms, it also enables use of
    the "large file" APIs - though xcb mainly uses stat() calls on
    sockets, not normal files.</changelog>
  <changelog author="fvogt@suse.com" date="1709726400">- Fix n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch,
  the rebase in 1.16 caused an regression: It loops indefinitely if
  XAUTHLOCALHOSTNAME is unset (boo#1221078)</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * fixed build against GCC 14 (boo#1221703)</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 1.17.0
  * tests: fix -Werror=discarded-qualifiers errors in check_public.c
  * xcb_popcount: Use __builtin_popcount if compiler supports it
  * Add xcb-dri3 dependency to xcb-present.pc.in
  * configure.ac: Require xcb-proto &gt;= 1.17.0
  * Always write C code in UTF-8</changelog>
</package>
<package pkgid="b1ea612a2495b56533db56e897a35897818aacb46856f7181b2ebad16308f5b6cffc72405cca703ed4045168394267e290c8e70623c9278c267e508ee7a1d839" name="libxcb-shm0" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to version 1.16
  * gitlab CI: add a basic build test
  * configure.ac: drop dependency `pthread-stubs` on Solaris
  * configure.ac: Remove obsolete AC_HEADER_STDC
  * Raise minimum required version of Python from 2.6 to 3.0
  * Fix windows build.
  * Fix indentation.
  * Fix a compiler warning
  * Fix handling of documented enum parameters
  * Allow full paths to sockets on non-macOS
  * DISPLAY starting with / or unix: is always a socket path
  * Add tests for unix socket parsing
  * autogen.sh: use quoted string variables
  * c_client: Fix crash in xcb_randr_set_monitor
  * configure.ac: drop `pthread-stubs` dependency on DragonFly and FreeBSD
  * xcb_conn: Add a check for NULL to silence a UBSan runtime error
  * configure.ac: Require xcb-proto &gt;= 1.16.0
  * Fix xcb_connect() call with a custom xcb_auth_info_t
  * autogen: add default patch prefix
  * Build DOUBLE-BUFFER extension.
  * Require xcb-proto &gt;= 1.15.1, which has Dbe
  * configure.ac: drop dependency `pthread-stubs` on macOS
  * autogen.sh: use exec instead of waiting for configure to finish
  * Improve tutorial example
- adjusted bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
- added libxcb-dbe0 subpackage for libxcb-dbe.so.0*</changelog>
  <changelog author="sndirsch@suse.com" date="1707134400">- devel package: added missing Requires to libxcb-dbe0 (boo#1219572)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709467200">- Update to version 1.16.1
  * This release fixes build issues for Windows &amp; NetBSD platforms
  * For those building for 32-bit platforms, it also enables use of
    the "large file" APIs - though xcb mainly uses stat() calls on
    sockets, not normal files.</changelog>
  <changelog author="fvogt@suse.com" date="1709726400">- Fix n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch,
  the rebase in 1.16 caused an regression: It loops indefinitely if
  XAUTHLOCALHOSTNAME is unset (boo#1221078)</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * fixed build against GCC 14 (boo#1221703)</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 1.17.0
  * tests: fix -Werror=discarded-qualifiers errors in check_public.c
  * xcb_popcount: Use __builtin_popcount if compiler supports it
  * Add xcb-dri3 dependency to xcb-present.pc.in
  * configure.ac: Require xcb-proto &gt;= 1.17.0
  * Always write C code in UTF-8</changelog>
</package>
<package pkgid="c5bc5f89eee6677551c78180d03f37165f325ac38caec827fe5901900ea8432c9bd9204ba5c1844eafcaf123c4bb5de5cabb9ff5e1d77081af1f4b12096715a0" name="libxcb-sync1" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to version 1.16
  * gitlab CI: add a basic build test
  * configure.ac: drop dependency `pthread-stubs` on Solaris
  * configure.ac: Remove obsolete AC_HEADER_STDC
  * Raise minimum required version of Python from 2.6 to 3.0
  * Fix windows build.
  * Fix indentation.
  * Fix a compiler warning
  * Fix handling of documented enum parameters
  * Allow full paths to sockets on non-macOS
  * DISPLAY starting with / or unix: is always a socket path
  * Add tests for unix socket parsing
  * autogen.sh: use quoted string variables
  * c_client: Fix crash in xcb_randr_set_monitor
  * configure.ac: drop `pthread-stubs` dependency on DragonFly and FreeBSD
  * xcb_conn: Add a check for NULL to silence a UBSan runtime error
  * configure.ac: Require xcb-proto &gt;= 1.16.0
  * Fix xcb_connect() call with a custom xcb_auth_info_t
  * autogen: add default patch prefix
  * Build DOUBLE-BUFFER extension.
  * Require xcb-proto &gt;= 1.15.1, which has Dbe
  * configure.ac: drop dependency `pthread-stubs` on macOS
  * autogen.sh: use exec instead of waiting for configure to finish
  * Improve tutorial example
- adjusted bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
- added libxcb-dbe0 subpackage for libxcb-dbe.so.0*</changelog>
  <changelog author="sndirsch@suse.com" date="1707134400">- devel package: added missing Requires to libxcb-dbe0 (boo#1219572)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709467200">- Update to version 1.16.1
  * This release fixes build issues for Windows &amp; NetBSD platforms
  * For those building for 32-bit platforms, it also enables use of
    the "large file" APIs - though xcb mainly uses stat() calls on
    sockets, not normal files.</changelog>
  <changelog author="fvogt@suse.com" date="1709726400">- Fix n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch,
  the rebase in 1.16 caused an regression: It loops indefinitely if
  XAUTHLOCALHOSTNAME is unset (boo#1221078)</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * fixed build against GCC 14 (boo#1221703)</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 1.17.0
  * tests: fix -Werror=discarded-qualifiers errors in check_public.c
  * xcb_popcount: Use __builtin_popcount if compiler supports it
  * Add xcb-dri3 dependency to xcb-present.pc.in
  * configure.ac: Require xcb-proto &gt;= 1.17.0
  * Always write C code in UTF-8</changelog>
</package>
<package pkgid="6c96aff5247b06a85279567f967bdd4e2e275325c5862244d6edf12c436392216169748e1e77787fc5e1d97b75c0b8355852ab95f42633621525bb11251e6aed" name="libxcb-xfixes0" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to version 1.16
  * gitlab CI: add a basic build test
  * configure.ac: drop dependency `pthread-stubs` on Solaris
  * configure.ac: Remove obsolete AC_HEADER_STDC
  * Raise minimum required version of Python from 2.6 to 3.0
  * Fix windows build.
  * Fix indentation.
  * Fix a compiler warning
  * Fix handling of documented enum parameters
  * Allow full paths to sockets on non-macOS
  * DISPLAY starting with / or unix: is always a socket path
  * Add tests for unix socket parsing
  * autogen.sh: use quoted string variables
  * c_client: Fix crash in xcb_randr_set_monitor
  * configure.ac: drop `pthread-stubs` dependency on DragonFly and FreeBSD
  * xcb_conn: Add a check for NULL to silence a UBSan runtime error
  * configure.ac: Require xcb-proto &gt;= 1.16.0
  * Fix xcb_connect() call with a custom xcb_auth_info_t
  * autogen: add default patch prefix
  * Build DOUBLE-BUFFER extension.
  * Require xcb-proto &gt;= 1.15.1, which has Dbe
  * configure.ac: drop dependency `pthread-stubs` on macOS
  * autogen.sh: use exec instead of waiting for configure to finish
  * Improve tutorial example
- adjusted bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
- added libxcb-dbe0 subpackage for libxcb-dbe.so.0*</changelog>
  <changelog author="sndirsch@suse.com" date="1707134400">- devel package: added missing Requires to libxcb-dbe0 (boo#1219572)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709467200">- Update to version 1.16.1
  * This release fixes build issues for Windows &amp; NetBSD platforms
  * For those building for 32-bit platforms, it also enables use of
    the "large file" APIs - though xcb mainly uses stat() calls on
    sockets, not normal files.</changelog>
  <changelog author="fvogt@suse.com" date="1709726400">- Fix n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch,
  the rebase in 1.16 caused an regression: It loops indefinitely if
  XAUTHLOCALHOSTNAME is unset (boo#1221078)</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * fixed build against GCC 14 (boo#1221703)</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 1.17.0
  * tests: fix -Werror=discarded-qualifiers errors in check_public.c
  * xcb_popcount: Use __builtin_popcount if compiler supports it
  * Add xcb-dri3 dependency to xcb-present.pc.in
  * configure.ac: Require xcb-proto &gt;= 1.17.0
  * Always write C code in UTF-8</changelog>
</package>
<package pkgid="1bf7fe81c2a37e713f638c3f765decb33dc63b774e0974ec15cea6750e1106d5a67ab551573424913e30e91ad12c9f1bfa38de4ca016a91d9fcc51e378baa53e" name="libxcb1" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to version 1.16
  * gitlab CI: add a basic build test
  * configure.ac: drop dependency `pthread-stubs` on Solaris
  * configure.ac: Remove obsolete AC_HEADER_STDC
  * Raise minimum required version of Python from 2.6 to 3.0
  * Fix windows build.
  * Fix indentation.
  * Fix a compiler warning
  * Fix handling of documented enum parameters
  * Allow full paths to sockets on non-macOS
  * DISPLAY starting with / or unix: is always a socket path
  * Add tests for unix socket parsing
  * autogen.sh: use quoted string variables
  * c_client: Fix crash in xcb_randr_set_monitor
  * configure.ac: drop `pthread-stubs` dependency on DragonFly and FreeBSD
  * xcb_conn: Add a check for NULL to silence a UBSan runtime error
  * configure.ac: Require xcb-proto &gt;= 1.16.0
  * Fix xcb_connect() call with a custom xcb_auth_info_t
  * autogen: add default patch prefix
  * Build DOUBLE-BUFFER extension.
  * Require xcb-proto &gt;= 1.15.1, which has Dbe
  * configure.ac: drop dependency `pthread-stubs` on macOS
  * autogen.sh: use exec instead of waiting for configure to finish
  * Improve tutorial example
- adjusted bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
- added libxcb-dbe0 subpackage for libxcb-dbe.so.0*</changelog>
  <changelog author="sndirsch@suse.com" date="1707134400">- devel package: added missing Requires to libxcb-dbe0 (boo#1219572)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709467200">- Update to version 1.16.1
  * This release fixes build issues for Windows &amp; NetBSD platforms
  * For those building for 32-bit platforms, it also enables use of
    the "large file" APIs - though xcb mainly uses stat() calls on
    sockets, not normal files.</changelog>
  <changelog author="fvogt@suse.com" date="1709726400">- Fix n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch,
  the rebase in 1.16 caused an regression: It loops indefinitely if
  XAUTHLOCALHOSTNAME is unset (boo#1221078)</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- bug-262309_xcb-xauthlocalhostname.diff,
  n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * fixed build against GCC 14 (boo#1221703)</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 1.17.0
  * tests: fix -Werror=discarded-qualifiers errors in check_public.c
  * xcb_popcount: Use __builtin_popcount if compiler supports it
  * Add xcb-dri3 dependency to xcb-present.pc.in
  * configure.ac: Require xcb-proto &gt;= 1.17.0
  * Always write C code in UTF-8</changelog>
</package>
<package pkgid="40332ab0b82e70a2b56ff222a11d3305567b826ae2af5ee212a965212bcc9b7d37f55cdeb11785642739c0c6953934616be6456a9faa4dc3ba9867a859d98d84" name="libxcrypt-devel" arch="x86_64">
  <version epoch="0" ver="4.4.38" rel="160000.3.2"/>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 4.4.27:
  * Limit the maximum amount of rbytes to 64 bytes (512 bits) for yescrypt,
    gost-yescrypt, and scrypt</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 4.4.28:
  No changes whatsoever.</changelog>
  <changelog author="schwab@suse.de" date="1669809600">- Update to 4.4.33
  * Fix variable name in crypt(3) for a datamember of 'struct crypt_data'
  * Fix -Werror=strict-overflow in lib/crypt-des.c, which is seen
    by GCC 12.x
  * Add some SHA-2 Maj() optimization in lib/alg-sha256.c
  * Fix -Werror=conversion in lib/alg-yescrypt-opt.c
  * Improvements to huge page handling in lib/alg-yescrypt-platform.c
  * Fix -Werror=sign-conversion in lib/alg-yescrypt-platform.c</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1678449600">- Enable livepatching support on x86_64.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO now (boo#1138833) and use FAT LTO objects for static libs.</changelog>
  <changelog author="schwab@suse.de" date="1685620800">- Update to 4.4.34
  * Optimize some cast operation for performance in
    lib/alg-yescrypt-platform.c.
  * Add SHA-2 Maj() optimization proposed by Wei Dai in lib/alg-sha512.c.
  * Explicitly clean the stack and context state after computation in
    lib/alg-gost3411-2012-hmac.c, lib/alg-hmac-sha1.c, and lib/alg-sha256.c
    (issue #168).</changelog>
  <changelog author="dmueller@suse.com" date="1688212800">- update to 4.4.35:
  * Fix build with Perl v5.38.0 (issue #170).
  * Fix build with MinGW-w(32|64).</changelog>
  <changelog author="schwab@suse.de" date="1689595200">- Update to 4.4.36
  * Fix left over bits failing with Perl v5.38.0</changelog>
  <changelog author="lucas.mulling@suse.com" date="1735819200">- Update to 4.4.37
  * Several fixes to the manpages (issue #185).
  * Only test the needed makecontext signature during configure (issue #178).
  * Fix -Werror=strict-overflow in lib/crypt-bcrypt.c, which is seen by GCC
    4.8.5 (issue #197).
- Symlink duplicated manpages</changelog>
  <changelog author="lucas.mulling@suse.com" date="1736856000">- Update to 4.4.38
  * Fix several "-Wunterminated-string-initialization", which are seen by
    upcoming GCC 15.x (issue #194).
  * Fix "-Wmaybe-uninitialized" in crypt.c, which is seen by GCC 13.3.0.
  * Skip test/explicit-bzero if compiling with ASAN.
  * Drop hard requirement for the pkg-config binary (issue #198).
- Use %ldconfig_scriptlets</changelog>
</package>
<package pkgid="200aff26d903a136f4aebdfdc82066593d50d7060f350370ef00f5a5435992910711b66f187ebd4073aed63d2fee83f6c2d33493f55264ba46aa08b96407b00f" name="libxkbcommon0" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1631275200">- Update to release 1.3.1
  * In `xkbcli interactive-x11`, use the Esc keysym instead of
    the Esc keycode for quitting.
  * In `xkbcli how-to-type`, add `--keysym` argugment for how to
    type a keysym instead of a Unicode codepoint.
  * Fix a crash in `xkb_x11_keymap_new_from_device` error
    handling given some invalid keymaps. Had regressed in 1.2.0.</changelog>
  <changelog author="jengelh@inai.de" date="1643976000">- Update to release 1.4.0
  * In libxkbregistry, variants now inherit iso639, iso3166 and
    brief from parent layout if omitted.
  * In libxkbregistry, skip over invalid ISO-639 or ISO-3166
    entries.</changelog>
  <changelog author="jengelh@inai.de" date="1653220800">- Update to release 1.4.1
  * Fix compose sequence overriding (common prefix) not working
    correctly. Regressed in 1.2.0.
  * Remove various bogus currency sign (particulary Euro and
    Korean Won) entries from the keysym &lt;-&gt; Unicode mappings.
    They prevented the real keysyms/codepoints for these from
    mapping correctly.</changelog>
  <changelog author="jengelh@inai.de" date="1672660800">- Update to release 1.5.0
  * Fix crash in `xkbcli interactive-wayland` under a compositor
    which supports new versions of the xdg-shell protocol.
  * New API: XKB_CONTEXT_NO_SECURE_GETENV,
    RXKB_CONTEXT_NO_SECURE_GETENV</changelog>
  <changelog author="jengelh@inai.de" date="1696852800">- Update to release 1.6.0
  * Remove keysyms: XKB_KEY_dead_lowline,
    XKB_KEY_dead_aboveverticalline, XKB_KEY_dead_belowverticalline,
    XKB_KEY_dead_longsolidusoverlay
  * Add Compose iterator API to iterate the entries in a compose
    table.
  * Structured log messages with a message registry. There is an
    ongoing work to assign unique identifiers to log messages and
    add a corresponding error index documentation page.
  * Add a new warning for numeric keysyms references in XKB files:
    the preferred keysym reference form is its name or its Unicode
    value, if relevant.
  * Add the upper bound `XKB_KEYSYM_MAX` to check valid keysyms.
  * Add a warning when loading a keymap using RMLVO with no layout
    but with the variant set.
  * Add support for ``modifier_map None { … }``. This feature is
    missing compared to the X11 implementation. It allows to reset
    the modifier map of a key.</changelog>
  <changelog author="tobias.klausmann@freenet.de" date="1702814400">- dxvk need libxkbregistry0 for building -32bit variants, provide them.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- add libxkbregistry-devel to baselibs for use by wine-32bit. (bsc#1218640)</changelog>
  <changelog author="opensuse@wismill.eu" date="1705060800">- Add libxkbcommon-tools-bash-completions.</changelog>
  <changelog author="jengelh@inai.de" date="1711195200">- Update to release 1.7
  * Added early detection of invalid encodings and BOM for
    keymaps, rules &amp; Compose. Also added a hint that the expected
    encoding must be UTF-8 compatible.
  * Updated keysyms using latest xorgproto
    (cd33097fc779f280925c6d6bbfbd5150f93ca5bc): For the sake of
    compatibility, this reintroduces some deleted keysyms and
    postpones the effective deprecation of others that had landed
    in xkbcommon 1.6.0.
  * Reverted removal of some XKB_KEYs and fixed inconsistencies in names.
    Details see upstream changelog.
  * ``xkbcli compile-compose``: added new CLI utility to test
    Compose files.
  * ``xkbcli interactive-evdev``: added a ``--verbose`` option.
  * ``xkbcli interactive-x11``: added support for Compose.
  * ``xkbcli interactive-wayland``: added support for Compose.</changelog>
  <changelog author="jengelh@inai.de" date="1738670400">- Update to release 1.8
  * `NoSymbol` is now systematically dropped in multi-keysyms
    levels.
  * Added the upper case mapping ß → ẞ (`ssharp` → `U1E9E`). This
    enable to type ẞ using CapsLock thanks to the internal
    capitalization rules.
  * Updated keysyms case mappings to cover full Unicode 16.0.
  * Implemented the `GroupLatch` action, usually activated with
    the keysym `ISO_Group_Latch`.
  * Symbols: Added support for multiple actions per levels.</changelog>
</package>
<package pkgid="60f13a69b64bb0344492fca97c44c87e25a78c08007da568b1808365c2c6148024fecd079fc45fcd2820b7369fcf4cf1c34555977f3107eea91dd731ee224d02" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.13.8" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1739880000">- Update to version 2.13.6 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  + Security:
  - [CVE-2025-24928] Fix stack-buffer-overflow in
    xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after
    xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  + Regressions:
  - xmllint: Support compressed input from stdin
  - uri: Fix handling of Windows drive letters
  - reader: Fix return value of xmlTextReaderReadString again
  - SAX2: Fix xmlSAX2ResolveEntity if systemId is NULL
  + Portability:
  - dict: Handle ENOSYS from getentropy gracefully
  - Fix compilation with uclibc (Dario Binacchi)
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  - cmake: Work around broken sys/random.h in old macOS SDKs
  + Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: add missing `Bcrypt` link on Windows
  - cmake: Fix compatibility in package version file
  - xmlIO: Fix reading from non-regular files like pipes
  - xmlreader: Fix return value of xmlTextReaderReadString
  - parser: Fix loading of parameter entities in external DTDs
  - parser: Fix downstream code that swaps DTDs
  - parser: Fix detection of duplicate attributes
  - string: Fix va_copy fallback
  - xpath: Fix parsing of non-ASCII names
- Drop libxml2-support-compressed-input-from-stdin.patch: Fixed
  upstream.
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743163200">- Update to version 2.13.7:
  + Regressions:
  - tree: Fix xmlTextMerge with NULL args
  - io: Fix `compressed` flag for uncompressed stdin
  - parser: Fix parsing of DTD content</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1744891200">- Update to version 2.13.8:
  + Security:
  - [CVE-2025-32415] schemas: Fix heap buffer overflow in
    xmlSchemaIDCFillNodeTables.
  - [CVE-2025-32414] python: Read at most len/4 characters.
- bug references: [bsc#1241453], [bsc#1241551]</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1769083200">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="dfa2b8bb205681f6ac08f2e9290dea7fc7fdf50c3236462b147adea9128fc2141b85626fe79a889197aaf37f4d83293e3aa86edf0a8ddf42229d19c9ac6a2d81" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.13.8" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1739880000">- Update to version 2.13.6 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  + Security:
  - [CVE-2025-24928] Fix stack-buffer-overflow in
    xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after
    xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  + Regressions:
  - xmllint: Support compressed input from stdin
  - uri: Fix handling of Windows drive letters
  - reader: Fix return value of xmlTextReaderReadString again
  - SAX2: Fix xmlSAX2ResolveEntity if systemId is NULL
  + Portability:
  - dict: Handle ENOSYS from getentropy gracefully
  - Fix compilation with uclibc (Dario Binacchi)
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  - cmake: Work around broken sys/random.h in old macOS SDKs
  + Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: add missing `Bcrypt` link on Windows
  - cmake: Fix compatibility in package version file
  - xmlIO: Fix reading from non-regular files like pipes
  - xmlreader: Fix return value of xmlTextReaderReadString
  - parser: Fix loading of parameter entities in external DTDs
  - parser: Fix downstream code that swaps DTDs
  - parser: Fix detection of duplicate attributes
  - string: Fix va_copy fallback
  - xpath: Fix parsing of non-ASCII names
- Drop libxml2-support-compressed-input-from-stdin.patch: Fixed
  upstream.
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743163200">- Update to version 2.13.7:
  + Regressions:
  - tree: Fix xmlTextMerge with NULL args
  - io: Fix `compressed` flag for uncompressed stdin
  - parser: Fix parsing of DTD content</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1744891200">- Update to version 2.13.8:
  + Security:
  - [CVE-2025-32415] schemas: Fix heap buffer overflow in
    xmlSchemaIDCFillNodeTables.
  - [CVE-2025-32414] python: Read at most len/4 characters.
- bug references: [bsc#1241453], [bsc#1241551]</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1769083200">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="07bac80686f71b0330f7f2d8580fe41c9545a7200e7547d8e0caaaba4cb268e81fefd2fdaf16c92d5085bf9eff9d8de242ce15c2c0b1edeb42b8057926e27efa" name="libxmlb2" arch="x86_64">
  <version epoch="0" ver="0.3.21" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 0.3.10:
  * Fix dumping and exporting multiple files from the CLI (Richard Hughes)
  * Watch files before loading them into the builder (Philip Withnall)
  * Fix potential double free when filtering by language (Sergio Costas Rodriguez)</changelog>
  <changelog author="dmueller@suse.com" date="1671192000">- build hwcaps optimized libraries</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 0.3.11:
  * Add limited support for XPath 1.0 'in' (Richard Hughes)
  * Add support for zstd (Richard Hughes)
  * Do not assert() when decompressing invalid LZMA (Richard
    Hughes)</changelog>
  <changelog author="kilgore.trout@idesmi.eu" date="1692360000">- Update to 0.3.13:
  * Use indexes when binding value
  * Correctly tokenize when using a bound text value
  * Ensure tokens are all NULL when using xb_opcode_init()
  * Avoid building errors and debug strings when possible to make
    XbQuery faster
  * Fix content type detection on macOS
  * Inline a number of machine internals to make queries faster
  * Make zstd support optional
  * Setup various release build options</changelog>
  <changelog author="christophe@krop.fr" date="1696334400">- Update to 0.3.14
  * Fix comparing indexed text with integer values
- Enable libstemmer-devel BuildRequires and pass stemmer=true to
  meson setup, libstemmer now available in Tumbleweed.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1696939200">- baselibs.conf: don't build libxmlb2-32bit; baselibs.conf was
  added for the x86-64-v3 flavor; the -32bit was an unintended side
  effect.</changelog>
  <changelog author="dmueller@suse.com" date="1704542400">- update to 0.3.15:
  * Sprinkle __attribute__((nonnull)) to give a little more
    compile-time safety
  * Accept text/xml as an alternative to application/xml
  * Do not inline shared code
  * Fix compiling with Visual Studio
  * Fix the exported api test on Windows
  * Generate and use .def file for clang-cl builds
    Fan)
  * Release source file handles early</changelog>
  <changelog author="christophe@krop.fr" date="1713441600">- Update to 0.3.18. Changes since 0.3.15:
  * Add the lzma and zstd support to the pkgconfig file
  * Create SECURITY.md for the OpenSSF scorecard
  * Fix decompressing large zstd files
  * Use zst as the file extension for zstd
  * Fix decompressing large zstd files, harder
  * Include the pkgconfig variables in the subproject declared
    dependenc</changelog>
  <changelog author="dmueller@suse.com" date="1723982400">- update to 0.3.19:
  * Add xb_version_string() to get the runtime ABI version
  * - Add the runtime version as the default XMLb invalidation
    GUID</changelog>
  <changelog author="christophe@krop.fr" date="1740398400">- Update to 0.3.21
  * Check for corrupt XbSiloNode values in a smarter way
  Changes in 0.3.20:
  * Do not always strip literal text
  * Do not assume .txt files are application/xml
  * Fix a crash when loading a corrupt XMLb store</changelog>
</package>
<package pkgid="64cc16107b5dbf34fa57dccf0439f71d9a4f62d7e8c0b943d1e46af8f66a482080ca57d2b1ff652291cfa3a128437c245bc8288d3234039fd7e7f95bf03e5b80" name="libxmlsec1-1" arch="x86_64">
  <version epoch="0" ver="1.2.41" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1667563200">- Update to 1.2.36:
  * Retired the XMLSec mailing list "xmlsec@aleksey.com" and the
    XMLSec Online Signature Verifier.
- Update to 1.2.35:
  * Migration to OpenSSL 3.0 API (based on PR by @snargit). Note
    that OpenSSL engines are disabled by default when XMLSec
    library is compiled against OpenSSL 3.0. To re-enable OpenSSL
    engines, use "--enable-openssl3-engines" configure flag (there
    will be a lot of deprecation warnings).
  * The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now
    deprecated and will be removed in the future versions of
    XMLSec Library.
  * Refactored all the integer casts to ensure cast-safety. Fixed
    all warnings and enabled "-Werror" and "-pedantic" flags on
    CI builds.
  * Added configure flag to use size_t for xmlSecSize (currently
    disabled by default for backward compatibility).
  * Moved all CI builds to GitHub actions.</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.2.37:
  Fixed two regressions from 1.2.36 release</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well</changelog>
  <changelog author="fstrba@suse.com" date="1691496000">- Added patch:
  * xmlsec1-ui_null.patch
    + fix build with older versions of openssl that don't have
    UI_null() method</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701345600">- Make use of openSUSE build flags</changelog>
  <changelog author="fstrba@suse.com" date="1702641600">- Update to 1.2.38
  * Have a look at the changelog for the list of changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Added patch:
  * xmlsec1-gcc14.patch
    + add missing include and fix gcc14 build</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720785600">- Update to 1.2.40
  The legacy XML Security Library 1.2.40 release includes the following changes:
  * (xmlsec-core) Fixed functions deprecated in LibXML2 2.13.1 (including disabling HTTP support by default).
  * (xmlsec-nss) Increased keys size in all tests to support NSS 3.101.
  * (windows) Added "ftp" and "http" flags in 'configure.js' (both are disabled by default).
  * Several other small fixes (more details).
- Update to 1.2.39
  The legacy XML Security Library 1.2.39 release includes the following changes:
  * Added options to enable/disable local files, HTTP, and FTP support. FTP is disabled by default.
  * Several other small fixes (more details).
- Remove upstreamed xmlsec1-gcc14.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1725278400">- Update to 1.2.41:
  * (xmlsec-mscng,xmlsec-mscrypto) Improved certificates verification.
  * (xmlsec-gnutls) Added support for self-signed certificates.
  * (xmlsec-core) Fix deprecated functions in LibXML2 2.13.1
    including disabling HTTP support by default
    (use '--enable-http' option to re-enable it).</changelog>
</package>
<package pkgid="0756b28482c797fafc810862d91c9611bcd47c31e6aa52f015bf21de520888bc030c13be4ed4e538a005aff5541acaeee898c356f5feb798656f60f201dc1cea" name="libxmlsec1-openssl1" arch="x86_64">
  <version epoch="0" ver="1.2.41" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1667563200">- Update to 1.2.36:
  * Retired the XMLSec mailing list "xmlsec@aleksey.com" and the
    XMLSec Online Signature Verifier.
- Update to 1.2.35:
  * Migration to OpenSSL 3.0 API (based on PR by @snargit). Note
    that OpenSSL engines are disabled by default when XMLSec
    library is compiled against OpenSSL 3.0. To re-enable OpenSSL
    engines, use "--enable-openssl3-engines" configure flag (there
    will be a lot of deprecation warnings).
  * The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now
    deprecated and will be removed in the future versions of
    XMLSec Library.
  * Refactored all the integer casts to ensure cast-safety. Fixed
    all warnings and enabled "-Werror" and "-pedantic" flags on
    CI builds.
  * Added configure flag to use size_t for xmlSecSize (currently
    disabled by default for backward compatibility).
  * Moved all CI builds to GitHub actions.</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.2.37:
  Fixed two regressions from 1.2.36 release</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well</changelog>
  <changelog author="fstrba@suse.com" date="1691496000">- Added patch:
  * xmlsec1-ui_null.patch
    + fix build with older versions of openssl that don't have
    UI_null() method</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701345600">- Make use of openSUSE build flags</changelog>
  <changelog author="fstrba@suse.com" date="1702641600">- Update to 1.2.38
  * Have a look at the changelog for the list of changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Added patch:
  * xmlsec1-gcc14.patch
    + add missing include and fix gcc14 build</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720785600">- Update to 1.2.40
  The legacy XML Security Library 1.2.40 release includes the following changes:
  * (xmlsec-core) Fixed functions deprecated in LibXML2 2.13.1 (including disabling HTTP support by default).
  * (xmlsec-nss) Increased keys size in all tests to support NSS 3.101.
  * (windows) Added "ftp" and "http" flags in 'configure.js' (both are disabled by default).
  * Several other small fixes (more details).
- Update to 1.2.39
  The legacy XML Security Library 1.2.39 release includes the following changes:
  * Added options to enable/disable local files, HTTP, and FTP support. FTP is disabled by default.
  * Several other small fixes (more details).
- Remove upstreamed xmlsec1-gcc14.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1725278400">- Update to 1.2.41:
  * (xmlsec-mscng,xmlsec-mscrypto) Improved certificates verification.
  * (xmlsec-gnutls) Added support for self-signed certificates.
  * (xmlsec-core) Fix deprecated functions in LibXML2 2.13.1
    including disabling HTTP support by default
    (use '--enable-http' option to re-enable it).</changelog>
</package>
<package pkgid="2f252ed84d25c28322427452fe07f31f8a938d52968f0475bb968f55f89c7eb7ea790b339c54688005aba2ef2138e9a616df3b0a7d8ac88c80a55195b105ae2b" name="libxshmfence1" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="160000.3.2"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385553600">- Update to version 1.1:
  + Add mandatory COPYING file.
  + Add the required README file
  + make: add $(CWARNFLAGS)
  + make: list non installed headers under the _SOURCES variable
  + lint: remove usage of libxshmfence_la_SOURCES
  + Change fence memory type from 'int32_t' to 'struct shmfence'
  + Locate directory for shared memory files at configure time
  + Use O_TMPFILE if available
  + Split out futex implementation from general API
  + Provide pthread-based alternative implementation
  + Set symbol visibility attribute to hide internal symbols</changelog>
  <changelog author="cfarrell@suse.com" date="1386158400">- license update: HPND
  COPYING file is HPND - does not contain sublicensing reference (as MIT
  does)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1386417600">- Add baselibs.conf
  Provide libxshmfence1-32bit</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Add missing BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1420286400">- Update to version 1.2:
  + build fixes
  + FreeBSD umtx support
  + memfd_create support for kernel &gt;= 3.17</changelog>
  <changelog author="sndirsch@suse.com" date="1420459200">- specfile: added baselibs.conf as source (new checkin policy)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Add u_configure.ac-call-AC_USE_SYSTEM_EXTENSIONS.patch
  * Fixes build with GLIBC 2.27. (bnc#1079830)</changelog>
  <changelog author="sndirsch@suse.com" date="1519646400">- Update to version 1.3
  * autogen.sh: use quoted string variables
  * Fix missing &lt;limits.h&gt; include for HAVE_UMTX branch of futex
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish
  * configure.ac: call AC_USE_SYSTEM_EXTENSIONS
- supersedes u_configure.ac-call-AC_USE_SYSTEM_EXTENSIONS.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1666094400">- Update to version 1.3.1
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * alloc: prefer atomic close-on-exec without O_TMPFILE as well
  * alloc: prefer SHM_ANON on FreeBSD a la memfd_create</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 1.3.2:
  * configure: Use AC_SYS_LARGEFILE to enable large file support
- spec file modernisation, add license and README</changelog>
</package>
<package pkgid="b6fb7935e7fcd3292fe29c21b406297fb911dbea099493f2572f7b520123008fbd2274bd4a89b2b2f7d27d6d43f6efd092e37fee3633831a4aba01e1b86f79c1" name="libxslt1" arch="x86_64">
  <version epoch="0" ver="1.1.43" rel="160000.4.1"/>
  <changelog author="christophe@krop.fr" date="1716552000">- Add upstream build fix:
  * 0001-tests-Fix-build-with-older-libxml2.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1726833600">- Add libxslt-reproducible.patch to make xml output deterministic (boo#1062303)</changelog>
  <changelog author="pmonreal@suse.com" date="1737115200">- Update to 1.1.42:
  * Regressions:
  - extensions: Readd call to xmlCheckFilename with older libxml2
  * Improvments:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  * Build systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option (Don Olmstead)
  - cmake: Fix HAVE_GCRYPT check
- Update to 1.1.41:
  * Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  * Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  * Build systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems (Daniel E)
  * Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members
- Update to 1.1.40:
  * Removals:
  - xsltproc: remove maxparserdepth option (Mike Dalessio)
  * Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  * Build systems:
  - build: Remove mem-debug option
  * Remove patches upstream:
  - gcc14-runtest-no-const.patch
  - 0001-tests-Fix-build-with-older-libxml2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1737201600">- Allow building with older libxml2 versions:
  * tests: Make runtest compile with older libxml2 versions
  * https://gitlab.gnome.org/GNOME/libxslt/issues/125
  * Add libxslt-test-compile-with-older-libxml2-versions.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1737201601">- Remove the test_bad regression test that fails with old libxml2
  as suggested by upstream devs:
  * https://gitlab.gnome.org/GNOME/libxslt/-/issues/126</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Update to 1.1.43:
  * Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default. These features can be
    enabled by passing --with-crypto or --with-plugins to configure.
    In a future release, these features will be removed.
  - Debug output and the debugger are disabled by default and can be
    enabled by passing --with-debug or --with-debugger.
  * Security:
  - [bsc#1239625, CVE-2025-24855] Fix use-after-free of XPath context node
  - [bsc#1239637, CVE-2024-55549] Fix UAF related to excluded namespaces
  * Bug fixes:
  - variables: Fix non-deterministic generated IDs
  * libxml2 related cleanup:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: always include stdlib.h (Hugo Beauzée-Luyssen)
  - extensions: Don't use libxml2's "modules" feature
  * Code cleanup:
  - numbers: Make static variables const
  - variables: Remove debug code
  * Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  * Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config (Alessandro Astone)
  * Remove patches fixed in the update:
  - libxslt-reproducible.patch
  - libxslt-test-compile-with-older-libxml2-versions.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752753600">- security update
- added patches
  CVE-2025-7424 [bsc#1246360], Type confusion in xmlNode.psvi between stylesheet and source nodes
  + libxslt-CVE-2025-7424.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]
- deleted patches
  * libxslt-CVE-2025-10911.patch</changelog>
</package>
<package pkgid="170d912c22053780a0f6aa1c2edbccc17b93f4561896aa1b239af5658682612d32d13af0015ae988df7f3d60f3c862c9417f59f06db1dc9ccdb17535e3c8cfdc" name="libxtables12" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="b0ea8f51e4f68161e9e0a5d3f01341a7033ab219c97ca15a4dcbac2856e390a9cb8f048b53b4d6d9d2bf3474c764f44508c5a8046a3f013cf59a411443c4f2a9" name="libxxhash0" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 0.8.0
  * api : stabilize XXH3
  * cli : xxhsum can produce BSD-style lines, with command --tag
  * cli : xxhsum can parse and check BSD-style lines, using command --check
  * cli : xxhsum - accepts console input
  * cli : xxhsum accepts -- separator
  * cli : fix : print correct default algo for symlinked helpers
- Add BR on c++_compiler, needed for test programs</changelog>
  <changelog author="ro@suse.de" date="1625572800">- add patch xxhash-avoid-armv6-unaligned-access.patch
  do not expect unaligned accesses to work on armv6, it breaks
  in our build setup using aarch64 kernels</changelog>
  <changelog author="dmueller@suse.com" date="1638446400">- update to 0.8.1:
  * perf : much improved performance for XXH3 streaming variants, notably on
    gcc and msvc
  * perf : improved XXH64 speed and latency on small inputs
  * perf : small XXH32 speed and latency improvement on small inputs of random
    size
  * perf : minor stack usage improvement for XXH32 and XXH64
  * api  : new experimental variants XXH3_*_withSecretandSeed()
  * api  : update XXH3_generateSecret(), can no generate secret of any size (&gt;=
    XXH3_SECRET_SIZE_MIN)
  * cli  : xxhsum can now generate and check XXH3 checksums, using command `-H3`
  * build: can build xxhash without XXH3, with new build macro XXH_NO_XXH3
  * build: fix xxh_x86dispatch build with MSVC, by @apankrat
  * build: XXH_INLINE_ALL can always be used safely, even after XXH_NAMESPACE
    or a previous XXH_INLINE_ALL
  * build: improved PPC64LE vector support
  * install: fix pkgconfig
  * install: compatibility with Haiku
  * doc  : code comments made compatible with doxygen
  * misc : XXH_ACCEPT_NULL_INPUT_POINTER is no longer necessary, all functions
    can accept NULL input pointers, as long as size == 0
  * misc : complete refactor of CI tests on Github Actions, offering much
    larger coverage
  * misc : xxhsum code base split into multiple specialized units, within
    directory cli/
- add 836f4e735cf368542f14005e41d2f84ec29dfd60.patch (fix manpage installation)</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- fix racy check execution</changelog>
  <changelog author="mgorse@suse.com" date="1678276800">- Add 15ce80f9f2760609d8cc68cea76d3f3217ab70e1.patch: fix build
  failure on ppc64le when using gcc 7 (boo#1208794).</changelog>
  <changelog author="jengelh@inai.de" date="1699012800">- Update to release 0.8.2
  * ARM NEON speed improvements; on M1 Pro it is +20% speed for
    XXH3 and XXH128 (from 30.0 GB/s to 36 GB/s).
  * Added support for ARM's SVE vector extension.
  * Resolved some issues with XXH3's s390x vector implementation.
- Delete xxhash-avoid-armv6-unaligned-access.patch (should be
  fixed by c0dd448b), delete 836f4e735cf368542f14005e41d2f84ec29dfd60.patch
  (merged), delete 15ce80f9f2760609d8cc68cea76d3f3217ab70e1.patch
  (merged)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701345600">- Make use of openSUSE build flags</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1714910400">- Fix ftbfs with gcc14:
  * use correct optflags also in %check
  * add test-tools-do-not-override-cflags.patch
- Execute more tests</changelog>
  <changelog author="jengelh@inai.de" date="1725364800">- Add inline.patch to resolve FTBFS on gcc-14 + -Og.</changelog>
  <changelog author="jengelh@inai.de" date="1735560000">- Update to release 0.8.3
  * Corrects an edge case in ``XXH3_128bits_withSecretandSeed``
    that could generate invalid results.
  * xxhash now knows command-line arguments ``--filelist``,
    ``--files-from``.</changelog>
</package>
<package pkgid="296531307f2aa7ec4aa25d47bbd13e2986114c1221c063bfd74a3e124eb7305afe93241988ff9e62e8badcbd85b079e257138bf2a9f59fd3d4c62feb0e41b3ab" name="libyaml-0-2" arch="x86_64">
  <version epoch="0" ver="0.2.5" rel="160000.3.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1417608000">- fix CVE-2014-9130: libyaml: assert failure when processing
  wrapped strings (bnc#907809)
  CVE-2014-9130.patch contains the fix</changelog>
  <changelog author="avindra@opensuse.org" date="1514721600">- update to 0.1.7
  * Fixed segfault in yaml_string_write_handler
  * Fixed invalid simple key assertion (CVE-2014-9130)
  * Fixed error handling in some examples
- remove CVE-2014-9130.patch
  - fixed upstream in 946596172d140497b560e016e581accb0a92cca4
- cleanup spec file with spec-cleaner</changelog>
  <changelog author="mimi.vx@gmail.com" date="1543924800">- update to 0.2.1
  * Fixed most compiler warnings -Wall -Wextra
  * Support static and dynamic libraries
  * Add support for `make test`
  * Apply old fix for `\/` that is not in master.
  * Port bug fix from Perl binding
  * Removed trailing-whitespaces
  * Fix -Wformat compilation errors in tests
  * Added missing Cflags path in pkg-config file
  * Forbid escaped singlequote in doublequotes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Add libyaml-revert-emitter-changes.patch: Revert "This code is
  not needed and breaks tests" (gh#yaml/libyaml#122).</changelog>
  <changelog author="jengelh@inai.de" date="1548676800">- --with-pic is useless without static libs, remove it.
- Update RPM groups and descriptions.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1555588800">- update to 0.2.2
- refreshed libyaml-revert-emitter-changes.patch
  * Fix comparison in tests/run-emitter.c
  * Allow colons in plain scalars inside flow collections
  * The closing single quote needs to be indented...
  * Revert removing of open_ended after top level plain scalar</changelog>
  <changelog author="tina.mueller@suse.com" date="1564574400">- Remove patch
  * Patch libyaml-revert-emitter-changes.patch is not needed anymore</changelog>
  <changelog author="info@paolostivanin.com" date="1587384000">- update to 0.2.4
  * Support %YAML 1.2 directives
  * Multiple fixes</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 0.2.5:
  * Allow question marks in plain scalars in flow collections
  * Emitter: Don't output trailing space for empty scalar nodes
  * Emitter: Output space after an alias mapping key
  * Add -h and --flow (on|off|keep) to run-*-test-suite
  * Remove unnecessary include and malloc
  * Add specific files back to .gitignore
  * Output error position in run-parser-test-suite.c
  * A couple patches to improve test suite support</changelog>
  <changelog author="dimstar@opensuse.org" date="1662465600">- Add baselibs.conf: produce libyaml-0-2-32bit, required by
  libcamera -&gt; pipewire.</changelog>
</package>
<package pkgid="dda9709f9a8b276844c6ecf73bb1c0562c37fb2c6b212ef4a69be3305b6b2b88e27d31b297c9a152341414056c5caa570b80cbb2581f0b060e98f8571e45f584" name="libyaml-cpp0_8" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="160000.2.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Update to 0.6.2:
  * Fix incorrect version numbering</changelog>
  <changelog author="mrostecki@opensuse.org" date="1576584000">- Update to 0.6.3:
  * bug fixes
  * CMake updates, now requiring 3.1
- Remove merged patch to fix PIE build:
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1630324800">- Update to 0.7.0:
  * Bazel support
  * CMake improvements
  * Adopts many modern C++ syntaxes
  * Bug fixes
  * Obsoletes yaml-cpp-CVE-2017-5950.patch (fixed by DepthGuard)</changelog>
  <changelog author="hpj@urpla.net" date="1630324801">- Adjust library dependency reference</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- add fix-cmake-export.patch  untabify-cmakelists.patch (bsc#1191137)</changelog>
  <changelog author="fcrozat@suse.com" date="1683806400">- Drop patches fix-cmake-export.patch  untabify-cmakelists.patch
  replacing them with pull-request 1077.patch which was
  merged (bsc#1191137).</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1692273600">- Update to 0.8.0:
  * Significant CMake changes, especially to Windows builds
  * Support for std::unordered_map, std::valarray, and std::string_view
  * Updated gtest dependency
  * Assorted bug fixes
- Drop 1077.patch, which is included in version 0.8.0</changelog>
</package>
<package pkgid="19468f8717c919011dbee25bcda39d084848cc42c041a9569ae039e6d88ce4f4fba78f0cb97d8ea78bb07d08e49f7ef502282ef238e3070bb522786997496092" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="160000.3.1"/>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.2.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dmueller@suse.com" date="1677672000">- avoid buildcycle with krb5 (in sle15+ - jsc#PED-3641)
- skip hwcaps subpackage building for -static subpackage</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683288000">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %autopatch to work with rpm-4.20 (bsc#1240154)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1771416000">- Fix CVE-2026-27171, infinite loop via the crc32_combine64 and
  crc32_combine_gen64 functions due to missing checks for negative
  lengths (bsc#1258392)
  * CVE-2026-27171.patch
- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="2b4807bd4ee27d16d273fb7350b1cccf09da19eb54daee9c6dc6865cd2e4610cb979302dd797a6becd54ce6fad58e52f6671f7299c8fa0bd01e683681db0e255" name="libzck1" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="160000.2.2"/>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="dmueller@suse.com" date="1641211200">- add zstd-1.5.1.patch (gh#zchunk/zchunk/57)</changelog>
  <changelog author="rpm@fthiessen.de" date="1649937600">- Update to version 1.2.1
  * Better error detection
  * Add support for specifying compression-format in zck
  * zck: add option to select chunk hash
  * Fix testsuite: Add expected sha256sums for zstd 1.5.1+
  * Fix memory leaks
  * Various bug fixes
- Drop upstream merged zstd-1.5.1.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1650628800">- Update to version 1.2.2
  * Turn off EOL handling for the *.zck test files.
  * Let the tests also pass with libzstd-1.4.10.</changelog>
  <changelog author="dmueller@suse.com" date="1666612800">- update to 1.2.3:
  * Remove meson deprecation warning
  * Add license scan report and status
  * test/zck_cmp_uncomp: fix printf format types
  * meson: add option to build without docs
  * zck: declare write_data as static</changelog>
  <changelog author="bwiedemann@suse.com" date="1676808000">- update to 1.2.4:
  * Update tests to handle zstd 1.5.4</changelog>
  <changelog author="dmueller@suse.com" date="1679918400">- update to 1.3.0:
  * Add ZCK_NO_WRITE option to disable writing to a file
  * meson: Use global function in argp check</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- update to 1.3.1:
  * Fix read off-by-one bug in compressed int function
  * Handle read-data errors correctly
  * Ensure memory is freed when zrealloc is called with size 0</changelog>
  <changelog author="dmueller@suse.com" date="1697284800">- update to 1.3.2:
  * Handle overflow errors in malformed zchunk files</changelog>
  <changelog author="ali.abdallah@suse.com" date="1740657600">- Update to 1.5.1:
  * Stop storing last error when missing zchunk context
  * More statistics in zchunk_delta_info
  * Various memory leak fixes
  * Better support for OpenSSL 3.x
  * Various bug fixes
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
</package>
<package pkgid="dca4e58170a516d8e73b8225c7ec8af274d416375827a54c800945f3a420066ed557f786d76cd805ab07426c421551787e7a41a1e5f14327262ace2f468508ad" name="libzio1" arch="x86_64">
  <version epoch="0" ver="1.09" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1488283200">- Push version to 1.04
  * Add patch from Andreas Schwab to fix problem with missing
  declaration of pthread_sigmask(2)
- Delete pthread-sigmask.patch as now upstream</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Push to version 1.05
  * Avoid that writer of fopencookie(3) will return less than
    the initial buffer size.
  * Make sure that MIN macro is defined if used.
  * Some minor changes as well.</changelog>
  <changelog author="werner@suse.de" date="1515499200">- Version 1.06: Add changes from Jerrell Watts which has kindly
  provided his changes for lzma/xz support with large I/O buffers</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="werner@suse.de" date="1623153600">- Version 1.07: Add support for zstd at least for write and read</changelog>
  <changelog author="werner@suse.de" date="1623240000">- Version 1.08: Fix bug triggered by short files</changelog>
  <changelog author="werner@suse.de" date="1623240001">- Correct download URL</changelog>
  <changelog author="meissner@suse.com" date="1657195200">- switch to https download url</changelog>
  <changelog author="werner@suse.de" date="1706788800">- Version 1.09: Allow to create files without suffix as well</changelog>
</package>
<package pkgid="53a9d2490b41220eae6c3c48af4a8b854dadf72325ebb2ce69f5c56f103a87407adf9b323f039a36cd5fba1c442f789f38a6b788f7f48cfc0d5ba68130dcbdd5" name="libzmq5" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1522065600">- New upstream version 4.2.5:
  * fix backward-incompatible change in the NULL auth
    mechanism that slipped in 4.2.3 and made connections
    with a ZAP domain set on a socket but without a working
    ZAP handler fail. See ZMQ_ZAP_ENFORCE_DOMAIN
  * clarify in zmq_close manpage that the operation will
    complete asynchronously.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- New upstream version 4.3.1:
  * CVE-2019-6250: A vulnerability has been found that would allow
    attackers to direct a peer to jump to and execute from an address
    indicated by the attacker. (bsc#1121717)
  * fixed race condition in ZMQ_PUSH when quickly disconnecting and
    reconnecting causes last part of multi-part message to get
    "stuck" and resent by mistake to the new socket.
  For complete set of changes, see,
  https://github.com/zeromq/libzmq/releases/tag/v4.3.1
  https://github.com/zeromq/libzmq/releases/tag/v4.3.0</changelog>
  <changelog author="vcizek@suse.com" date="1562673600">- New upstream version 4.3.2:
  * CVE-2019-13132: a remote, unauthenticated client connecting to a
    libzmq application, running with a socket listening with CURVE
    encryption/authentication enabled, may cause a stack overflow and
    overwrite the stack with arbitrary data, due to a buffer overflow in
    the library. Users running public servers with the above configuration
    are highly encouraged to upgrade as soon as possible, as there are no
    known mitigations. (bsc#1140255)
  * New DRAFT (see NEWS for 4.2.0) zmq_socket_monitor_versioned API that supports
    a versioned monitoring events protocol as a parameter. Passing 1 results in
    the same behaviour as zmq_socket_monitor.
  * New DRAFT (see NEWS for 4.2.0) zmq_socket_monitor_pipes_stats that triggers
    a new ZMQ_EVENT_PIPES_STATS to be delivered via zmq_socket_monitor_versioned
    v2 API, which contains the current status of all the queues owned by the
    monitored socket. See doc/zmq_socket_monitor_versioned.txt for details.
  * New DRAFT (see NEWS for 4.2.0) zmq_poller_fd that returns the FD of a thread
    safe socket.
  * New DRAFT (see NEWS for 4.2.0) socket options:
    ZMQ_XPUB_MANUAL_LAST_VALUE is similar to ZMQ_XPUB_MANUAL but allows to avoid
    duplicates when using last value caching.
    ZMQ_SOCKS_USERNAME and ZMQ_SOCKS_PASSWORD that implement SOCKS5 proxy
    authentication.
- For complete set of changes, see
  https://github.com/zeromq/libzmq/releases/tag/v4.3.2</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- New upstream version 4.3.3:
  * Denial-of-Service on CURVE/ZAP-protected servers by
    unauthenticated clients. (CVE-2020-15166, bsc#1176116)
    If a raw TCP socket is opened and connected to an endpoint that is fully
    configured with CURVE/ZAP, legitimate clients will not be able to exchange
    any message. Handshakes complete successfully, and messages are delivered to
    the library, but the server application never receives them.
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-25wp-cf8g-938m
  * Stack overflow on server running PUB/XPUB socket (CURVE disabled).
    The PUB/XPUB subscription store (mtrie) is traversed using recursive
    function calls. In the remove (unsubscription) case, the recursive calls are
    NOT tail calls, so even with optimizations the stack grows linearly with the
    length of a subscription topic. Topics are under the control of remote
    clients - they can send a subscription to arbitrary length topics. An
    attacker can thus cause a server to create an mtrie sufficiently large such
    that, when unsubscribing, traversal will cause a stack overflow. (bsc#1176258)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-qq65-x72m-9wr8
  * Memory leak in PUB server induced by malicious client(s) without CURVE/ZAP.
    Messages with metadata are never processed by PUB sockets, but the metadata
    is kept referenced in the PUB object and never freed. (bsc#1176257)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-4p5v-h92w-6wxw
  * Memory leak in client induced by malicious server(s) without CURVE/ZAP.
    When a pipe processes a delimiter and is already not in active state but
    still has an unfinished message, the message is leaked. (bsc#1176259)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-wfr2-29gj-5w87
  * Heap overflow when receiving malformed ZMTP v1 packets (CURVE disabled).
    By crafting a packet which is not valid ZMTP v2/v3, and which has two
    messages larger than 8192 bytes, the decoder can be tricked into changing
    the recorded size of the 8192 bytes static buffer, which then gets overflown
    by the next message. The content that gets written in the overflown memory
    is entirely decided by the sender. (bsc#1176256)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-fc3w-qxf5-7hp6
  For complete list of changes, see
  https://github.com/zeromq/libzmq/releases/tag/v4.3.3</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 4.3.4:
  * ZMQ_PRIORITY will set the SO_PRIORITY socket option on the underlying
    sockets. Only supported on Linux.
  * Fixed compilation errors on kFreeBSD and GNU/Hurd
  * Fixed excessive amount of socket files left behind in Windows TMP
  * Fixed regression that breaks using IPv6 link-local addresses on Linux
  * Fixed compilation errors on Android
  * Fixed compilation error with ulibc and libbsd
  * Fixed stack overflow on Windows x64
  * Fixed various compilation errors on Windows ARM 32bit
  * Fixed various compilation warnings with XCode
  * Fixed return value of zmq_ctx_get changed unintentionally</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Explicit BR on python is not necessary.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- drop xmlto and asciidoc buildrequires, these are only needed
  for non-release builds which do not ship with prebuilt docs</changelog>
  <changelog author="schwab@suse.de" date="1674475200">- qemu-user.patch: Fix build with qemu linux-user emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1698148800">- update to 4.3.5:
  * Relicensing from LGPL-3.0+ (with custom exceptions) to MPL-2.0 is now complete.
    libzmq is now distributed under the Mozilla Public License 2.0. Relicensing
    grants have been collected from all relevant authors, and some functionality
    has been clean-room reimplemented where that was not possible. In layman terms,
    the new license provides the same rights and obligations as before. Source
    files are now tagged using the SPDX license identifier format.
    Details of the relicensing process can be seen at: #2376
    Relicensing grants have been archived at:
    https://github.com/rlenferink/libzmq-relicense
    A special thanks to everybody who helped with this long and difficult task,
    with the process, the reimplementations, the collections and everything else.
  * New DRAFT (see NEWS for 4.2.0) socket options:
    ZMQ_BUSY_POLL will set the SO_BUSY_POLL socket option on the underlying
    sockets, if it is supported.
    ZMQ_HICCUP_MSG will send a message when the peer has been disconnected.
    ZMQ_XSUB_VERBOSE_UNSUBSCRIBE will configure a socket to pass all
    unsubscription messages, including duplicated ones.
    ZMQ_TOPICS_COUNT will return the number of subscribed topics on a
    PUB/SUB socket.
    ZMQ_NORM_MODE, ZMQ_NORM_UNICAST_NACK, ZMQ_NORM_BUFFER_SIZE,
    ZMQ_NORM_SEGMENT_SIZE, ZMQ_NORM_BLOCK_SIZE, ZMQ_NORM_NUM_PARITY,
    ZMQ_NORM_NUM_AUTOPARITY and ZMQ_NORM_PUSH to control various aspect of
    NORM sockets.
    See doc/zmq_setsockopt.txt and doc/zmq_getsockopt.txt for details.
  * New DRAFT (see NEWS for 4.2.0) zmq_ppoll APIs was added that differs from
    zmq_poll in the same way that ppoll differs from poll.
    See doc/zmq_ppoll.txt for details.
  * Various bug fixes and performance improvements.
- qemu-user.patch: upstreamed, removed</changelog>
</package>
<package pkgid="0827d50a6e7b0c2b1a91048e7a0bf4c48174c4c5a4af41a27894fa2dc59b7a4dda24fd01c352cddfb2743ed5fb22d1cf9c4a8d6ad0c5564679c58880b8db2b47" name="libzstd1" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 1.5.1:
  * perf: rebalanced compression levels, to better match the intended speed/level curve
  * perf: faster huffman decoder, using x64 assembly
  * perf: slightly faster high speed modes (strategies fast &amp; dfast)
  * perf: improved binary size and faster compilation times
  * perf: new row64 mode, used notably in level 12
  * perf: faster mid-level compression speed in presence of highly repetitive patterns
  * perf: minor compression ratio improvements for small data at high levels
  * perf: reduced stack usage (mostly useful for Linux Kernel)
  * perf: faster compression speed on incompressible data
  * perf: on-demand reduced ZSTD_DCtx state size, using build macro ZSTD_DECODER_INTERNAL_BUFFER, at a small cost of performance
  * build: allows hiding static symbols in the dynamic library, using build macro
  * build: support for m68k (Motorola 68000's)
  * build: improved AIX support
  * build: improved meson unofficial build
  * cli : custom memory limit when training dictionary (#2925)
  * cli : report advanced parameters information when compressing in very verbose mode (``-vv`)</changelog>
  <changelog author="dmueller@suse.com" date="1641211200">- fix pkgconfig pc file settings by passing in right prefix during build</changelog>
  <changelog author="dmueller@suse.com" date="1641384000">- add noexecstack.patch (bsc#1194337)</changelog>
  <changelog author="bwiedemann@suse.com" date="1642766400">- update to 1.5.2:
  * correct a performance regression
  * smaller improvements and fixes
  * See https://github.com/facebook/zstd/releases/tag/v1.5.2
- Refresh pzstd.1.patch
- Drop upstream noexecstack.patch</changelog>
  <changelog author="dmueller@suse.com" date="1643544000">- enable zlib/gzip compatible backend, as zlib is significantly
  (50%-100%) faster than gzip
- add zstd-gzip compatibility subpackage which can be used
  as a drop in compatible replacement for gzip
- small spec file cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1672747200">- add zcat in zstd-gzip (needed by for example the kernel scripts)</changelog>
  <changelog author="bwiedemann@suse.com" date="1676030400">- update to 1.5.4:
  * perf: +20% faster huffman decompression for targets that
    can't compile x64 assembly
  * perf: up to +10% faster streaming compression at levels 1-2
  * perf: +4-13% for levels 5-12 by optimizing function
    generation
  * pref: +3-11% compression speed for `arm` target
  * perf: +5-30% faster dictionary compression at levels 1-4
  * perf: +10-20% cold dict compression speed by prefetching
    CDict tables
  * perf: +1% faster compression by removing a branch in
    ZSTD_fast_noDict
  * perf: Small compression ratio improvements in high
    compression mode
  * perf: small speed improvement by better detecting
    `STATIC_BMI2` for `clang`
  * perf: Improved streaming performance when
    `ZSTD_c_stableInBuffer` is set
  * cli: Asynchronous I/O for improved cli speed
  * cli: Change `zstdless` behavior to align with `zless`
  * cli: Keep original file if `-c` or `--stdout` is given
  * cli: Keep original files when result is concatenated into a
    single output with `-o`
  * cli: Preserve Permissions and Ownership of regular files
  * cli: Print zlib/lz4/lzma library versions with `-vv`
  * cli: Print checksum value for single frame files with `-lv`
  * cli: Print `dictID` when present with `-lv`
  * cli: when `stderr` is *not* the console, disable status
    updates, but preserve final summary
  * cli: support `--best` and `--no-name` in `gzip` compatibility
    mode
  * cli: support for `posix` high resolution timer
    `clock_gettime()`, for improved benchmark accuracy
  * cli: improved help/usage (`-h`,  `-H`) formatting
  * cli: Fix better handling of bogus numeric values
  * cli: Fix input consists of multiple files _and_ `stdin`
  * cli: Fix tiny files passthrough
  * cli: Fix for `-r` on empty directory
  * cli: Fix empty string as argument for `--output-dir-*`
  * cli: Fix decompression memory usage reported by `-vv --long`
  * cli: Fix infinite loop when empty input is passed to trainer
  * cli: Fix `--adapt` doesn't work when `--no-progress` is also
    set
  * api: Support for Block-Level Sequence Producer
  * api: Support for in-place decompression
  * api: New  `ZSTD_CCtx_setCParams()`  function, set all
    parameters defined in a  `ZSTD_compressionParameters`
    structure
  * api: Streaming decompression detects incorrect header ID
    sooner
  * api: Window size resizing optimization for edge case
  * api: More accurate error codes for busy-loop scenarios
  * api: Fix limit overflow in `compressBound` and
    `decompressBound` (#3362, #3373, Cyan4973) reported by
    @nigeltao
  * api: Deprecate several advanced experimental functions:
    streaming (#3408, @embg), copy
  * bug: Fix corruption that rarely occurs in 32-bit mode with
    wlog=25
  * bug: Fix for block-splitter
  * bug: Fixes for Sequence Compression API
  * bug: Fix leaking thread handles on Windows
  * bug: Fix timing issues with cmake/meson builds
  * build: Allow user to select legacy level for cmake
  * build: Enable legacy support by default in cmake
  * build: Meson build script improvements
  * build: Add aarch64 to supported architectures for zstd_trace
  * build: support AIX architecture
  * build: Fix `ZSTD_LIB_MINIFY` build macro, which now reduces
    static library size by half
  * build: Fix Windows issues with Multithreading translation
    layer (#3364, #3380, @yoniko) and ARM64 target
  * build: Fix `cmake` script
  * doc: Updated man page, providing more details for `--train`
    mode
  * doc: Add decompressor errata document
  * misc: Enable Intel CET
  * misc: Fix `contrib/` seekable format
  * misc: Improve speed of the one-file library generator
- rebase pzstd.1.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dmueller@suse.com" date="1681387200">- update to 1.5.5:
  * fix: fix rare corruption bug affecting the high compression
    mode, reported by @danlark1
  * perf: improve mid-level compression speed
  * lib: deprecated bufferless block-level API (#3534) by
    @terrelln
  * cli: mmap large dictionaries to save memory, by
    @daniellerozenblit
  * cli: improve speed of --patch-from mode (~+50%) (#3545) by
    @daniellerozenblit
  * cli: improve i/o speed (~+10%) when processing lots of small
    files (#3479) by @felixhandte
  * cli: zstd no longer crashes when requested to write into
    write-protected directory (#3541) by @felixhandte
  * cli: fix decompression into block device using -o, reported
    by @georgmu
  * misc: improve seekable format ingestion speed (~+100%) for
    very small chunk sizes (#3544) by @Cyan4973
  * misc: tests/fullbench can benchmark multiple files (#3516) by
    @dloidolt</changelog>
  <changelog author="ali.abdallah@suse.com" date="1740657600">- update to 1.5.7:
  * zstd now employs multiple threads by default
  * Fix a rare bug in 32-bit mode
  * Enhanced Compression Speed for Small Data Blocks
  * Substantial --patch-from performance improvements
- Drop pzstd.1.patch - not upstream, but also not needed
- Changes between 1.5.5 and 1.5.6:
  * Introduce a new stable parameter ZSTD_c_targetCBlockSize,
    enabling the division of blocks into smaller segments to
    enhance initial byte delivery speed for congested networks
  * library allows allow ganular binary size selection</changelog>
</package>
<package pkgid="93a6ab47cd213997e81748d11f2206bf0cb2abacd0b3060d60ea157cb0549c7decbfb50f7797744e25c32fcdf0a930fb6bfd196ad0c01059170c1f1bca7674f5" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.38.5" rel="160000.1.1"/>
  <changelog author="ma@suse.de" date="1753963200">- Append RepoInfo::path() to the mirror URLs in Preloader
  (bsc#1247054)
- version 17.37.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1754568000">- Fix evaluation of libproxy results (bsc#1247690)
- Replace URL variables inside mirrorlist/metalink files
  (fixes #667)
- version 17.37.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1754913600">- Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1758542400">- runposttrans: strip root prefix from tmppath (bsc#1250343)
- fixup! Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.18 (35)</changelog>
  <changelog author="ma@suse.de" date="1768132800">- zypp.conf: follow the UAPI configuration file specification
  (PED-14658)
  In short terms it means we will no longer ship an
  /etc/zypp/zypp.conf, but store our own defaults in
  /usr/etc/zypp/zypp.conf. The systems administrator may choose to
  keep a full copy in /etc/zypp/zypp.conf ignoring our config file
  settings completely, or - the preferred way - to overwrite
  specific settings via /etc/zypp/zypp.conf.d/*.conf overlay files.
  See the ZYPP.CONF(5) man page for details.
- cmake: correctly detect rpm6 (fixes #689)
- Use 'zypp.tmp' as temp directory component to ease setting up
  SELinux policies (bsc#1249435)
- zyppng: Update Provider to current MediaCurl2 download
  approach, drop Metalink ( fixes #682 )
- version 17.38.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1768392000">- Avoid libcurl-mini4 when building as it does not support ftp
  protocol.
- Translation: updated .pot file.
- version 17.38.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1769688000">- Prepare a legacy /etc/zypp/zypp.conf to be installed on old distros.
  See the ZYPP.CONF(5) man page for details.
- Fix runtime check for broken rpm --runposttrans (bsc#1257068)
- version 17.38.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1772798400">- specfile: on fedora use %{_prefix}/share as zyppconfdir if
  %{_distconfdir} is undefined (fixes #693)
  This will set '-DZYPPCONFDIR=%{zyppconfdir}' for cmake.
- Fall back to a writable location when precaching packages
  without root (bsc#1247948)
- version 17.38.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1773144000">- Fix Product::referencePackage lookup (bsc#1259311)
  Use a provided autoproduct() as hint to the package name of the
  release package. It might be that not just multiple versions of
  the same release package provide the same product version, but
  also different release packages.
- version 17.38.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1773835200">- Fix preloader not caching packages from arch specific subrepos
  (bsc#1253740)
- Deprioritize invalid mirrors (fixes openSUSE/zypper#636)
- version 17.38.5 (35)</changelog>
</package>
<package pkgid="94b4f1c3690e6cc9bd6bce4784b9c5f92076ac321df262618862b24a194316d97acb16b89180aaffa950d65e400bbadd6c8c9761e58d23d30c8c75f5493cc7ed" name="linux-glibc-devel" arch="x86_64">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="4eaf5392f53f862f41e8b6c85b504b178adce434d9f190f28d3ebd1a5a849ee294060c6a774655cd3feba255c243b2f3f46b31e72cec4af7ea945bdc9702d176" name="linuxptp" arch="x86_64">
  <version epoch="0" ver="4.4" rel="160000.3.1"/>
  <changelog author="jbohac@suse.com" date="1518091200">- change the versioning scheme, resulting in version
  1.8+git65.g303b08c</changelog>
  <changelog author="jbohac@suse.com" date="1522756800">Update to version 1.9+git1.gd14f11f:
  * Expand and rationalize time stamping options.
  * Introduce peer to peer one step.
  * pmc: add long options and configuration file
  * port: Implement the NetSync Monitor protocol.
  * Introduce an option to ignore the transport specific field.
  * clock: add option to specify initial path delay.
  * sk: turn warnings about unexpected RX filter into debug messages.</changelog>
  <changelog author="mpluskal@suse.com" date="1543233600">- Update to stable release 2.0:
  * Peer-to-Peer Transparent Clock support
  * End-to-End Transparent Clock support
  * Unicast support
  * Support for all three Telecom Profiles
    + T-REC-G.8265.1-201407
    + T-REC-G.8275.1-201606
    + T-REC-G.8275.2-201708
- Changes for version 1.9.2:
  * Fixed stack buffer overflow in the new NetSync Monitor code (since 1.9)
  * Command line support for every configuration variable via long options
  * IPoIB interface support
  * Improved Delay Request performance at high message rates
  * Improved UTC offset tracking
  * Multiple TLV support
  * NetSync Monitor protocol support
  * Peer to peer one-step
  * Support for bonded interfaces
- No longer use _service</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1563969600">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="jbohac@suse.com" date="1605009600">- Update to version 3.1:
  * ts2phc: nmea: Drop time of day readings older than five seconds.
  * ts2phc: nmea: Update the leap seconds table on demand.
  * ts2phc: nmea: Add a configuration option for the current leap seconds file.
  * ts2phc: nmea: Add error messages for leap second lookup failures.
  * ts2phc: nmea: Correct UTC to TAI conversion.
  * posix_clock_open: derive PHC index from device name if possible
  * phc_ctl: display all capability information
  * ts2phc: Ignore pulses with invalid time stamps.
  * ts2phc: Fix memory leak.
  * ts2phc: Use proper close method on the error path.
  * port: Support slave event monitoring of delay timing data.
  * monitor: Add support for slave delay timing data TLV.
  * pmc: Show slave receive timing data TLVs attached to signaling messages.
  * port: Support slave event monitoring of Sync timing data.
  * clock: Create a slave event monitor.
  * Introduce a module for slave event monitoring.
  * Reject path trace TLVs with excessive elements.
  * Let the free running port state reflect the synchronization uncertain flag.
  * pmc: Support getting and setting the local synchronization uncertain flag.
  * Implement the synchronization uncertain flag.
  * Add support for write phase mode.
  * Decouple servo state from automotive profile.
  * ts2phc: Support using a GPS radio as the master clock.
  * Introduce a leap second table.
  * ts2phc: Support using a PHC as the master clock.
  * Introduce the ts2phc program.
  * pmc: Allow multiple local subscribers.
  * pmc: Subscribe to port state push notification events when requested.
  * clock: reset master/local rr when best clock id changes
  * unicast: Enable sharing master tables between ports.
  * Accept external PHC devices from the command line.
  * phc2sys: Fix frequency estimation when synchronizing a PHC to the system clock.
  * Correct the signature of the legacy system offset measurement method.
  * ptp4l: Add configuration option for socket priority
  * sk: Recognize HWTSTAMP_FILTER_SOME
  * Improve G.8275.[12] example configs.
  * rtnl: add team activebackup support
  * Ignore signaling messages on target port mismatch.
  * Avoid fault when receiving zero length packets
  * phc2sys: Fix crash when trying to synchronize unadjustable clock.
  * Added support for opening POSIX clock devices
  * Allow ignoring source port identity in end to end mode.
  * port: correction of port name used port_open
  * Add example configuration for Automotive Profile.
  * Add ignore_source_id config option.
  * Add inhibit_announce config option.
  * Add BMCA config option.
  * port: Add configurable option to set asCapable.
  * timemaster: Allow ptp4l-specific sections in [ptp4l.conf].
  * unicast: Process timeouts equal to current time.
  * snmp4lptp: added snmp4lptp.8
  * Add possibility to set clockIdentity
  * Introduce the maxStepsRemoved attribute
  * config: Add hardware time stamp filter setting mode
  * snmp4lptp: Added function for data collection from ptp4l program.
  * snmp4lptp: Added communication to ptp4l via the UDS port.
  * snmp4lptp: Add snmp sub agent for linuxptp
- re-introduce the _service file</changelog>
  <changelog author="jbohac@suse.com" date="1625572800">- Update to version 3.1.1:
  * Version 3.1.1
  * tc: Fix length of follow-up message of one-step sync.
  * Validate the messageLength field of incoming messages.</changelog>
  <changelog author="jsegitz@suse.com" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * phc2sys.service
  * ptp4l.service</changelog>
  <changelog author="jbohac@suse.com" date="1694520000">- Update to version 4.1:
  * Version 4.1
  * phc2sys: Fix -n option with -w.
  * phc2sys: Avoid segfault with default UDS address.
  * phc2sys: Improve logging with single domain.
  * ptp4l man: Add description for setting kthreads priorities
  * sk: don't report random errno on timeout
  * phc_ctl: explicitly check for adjust_phase definition
  * raw: Fix PRP trailer detection
  * remove C99 style loop variable declarations
  * phc2sys: Add multi-domain synchronization.
  * phc2sys: Shallow do_loop().
  * phc2sys: Create pmc agent after processing options.
  * phc2sys: Rename phc2sys_private to domain.
  * Use the 802.1AS peer delay computation when transportSpecific is 1
  * Resolve false hybrid_e2e warning
  * Fix SERVO_LOCKED_STABLE behavior.
  * Version 4.0
  * clock: Fix summary interval in free-running mode.
  * Avoid switching PHC when phc_index is negative
  * ts2phc: Fix memory leak on initial error path.
  * power profile: Fix regression in the default configuration file.
  * msg: append TLV onto all PTP event messages
  * Fix detection of VLAN over bond support in case the driver does not support SIOCGHWTSTAMP ioctl.
  * Clear pending errors on sockets.
  * ntpshm: Invalidate SHM data before releasing the servo
  * lstab: Update leapfile validity
  * port: Don't switch to PHC with SW timestamping.
  * ts2phc: Fix potential null-pointer dereference
  * ts2phc: Prevent reporting poll error when received termination signal
  * Set controlField to zero in message headers
  * tz2alt: Add tz2alt to .gitignore
  * Introduce a time zone helper program.
  * pmc: Convert internal helper function into global method.
  * Implement the ALTERNATE_TIME_OFFSET_ENABLE management message.
  * Add the ALTERNATE_TIME_OFFSET_NAME management message.
  * Add the ALTERNATE_TIME_OFFSET_PROPERTIES management message.
  * Prepare clock based storage of up to four time zones.
  * tlv: Encode and decode alternate time offset indicator TLVs.
  * Add a custom management message for power profile settings.
  * Introduce the power profile.
  * tlv: Encode and decode power profile TLVs.
  * Accept the full range for domainNumber.
  * man pages: Bump date.
  * Alphabetize configuration options in the ts2phc man page.
  * Alphabetize configuration options in the pmc man page.
  * Alphabetize configuration options in the phc2sys man page.
  * Remove stray copy/pasteo from the phc2sys man page.
  * Alphabetize configuration options in the ptp4l man page.
  * ts2phc: reset servo if failed to discipline clock
  * phc2sys: reset servo if failed to discipline clock
  * ptp4l: reset servo if failed to discipline clock
  * clockadj: return error if failed to adjust clock
  * unicast: Avoid undefined integer shifts.
  * ts2phc: Fix generic pps source when tai offset is not set in OS
  * lstab: move update_leapsecond_table function to lstab
  * lstab: Add LSTAB_EXPIRED result
  * timemaster: Use refclock_sock servo with chrony.
  * timemaster: Replace shm_segment with refclock_id.
  * Add refclock_sock servo.
  * Remove obsolete statement in ptp4l man page.
  * Fix up alphetical order in port_private header file.
  * port: start sync rx timer on grant
  * raw: Use BPF filter based on tcpdump syntax.
  * Fix SERVO_JUMP docstring comment
  * Improve efficiency of nullf servo synchronization
  * clock: Fix stale clock parent pid usage after best master change
  * adding delay asymmetry calculation
  * organization TLV support for interface rate
  * adding speed field information for interface
  * function to support get interface speed via ethtool
  * unicast_client: cancel sync/delay_response on UC_EV_UNSELECTED event
  * unicast_client: fix checkpatch ERROR: trailing whitespace
  * unicast_client: stop sending abnormal contract cancel requests
  * Don't re-arm fault clearing timer on unrelated netlink events
  * port: Avoid faults with vclocks and PHC from command line.
  * makefile: use conditional assignment for KBUILD_OUTPUT
  * servo: stop rounding initial frequency to nearest ppb
  * The PortId is defined as a couple of ClockId (an 8-bytes opaque) and the PortNumber (UInterger16).
  * config: Fix -Wformat-truncation warnings.
  * unciast_client: trigger BMCA upon CANCEL receive
  * ptp4l: Add profile_id configuration support for G.8275.1 and G.8275.2.
  * config: allow fractional freq_est_interval
  * Added support for Standard Baudrates supported by GNSS receivers
  * Extend clockcheck to check for changes in frequency.
  * Don't accept errors in clockadj_get_freq().
  * Drop support for old kernels returning zero frequency.
  * phc2sys: Add clocks after processing configuration.
  * ts2phc: Use system time as the default ToD source
  * ts2phc: Add option to specify the ToD source in the config file
  * ts2phc: Rename pps_sink to tod_sink in main()
  * port: don't clear fault if link is down
  * sk: Handle EINTR when waiting for transmit timestamp.
  * ts2phc: Update default lstab expiry date
  * phc2sys: Update TAI to UTC offset in manual
  * Strip Parallel Redundancy Protocol (PRP) trailer
  * ts2phc_phc_pps_source: make use of new kernel API for perout waveform
  * ts2phc: allow PHC PPS sources to be synchronized
  * ts2phc: reconfigure sync direction by subscribing to ptp4l port events
  * ts2phc: split PPS sink poll from servo loop
  * ts2phc_slave: print offset to the source clock
  * ts2phc: instantiate a pmc agent
  * util: import port_state_normalize() logic from phc2sys
  * ts2phc: instantiate a full clock structure for every PPS source of the PHC kind
  * ts2phc: instantiate a full clock structure for every PPS sink
  * ts2phc: create a private data structure
  * phc2sys: Add support for free-running mode
  * G.8275.2 support for delay_mechanism NO_MECHANISM
  * port: Disable PHC switch with vclocks.
  * unicast: Update announce timer when renew
  * phc2sys: Allow multiple sink clocks
  * Add new ptp capability.
  * Add new management TLVs to pmc.8
  * ptp4l: add VLAN over bond support
  * port: refactor port_link_status
  * ptp4l: init iface-&gt;ts_label when interface created
  * phc2sys: Don't exit when reading of PHC fails with EBUSY.
  * sysoff: Retry on EBUSY when probing supported ioctls.
  * sysoff: Change log level of ioctl error messages.
  * sysoff: Change sysoff_measure() to return errno.
  * clockadj: Change clockadj_compare() to return errno.
  * ts2phc: rename "master" to "source"
  * ts2phc: rename "slave clocks" to "PPS sinks"
  * ts2phc: rename source code files ("master" to "source", "slave" to "sink")
  * pmc_agent: make pmc_agent_query_port_properties take an enum port_state argument
  * UDS: allow specifying different file mode for the read-only socket.
  * UDS: added option to set file mode for the created socket.
  * Fix management TLV print.
  * Add new managements TLVs get size.
  * port: cancel unicast transmission when closing port.
  * port: unicast client - do not add master to foreign master table if not in the unicast master table.
  * unicast: Add support to send CANCEL_UNICAST_TRANSMISSION TLVs.
  * unicast: Add support to check if message was received from an entry in the unicast master table.
  * TLV management messages need to be aligned to 16 bits.
  * Fix the descriptions of "G.8275.portDS.localPriority" and "G.8275.defaultDS.localPriority" in ptp4l man page.
  * timemaster: Add support for virtual clocks.
  * phc2sys: Use PHC index from PORT_HWCLOCK_NP.
  * tlv: Add PORT_HWCLOCK_NP.
  * port: Check for virtual clocks.
  * config: Add port-specific phc_index option.
  * Add support for binding sockets to virtual clocks.
  * rtnl: Add function to detect virtual clocks.
  * rtnl: Fix rtnl_rtattr_parse() to process max attribute.
  * phc_ctl: replace calculate_offset with clockadj_compare
  * phc2sys: move read_phc into clock_adj.c
  * Add UNICAST_MASTER_TABLE_NP management TLV
  * pmc: Initialize reserved field in management_tlv_datum.
  * Check 'print_log' before arguments are evaluated, not after.
  * Add PORT_SERVICE_STATS_NP management TLV
  * util: attempt to resolve symlinks to the PHC device in posix_clock_open
  * util: fix dangling file descriptors on the error path of posix_clock_open
  * Maintain one Sync sequence counter per destination address.
  * Maintain one Announce sequence counter per destination address.
  * clock: Split update of leap status from clock_time_properties().
  * Delay Response Timeout Feature addition for PTP4L
  * clock: Notify servo about leap second on UTC hardware clock.
  * clock: Clear leap flags after leap second.
  * clock: Print info message when leap flags change.
  * clock: Accept new UTC offset after leap second.
  * lstab: update expiration to 28 December 2021
  * lstab: Close file after reading.
  * Fix quoting in ptp4l man page.
  * config: Add workaround for glibc getopt_long().
  * Rename management ID macros.
  * clockcheck: Increase minimum interval.
  * port: Don't renew raw transport.
  * port: Don't check timestamps from non-slave ports.
  * clock: Reset clock check on best clock/port change.
  * clock: Reset state when switching port with same best clock.
  * Increase the default tx_timestamp_timeout to 10
  * ts2phc: Add serial baudrate option
  * ts2phc: Update leapfile documentation
  * ts2phc: Close socket on peer shutdown
  * ts2phc: Fix uninitialized variable in nmea_scan_rmc
  * tc: Fix length of follow-up message of one-step sync.
  * Validate the messageLength field of incoming messages.
  * Log optimization for ptp4l in jbod and client only mode (clientOnly=1 and boundary_clock_jbod=1)
  * Log optimization for ptp4l in jbod and client only mode (clientOnly=1 and boundary_clock_jbod=1)
  * Add master only management TLV
  * Set domainNumber for telecom examples
  * Fix SLAVE_ONLY TLV
  * Prevent client ports getting stuck in the UNCALIBRATED state.
  * tlv: Fix coding style.
  * Ensure TLV_PORT_STATS_NP statistics uses little endian.
  * Revert "phc2sys: Expand the validation of the PPS mode."
  * Avoid undefined integer operations.
  * pmc: Fix printed totalCorrectionField.
  * Avoid unaligned pointers to packed members.
  * Revert "phc2sys: Ensure PHC source when using PPS mode."
  * phc_ctl: Fix incorrect memset in do_cmp()
  * Fix --initial_delay for automotive profile
  * Update man page to reflect the new serverOnly option.
  * Convert the example configuration files over to the new serverOnly option.
  * Deprecate the masterOnly option in favor of serverOnly.
  * Bump to IEEE 1588-2019 version
  * Clock Class Threshold Feature addition for PTP4L
  * sk: Don't return error for zero-length messages.
  * clock: Introduce step_window to free run x Sync events after a clock step.
  * timemaster: Set uds_ro_address for ptp4l instances.
  * clock: Add read-only UDS port for monitoring.
  * clock: Rename UDS variables to read-write.
  * clock: Don't allow COMMAND action on non-UDS port.
  * port: Ignore non-management messages on UDS port.
  * port: Don't assume transport from port number.
  * Implement push notification for TIME_STATUS_NP
  * tlv: Fix byte reordering in ScaledNs
  * Improve port-related log messages.
  * port: Cache display name for logs.
  * Update man pages to reflect the new clientOnly option.
  * Convert the example configuration files over to the new clientOnly option.
  * Deprecate the slaveOnly option in favor of clientOnly.
  * Check for deprecated "long" options on the command line.
  * lstab: Bring expiration up to date.
  * util: add SIGHUP handling
  * port: Fix link down/up to continue using phc_index set from command line -p option.
  * ts2phc: Convert usage message to time source/sink terminology.
  * ptp4l: Convert usage messages to client/server terminology.
  * phc2sys: Convert usage messages to time source/sink terminology.
  * ts2phc: Convert man page to source/sink terminology.
  * ptp4l: Convert man page to client/server terminology.
  * phc2sys: Convert man page to client/server terminology.
  * phc2sys: Convert man page to source/sink terminology.
  * phc2sys: Update man page to reflect the new restriction on the PPS mode.
  * phc2sys: Ensure PHC source when using PPS mode.
  * phc2sys: fix BC sync fault when port in uncalibrated state
  * phc2sys: add dbg print for clock state change events
  * Update the unicast subscriptions when the GM changes.
  * phc2sys: Fix regression in the automatic mode.
  * pmc_agent: Remove an obsolete method.
  * phc2sys: Simplify the main loop.
  * pmc_agent: Let the update method poll for push events.
  * phc2sys: Move static configuration to its own subroutine.
  * phc2sys: Replace yet another magical test with a proper test.
  * phc2sys: Replace magical test with a proper test.
  * phc2sys: Expand the validation of the PPS mode.
  * phc2sys: Validate the PPS mode right away.
  * phc2sys: Replace hard coded tests with a readable helper function.
  * phc2sys: Rename PMC agent pointer from node to agent.
  * phc2sys: Don't duplicate the command line arguments.
  * pmc_agent: Simplify the method that gets of the number of local ports.
  * pmc_agent: Generalize the method that queries the local clock identity.
  * pmc_agent: Convert the method that queries the port properties.
  * pmc_agent: Convert the method that queries TAI-UTC offset into the canonical form.
  * phc2sys: Fix null pointer de-reference in manual mode.
  * rtnl: Fix trivial spelling error in the name of a helper function.
  * Update the description of the time_stamping configuration option.
  * Avoid setting clock frequency when free running.
  * pmc_agent: Rename the update method and attempt to document it.
  * pmc_agent: Perform time comparison using positive logic.
  * pmc_agent: Remove bogus comparison between last update and now.
  * pmc_agent: Simplify logic in update method.
  * pmc_agent: Simplify the update method.
  * pmc_agent: Convert the subscribe method into the canonical form.
  * Introduce error codes for the run_pmc method.
  * Clarify the documentation of the management TLV ID helper function.
  * Find a better home for the management TLV data helper function.
  * Find a better home for the management TLV ID helper function.
  * pmc_agent: Hide the implementation.
  * pmc_agent: Rename pmc_node to something more descriptive.
  * Introduce the PMC agent module.
  * phc2sys: break out pmc code into pmc_common.c
  * phc2sys: make PMC functions non-static
  * phc2sys: extract PMC functionality into a smaller struct pmc_node
  * phc2sys: break long lines in the PTP management message accessors
  * phc2sys: Postpone adding of servo to clock.
  * phc2sys: Remove superfluous code.
  * missing.h: uclic-ng has clock_nanosleep support since v1.0.31</changelog>
  <changelog author="jbohac@suse.com" date="1732795200">- Update to version 4.4:
  * Version 4.4
  * ts2phc: check is_running in ts2phc_pps_sink_poll()
  * ts2phc: check for errors on polling the sink devices
  * timemaster: Wait for udev to set up vclock devices.
  * ts2phc: Fix description of holdover option in man page.
  * ts2phc: Describe servo options in man page.
  * nmea: Fix tm_isdst uninitialized
  * Complete SNMP cleanup.
  * Add permanent subscription option
  * rtnl: check if the kernel provides if_team
  * port: Drop received 802.1AS packets with invalid transportSpecific values
  * ts2phc: Fix timestamp conversion for leap seconds.
  * nmea: Fix conversion of leap second.
  * ts2phc: Reset parser after RMC message.
  * Drop example snmpd.conf.
  * ts2phc: Add option to correct for NMEA delay.
  * ts2phc: Allow longer NMEA delays.
  * ts2phc: Move upper/lower rejection limit calculation.
  * ts2phc: Fix edge rejection for pulse widths over 0.5s.
  * ts2phc: Provide source type.
  * Filter any PTP frames with the source MAC of the local interface
  * ts2phc: Add holdover support.
  * ts2phc: Avoid unnecessary call of getppstime().
  * Version 4.3
  * ts2phc: Use CLOCK_MONOTONIC_RAW for NMEA PPS timestamp.
  * nsm: add authentication tlv for nsm
  * pmc: add authentication tlv for pmc
  * msg: add authentication tlv in management handling
  * sad: introduce sad_update_auth_tlv()
  * man: add man/README updates for authentication tlv
  * sad: introduce sad_append_auth_tlv() and sad_generate_icv()
  * sad: introduce sad_set_last_seqid() and sad_check_seqid()
  * port: add security processing to bc_event()
  * sad: introduce sad_process_auth() and sad_check_auth_tlv()
  * sad: introduce openssl mac library
  * sad: introduce gnupg mac library
  * sad: introduce gnutls mac library
  * sad: introduce nettle mac library
  * sad: introduce security association database
  * tlv: add authentication tlv
  * udp+udp6: Make IP addresses configurable.
  * Add support for '-l' option to tz2alt.c as documented in its man page.
  * Clean up compiler warnings about print_level.
  * Clean up compiler warning in ts2phc_pps_sink.c.
  * Clean up compiler warning in ts2phc.c.
  * Clean up compiler warning in port.c.
  * README: update mailing list.
  * ts2phc: interact with new kernel timestamp channel masks
  * lstab: Update Leap Second table validity
  * Fix indentation in example configs.
  * Document allowedLostResponses option.
  * config: Allow port sections with longer names.
  * sk: Fix descriptor leak in sk_get_if_info().
  * lstab: Don't free lstab on update.
  * lstab: Limit number of parsed leap seconds.
  * uds: Warn if replacing existing socket.
  * Add example Common Mean Link Delay Service configuration files.
  * Implement the COMMON_P2P delay mechanism.
  * Add a push notification for the CMLDS TLV.
  * Introduce the Common Mean Link Delay Information TLV.
  * pmc: Make SET SUBSCRIBE_EVENTS_NP forwards compatible.
  * pmc/uds: Configure the remote server address using the interface API.
  * interface: Add an optional remote address for use by the UDS transport.
  * ts2phc: Don't switch system clock to nanosecond mode.
  * Version 4.2
  * phc_ctl: Use util.h NSEC_PER_SEC macro instead of local macro
  * servo: Use util.h NSEC_PER_SEC macro instead of local macro
  * port: Use util.h NSEC_PER_SEC macro instead of local macro
  * util: Introduce NSEC_PER_SEC macro
  * port: Fix multiple pdelay response handling
  * Make allowedLostResponses configurable
  * ptp4l: Allow advertisement of legacy PTP 2.0 protocol
  * msg: Enable changing PTP message header version
  * linuxptp: Use ${CC} in incdefs.sh
  * include string.h for strncpy()
  * lstab: Update leapfile validity
  * print: Support log level in message tag.
  * phc2sys: Stop synchronization when ptp4l stops responding.
  * phc2sys: Better indicate domain with realtime clock.
  * pmc_agent: Make update interval configurable.
  * pmc_agent: Add function to check if still subscribed.
  * port: set_tmo_log() timer interval calculation fix
  * Add notification for changes in PARENT_DATA_SET.
  * clock: Downgrade log message about failed uds forward.
  * Avoid conflicting port IDs over PMC UDS
  * phc_ctl: Use pr_notice instead of pr_err for displaying adjusted frequency
  * phc_ctl: Add maximum offset capability
  * phc_ctl: Add phase command to support ADJ_OFFSET</changelog>
  <changelog author="jsegitz@suse.com" date="1772539200">- Move to DevicePolicy=closed instead of -PrivateDevices=true
  to allow access to devices (bsc#1256059)</changelog>
</package>
<package pkgid="98a5a61ad7677d2b914bfaa4f1e252ef19895c7ab8e6f5bc1755c7dc8a3364cca2b18e12558671c91708c72aae8ffe29f4a9d34a37b6f4fc57b5c149828460e0" name="live-langset-data" arch="noarch">
  <version epoch="0" ver="3.0" rel="160000.3.2"/>
  <changelog author="fvogt@suse.com" date="1546862400">- Only set RC_LANG and RC_LC_MESSAGES on SLE 12 (bsc#1119420)</changelog>
  <changelog author="fvogt@suse.com" date="1547812800">- Support new keyboard API in yast2-country</changelog>
  <changelog author="fvogt@suse.com" date="1572436800">- Make sure the changes are fully in effect before returning (bsc#1154638)</changelog>
  <changelog author="fvogt@suse.com" date="1591099200">- Use y2start instead of y2base, it breaks nokogiri</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="fvogt@suse.com" date="1624881600">- Don't restart systemd-vconsole-setup.service explicitly (boo#1187618)</changelog>
  <changelog author="fvogt@suse.com" date="1664193600">- Parse lang=/keytable= options more explicitly (boo#1202925)</changelog>
  <changelog author="fvogt@suse.com" date="1668513600">- Drop support for /etc/sysconfig/language (12.x), it was activated
  in staging projects by accident ("Tumbleweed 1")</changelog>
  <changelog author="fvogt@suse.com" date="1671796800">- Handle missing files explicitly, particularly useful with empty
  (unpopulated) /etc</changelog>
  <changelog author="fvogt@suse.com" date="1715083200">- Switch from yast2-country (getcountrydata.rb) to python-langtable
  (getcountrydata.py). Effective changes:
  * Remove writing to /etc/sysconfig/{console,keyboard}
  * Remove CONSOLE_SCREENMAP, CONSOLE_UNICODEMAP, CONSOLE_MAGIC
    and RC_LC_MESSAGES
  * Uses different keyboard layouts and console fonts for some locales
  * Drops the file extension from CONSOLE_FONT
- Relicense to GPL-3.0-or-later</changelog>
</package>
<package pkgid="47819ed45f964f856ffb173bd2c7c7e5d166752f1872700b1efb8c4233b2a522118ebd0e27e567b0d8ea3fd30acb436af9271f3aa9a710db1fdd241dacb1c74d" name="login_defs" arch="noarch">
  <version epoch="0" ver="4.17.2" rel="160000.2.2"/>
  <changelog author="mvetter@suse.com" date="1711281600">- Update to 4.15.1:
  * Fix a bug that caused spurious error messages about unknown
    login.defs configuration options #967
  * Adding checks for fd omission #964
  * Use temporary stat buffer #974
  * Fix wrong french translation #975
- Drop shadow-4.15.0-fix-definition.patch</changelog>
  <changelog author="mvetter@suse.com" date="1718798400">- Update to 4.16.0:
  * The shadow implementations of id(1) and groups(1) are deprecated
    in favor of the GNU coreutils and binutils versions.
    They will be removed in 4.17.0.
  * The rlogind implementation has been removed.
  * The libsubid major version has been bumped, since it now requires
    specification of the module's free() implementation.
- Update shadow-login_defs-suse.patch
- Add shadow-4.16.0-econf.patch:
  Replace deprecated econf_readDirs with econf_readConfig</changelog>
  <changelog author="mvetter@suse.com" date="1719230400">- bsc#1226850: Drop incorrect econf patch (until time to fix it)
  Drop shadow-4.16.0-econf.patch</changelog>
  <changelog author="scabrero@suse.de" date="1720440000">- Disable flushing sssd caches. The sssd's files provider is no
  longer available.</changelog>
  <changelog author="mvetter@suse.com" date="1733486400">- Update to 4.17.0 RC1:
  Pre-release without changelog</changelog>
  <changelog author="mvetter@suse.com" date="1735300800">- Update to 4.17.0:
  * Fix the lower part of the domain of csrand_uniform()
  * Fix use of volatile pointer
  * Use 'dist-hook' to clean up &lt;tests/unit/Makefile&gt;
  * Use str2[u]l() instead of atoi(3)
  * Use a2i() in various places
  * Fix const correctness
  * Use uid_t for holding UIDs (and GIDs)
  * Move all sprintf(3)-like APIs to a subdirectory
  * Move all copying APIs to a subdirectory
  * Fix forever loop on ENOMEM
  * Fix REALLOC() nmemb calculation
  * Remove id(1)
  * Remove groups(1)
  * Use local time for human-readable dates
  * Use %F instead of %Y-%m-%d with strftime(3)
  * is_valid{user,group}_name(): Set errno to distinguish the reasons
  * Recommend --badname only if it is useful
  * Add fmkomstemp() to fix mode of &lt;/etc/default/useradd&gt;
  * Fix use-after-free bug in sgetgrent()
  * Update Catalan translation
  * Remove references to cppw, cpgr
  * groupadd, groupmod: Update gshadow file with -U
  * Added option -a for listing active users only, optimized using if aflg,return
  * Added information in lastlog man page for new option '-a'
  * Plenty of code cleanup and clarifications</changelog>
  <changelog author="mvetter@suse.com" date="1735646400">- Update to 4.17.1:
  * Fix `su -` regression #1163</changelog>
  <changelog author="mvetter@suse.com" date="1736596800">- Update to 4.17.2:
  * src/login_nopam.c: Fix compiler warnings #1170
  * lib/chkname.c: Put limits for LOGIN_NAME_MAX and sysconf(_SC_LOGIN_NAME_MAX) #1169
  * Use HTTPS in link to Wikipedia article on password strength #1164
  * lib/attr.h: use C23 attributes only with gcc &gt;= 10 #1172
  * login: Fix no-pam authorization regression #1174
  * man: Add Portuguese translation #1178
  * Update French translation #1177
  * Add cheap defense mechanisms #1171
  * Add Romanian translation #1176</changelog>
  <changelog author="mvetter@suse.com" date="1737374400">- bsc#1235453: Set SYS_{UID,GID}_MIN to 201:
  After repeated similar requests to change the ID ranges we set the
  above mentioned value to 201. The max value will stay at 499.
  This range should be sufficient and will give us leeway for the
  future.
  It's not straightforward to find out which static UIDs/GIDs are
  used in all packages.
  Update shadow-login_defs-suse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1744200000">- shadow-util-linux.patch: util-linux-2.41 introduced new variable:
  LOGIN_ENV_SAFELIST. Recognize it and update dependencies. The
  patch includes gh/shadow-maint/shadow/pull#1248.
- shadow-login_defs-check-login_defs.lst: Make the util-linux.spec
  multibuild file compatible with quilt. Make it working with new
  quilt.</changelog>
</package>
<package pkgid="e9b7129945f1d9e73038d8fc0fbb1de25f901cd7a1b19b61b4638d80707cdbb60ed1230aea143578826ac7f5fd48aad87c56c250762ee196d6060a62a7d2ba21" name="logrotate" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="160000.2.2"/>
  <changelog author="michael@stroeder.com" date="1653480000">- update to 3.20.0:
  * fix potential DoS from unprivileged users via the state file (CVE-2022-1348)
  * fix a misleading debug message with copytruncate and rotate 0 (#443)
  * add support for unsigned time_t (#438)
  * do not lock state file /dev/null (#433)</changelog>
  <changelog author="david.anes@suse.com" date="1653480001">- Security fix: (bsc#1199652, CVE-2022-1348)
  * Add follow-up upstream patch for the introduced fix.
  * Added patch logrotate-CVE-2022-1348-follow-up.patch
- Update patch:
  * logrotate-3.19.0-man_logrotate.patch -&gt; logrotate-3.20.0-man_logrotate.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653480002">- update to 3.20.1:
  * drop world-readable permission on state file even when ACLs are enabled (#446)
- removed obsolete logrotate-CVE-2022-1348-follow-up.patch</changelog>
  <changelog author="schubi@suse.com" date="1655726400">- Removed %{_distconfdir}/logrotate.d directory from spec file.
  It will be handled by package filesystem.</changelog>
  <changelog author="schubi@suse.com" date="1663156800">- Ignoring vendor logs settings in /usr/etc/logrotate.d if they
  have already been defined by the the admin in the /etc/logrotate.d
  directory (bsc#1173319).
- Removed logrotate-3.20.0-man_logrotate.patch.
- Added logrotate-vendor-dir.patch</changelog>
  <changelog author="fvogt@suse.com" date="1674475200">- Replace the vendor config logic:
  * Remove logrotate-vendor-dir.patch and the code from logrotate.service
    (also addresses boo#1202406)
  * Add a wrapper script which collects all config files in the right
    order
- Create logrotate.keyring with kdudka's public key
- Drop logrotate-rpmlintrc: rpmlint doesn't look at /usr/etc/logrotate.d/,
  so the false positive doesn't trigger.</changelog>
  <changelog author="fvogt@suse.com" date="1674561600">- Update to 3.21.0:
  * add ignoreduplicates directive to allow duplicate file matches
  * add --wait-for-state-lock option to wait for lock on the state file
  * avoid failure when an anonymous non-privileged user runs logrotate
  * support home dir expansion in olddir
  * reduce unnecessary rename operations with start N where N &gt; 1
  * unify handling of log levels
  * do not print error: when exit code is unaffected</changelog>
  <changelog author="dmueller@suse.com" date="1729684800">- update to 3.22.0:
  * fix calculations for time differences
  * fix extension for zip compression
  * fix omitted copy for logs with `mail` and `rotate 0`
  * fix wrongly skipping copy with `copytruncate` and `compress`
  * fix ambiguities between `mode`, `UID` and `GID` parsing when
    not specifying all options
  * fix hang when encountering a named pipe
  * on prerotate failure logs are preserved instead of rotated
  * in case a configuration file was skipped due to unsafe
    permissions the
  * exit status after rotattion will be `1`
  * the state is no longer written to non-regular files
  * the systemd timer now correctly utilizes load distribution
  * add dateformat specifier `%z` for timezone offsets
  * change default mode for created `olddir` directories to
    `0755`
  * support quoted user and group names in `su`, `create`, and
    `createolddir`
- update logroate.keyring: new maintainer</changelog>
  <changelog author="angel.yankov@suse.com" date="1732881600">- Skip test-0110.sh which fails after update in the build chroot
  but not with identical settings on TW.
  * Add logrotate-3.22-skip-failing-test.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
</package>
<package pkgid="847d84a177a67600b587047f1ea0da407f86323181b2f50577e91a977b6d8130ce1c58a209f4ccc1fb1f810a77dac0cd68eeed6694065f4cd73bdd2dc93c34b6" name="lshw" arch="x86_64">
  <version epoch="0" ver="B.02.20" rel="160000.3.2"/>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
  <changelog author="mpluskal@suse.com" date="1634212800">- Update to version B.02.19.2+git.20211013:
  * add some includes
  * fix typo
  * cosmetic fixes
  * support for new ethtool capabilities
  * code clean-up
  * code clean-up
  * allow pkg-config override
  * allow pkg-config override
  * Remove unnecessary space before closing parenthesis
  * Translate all words of a phrase together
  * Fix another typo</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version B.02.19.2+git.20211102:
  * merge Github PR#77
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version B.02.19.2+git.20220310:
  * Github PR85  Set product name for all netdevs sharing the same PCI number</changelog>
  <changelog author="mpluskal@suse.com" date="1658836800">- Update to version B.02.19.2+git.20220628 (jsc#526):
  * make version check optional</changelog>
  <changelog author="mpluskal@suse.com" date="1669291200">- Update to version B.02.19.2+git.20220831:
  * PA-RISC: handle pushd failure</changelog>
  <changelog author="mpluskal@suse.com" date="1679572800">- Update to version B.02.19.2+git.20230320 (bsc#1209531):
  * fix NVMe multipath detection
  * NVMe: fix logical name with native multipath</changelog>
  <changelog author="mpluskal@suse.com" date="1701172800">- Update to version B.02.19.2+git.20231115:
  * merge github PR #98</changelog>
  <changelog author="mpluskal@suse.com" date="1707825600">- Update to version B.02.20 (jsc#9912):
  * update changelog
  * update data files
  * get rid of GTK deprecation warning
  * get rid of some snprintf warnings
  * Add support for 100Gbit interfaces</changelog>
</package>
<package pkgid="f0c192f55d3785079d70422cad9973d6e036aca9de280f41710006b70de6463b53dc3db4f7333bd466003d579a8a274d7aa12598672e61f50a624c12419e50a9" name="lsof" arch="x86_64">
  <version epoch="0" ver="4.99.4" rel="160000.2.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1674388800">- lsof 4.98.0:
  * Fix two potential null pointer access bug when gethostbyname2()
    returns an empty address list
  * Fix handling of empty command name
  * Add -H switch to print human readable size, e.g. 123.4K</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Repacked tarball to remove proprietary code in dialects/uw/uw7/sys/fs</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699704000">- lsof 4.99.0:
  * Do not hard-code fd numbers in epoll test
  * --with-selinux configure option.
  * Improve performance by using closefrom()
  * Introduce liblsof for programmatic access over spawning lsof
    in a subprocess
- build with libtirpc
- switch to upstream tarball again as it dropped proprietary code</changelog>
  <changelog author="schwab@suse.de" date="1702209600">- Skip tests that are difficult to emulate by qemu</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1702814400">- lsof 4.99.3:
  * Fix compilation error when HASIPv6 is not defined
  * Add configure option --disable-liblsof to disable installation
    of liblsof
- add lsof-4.99.3-fix-version-in-configure-ac.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1715860800">- add (bsc#1224285):
  * 0001-tests-eliminate-use-of-fgrep.patch
  * 0002-tests-fix-for-kernel-6.9.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1715947200">- replace:
  0002-tests-fix-for-kernel-6.9.patch
  by upstream proposed:
  0002-linux-Maintain-original-output-for-pidfd-in-linux-6..patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1730116800">- Add reproducible.patch to not store build host kernel version (boo#1232425)</changelog>
  <changelog author="sbrabec@suse.com" date="1741089600">- Update to version 4.99.4:
  * In lsof manpage: mention /etc/services for -P option
  * Fix typos in docs
  * Linux 6.9 changed the pidfs appearence in procfs. Try to
    maintain original output in lsof (bsc#1224285)
  * closefrom_shim: Add optimized fallback for platforms without
    closefrom or close_range
  * fix build against -std=c23 (`void (*)()`) changed the meaning)
- Drop obsolete lsof-4.99.3-fix-version-in-configure-ac.patch,
  0001-tests-eliminate-use-of-fgrep.patch and
  0002-linux-Maintain-original-output-for-pidfd-in-linux-6..patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1748433600">- Force skip NFS test, as it cannot complete properly in OBS but it
  can be accidentally triggered there on ppc64. (bsc#1243577,
  lsof-skip-nfs-test.patch).</changelog>
</package>
<package pkgid="44a447d028b30b245de1ba9ba33fb55c3e026ff97060867a3d83061d5ecae0e6ab52629b67121ca30679e0109c64b1fa3fbde34cd71a70e8f5dc05e434a8b770" name="lsscsi" arch="x86_64">
  <version epoch="0" ver="0.32" rel="160000.3.2"/>
  <changelog author="jdelvare@suse.de" date="1260187200">- Update to lsscsi-0.23:
  * Show protection information with '--protection' option, ATA,
    SATA and USB transport information.
  * Stop scanning /proc/mounts; assume /sys unless overridden by
    '--sysfsroot=PATH' option.
- This update fixes bnc#556180.</changelog>
  <changelog author="hare@suse.de" date="1266840000">- Fix classic output (bnc#576138)</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 0.24
  * FC transport syntax changes (colon to slash)
- Update to new upstream release 0.25
  * add sas_port and fc_remote_ports transport information
  * print enclosure_device entry
  * add a "--size" option to show size of disks
  * add a "--protmode" option to show protection information mode
- Update to new upstream release 0.26
  * add a "fcoe" transport indicator
  * add a "--wwn" option and datamine /dev/disk/by-id/wwn*
- Update to new upstream release 0.27
  * Accept large (64-bit) LUNs
  * add a "--lunhex" option and recognition of LSSCSI_LUNHEX_OPT
  environment variable for displaying LUNs in hex
- Normalized build/install procedure;
  remove redundant %clean section</changelog>
  <changelog author="hare@suse.de" date="1390392000">- Port patches from SP3 (bnc#831301)
- Fixup printing of FC transport IDs</changelog>
  <changelog author="mpluskal@suse.com" date="1424779200">- Update to 0.28
  * fix handling of scsi_level 0 (no compliance)
  * add SRP transport identifier
  * add --unit option for LU identifier (&gt;= lk 3.15)
  * add (S)ATA transport identifier (&gt;= lk 3.15)
  * make USB transport ids more consistent
  * fix FC transport id missing comma
  * add pdt strings for security manager and zbc
  * upgrade automake to version 1.14.1
- Do not install empty NEWS</changelog>
  <changelog author="ro@suse.de" date="1464177600">- Update to new upstream release 0.29 (bsc#977572)
  - '-u' now decodes locally assigned UUIDs (spc5r08)
  - as last try use T10 Vendor ID for lu name
  - if no lu name found, print 'none'
  - change '-uuu' to output the full lu name followed
    by the normal fields (which were skipped before)
  - add 'U' option, same action as '-uuu'
  - '-UU' prefixes lu names with 'eui.', 'naa.', etc
  - if '-s' given twice, lu size is base 2 related
  - if very long [h:c:t:l] then append space
  - print_enclosure_device() for FCP may be useless,
    comment out while checking ...
  - with '-t' print 0x0000000000000000 for non-SAS
    device in SAS domain
  - autogen.sh: upgrade to 20091223 version
  - automake: upgrade to 1.15 (ubuntu 16.04)
  * Delete lsscsi-0.27.tar.xz
  * Add lsscsi-0.29.tar.xz
- Update to new upstream release 0.28
  - fix handling of scsi_level 0 (no compliance)
  - add SRP transport identifier
  - add --unit option for LU identifier (&gt;= lk 3.15)
  - add (S)ATA transport identifier (&gt;= lk 3.15)
  - make USB transport ids more consistent
  - fix FC transport id missing comma
  - add pdt strings for security manager and zbc
  - upgrade automake to version 1.14.1
- Remove patches merged with upstream
  * Delete lsscsi-fixup-fc-transport-id.patch
  * Delete lsscsi-usb.diff
  * Delete lsscsi-fix-classic-output</changelog>
  <changelog author="hare@suse.de" date="1499688000">- Lookup WWN using /dev/disk/by-id/scsi-* (bsc#1008935)
- fixup display of 'lsscsi -t' (bsc#1047884)</changelog>
  <changelog author="mpluskal@suse.com" date="1533211200">- Update to version 0.30:
  * add support for NVMe devices and controllers
  - to build without: ./configure --disable-nvme-supp
  - deselect at runtime: lsscsi --no-nvme
  - deselect SCSI devices at runtime: lsscsi N
  * add --brief for tuple + device_name(s) only
  * add --pdt (-D) for device type in hex
  * extend --size (-s) so when given three times
    the size as a logical block count is output
  * add --sz-lbs (-S) that is equivalent to '-sss'
    when used twice adds comma then logical block size
  * '-w' now decodes 128 bit WWN without truncation
  * /dev/disk/by-id/wwn- is not guaranteed to be
    persistent (or stable); instead use
    /dev/disk/by-id/scsi-
  * '-t' on a FC host was not printing the comma
    separator resulting in garbled output, fix
- Small spec file modernisation with spec-cleaner
- Restore removed parts of changelog</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 0.32
  * improve NVMe device parsing (e.g. /dev/nvme0c1n2)
  * print nr_hw_queues when available for SCSI hosts
  * make WWN printing for NVMe more consistent with
    output from SCSI devices (e.g. with -u and -t)
  * logic to select best SCSI id (--scsi_id) to output
  * fix issue where host managed ZBC devices don't
    output their size. [Fix also for RBC and CD/DVD.]
  * exclude NVMe listings when --classic given
  * supply "-" for generic NVMe device one line output
    so 'lsscsi -gb' output is consistent</changelog>
</package>
<package pkgid="5d57f1f2bb8053523b5bb0a20889aed20b3677929381ca42afe4c740e716a77d3a0e422cbab1b903ac858d38bbf444e25121dfaef2c7c8a57c10f1be441b88a9" name="lttng-tools" arch="x86_64">
  <version epoch="0" ver="2.13.11" rel="160000.2.2"/>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 2.10.2:
  * Do not flag consumer as disabled on relayd comm failure.
  * Cleanup inactive FDs in the consumer polling thread.
  * man: Document dead-peer detection for lttng-relayd.
  * lttng-relayd: Use the TCP keep-alive mechanism to detect a
    dead-peer.
  * Tests: race between consumer pause and trace start/stop.
  * Fix notification thread being not notified of channel creation
    on application error.
  * Fix using putenv() and free()-ing the value is invalid.
  * Fix unknown consumer type considered a libc error.
  * Fix that consumerd(64/32)_lib_dir can be NULL.
  * Fix a nonsensical message printed by lttng track/untrack.
  * Fix O_CLOEXEC being erroneously used on pipe creation.
  * Fix a wrong parameter to fcntl in pipe_set_flag.
  * Use lttng_clock_gettime instead of clock_gettime.
  * Close channel monitor pipe after killing the
    metadata_timer_thread.
  * Use file based synchronisation for python logging test.
  * Test: Add file based synchronisation point for the Python test
    application.
  * Fix wrong use of the relay_streams_sent in snapshot.
  * Fix the return code of lttcomm_send_unix_sock signed.
  * Fix a src/bin/lttng/utils.c: cast incompatible pointer warning.
  * Fix: src/common/pipe.h: include &lt;sys/types.h&gt; for ssize_t and
    mode_t.
  * Fix detect dlmopen() and disable corresponding tests if not
    available.
  * Use tmpdir for intermediary files.
  * Fix include scripts for distribution.
  * Fix a typo in lttng-consumerd file default.
  * Fix missing NULL checks in logging statements.
  * Test: Kernel testing for notification.
  * Kernel consumerd sock paths need rundir substitution.
  * Create lttng run dir regardless of user privilege.
  * Make version.h generation work with dash.
  * lttng-enable-event(1): filtering: Specify that `$ctx.cpu_id`
    is available.
  * Centralise sessiond config option handling.
  * Fix buffer overflow warning in python bindings.
  * Tests fix: BT2 does not output the metadata of a trace
    collection.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 2.10.4 (changes since 2.10.2):
  * Fix: Set errno with value from SO_ERROR on error.
  * Fix: Missing value handling for lttng_event_context_type.
  * Fix: Use SOL_SOCKET level for SO_KEEPALIVE on all platform.
  * Fix: Error out on leftover arguments.
  * Fix: Reply to version check even on protocol mismatch.
  * Fix: Error handling on relay version check.
  * Document add-context limitation for started session.
  * Fix: add-context cannot be performed after a session has been
    started.
  * Fix: Duplicated kernel consumer socket locking.
  * Fix: Remove unused event types in MI XML schema.
  * Tests: Cleanly exit from test apps on reception of SIGTERM.
  * Document consumer socket locking assumptions.
  * Fix: Consumer socket lock not held during snapshot record.
  * Fix: set_relayd_for_snapshot does not acquire the consumer
    socket lock.
  * Fix: send_channel_monitor_pipe does not take the consumer
    socket lock.
  * Document the locking assumptions of consumerd-relayd socket
    passing.
  * Assert that the consumer lock is held while sending FDs to
    consumerd.
  * Assert that the consumer socket lock is taken during
    communication.
  * Tests: Refuse to run test suite if lttng processes are present.
  * Fix: Metadata channel leak when using the snapshot tracing
    mode.
  * Fix build: in_git_repo is used before being set.
  * Add DBG statement for TCP keep-alive options.
  * Fix: Unprivilieged sessiond agent port clashes with root
    sessiond.
  * Fix: Erroneous use of extern keyword.
  * Fix: Failure to launch agent thread is not reported.
  * Fix: Agent may not be ready on launch.
  * Fix: Checking for existing session daemon is done after
    daemonising.
  * Fix: lttng logs nanoseconds.
  * Fix: stream_per_chan_id_ht should allow duplicates.
  * Fix: relayd send_command() util not logging on failure.
  * Fix: Create_output_path() relayd util is not
    const-correct.
  * Fix: Kernel snapshot handling of EAGAIN.
  * Fix validate_trace_empty test check.
  * Fix: Circular inclusion of lttng.h results in warning.
  * Fix: Channel lock must be taken to check for pending
    notifications.
  * Fix: Quiet option is not set in sessiond-config.
  * Fix: Hold consumer socket lock for consumer_send_msg.
  * Fix: Use off_t type for lseek function return value to avoid
    overflow.
  * Fix: Double similar condition.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.5:
  * Fix: missing context enum values in session xml schema.
  * Tests: add session auto-loading test cases.
  * Bash completion: ignore namespace for xmllint parsing.
  * Typo in ust consumer log message (channek -&gt; channel).
  * Fix: use signed variable for refcounting of
    consumer_relayd_sock_pair.
  * Fix: warning due to hash_key_str() being not const-correct.
  * Print consumerd32/64/kernel configuration.
  * Fix: calling ht_{hash, match}_enum with wrong argument.
  * Fix: probes should be compared strictly by events metadata.
  * Fix: test_ust-dl is generated at configure-time.
  * Fix: cmd line options overwrite env variable config options.
  * Fix: perform the initialization memory barrier out of loop body.
  * Port: fix format warnings on Cygwin.
  * Add missing include for ssize_t on Cygwin.
  * Fix: sessions with agent channels fail to load.
  * Fix: don't wait for the load thread before serving client
    commands.
  * Fix: sessiond fails to launch on --without-ust configuration.
  * Fix: agent thread poll set creation failure results in deadlock.
  * Fix: test uses sizeof() on the wrong operand of strncpy.
  * Fix: ret may be used uninitialized in sample_channel_positions().
- Add gpl-2.0.txt and lgpl-2.1.txt to the library packages with the
  %license tag.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.2:
  * See /usr/share/doc/packages/lttng-tools/ChangeLog
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.2
  Changelog: https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.12.2
  - Add signed bz2 support (keyring)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.1:
  * See https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.13.1
- Rebase lttng-tools-fix-pkgconfig.patch.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.7:
  * See https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.13.7</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.8
  * futex wait: handle spurious futex wakeups
  * agent port file was o+w when launching as root
  * sessiond: handle empty scheduled rotations
  * sessiond: size-based rotations never triggered
  * lttng-snapshot: fixed use after free of max size argument
  * liblttng-ctl: non-packed structure was used for tracker
    serialization
  * test: lttng kernel modules were still loaded after running
    test_clock_override
  * Plug some memory leaks</changelog>
  <changelog author="dmueller@suse.com" date="1674993600">- update to 2.13.9:
  * Fix: lttng: poptGetArg doesn't provide string ownership
  * Fix: relayd: missing space in trace creation logging statement
  * Fix: event field value: assertion fails on empty string
  * Build fix: rpath of test libraries results in non-reproducible build
  * Fix: never use 'no' in a command variable
  * Fix: sessiond: abort called on undefined client command
  * Fix: consumer: snapshot: assertion on subsequent snapshot
  * Fix: sessiond: instance uuid is not sufficiently unique</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.11:
  * docs: fix: Match stated automake requirement
  * Docs: Fix broken reference in lttng-add-trigger
  * Docs: Fix broken reference to lttng-concepts(7) man page
    disk space
  * Fix: lttng-add-context: leak of application context
    parameters
  * Fix: sessiond: bad fd used while rotating exiting app's
    buffers
  * Fix: consumerd: slow metadata push slows down application
    registration
  * event-rule: set event rule loglevel to domain specific value
    when unset
  * Fix: sessiond: preserve jul/log4j domain loglevels
  * Fix: sessiond: crash enabling event rules that differ only by
    loglevel type
  * Fix: sessiond: incorrect use of exclusions array leads to
    crash
  * Fix: sessiond: silent kernel notifier registration error
  * Fix: sessiond: size-based notification occasionally not
    triggered
  * Fix: adding a user space probe fails on thumb functions
  * Fix: Tests that assume CPU 0 is present
  * Fix: Wrong assumption about possible CPUs
  * Fix: lttng remove-trigger -h fails
  * Fix: ini parser: truncation of value name
  * Fix: truncated len in
    lttng_event_rule_user_tracepoint_serialize()</changelog>
</package>
<package pkgid="dd6ab95a3490c051cff8ec20789e42824d9542a10c6d6da1ff11378eb82d69f7d5fe5abc25b88a84f832cd3ab9fd0119b84201535f3c796cabcb2f14e0a5f08c" name="lvm2" arch="x86_64">
  <version epoch="0" ver="2.03.29" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1723550400">- lvm2-monitor.service fails to start (boo#1228854)
  + bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch</changelog>
  <changelog author="glass.su@suse.com" date="1725019200">- [SLFO] systemd 254 is missing reworked SYSTEMD_READY logic in device mapper udev rules (bsc#1229518)
  * update udev dependency version in lvm2.spec</changelog>
  <changelog author="glass.su@suse.com" date="1734350400">- Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29
  * ** WHATS_NEW from 2.03.24 to 2.03.29 ***
  Version 2.03.29 - 09th December 2024
  ====================================
    Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify.
    Allow test mode when lvmlockd is built without dlm support.
    Add a note about RAID + integrity synchronization to lvmraid(7) man page.
    Add a function for running lvconvert --repair on RAID LVs to lvmdbusd.
    Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}).
    Fix renaming of raid sub LVs when converting a volume to raid (2.03.28).
    Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize.
    Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27).
  Version 2.03.28 - 04th November 2024
  ====================================
    Use radix_tree to lookup for UUID within committed metadata.
    Use radix_tree to lookup LV list entry within VG struct.
    Introduce setting config/validate_metadata = full | none.
    Restore fs resize call for lvresize -r on the same size LV (2.03.17).
    Correct off-by-one devicesfile backup counting.
    Replace use of dm_hash with radix_tree for lv names and uuids.
    Refactor vg_validate with uniq_insert and better use of CPU caches.
    Add radix_tree_uniq_insert.
    Update DM cache when taking next VG lock instead of dropping it.
    Generate json string id only for json reporting.
    For vgsummary use new API call dm_config_parse_only_section().
    Use radix_tree for PV names mapping.
    Split check_lv_segment into separate _in/complete_vg variant.
    Use find_lv instead of find_lv_in_vg when possible.
    Do a mirror fixup only when mirrors with logs are imported.
    Add faster crc32 calculation from zlib code for x86_64.
    Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization.
  Version 2.03.27 - 02nd October 2024
  ===================================
    Fix swap device size detection using blkid for lvresize/lvreduce/lvextend.
    Detect GPT partition table and pass partition filter if no partitions defined.
    Add global/sanlock_align_size option to configure sanlock lease size.
    Disable mem locking when activation/reserved_stack or reserved_memory is 0.
    Fix locking issues in lvmlockd leaving thin pool locked.
    Deprecate vdo settings vdo_write_policy and vdo_write_policy.
    Lots of typo fixes across lvm2 code base (codespell).
    Corrected integrity parameter interleave_sectors for DM table line.
    Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10.
    Do not accept duplicate device names for pvcreate.
  Version 2.03.26 - 23rd August 2024
  ==================================
    Fix internal error reported by pvmove on a VG with single PV.
    Also accept --mknodes --refresh for vgscan.
    Fix vgmknodes --refresh to wait for udev before checking /dev content.
    Use log/report_command_log=1 config setting by default for JSON output format.
    Fix unreleased memory pools on RAID lvextend.
    Add --integritysettings option to manipulate dm-integrity settings.
  Version 2.03.25 - 12nd July 2024
  ================================
    Utilize more radix_tree instead of dm_hash and btree.
    Refactor DM uuid caching from device_mapper directory.
    Enhance checking for DM uuid device.
    Fix lvm shell command completion on tab key (2.03.24).
    Avoid lockd_vg call to lvmlockd for local VGs.
    Allow forced change of locktype from none.
    Handle OPTIONS defined in /etc/sysconfig/lvmlockd.
  * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 ***
  Version 1.02.203 - 09th December 2024
  =====================================
  Version 1.02.202 - 04th November 2024
  =====================================
    Introduce dm_config_parse_only_section to stop parsing after section.
    For shorter string use on stack buffers when generating sections.
    Enhance dm_config tokenizer.
  Version 1.02.201 - 02nd October 2024
  ====================================
    Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails.
    Improve error messages on failed udev cookie create/inc/dec operation.
  Version 1.02.200 - 23rd August 2024
  ===================================
  Version 1.02.199 - 12nd July 2024
  =================================
- update lvm2.spec
  - change lvm2_version to 2.03.29
  - change upstream_device_mapper_version and device_mapper_version to 1.02.203
  - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package
  - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd
  - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="glass.su@suse.com" date="1738756800">- thin-provisioning-tools 1.1.0 requires device-mapper-devel, this creates a cycle (boo#1236749)
  * update lvm2.spec
  - remove build require dependency thin-provisioning-tools from devicemapper
  - remove thin-provisioning-tools related configure options from devicemapper
  - remove a trivial empty line in extra_opts if default_use_devices_file=1</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1740657600">- fixing HA16.0 Product building issues for packages: lvm2-lockd, cluster-md, dlm, drbd (bsc#1237701)
  * update lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="ff97616eb3ce79b6e68eb89f1098e17da34d7e0724613e78e356679a04c4eb6228af5c6d1927208e936173740b6ae20bac485cfde6af749911c0009589f4b810" name="lzop" arch="x86_64">
  <version epoch="0" ver="1.04" rel="160000.3.2"/>
  <changelog author="guru@unixtech.be" date="1181131200">- update to 1.02rc1</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325592000">- Build lzop version 1.03</changelog>
  <changelog author="mpluskal@suse.com" date="1426248000">- Cleanup spec file with spec-cleaner
- Use url for source
- Cleanup dependencies
- Remove _DATE_ and _TIME_ usage</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add lzop-1.03-gcc6.patch to fix undefined behavior in its ACC test
  uncovered by GCC 6.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1459512000">- new lzop-1.03-gcc5_ppc64.patch:
  use static inlines as the external inline definition has
  changed with gcc5</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- update to 1.0.4:
  * Added CMake build support
  * Assorted minor updates
- clean with spec-cleaner
- remove patches
  * lzop-1.03-gcc5_ppc64.patch
  * lzop-1.03-gcc6.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510401601">- Use cmake for building
- Run tests during build</changelog>
  <changelog author="jengelh@inai.de" date="1510574400">- Remove bias from descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Use pkgconfig style dependencies
- Mark license as such</changelog>
  <changelog author="mpluskal@suse.com" date="1589976000">- Packaging cleanup:
  * Use modern macros
  * Use latests SPDX style of license strings</changelog>
</package>
<package pkgid="0642f40184ee3cf30e022448eb17c3d44b1796fa788a985ccbca00651478e0b0f0c2f1854a84b4442419638892bd3c30ea8a6050559070d741930beacfeaa93f" name="m4" arch="x86_64">
  <version epoch="0" ver="1.4.18" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1425297600">- Add gpg signature
- Add prerequires for info pages</changelog>
  <changelog author="mpluskal@suse.com" date="1443873600">- Update info handling from postun to preun</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.4.18:
  * Diagnose --word-regexp as unsupported if it was not configured.
  * Preliminary support for OS/2.
  * A number of portability improvements inherited from gnulib.
- Some packaging changes:
  * Use https url's
  * Get keyring from savannah
  * Use xs compressed files
  * Make building more verbose</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Fix de-registration of the info files.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Explicitly remove %{_infodir}/dir before creating package to
  allow builds on RHEL and derived Linux distributions
- Enable configure option --disable-dependency-tracking to
  allow build on Mageia
- Add xz as BuildRequires to unpack source on SLE 11</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: adjust gnulib for libio.h removal
- Use %license for COPYING</changelog>
  <changelog author="mpluskal@suse.com" date="1579780800">- Enable PGO during build</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- gnulib-c-stack.patch: c-stack: stop using SIGSTKSZ</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Use %make_build macro and make sure we run the profiling run with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="fa6d750386091ca7a4a200cf6a4c7f7ab67adfbc59ee299ed78ee1f2f16285a26e83f8308fcafb3fef065fddac0164c3c3c0ad793b4929d9331e1f43ad74b1df" name="mailx" arch="x86_64">
  <version epoch="0" ver="12.5" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1608897600">- fix-sendmail-name.patch: fix name argument when calling
  /usr/sbin/sendmail [bsc#1180355].</changelog>
  <changelog author="lnussel@suse.de" date="1611748800">- update-alternatives call needs to be in postun rather than preun</changelog>
  <changelog author="werner@suse.de" date="1637668800">- Add patch mailx-12.5-systemd.patch to add description how to avoid
  bugs like bsc#1192916 -- mailx does not send mails unless run via
  strace or in verbose mode</changelog>
  <changelog author="schubi@suse.de" date="1645099200">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="werner@suse.de" date="1647864000">- Fix number check of test (builtin) in %pre scriptlet (boo#1197317)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="schubi@suse.com" date="1701864000">- Moving /etc/mailrc to /usr/etc/mail.rc
  * Add patch mailx-usr-etc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1708689600">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- drop unneeded pcre build dependency</changelog>
</package>
<package pkgid="a19ca84b021417473b924a3ea5f9b4407fa1c27bc3326ef45f6dc4c9e36ad87da583f3bf08e0b51a787720a28b81ef46b2792bf78e5ce764cbc55ab2c4a431cf" name="make" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="160000.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1582372800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add fix-57962.patch in order to fix bug #57962.</changelog>
  <changelog author="meissner@suse.com" date="1650369600">- use https urls</changelog>
  <changelog author="schwab@suse.de" date="1660737600">- jobserver-noinherit.patch: Disable inheritance of jobserver FDs for
  recursive make
- jobserver-fifo.patch: Add support for jobserver using named pipes</changelog>
  <changelog author="schwab@suse.de" date="1667217600">- Update to make 4.4
  * WARNING: Future backward-incompatibility!
    In the NEXT release of GNU Make, pattern rules will implement the same
    behavior change for multiple targets as explicit grouped targets
  * WARNING: Backward-incompatibility!
    GNU Make now uses temporary files in more situations than previous releases.
  * WARNING: Backward-incompatibility!
    Previously each target in a explicit grouped target rule was considered
    individually: if the targets needed by the build were not out of date the
    recipe was not run even if other targets in the group were out of date.  Now
    if any of the grouped targets are needed by the build, then if any of the
    grouped targets are out of date the recipe is run and all targets in the
    group are considered updated.
  * WARNING: Backward-incompatibility!
    Previously if --no-print-directory was seen anywhere in the environment or
    command line it would take precedence over any --print-directory.  Now, the
    last setting of directory printing options seen will be used, so a command
    line such as "--no-print-directory -w" _will_ show directory entry/exits.
  * WARNING: Backward-incompatibility!
    Previously the order in which makefiles were remade was not explicitly
    stated, but it was (roughly) the inverse of the order in which they were
    processed by make.  In this release, the order in which makefiles are
    rebuilt is the same order in which make processed them, and this is defined
    to be true in the GNU Make manual.
  * WARNING: Backward-incompatibility!
    Previously only simple (one-letter) options were added to the MAKEFLAGS
    variable that was visible while parsing makefiles.  Now, all options are
    available in MAKEFLAGS.  If you want to check MAKEFLAGS for a one-letter
    option, expanding "$(firstword -$(MAKEFLAGS))" is a reliable way to return
    the set of one-letter options which can be examined via findstring, etc.
  * WARNING: Backward-incompatibility!
    Previously makefile variables marked as export were not exported to commands
    started by the $(shell ...) function.  Now, all exported variables are
    exported to $(shell ...).  If this leads to recursion during expansion, then
    for backward-compatibility the value from the original environment is used.
    To detect this change search for 'shell-export' in the .FEATURES variable.
  * WARNING: New build requirement
    GNU Make utilizes facilities from GNU Gnulib: Gnulib requires certain C99
    features in the C compiler and so these features are required by GNU Make:
    https://www.gnu.org/software/gnulib/manual/html_node/C99-features-assumed.html
    The configure script should verify the compiler has these features.
  * New feature: The .WAIT special target
    If the .WAIT target appears between two prerequisites of a target, then
    GNU Make will wait for all of the targets to the left of .WAIT in the list
    to complete before starting any of the targets to the right of .WAIT.
  * New feature: .NOTPARALLEL accepts prerequisites
    If the .NOTPARALLEL special target has prerequisites then all prerequisites
    of those targets will be run serially (as if .WAIT was specified between
    each prerequisite).
  * New feature: The .NOTINTERMEDIATE special target
    .NOTINTERMEDIATE disables intermediate behavior for specific files, for all
    files built using a pattern, or for the entire makefile.
  * New feature: The $(let ...) function
    This function allows user-defined functions to define a set of local
    variables: values can be assigned to these variables from within the
    user-defined function and they will not impact global variable assignments.
  * New feature: The $(intcmp ...) function
    This function allows conditional evaluation controlled by a numerical
    comparison.
  * New feature: Improved support for -l / --load-average
    On systems that provide /proc/loadavg (Linux), GNU Make will use it to
    determine the number of runnable jobs and use this as the current load,
    avoiding the need for heuristics.
  * New feature: The --shuffle command line option
    This option reorders goals and prerequisites to simulate non-determinism
    that may be seen using parallel build.  Shuffle mode allows a form of "fuzz
    testing" of parallel builds to verify that all prerequisites are correctly
    described in the makefile.
  * New feature: The --jobserver-style command line option and named pipes
    A new jobserver method is used on systems where mkfifo(3) is supported.
  * GNU Make has sometimes chosen unexpected, and sub-optimal, chains of
    implicit rules due to the definition of "ought to exist" in the implicit
    rule search algorithm, which considered any prerequisite mentioned in the
    makefile as "ought to exist".  This algorithm has been modified to prefer
    prerequisites mentioned explicitly in the target being built and only if
    that results in no matching rule, will GNU Make consider prerequisites
    mentioned in other targets as "ought to exist".
  * GNU Make was performing secondary expansion of all targets, even targets
    which didn't need to be considered during the build.  In this release
    only targets which are considered will be secondarily expanded.
  * If the MAKEFLAGS variable is modified in a makefile, it will be re-parsed
    immediately rather than after all makefiles have been read.
  * The -I option accepts an argument "-" (e.g., "-I-") which means "reset the
    list of search directories to empty".
  * New debug option "print" will show the recipe to be run, even when silent
    mode is set, and new debug option "why" will show why a target is rebuilt
    (which prerequisites caused the target to be considered out of date).
  * The existing --trace option is made equivalent to --debug=print,why
  * Target-specific variables can now be marked "unexport".
  * Exporting / unexporting target-specific variables is handled correctly, so
    that the attribute of the most specific variable setting is used.
  * Special targets like .POSIX are detected upon definition, ensuring that any
    change in behavior takes effect immediately, before the next line is parsed.
  * When the pipe-based jobserver is enabled and GNU Make decides it is invoking
    a non-make sub-process and closes the jobserver pipes, it will now add a new
    option to the MAKEFLAGS environment variable that disables the jobserver.
  * A long-standing issue with the directory cache has been resolved: changes
    made as a side-effect of some other target's recipe are now noticed as
    expected.
- jobserver-noinherit.patch, jobserver-fifo.patch: Removed
- test-driver.patch: Removed
- fix-57962.patch: Removed
- make-testcases_timeout.diff: Removed</changelog>
  <changelog author="schwab@suse.de" date="1667390400">- reset-sigpipe.patch: Reset SIGPIPE in children</changelog>
  <changelog author="schwab@suse.de" date="1669032000">- reset-sigpipe.patch: Removed
- sigpipe-fatal.patch: Handle SIGPIPE as a fatal signal</changelog>
  <changelog author="schwab@suse.de" date="1677499200">- Update to make 4.4.1
  * WARNING: Backward-incompatibility!
    In previous releases it was not well-defined when updates to MAKEFLAGS made
    inside a makefile would be visible.  This release ensures they are visible
    immediately, even when invoking $(shell ...) functions.
  * New feature: Parallel builds of archives
    Previously it was not possible to use parallel builds with archives.  It is
    still not possible using the built-in rules, however you can now override
    the built-in rules with a slightly different set of rules and use parallel
    builds with archive creation.
  * Previously target-specific variables would inherit their "export" capability
    from parent target-specific variables even if they were marked private.  Now
    private parent target-specific variables have no affect.
- sigpipe-fatal.patch: removed</changelog>
  <changelog author="fcrozat@suse.com" date="1680782400">- Update license tag, tarball contains GPL-3.0-or-later code.</changelog>
  <changelog author="schwab@suse.de" date="1708516800">- Use %patch -P</changelog>
</package>
<package pkgid="e63ce15c46159bd35dda7454f042e24ccb6d6251e4a2ea8699fc47a31acb1ff22b7f584c43069fc3dd0a91b691b007f672c04ddc2ec4fcf5eeae67f9ea1ba291" name="makedumpfile" arch="x86_64">
  <version epoch="0" ver="1.7.7" rel="160000.3.1"/>
  <changelog author="petr@tesarici.cz" date="1700049600">- Reduce compatibility cruft.</changelog>
  <changelog author="petr@tesarici.cz" date="1700049601">- Enable build for riscv64.</changelog>
  <changelog author="mli@suse.com" date="1715688000">- Update to 1.7.5:
  * Support for kernels up to v6.8 (x86_64)
  * Support for printk caller_id by --dump-dmesg option
  * [PATCH] ppc64: get vmalloc start address from vmcoreinfo
  * [PATCH] ppc64: read cur_mmu_type from vmcoreinfo
  * [PATCH] add PRINTK_CALLER id support to --dump-dmesg option
  * [PATCH v2 2/2] s390x: uncouple virtual and physical address spaces
  * [PATCH 1/2] s390x: fix virtual vs physical address confusion
  Regenerated the content of the makedumpfile-ppc64-VA-range-SUSE.patch
  file based on version 1.7.5 of the code</changelog>
  <changelog author="jslaby@suse.cz" date="1722513600">- add (bsc#1228388):
  * 0001-PATCH-Fix-failure-of-hugetlb-pages-exclusion-on-Linu.patch
  * 0002-PATCH-Fix-wrong-exclusion-of-Slab-pages-on-Linux-6.1.patch</changelog>
  <changelog author="jbohac@suse.com" date="1723204800">- add (bsc#1226183)
  * make-reserve_diskspace-do-nothing-for-flattened-form.patch</changelog>
  <changelog author="jbohac@suse.com" date="1726228800">- move makedumpfile-R.pl from /usr/bin to
  /usr/share/makedumpfile-{version} (bsc#1230448)</changelog>
  <changelog author="ptesarik@suse.com" date="1740657600">- Update to 1.7.5:
  * Support for kernels up to v6.11 (x86_64)
- Drop upstreamed patches:
  * 0001-PATCH-Fix-failure-of-hugetlb-pages-exclusion-on-Linu.patch
  * 0002-PATCH-Fix-wrong-exclusion-of-Slab-pages-on-Linux-6.1.patch
  * make-reserve_diskspace-do-nothing-for-flattened-form.patch
- makedumpfile-fix-detection-of-typed-compound-pages-Linux-6.12.patch:
  Reflect mm changes in kernel v6.12 (bsc#1237269).</changelog>
  <changelog author="ptesarik@suse.com" date="1748520000">- Update bundled eppic to 63c2a2072464d774097a1a6cc1d2e98290f89c49.</changelog>
  <changelog author="ptesarik@suse.com" date="1748520001">- Update to 1.7.7:
  * Support for kernels up to v6.14 (x86_64)
  * Fix gcc-15 compile errors
  * Improve message readability and fix typos
- Drop upstreamed patches:
  * makedumpfile-fix-detection-of-typed-compound-pages-Linux-6.12.patch</changelog>
  <changelog author="petr.tesarik@suse.com" date="1771502400">- makedumpfile-Fix-data-race-in-multi-threading-mode.patch: Fix a
  data race in multi-threading mode (--num-threads=N)
  (bsc#1245569, bsc#1256455).</changelog>
</package>
<package pkgid="3f7dc1e71a0a0a82cd16ec846304e8523823a154bd4d4e63bc6ed9e00f8dd6aa68df8f7aef3bbd213f69d8ca8c42c1e50f2bbb67a4fc523a9baf6c1a792c63e1" name="man" arch="x86_64">
  <version epoch="0" ver="2.13.1" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1708344000">- We don't need anymore systemd-tmpfiles (boo#1219370#c13)</changelog>
  <changelog author="werner@suse.de" date="1717502400">- Update to 2.12.1 (5 April 2024)
  * Fix excessive cleanup of `/var/cache/man` by `systemd-tmpfiles`.
  * `man` matches the display width more accurately to the configured width.
  * Upgrade to Gnulib `stable-202401`.
  * Mention `groff`'s `pdf` device in `man(1)`.
  * Speed up `seccomp` filter slightly.
  * Document how to format pages using italic rather than underlined text.
  * Remove the obsolete `chconfig` tool for converting man-db configuration
    files to the FHS.  This transition took place almost 25 years ago (at
    least in Debian), so it's not worth keeping it around now.
- Remove patch man-db-2.9.4-alternitive.dif now upstream
- Port the patches
  * man-db-2.6.3-listall.dif
  * man-db-2.7.1-zio.dif
  * man-db-2.9.4.patch
  * man-propose-online.patch</changelog>
  <changelog author="werner@suse.de" date="1729252800">- Update to man-db 2.13.0 (29 August 2024)
  * Drop support for versions of groff before 1.21 (released on 2010-12-31).
  * Fix `man-suffixed-extension` test failure when not using the GNU
    hierarchy organization.
  * Fix `-Wmissing-variable-declarations` warnings with GCC 14.
  * Fix `-Wflex-array-member-not-at-end` warning with GCC 14.
  * Upgrade to Gnulib `stable-202407`.
  * Support running the test suite against an installed package; this is
    useful for systems such as Debian's autopkgtest framework.
- Remove patch man-db-2.6.3-chinese.dif as not supported anymore
  due to newer groff versions
- Port patches
  * man-db-2.6.3-listall.dif
  * man-db-2.7.1-zio.dif
  * man-db-2.9.4.patch
  * man-propose-online.patch</changelog>
  <changelog author="fvogt@suse.com" date="1731067200">- Drop libzio integration (man-db-2.7.1-zio.dif, BuildRequires and flag)
  to restore acceptable performance (boo#1232837):</changelog>
  <changelog author="werner@suse.de" date="1731326400">- Readd patch man-db-2.7.1-zio.dif
  * Use also in-memory decompression
- Add patch man-db-2.13.0-no_abort.patch
  * Avoid abort of mandb due switching to user man if executed by root</changelog>
  <changelog author="werner@suse.de" date="1744027200">- Modify patch man-db-2.6.3-listall.dif
  * If a section is specified do not show the list (boo#1240874)
  * Wait 15 seconds instead of 7 instead for a choice
  * Explicit mention `export' instead of `set' for MAN_POSIXLY_CORRECT</changelog>
  <changelog author="werner@suse.de" date="1744286400">- Avoid latest gettextize as it breaks build now</changelog>
  <changelog author="werner@suse.de" date="1754654400">- Update to man-db 2.13.1 (2 May 2025)
  * Update various manual page translation
  * Fix various minor formatting issues in manual pages.
  * Tolerate additional spaces in preprocessor strings.
  * Fix check for generated source files in out-of-tree builds.
  * Fix building with the `musl` C library.
  * Recognize another Ukrainian translation of the `NAME` section.
  * Increase the maximum size of the `NAME` section from 8192 to 16384 bytes.
- Port patches
  * man-db-2.6.3-listall.dif
  * man-db-2.9.4.patch</changelog>
  <changelog author="werner@suse.de" date="1765972800">- Extend tmpfiles template man-db.conf (jsc#PED-14862)
  * Create cache directories with systemd tmpfiles service</changelog>
  <changelog author="werner@suse.de" date="1767960000">- Do not masked out the already existing %ghost file entry
  (Accordingly to Packaging for Immutable Mode - Best Practices)</changelog>
</package>
<package pkgid="0dab4715b86d404f1e86eea9cbc52af77bd70108a11f24ae67bb128ed4b6c7840f2b7c3c092e92dcb72367763f0f869e9c3f980a43953209ec4799ede5cbe967" name="mandoc-bin" arch="x86_64">
  <version epoch="0" ver="1.14.6" rel="160000.2.2"/>
  <changelog author="mcepl@suse.com" date="1552219200">- This package is meant as an alternative lightweight replacement
  for man-pages package. It does not have that many dependencies,
  it is written in C, see http://mandoc.bsd.lv/ for more.
- Update to the 1.14.5 release proper:
  * The apropos(1) utility now accepts case-insensitive extended
    regular expressions by default, improving POSIX compliance
    (thanks to Wolfram Schneider for the suggestion).
  * The new man(1) -O tag[=term] output option opens a page at the
    definition of a term (thanks to Klemens Nanni for the suggestion).
  * The output from tbl(7) has been significantly improved in both
    the HTML and the UTF-8 output modes (thanks to Pali Rohar for
    many reports and suggestions).
  * Several syntax errors have been fixed in HTML output and the
    HTML output code quality has been further improved, in particular
    with respect to paragraphs, tagged lists, and tooltips
    (thanks to John Gardner for significant help).
  * Low-level roff(7) support has been further improved such that
    mandoc can now handle the manual pages of the groff package.
  * Many bugs have been fixed.</changelog>
  <changelog author="mcepl@suse.com" date="1576497600">- Add %{_sbindir}/makewhatis to the alternatives mechanism to
  avoid conflict with the mandoc package.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- update-alternatives --remove must be in %postun
- own mandoc.db
- add file triggers to update mandoc.db</changelog>
  <changelog author="lnussel@suse.de" date="1578657600">- get rid of alternatives altogether, just conflict (boo#1160568)</changelog>
  <changelog author="mcepl@suse.com" date="1580472000">- Conflict also groff-full</changelog>
  <changelog author="mcepl@suse.com" date="1581336000">- Add 1.14.5-master.patch containing among many other things fix
  allowing running ``man -w`` to get manpath.
  (gh#neovim/neovim#11794)</changelog>
  <changelog author="lnussel@suse.de" date="1600776000">- fix build fail (mandoc-1.14.5-dummy.diff)
- switch to using rpm.execute() as rpm 4.15 is now available
- tweak trigger scripts to handle missing files better (boo#1176194)
  There is no perfect solution though
  https://github.com/rpm-software-management/rpm/issues/1370
- make triggers more verbose if VERBOSE_FILETRIGGERS is set</changelog>
  <changelog author="mcepl@suse.com" date="1632484800">- Update to 1.14.6:
  - -- MAJOR NEW FEATURES ---
  * mdoc(7): automatic tagging improved in many respects
  * mdoc(7): new .Tg (tag) macro to explicitly mark a place as
  defining a term
  * man(7): implement some automatic tagging support
  * man(1): let -w without argument show the manpath, like in
  man-db and man-1.6
  * -T html: wrap text and phrasing elements in paragraphs unless
  already contained in flow containers; never put them directly
  into sections. This helps to format paragraphs with the CSS
  class selector .Pp.
  * man.conf(5): remove support for the "_whatdb" configuration directive
  that was deprecated in 2015; please use "manpath" instead
  - -- MINOR NEW FEATURES ---
  * man(1): switch the default pager from "more -s" to "less"
  * man(1): in the fallback code to look for manual pages without using
  mandoc.db(5), accept files "man&lt;one-digit-section&gt;/&lt;name&gt;.&lt;full-section&gt;"
  in addition to the already supported "man&lt;full-section&gt;/name.[01-9]*"
  * if messages are shown and output is printed without a pager, display
  a heads-up on stderr at the end because otherwise, users may easily
  miss the messages
  * man.cgi(8): add a Content-Security-Policy HTTP header
  * man.cgi(8): switch off autocomplete and autocapitalize
  * mandoc.css: support prefers-color-scheme: dark
  * -T html: add meta viewport element to help mobile devices
  * -T html -O tag: let this pass a file:// URI to the pager
  * tbl(7): implement the "nospaces" option
  * tbl(7) -T html: implement the "a" (em indent) layout specification
  * tbl(7) -T html: implement the "b" (bold) and "i" (italic) layout modifiers
  * tbl(7): support two-character font names in the layout font modifier
  * tbl(7) -T html: support horinzontal rulers in individual cells
  * tbl(7) -T tree: print more details about columns, options, rows, and cells
  * roff(7): implement the .break request (break out of a .while loop)
  * roff(7): support the CB and CI fonts in \f and .ft
  * -T lint: new STYLE message if a file name extension contradicts .Dt/.TH
  * -T lint: new STYLE message about overlong text lines
  * -W style: check .Xr links along the full manpath
  - -- RELIABILITY BUGFIXES ---
  * man(1): do not segfault if /tmp/ is not writeable
  * man(1): do not access a NULL pointer when both -l and -w are given
  * makewhatis(8): do not crash when a manpath directory contains
  a symbolic link that points to a directory
  * man(7): fix an assertion failure caused by doubly nested next-line scopes
  * tbl(7): fix a crash when the last column is only reached by spans
  * tbl(7): fix a NULL pointer access in some cases of two spans on one row
  * tbl(7) -T ascii: fix a NULL pointer access on empty data cells
  * tbl(7) -T ascii: fix a NULL pointer access on a line next to a short row
  * tbl(7): fix an assertion failure caused by excessive spacing modifiers
  * tbl(7): fix an infinite loop for some overlapping horizontal spans
  * roff(7): fix a rare case of writing one byte past the end of the input buffer
  * roff(7): do not call abort(3) when \*[.T] is encountered
  * roff(7): fix an assertion failure caused by a macro inside .ce .if
  * roff(7): fix assertion failures for .ti and .po with excessive arguments
  * roff(7): avoid near-infinte output for .ce inside explicit no-fill mode
  * -T ascii/utf8: fix assertion failures caused by excessive spacing
  * -T html: fix an assertion failure caused by .ft in rare situations
  * -T man: fix an assertion failure caused by tbl(7) and eqn(7) input
  - -- PORTABILITY IMPROVEMENTS ---
  * rename HOMEBREWDIR to READ_ALLOWED_PATH, allow it to contain more than
  one directory, and explain how to use that for NixOS and GNU Guix Linux
  * configure: stop trying to ask make(1) what the default compiler is
  because that test was too fragile; just use "cc" by default
  * configure: various simplifications and improved robustness
  * configure: only compile compat_*.c implementations that are needed
  * configure: provide feature tests for __attribute__(()) and mkstemps(3)
  * compat_*: sync with upstreams for security, functionality, and style
  * in regress.pl, avoid the non-portable options sed(1) -i and echo(1) -n
  * in the regression suite, avoid file names that differ only by case
  - -- MINOR FUNCTIONAL IMPROVEMENTS ---
  * man(1) -h: for pages lacking a SYNOPSIS, show the NAME section
  * man(1): when the first argument starts with a digit, optionally
  followed by a letter, and at least one more argument follows,
  interpret the first argument as a section name even when additional
  characters follow after the digit and letter
  * man(1): with a specific section requested, try harder to find
  the best match; use this order of preference:
  1. The section in both the directory name and the file name matches exactly.
  2. The section in the file name matches exactly.
  3. The section in the directory name matches exactly.
  4. Neither of them matches exactly.
  * man(1): if no tags were generated at all, unlink(2) the empty tags file
  as soon as the condition can be detected and do not pass it to less(1)
  * makewhatis(8): handle both dangling symlinks and .so links
  in manual page directories more gracefully
  * man.cgi(8): for invalid queries and for valid queries returning
  no result, return the appropriate 40x status code rather than 200
  * mdoc(7): let .Dd concatenate all arguments and default to the empty string
  * mdoc(7): convert ".Fl Fl" to ".Fl \-" during validation, improving -T html
  * mdoc(7): improve output of .At 32v
  * man(7): no longer print multiple blank lines before NAME and page footer
  * tbl(7) -T utf8: improved rendering of horizontal lines
  * tbl(7) -T html: in "n" cells, align by padding numbers on the right
  * tbl(7): no longer leak tabulator settings to subsequent roff(7) code
  * mdoc(7) -T html: for .Bl -tag, use "column-count: 1" rather
  than "overflow: auto" to avoid the ugly side effects
  * mdoc(7) -T html: render .Bd -unfilled in proportionally-spaced font
  * mdoc(7) -T html: format .Nd with &lt;span&gt; rather than &lt;div&gt;
  * mdoc(7) -T lint: do not warn about Mdocdate without an actual date
  * mdoc(7) -T lint: do not complain about function types of the
  form "ret_type (fname)(args)", but otherwise check names more strictly
  * -T html: append .html suffix to temporary files to please browsers
  * -T markdown: print a BAGARG message if called on man(7) input
  - -- MINOR BUGFIXES ---
  * man(1): do the search for each name independently, and
  show the results in the order of the command line argument
  * man(1): escape shell wildcard characters in name arguments before glob(3)
  * man(1): when asking for a single manual page by name, prefer file name
  matches over .Dt/.TH matches over first NAME matches over later NAME
  matches, but do not change the ordering for apropos(1) nor for man -a
  * man(1): correctly extract the section name from the file name extension
  of gzipped manual page files
  * makewhatis(8): fix file type tests putting wrong data into mandoc.db(5)
  * man.cgi(8): fix section number in the &lt;title&gt; element for preformatted pages
  * tbl(7): correct handling of T&amp; after horizontal rulers in the layout
  * tbl(7): correct column widths if rows have different numbers of cells
  * tbl(7): empty columns are 1n wide rather than 0n
  * tbl(7): correctly calculate required column widths for tables containing
  cells that horizontally span columns which contains "n" (number) formatted
  cells on other rows
  * tbl(7): skip escape sequences when looking for column separators
  * eqn(7): skip whitespace before tokens
  * roff(7): when calling an empty macro, do not clobber existing arguments
  * roff(7): recognize \} on lines closing a macro definition request
  * roff(7): do not throw a bogus warning for "'br\}" and similar lines
  * roff(7): stop generating comment nodes when encountering the first content
  * mandoc_char(7): make \0 (digit-width space) non-breaking
  * mdoc(7) .Bl -column: parse Macro in .It "word&lt;tab&gt;word" Ta word Macro&lt;eol&gt;
  * mdoc(7) -T html: display straight quotes, not curly quotes, for .Qq/.Qo
  * -T html: remove some spurious line breaks, in particular inside &lt;pre&gt;
  * -T html: use &lt;br/&gt; for a space character at the beginning of an input line
  * -T html: use ~%d for ordinal fragment suffixes, reserve '~' for that purpose
  - -- STRUCTURAL IMPROVEMENTS ---
  * introduce the concept of semantically transparent syntax tree nodes,
  allowing improved decisions in various validators and formatters
  * move some code out of the giant main() into separate functions
  doing one well-defined task each
  * clearly separate parser state (struct curparse) and formatter state
  (struct outstate), don't mix them in the same struct
  * in the HTML formatter, assert(3) that no HTML nesting violation occurs
  * let html_close_paragraph() close any phrasing context
  - -- THANKS TO ---
  * Anthony Bentley and Klemens Nanni (OpenBSD) for many patches and bug
  reports, for useful discussions, and for checking patches
  * Anton Lindqvist (OpenBSD) for two patches and a bug report
  * Marc Espie (OpenBSD) for a patch, many bug reports, and useful discussions
  * Lukas Epple (NixOS) for a patch, bug reports, suggesting a minor
  portability feature, checking patches, and extensive release testing
  * Abel Romero Perez for a patch, a bug report, and suggesting a new feature
  * nabijaczleweli for a patch and for suggesting feature improvements
  * Jonathan Gray (OpenBSD) for a patch and for bug reports
  * Otto Moerbeek (OpenBSD) and Alexander Gromnitsky for a patch
  * Armin Besirovic for a contribution to mandoc.css
  * Jason McIntyre (OpenBSD) for manual page patches, suggesting a new feature,
  checking many patches, and useful discussions
  * Martin Vahlensieck for a manual page patch and reporting a code style issue
  * Frederic Cambus and Ian Sutton (OpenBSD) for a manual page patch
  * Jan Schreiber for many bug reports found with afl(1)
  * G. Branden Robinson (GNU troff) for several bug reports, feature
  suggestions, and for checking many groff patches
  * Michael Stapelberg (Debian) for several bug reports and feature
  suggestions, and for extensive release testing
  * Ian Ropers, Lorenzo Beretta, and Oliver Corff for several bug reports
  and feature suggestions
  * Stephen Gregoratto for several bug reports
  * Theo de Raadt (OpenBSD) for two bug reports, checking a patch,
  and a useful discussion
  * Thomas Klausner (NetBSD) for two bug reports and for release testing
  * Andreas Kahari and Jason A. Donenfeld for two bug reports
  * Soeren Tempel (Alpine Linux) for a bug report, suggesting a feature
  improvement, and checking two patches
  * Aman Verma, Jan Stary, and John Gardner for a bug report
  and for suggesting a feature impovement
  * Todd Miller (OpenBSD) for a bug report, checking a patch,
  and a useful discussion
  * Andrew Fresh, Brian Callahan, Christian Weisgerber, Paul de Weerd (OpenBSD),
  Havard Eidnes, Jason Thorpe (NetBSD), Yuri Pankov (FreeBSD),
  Bjarni Ingi Gislason, Chris Bennett, Edgar Pettijohn, Eldred Habert,
  Jamie Landeg-Jones, Kazuo KUROI, and Wynn Wolf Arbor for a bug report
  * Theo Buehler (OpenBSD) for suggesting two feature impovements
  and for checking a patch
  * Leah Neukirchen (Void Linux) for suggesting a feature impovement
  and for release testing
  * Colin Watson (Debian) for suggesting a feature impovement
  and for checking groff patches
  * Matej Cepl (SUSE Linux), Matthew Martin, Steffen Nurpmeso,
  and Tim Baumgard for suggesting a feature impovement
  * Christos Zoulas (NetBSD) for a report regarding portability
  * Daniel Dickman (OpenBSD) for suggesting a portability improvement
  * Werner Lemberg (GNU troff) and Douglas McIlroy
  for reporting bugs in manual pages
  * Baptiste Daroussin and Eygene Ryabinkin (FreeBSD)
  for an additional regression test
  * Michal Nowak for reporting several code style issues
  * TJ Townsend (OpenBSD) for help with CSS
  * Sevan Janiyan (NetBSD) and Robert Mustacchi (Illumos)
  for extensive release testing
  * Job Snijders, Kinichiro INOGUCHI, and Martijn van Duren (OpenBSD)
  for checking patches
  * Bertrand Garrigues and Ralph Corderoy (GNU troff) for checking groff patches
- Deleted upstreamed patches:
  - 1.14.5-master.patch
  - mandoc-1.14.5-dummy.diff</changelog>
  <changelog author="kukuk@suse.com" date="1646913600">- Add build dependency for less to match behavior described in the
  manual page.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669982400">- Split mandoc into a bin subpackage: tools like rpm2docserv rely
  on mandoc to render the html pages, but they might be also wanted
  on systems that do not want to replace the entire man
  infrastructure.</changelog>
</package>
<package pkgid="805ecf527136d6865a5a7ff14e2c606ad35675f040dbcc9069ea39817a669f6ae201e4a6ccf8ec19372e366e043c5e84dd76013ed45ff6aa160f1a89493066d1" name="mcelog" arch="x86_64">
  <version epoch="0" ver="204" rel="160000.2.2"/>
  <changelog author="trenn@suse.de" date="1686744000">- Update to version 194 (jsc#PED-4218):
  * client.c: fix build w/ musl libc
  * mcelog: New model number for Arrowlake
  * mcelog: Don't overwrite model number when lookup fails
  * mcelog: Add Graniterapids, Grandridge and Sierraforest
  * mcelog: New model number for Lunarlake
  * mcelog: Add Emerald Rapids
  * mcelog: Add decode support for Sapphire Rapids
  * Update PFA_test_howto
  * mcelog: Add support for Meteor Lake</changelog>
  <changelog author="trenn@suse.de" date="1694520000">- This contains following features:
  PED-6122
  [GNR] RAS: mcelog Add support for Granite Rapids (ALP)
  PED-6102
  [GNR] RAS: mcelog Add support for Granite Rapids (SLE 15 SP6)
  PED-6021
  [SRF] RAS: mcelog support for Sierra Forest (SLE 15 SP6)
  PED-6050
  [SRF] RAS: mcelog support for Sierra Forest (ALP)
- Change git repo in _service file from git to https url
- Update to version 195:
  * mcelog: Wire up model-specific decoding for Sierra Forest
  * mcelog: Add model-specific decoding for Granite Rapids
  * client.c: fix build w/ musl libc
  * mcelog: New model number for Arrowlake
  * mcelog: Don't overwrite model number when lookup fails
  * mcelog: Add Graniterapids, Grandridge and Sierraforest
  * mcelog: New model number for Lunarlake
  * mcelog: Add Emerald Rapids
  * Update PFA_test_howto
- Adopt to mainline:
  M email.patch</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Update to version 196:
  * mcelog: Add second model number for Arrowlake
- jsc#PED-10217</changelog>
  <changelog author="trenn@suse.de" date="1707739200">- Update to version 197:
  * mcelog: Add kernel CONFIG message if /dev/mcelog isn't found
  * address comments
  * update mcelog manual
  * add --ping option to mcelog client
  * assign freed pointers to NULL pointer
  * mcelog: Fix two parsing issues</changelog>
  <changelog author="trenn@suse.de" date="1715601600">- Update to version 198:
  * Remove obsolete on disk dimm database code
  * page.c: Disable gcc warnings
  * page.c: Remove obsolete comment
  * mcelog: Fix clang warnings
  * mcelog: mempage_replace missing initialization of mempage fields
  * mcelog: Add third model number for Arrowlake
- Refresh patches according to mainline:
  M    add-f10h-support.patch
  M    email.patch
  M    fix_setgroups_missing_call.patch
  M    mcelog_invert_prefill_db_warning.patch
- jsc#PED-10212</changelog>
  <changelog author="trenn@suse.de" date="1728302400">- Update to version 200:
  * mcelog: Reduce default threshold for corrected error page offline
  * Revert "mcelog: Reduce default threshold for corrected error page offline"
  * mcelog: Add new model number for Panther Lake
  * server: Correct prameter type for connect() API</changelog>
  <changelog author="trenn@suse.de" date="1732795200">- Update to version 201:
  * add listen backlog config for mcelog server
  * mcelog: Add basic support for Diamond Rapids
  * mcelog: Add support for other CPU families</changelog>
  <changelog author="trenn@suse.de" date="1733572800">- Update to version 202:
  * mcelog: Wire up model-specific decoding for Clearwater Forest
  * mcelog: New model number for Clearwater Forest
- jsc#PED-10052</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="trenn@suse.de" date="1744372800">- Update to version 204:
  * Enable offline retries by default
  * Add ability to retry failed page offlines with an exponential backoff
  * Fix misspelling in variable name</changelog>
</package>
<package pkgid="ffcb89b9910051a0dc54be5619d392a15217df07f371d43ca3c676f0f640e5e31f533ac5f8fbc8c5121d1086df35fc0dc86e1576e00af30adb57bb79c223d790" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.4+40.gad81df32" rel="160000.1.1"/>
  <changelog author="mwilck@suse.com" date="1748347200">- monitor: Add MAILFROM address to email envelope to avoid smtp auth
  errors (bsc#1241474)
  * add 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch</changelog>
  <changelog author="jengelh@inai.de" date="1753099200">- Stop emitting %release into program binaries [boo#1246806]</changelog>
  <changelog author="mwilck@suse.com" date="1755172800">- Fix systemd unit file handling in spec file (boo#1207266)
  * make all units known to systemd
  * restart only timers and mdmonitor.service</changelog>
  <changelog author="mwilck@suse.com" date="1762257600">- _service: pull from github.com/openSUSE/mdadm, patches now managed in git
  * delete 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch
  * delete 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  * delete 1001-display-timeout-status.patch
  * delete 1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch
  * delete 1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch
  * delete 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
  * delete 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  * delete 1006-imsm-Fix-RAID0-to-RAID10-migration.patch
  * delete 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch
  * delete 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch
- New versioning scheme: add tag offset and git commit from openSUSE/mdadm repo</changelog>
  <changelog author="mwilck@suse.com" date="1762430400">- Split off the Software RAID HOWTO into a -doc package
- Update to version 4.4+29.gf8bb524b:
  * fix race between mdcheck_start.service and mdcheck_continue.service
    (bsc#1243443, bsc#1248097)
  * various fixes for mdcheck (bsc#1248097)
  * mdadm_env.sh: ignore MDADM_RAIDDEVICES if MDADM_SCAN is set
    (bsc#1229997)
- Upstream bug fixes since 4.4 (bsc#1253060)
  * mdadm: add attribute nonstring for signature
  * super-ddf: Prevent crash when handling DDF metadata
  * platform-intel: Disable legacy option ROM scan on UEFI machines
  * mdadm: fix --grow with --add for linear
  * mdadm/raid6check: add xmalloc.h to raid6check.c
  * Coverity fixes resources leaks
  * udev: persist properties of MD devices after switch_root
- _service: switch to tar_scm for better interoperabity with SLFO.</changelog>
  <changelog author="mwilck@suse.com" date="1763640000">- Update to version 4.4+30.g9a59bf51:
  * mdcheck: work around bash 5.3 bug (bsc#1254087)</changelog>
  <changelog author="mwilck@suse.com" date="1765195200">- Update to version 4.4+31.g541b40d3:
  * fix crash with homehost=none (bsc#1254541)</changelog>
  <changelog author="mwilck@suse.com" date="1770811200">- Update to version 4.4+37.gea219956:
- Backport upstream fixes from 4.5 (bsc#1257009)
  * Re-enable mdadm --monitor ... for /dev/mdX
  * Allow RAID0 to be created with v0.90 metadata
  * Moves memory management into Assemble to avoid null pointer dereference
  * Support non-absolute name during monitor scan
  * Don't set badblock flag when adding a new disk
  * Fix metadata corruption when managing new imsm array</changelog>
  <changelog author="mwilck@suse.com" date="1771848000">- Update to version 4.4+39.g1b34084f:
  * platform-intel: Deal with hot-unplugged devices (bsc#1258265)
  * imsm: Fix UEFI backward compatibility for RAID10D4 (bsc#1257009)</changelog>
  <changelog author="mwilck@suse.com" date="1772625600">- Update to version 4.4+40.gad81df32:
  * avoid mdcheck_continue.timer and mdcheck_start.timer
    firing simultaneously (bsc#1243443, bsc#1259090)</changelog>
</package>
<package pkgid="3e740052c1fa3870bbf6d0cee315adc803bb3cef2aab93068dc9fa498a87cf28953c828369d4473807b492f2eba13a57e3e000c2aca34f2954bb445ec17bf764" name="mdevctl" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="160000.2.2"/>
  <changelog author="jfehlig@suse.com" date="1593604800">- Initial packaging of mdevctl utility</changelog>
  <changelog author="jfehlig@suse.com" date="1607428800">- Update to version 0.78:
  * Automatic version commit for tag 0.78
  * use standard bash path
  * avoid other tags spilling into the .spec changelog
  * mdevctl: fix cleanup on error when creating and removing mdev
  * version support
  * Fix attributes getting applied via start-parent-mdevs
  * mdevctl: fix cleanup on error when writing to attribute
  * Remove never used 'available' option
  * Fix attribute validation
  jsc#SLE-15861, bsc#1179770</changelog>
  <changelog author="jfehlig@suse.com" date="1625745600">- Update to version 0.81:
  * Automatic version commit for tag 0.81
  * Fix define from jsonfile</changelog>
  <changelog author="ptesarik@suse.com" date="1646913600">- Update to version v1.1.0 (jsc#SLE-18449):
  * use imported std::env for CARGO_PKG_VERSION in build.rs directly
  * fix build.rs to allow specify exact path or name of the rst2man
  * Don't call unnecessary to_string()
  * Report a useful error when /etc/mdevctl.d doesn't exist
  * Handle FS permissions problems for defined devices
  * Fix needless borrow warning from clippy
  * tests: read stdin in callout test scripts
  * Report root error when a callout can't be executed
  * Don't emit warning for files in /etc/mdevctl.d/scripts.d
  * env: add function to get base scripts directory</changelog>
  <changelog author="jfehlig@suse.com" date="1647000000">- spec: Add /etc/mdevctl.d/scripts.d directory to %files</changelog>
  <changelog author="jfehlig@suse.com" date="1647259200">- spec: BuildRequires python3-docutils instead of all python
  flavors of the docutils module</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- Update to version 1.2.0:
  * Port CLI to clap v3
  * start: provide useful hint for parent with wrong case
  * tests: Add ability to test error messages
  * tests: extract function for checking pass/fail expectations
  * MDev::create() does not need to be public
  * Fix new clippy warning</changelog>
  <changelog author="jfehlig@suse.com" date="1706097600">- Update to version 1.3.0 (jsc#PED-4981):
  * tests: add tests for live and defined support
  * doc: document live support and its options
  * cli: add live and defined parameters to modify command
  * callouts: add callout live event support
  * main: refactor jsonfile loading
  * main: refactor getting active devices
  * tests: add callout versioning tests
  * callouts: add warning for unknown supported actions and events
  * callouts: prevent repeating unsuccessful script searches
  * callouts: add versioning on callout scripts
  * callouts: make callout method reusable
  * callouts: add a check_result_fn to invoke_first_matching_script
  * Fix new clippy warnings
  * Cargo.toml: move tempfile to dev-dependencies
  * main: assemble active devices without overwriting
  * mdevctl.spec.in: Add systemd as build requirement
  * callout: ignore broken pipe on stdin
  * cli: improve lsmdev help
  * callouts: set script in callout on success only
  * main: fix file open error being suppressed
  * Fix clippy warning for useless vec
  * callouts: replace negated check and improve msgs
  * callouts: improve debug messages in get_attributes
  * callouts: match code format in Display for Event and Action
  * tests/callouts: make scripts cross distro compliant
  * actions: update release action to newer versions
  * Bump clap to 4.0
  * Bump env_logger dependency to 0.9.0
  * Fix deprecated github actions
  * cli: change modify parameter relationships
  * tests: use printf over echo
  * tests: add callout constructor panic tests
  * callouts: add MDev to callout struct
  * callouts: Move stdin generation from Callout::invoke_script()
  * callouts: Add a Callout argument to the invoke callback function
  * callouts: Reuse Callout::callout() for get_attributes()
  * callouts: Return Output from Callout::callout()
  * callouts: Remove Callout::callout_dir()
  * callouts: Move self.script invocation to callout()
  * callouts: make Callout::invoke() a method
  * mdev: provide better error message for invalid attr index
  * mdev: change attribute index arguments to usize
  * cli: adjust help text for modify option addattr
  * modify: ensure required parameter is given
  * trim trailing null from callout script get-attributes output
  * Add --force option for commands that have callouts
  * Bump 'nix' dependency
  * tests: test 'stop' with callouts
  * tests: remove stray debug prints during fork
  * tests: make test failure reports more obvious
  * Bump version to 1.3.0
  * undefine: report error if device is not undefined
  * modify: add jsonfile optional parameter
  * cli: add cli tests
  * cli: fix clap deprecations warnings
  * tests: fix test_modify() when auto and manual are both set
  * Fix panic on modify delattr with invalid index
  * Active attributes (#71)
  * clippy: remove needless borrows
  * mdevctl.rst: align use of term state
  * Add tests for callout dir priority
  * Add system callout script dir outside /etc.
  * Add ability to set env root with env variable
  * Rename Environment::persist_base() to config_base()
  * Update github checkout action
  * Relax 'nix' dependency version requirement
  * callouts: remove return value from Callout::notify()
  * callouts: remove separate is_dir() check in notify()
  * callouts: filter and map iterator in notifier loop
  * Update uuid version
  * tests: verify that callout scripts are executed in order
  * callouts: make sure scripts are sorted
  * callouts: simplify loop through callout dir
  * callouts: Remove call to count() on callout dir entries
  * Fix new clippy warnings
  * Fix intermittent callout failure during test
  * rpm: set debug env vars when running tests in rpm build
  * Add python3-docutils to rpm BuildRequires</changelog>
  <changelog author="jfehlig@suse.com" date="1707739200">- Add /usr/lib/mdevctl/scripts.d/{callouts,notifiers} directories</changelog>
</package>
<package pkgid="3313d5fea129e939803fff7246e6cd4ae787fddf9fff34002872a5bb588f360cda5534ede761f65e24f66a51b220939265fbd720c7471837a24eee1908bdbc21" name="microos-tools" arch="x86_64">
  <version epoch="0" ver="4.0+git16" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1727265600">- Update to version 2.21+git16:
  * selinux: Avoid parameter duplication
  * 98selinux-microos: Use a single thread for relabelling /etc
  * Use all cores for SELinux restorecon (related to jsc#SMO-382)
- _service: Omit +git0 suffix in versions</changelog>
  <changelog author="fvogt@suse.com" date="1728302400">- Update to version 4.0:
  * Release version 4.0
  * Have the autorelabel hook propagate failure from relabelling
  * Split SELinux relabelling code into separate package
  * Make 98selinux-microos usable on non-transactional systems
  * selinux-autorelabel-generator: Don't hardcode mountpoints
  * Consistently use tabs in selinux-autorelabel-generator
  * Add automated testing of SELinux relabelling functionality
  * Fix OBS workflow for pushes to master</changelog>
  <changelog author="fvogt@suse.com" date="1729166400">- Update to version 4.0+git1:
  * Regenerate initrd after selinux-autorelabel installation</changelog>
  <changelog author="fvogt@suse.com" date="1730203200">- Update to version 4.0+git2:
  * Add RemainAfterExit=true to autorelabel services</changelog>
  <changelog author="fvogt@suse.com" date="1731585600">- Update to version 4.0+git6:
  * test: Check for AVC denials in the journal
  * test: More reliable output of combustion-validate
  * test: Remove workaround for boo#1230912
  * Label /sys before selinux-autorelabel units run (bsc#1232709)</changelog>
  <changelog author="fvogt@suse.com" date="1740657600">- Update to version 4.0+git7:
  * Only autorelabel local filesystems with SELinux support (boo#1237202)</changelog>
  <changelog author="kukuk@suse.com" date="1741953600">- Update to version 4.0+git10:
  * Remove setup-systemd-proxy, now part of aaa_base
  * Drop wtmpdb SELinux AVC workaround in test suite
  * test: Wait for sshd.service before checking labels in /etc</changelog>
  <changelog author="kukuk@suse.com" date="1742904000">- Update to version 4.0+git11:
  * Only parse section with at minimum two arguments (#42)</changelog>
  <changelog author="fvogt@suse.com" date="1746532800">- Update to version 4.0+git14:
  * test: Test with Minimal-VM as well
  * test: Add some missing SYSTEMD_IGNORE_CHROOT=1 to poweroff calls
  * selinux-autorelabel: Fix check for relabelling only specific filesystems</changelog>
  <changelog author="kukuk@suse.com" date="1746792000">- Update to version 4.0+git16:
  * man-online: fetch product specific manual pages
  * Add import-pubring: create gpg file from rpmdb</changelog>
</package>
<package pkgid="2ac7174e4efecda49be3912bc309e2c99f7c769225043a67e2c836ed3206ca0ea9770fd16534af595cfcda44645c4a3c38e8da51eaf2d52adad4aa32476373de" name="mkisofs" arch="x86_64">
  <version epoch="0" ver="3.02~a10" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="325f5c216181fe28819c66c7cb6fad212d230772894f16697a72f224b3c170211737620cfbe6586d5d389022a36de3ca5bd5497812adb862bf61bed494c91e2f" name="mokutil" arch="x86_64">
  <version epoch="0" ver="0.7.2" rel="160000.2.2"/>
  <changelog author="glin@suse.com" date="1597406400">- Update mokutil-support-revoke-builtin-cert.patch
  + Add "--revoke-cert" to the man page</changelog>
  <changelog author="glin@suse.com" date="1600257600">- Add mokutil-bsc1173115-add-ca-and-keyring-checks.patch to add
  options for CA and kernel keyring checks (bsc#1173115)
  + Add new BuildRequires: keyutils-devel
  + Add mokutil-remove-libkeyutils-check.patch to disable the
    version check of libkeyutils
- Refresh mokutil-support-revoke-builtin-cert.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620129600">- spec file cleanup</changelog>
  <changelog author="glin@suse.com" date="1626350400">- Update to 0.5.0
  + mokutil: delete key/hash from the reverse request
  + efi_x509: fix an error handling in is_immediate_ca()
  + efi_x509: fix certificates fingerprint calculation
  + efi_x509: use EVP_Digest()* functions instead of the deprecated
    SHA1_*()
  + src/util.c: fix NULL pointer dereference in mok_get_variable
  + mokutil: Read the SbatLevelRT variable to get the SBAT entries
  + mokutil: add mok-variables parsing support
  + mokutil: Add option to print the UEFI SBAT variable content
  + mokutil: only check for Secure Boot support in options that
    need it
  + efi_x509: add the function to fetch SKID
  + keyring: add the function to check kernel keyring
  + mokutil: initialize data for efi_get_variable()
  + mokutil: correct the data for efi_set_variable() in
    set_password()
  + mokutil: improve the readability of issue_mok_request()
  + mokutil: drop the checks for PK and KEK
  + mokutil: check the blocklists before enrolling a key
  + mokutil: adjust the command bits
  + mokutil: remove "--simple-hash"
  + make CA check non-fatal
  + mokutil: close file in the error path
  + mokutil: do the CA check
  + efi_x509: add the function to check immediate CA
  + efi_x509: use d2i_X509() to create X509 handling
  + mokutil: rename hash_file as pw_hash_file
  + password-crypt: update the function names
  + password-crypt: fix the types of several functions
  + mokutil: fix the error message in sb_state()
  + mokutil: move x509 functions to efi_x509.c
  + mokutil: move the hash functions to efi_hash.c
  + util: add functions for db_var_name and db_friendly_name
  + Remove the SHA1 code from identify_hash_type()
  + Map the UEFI variable names with a function
  + Fix -Wcast-align warnings
  + Fix 32 bit build
  + Add --timeout to manpage and other corrections.
  + mokutil.c: fix typo enrollement -&gt; enrollment
  + Avoid taking pointer to packed struct
  + Fix name of --enable-validation in the description
  + Remove shebang from bash-completion/mokutil
- Add mokutil-fix-missing-header.patch to fix the compilation error
  due to the missing header
- Refresh mokutil-remove-libkeyutils-check.patch and only apply
  it to openSUSE Leap 15.*
- Drop upstreamed patches:
  + mokutil-remove-shebang-from-bash-completion-file.patch
  + mokutil-bsc1173115-add-ca-and-keyring-checks.patch
- Drop mokutil-support-revoke-builtin-cert.patch since we don't use
  the builtin cert prompt patch in shim anymore.</changelog>
  <changelog author="jlee@suse.com" date="1656331200">- Update to 0.6.0
    + 6c98907 SBAT revocation update support
    + 0276891 mokutil: Add trust_mok_keys and untrust_mok_keys
    + 57bc385 mokutil: enable setting fallback verbosity and noreboot mode
    + b15e7c4 util: add the missing stdio.h
- Drop mokutil-fix-missing-header.patch (upstream)</changelog>
  <changelog author="glin@suse.com" date="1692360000">- Remove modhash (bsc#1214358)
  + The modhash script is rarely used and it's impractical to block
    a kernel module with the hash.</changelog>
  <changelog author="jlee@suse.com" date="1695124800">- Sync change log to prepare for sending mokutil 0.6.0 to SLE15-SP6
  (jsc#PED-6528)
  - Removed the following backported patches because they are merged
    to 0.6.0:
  - mokutil-fix-missing-header.patch
  b15e7c4d7 util: add the missing stdio.h
  - mokutil-enable-setting-fallback-verbosity-and-norebo.patch (bsc#1198458)
  57bc38582 mokutil: enable setting fallback verbosity and noreboot mode
  - mokutil-SBAT-revocation-update-support.patch (bsc#1198458)
  6c9890730 SBAT revocation update support</changelog>
  <changelog author="pgajdos@suse.com" date="1708689600">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dennis.tseng@suse.com" date="1709294400">- Update to 0.7.0
    + 82694cb Show usage instead of aborting on bad flags
    + 04791c2 mokutil bugfix: del unused opt "-s"
    + d978c18 Fix leak of list in delete_data_from_req_var()
    + e498f64 Fix leak of fd in mok_get_variable()
    + 7b6258a Show the key owner GUID
    + 51b5e55 Use PKG_PROG_PKG_CONFIG macro from pkg.m4 to detect pkg-config
    + 1aefcdb mokutil: handle the parsing error from "mok-variables"
    + 71140ef mokutil: Fix memory leak in export_db_keys
    + 0011d52 mokutil:check the result of malloc() is necessary
    + a0d8702 Fix inconsistency in skip messages
    + ae59d89 man: add "--trust-mok" and "--untrust-mok"
    + dd55c28 Avoid conflicting efi_char16_t type definitions
    + 8b6d116 fix: typo "accesss" -&gt; "access"
    + f68a4f4 Do not exit with non zero status for version query
    + 5f49730 Check for efi variabales support after processing commands
    + 2d6c409 Return 0 after printing help messages
    + c64741d Add support for SSPPolicy, depricate --set-sbat-policy delete
    + 48e3d2a Fix tab alignment for help (set-fallback-verbosity/set-fallback-noreboot)
    + c361087 (HEAD -&gt; master, tag: 0.7.0, origin/ssppolicy-v2-fix, origin/master, origin/HEAD) Rename "previous" revocations to "automatic"</changelog>
  <changelog author="dmueller@suse.com" date="1739016000">- update to 0.7.2:
  * mokutil: revert the default listing to the verbose form
- update to 0.7.1:
  * Fix an off-by-one reading passwords from a file.
  * Short certificate listing by default</changelog>
</package>
<package pkgid="b5b275349498d02b4eb756d3f6efd7facf54b649ec4403dbaaee312c719054b63c3c12923153ebd4291348fa056eced182ecdf207b31e9d5914a68f5e3225231" name="mozilla-nspr" arch="x86_64">
  <version epoch="0" ver="4.36.2" rel="160000.1.1"/>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1732536000">- update to version 4.36
  * remove support for OS/2
  * remove support for Unixware, Bsdi, old AIX, old HPUX9 &amp; scoos
  * remove support for Windows 16 bit
  * renamed the prwin16.h header to prwin.h
  * configure was updated from 2.69 to 2.71
  * various build, test and automation script fixes
  * major parts of the source code were reformatted</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762948800">- update to NSPR 4.36.2
  * Fixed a syntax error in test file parsetm.c,
    which was introduced in 4.36.1
- update to NSPR 4.36.1
  * Incorrect time value produced by PR_ParseTimeString and
    PR_ParseTimeStringToExplodedTime if input string doesn't
    specify seconds.</changelog>
</package>
<package pkgid="ddbd4e696b8d1f54a2212f99d10c762a37ce517a85f09bffc7b23ba2a00b41d35692b815637583e1c4caa6d9bf6b37cbf79ec02d3543046662d7e2f9d1681cd1" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.112" rel="160000.2.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="21211c27e3432e2526ae12f2a065de673baf43f06383ebd0ed2ddb9ae2d73d77510304923701a4d81234a4631f68e1bb12c83abd8a88d0dfb387db3d927e6137" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.112" rel="160000.2.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="2f20a02e093aff8946f676e843a8ae2a728ce9e128c92fe22bfdad8cfe9e88bc7cdcb5e825a5dfa67a852c5159edefd9122342911600efba1c3f61e5c6bea5fb" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.112" rel="160000.2.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="b4165591a05310239d58e451fe5c8ddad4d89859bbae797bc5fe0e56a3724039712b47e7779c125565ebc551a2bbdd4eed74a66d9497b4a48900fe51efe74494" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.12.2+254+suse.924a3ed8" rel="160000.1.1"/>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.11.0~1+118+suse.4a51b1a
  See NEWS.md for details about upstream changes in 0.11.0.
  * Pre-release of upstream 0.11.0
  * Rework of the path checking algorithm to reduce wait time and improve
  performance
  * Modified the systemd unit `multipathd.service` such that multipathd will now
  restart after a failure or crash (gh#opensvc/multipath-tools#100)
  * multipathd: move systemd watchdog handling into daemon (bsc#1232227)
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.11.0+164+suse.24eeee7
- Reviewed Upstream changes from 0.12 development
  * Continued rework of the path checker loop
  * multipathd now sets the port_state of Fibre Channel remote ports to
    "marginal" for NVMe devices, too (with nvme_core.multipath=N only).
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix path grouping if a path device is added while offline with group_by_tpg
    and group_by_serial path grouping policy
    (gh#opensvc/multipath-tools#108, bsc#1236392)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
- Changes in Upstream 0.11.0 (see also NEWS.md)
  * multipathd: set rport port_state to marginal for NVMe devices
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
  * multipath-tools: add SCST to hwtable
  * Add defaults for SCST and HPE MSA Gen7 to hwtable
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)
  * Fixes for handling empty or incompletely created multipath maps
    (bsc#1236390)
  * During map creation, fixed the case where a map with different name, but
    matching UUID and matching type was already present. multipathd
    previously failed to set up such maps. Now it will reload them with the
    correct content. (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.11.0+183+suse.3973293:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.
  * multipath-tools: make multipathd listen on a pathname socket
    (/run/multipathd.socket) besides listening on an abstract socket.
    This allows connecting to multipathd from a containerized application
    (gh#opensvc/multipath-tools#111). In client mode, applications
    linked against libmpathcmd will attempt to connect to the pathname
    socket first, and to the abstract socket if this fails.
    The MULTIPATH_SOCKET_NAME environment variable can be used to
    override the socket name.
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * libmultipath: remove buggy reinstate_paths function</changelog>
  <changelog author="mwilck@suse.com" date="1762862400">- Update to version 0.11.3+184+suse.e1501732:
- Fixes from upstream 0.11.3 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1769428800">- Update to version 0.12.2+254+suse.924a3ed8:
- Bug fixes from 0.12.2 (bsc#1257007, see NEWS.md for details)
  * kpartx: fix segfault when operating on regular files
    (bsc#1257244, bsc#1257153)
  * multipathd: print path offline message even without a checker
    (bsc#1254094)
  * Fix `mpathpersist --report-capabilities` output.
  * Fix command descriptions in the multipathd man page.
  * Fix ISO C23 compatibility issue causing errors with new compilers.
  * Fix memory leak caused by not joining the "init unwinder" thread.
  * Fix memory leaks in kpartx.
  * Print the warning "setting scsi timeouts is unsupported for protocol" only
    once per protocol.
  * Make sure multipath-tools is compiled with the compiler flag
    `-fno-strict-aliasing`. (gh#opensvc/multipath-tools#130, bsc#1255285)
- Features from upstream 0.12.0 (see also NEWS.md):
  * Maps that were added outside of multipathd (e.g. using the **multipath**
    command) and that couldn't be reloaded by multipathd used to be ignored
    by multipathd. multipathd will now monitor them. If some paths were
    offline while the map was created, multipathd will now add them to the
    map when they go online again.
  * multipathd retries persistent reservation commands that have failed on one
    path on another one.
- Documentation fixes
- Additions to the hardware table</changelog>
</package>
<package pkgid="9233a1d17800a27f88ec4e62f652335f0c6515198eee0f4247b34832d8170062ff56af9fb52c1714378ef6920b68d27e4a3e559c335fe0e5b4d328e45277be60" name="ncurses-utils" arch="x86_64">
  <version epoch="0" ver="6.5.20250531" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Add a further sclp entry for qemu s390 based systems</changelog>
  <changelog author="werner@suse.de" date="1744632000">- Add ncurses patch 20250412
  + add pangoterm -TD
  + add kf1 to kf5 to sclp (report by Werner Fink)
  + add vt100+pf1-pf4 -TD
- Modify patch ncurses-5.9-ibm327x.dif
  * Skip the further entry as now aprt of the common `sclp' entry
  * Add ansi.sys entry to ibm327x for coloring support</changelog>
  <changelog author="werner@suse.de" date="1745841600">- Add ncurses patch 20250426
  + expand note on extensions in curs_addch.3x
  + add illumos, sun-16color, sun-256color, sun-direct -TD
  + add wyse+cvis -TD
- Add ncurses patch 20250419
  + add note on scrolling and lower-right corner to waddch and wadd_wch
    manual pages.
- Modify patch ncurses-5.9-ibm327x.dif
  * sclp term: more missed features like home/end/pageup/pagedown keys</changelog>
  <changelog author="werner@suse.de" date="1746014400">- Modify patch ncurses-5.9-ibm327x.dif
  * sclp term: use ASCII Console key mapping and support home
  * ibm327x term: can do color and drawings but no cursor</changelog>
  <changelog author="werner@suse.de" date="1746446400">- Add ncurses patch 20250503
  + update/correct some of the rv/xr strings, checked with tack -TD
  + use ansi+rca in sclp -TD
  + use vt220+pcedit in sclp (Werner Fink)
  + move some building blocks from illumos to sun-color, based on
    illumos source-history -TD
  + improve use-clauses: ansi+cup, ansi+idl1, ansi+rca, ansi+rca2,
    ansi+sgrso, ansi+sgrul -TD
  + add ecma+standout, ecma+underline -TD
  + add rv code for alacritty -TD
  + add rv/xr codes for contour, ghostty, iterm2, kitty, konsole,
    vscode, vte, wezterm -TD
- Modify patch ncurses-5.9-ibm327x.dif
  * Reflect upstream added changes
- Port patch ncurses-6.4.dif</changelog>
  <changelog author="werner@suse.de" date="1747051200">- Add ncurses patch 20250510
  + add rv/xr codes for domterm, mintty, mlterm -TD
  + add xr code for putty -TD
  + update teraterm to 5.0 -TD
  + add rlogin-color -TD</changelog>
  <changelog author="bwiedemann@suse.com" date="1747310400">- Avoid expanding %jobs in comment (boo#1237231)</changelog>
  <changelog author="werner@suse.de" date="1747656000">- Add ncurses patch 20250517
  + initial changes for some ABI 7 features:
    + disable wgetch-events
    + add feature for extending mouse-buttons
    + add feature for extending direct-color support
  + use bracketed+paste in nsterm, rlogin-color, screen, terminology -TD
- First steps to support ABI 7
- Update to tack-1.11-20250503
  * 2025/04/29 Add checks for RV/rv and XR/xr</changelog>
  <changelog author="werner@suse.de" date="1748260800">- Add ncurses patch 20250524
  + correct option-name used in configure script, which resulted in size
    change for cchar_t (cf: 20250517).</changelog>
  <changelog author="werner@suse.de" date="1748865600">- Add ncurses patch 20250531
  + improve logic in misc/run_tic.in for constructing symbolic link
    when $DESTDIR is set.</changelog>
</package>
<package pkgid="70773a8b799adf2afd9c638381bd17131d6beca903c3a7c1051a491281acbdc9fc9d108e2ee507dcb50682ce0e4ee2edf7ad8a56f69a185b68fa17a1539c0440" name="net-tools" arch="x86_64">
  <version epoch="0" ver="2.10" rel="160000.3.1"/>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.10:
  * man: pt_BR: ifconfig: fix procmisc option typo
  * netstat: exit non-zero when sctp protocols are not supported
  * man: route: add single route del example
  * ifconfig: accept "pointtopoint" as an alias to "pointopoint"
  * man: netstat: fill out Timers section
  * man: ethers: remove funky comment blocks
  * man: standardize SEE ALSO across all pages &amp; translations
  * netstat: fix iface truncation with -i
  * ifconfig: fix exabyte statistic handling
  * man: ipmaddr/iptunnel: new stub man pages
  * man: route: use standard .BR for SEE ALSO
  * netstat: fix iface truncation with -g
  * po: rename et_EE to et
  * README/INSTALL: refresh for the modern times
  * THANKS: add a few more people from `git-log`
  * netstat: Set SCTP report compliant with -l/--listening option.
  * Describe "hyphen" program in man page.
  * man: cleanup ipfw &amp; ipchains refs
  * ipv6: fix memmove usage with overlapping memory
  * build: drop support for backing up programs
  * netstat: add ROSE print support
  * remove ancient "register" markings
  * hostname: constify a few string arguments
  * hostname: add fallback errno decoding on failure
  * de.po: fix typo "Processe" -&gt; "Prozesse"
  * route: Fix a missing space in the ipv6 route output
  * util: drop new() helper
  * proc: constify filename arg
  * nameif: add printf attributes to helper funcs
  * nameif: mark local vars/funcs as static
  * nameif: fix memory corruption and increase maximum MAC address length
  * inet_gr: tweak formatting to avoid confusing the compiler
  * ipmaddr: use safe_strncpy for ifr_name
  * ifconfig: fix confusing error message logic
  * ifconfig: add name subcommand to rename an interface
  * statistics: Fix ipFragOKs and ipFragFails verbiage
  * statistics: fix packets typo
  * fix minor mistakes in Czech translation
- drop 0003-Add-support-for-EiB-in-interface.c.patch
  0005-Add-support-for-interface-rename-in-nameif.patch: upstream
- net-tools-configure.patch: refresh</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sbrabec@suse.com" date="1752148800">- Perform bound checks when parsing interface labels in
  /proc/net/dev (bsc#1243581, CVE-2025-46836, GHSA-pfwf-h6m3-63wf,
  net-tools-CVE-2025-46836.patch,
  net-tools-CVE-2025-46836-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1754308800">- Fix a regression in net-tools-CVE-2025-46836.patch (bsc#1246608).</changelog>
  <changelog author="sbrabec@suse.com" date="1754913600">- Provide more readable error for interface name size checking
  introduced by net-tools-CVE-2025-46836.patch
  (bsc#1243581, net-tools-CVE-2025-46836-error-reporting.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1756382400">- Drop old Fedora patch 0006-Allow-interface-stacking.patch. It
  provided a fix for the stack corruption (bsc#142461), later
  reported as CVE-2025-46836 (bsc#1243581) and fixed by the
  upstream in a different way. Revert interfering
  net-tools-CVE-2025-46836.patch back to the upstream version.
- Fix stack buffer overflow in parse_hex (bsc#1248687,
  GHSA-h667-qrp8-gj58, net-tools-parse_hex-stack-overflow.patch).
- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687,
  GHSA-w7jq-cmw2-cq59,
  net-tools-proc_gen_fmt-buffer-overflow.patch).
- Avoid unsafe memcpy in ifconfig (bsc#1248687,
  net-tools-ifconfig-avoid-unsafe-memcpy.patch).
- Prevent overflow in ax25 and netrom (bsc#1248687,
  net-tools-ax25+netrom-overflow-1.patch,
  net-tools-ax25+netrom-overflow-2.patch).
- Keep possibility to enter long interface names, even if they are
  not accepted by the kernel, because it was always possible up to
  CVE-2025-46836 fix. But issue a warning about an interface name
  concatenation (bsc#1248410,
  net-tools-ifconfig-long-name-warning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1757160000">- Drop 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch. It
  was net-tools-1.60 specific leak fix and breaks netrom in
  net-tools-2.10 (bnc#544339#c2).</changelog>
  <changelog author="sbrabec@suse.com" date="1757332800">- Drop 0002-Do-not-warn-about-interface-socket-not-binded.patch. It
  worked around a net-tools-1.60 specific problem, that does not
  happen in net-tools-2.10. It is more harmful than useful, as it
  can hide real problems. (bsc#430864#c15,
  https://github.com/ecki/net-tools/issues/32#issuecomment-3265471116).</changelog>
</package>
<package pkgid="8b67693d12743063669c9216c29dfa6aa8f3769f7ad5a459559e35afc23698206e3f1b03035980f93ea0d5fd3df77a3590ccaeb75d7f0b0da42f5f46a2edb855" name="netavark" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="160000.2.2"/>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * Update release notes for 1.11.0
  * update netlink-packet-route to 0.20.0
  * run cargo update
  * fix: remove extra / in make install and uninstall
  * chore(deps): update dependency containers/automation_images to v20240529
  * fix(deps): update rust crate nix to 0.29.0
  * fix(deps): update rust crate nispor to 1.2.19
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate anyhow to 1.0.85
  * [skip-ci] Packit: do not create dup jobs on podman-next
  * fix(deps): update rust crate anyhow to 1.0.84
  * [skip-ci] RPM: use default __cargo macro across all envs
  * [skip-ci] RPM: switch default firewall to nftables on EL10+
  * chore(deps): update dependency containers/automation_images to v20240513
  * Add conditional compilation of default firewall driver
  * fix(deps): update rust crate serde_json to 1.0.117
  * fix new clippy warnings
  * Update CI image to fedora 40
  * fix ncat sctp tests
  * fix(deps): update rust crate anyhow to 1.0.83
  * build(deps): bump h2 from 0.3.25 to 0.3.26
  * [skip-ci] Packit: distinct `-rhel` packages value
  * [skip-ci] Packit: enable c10s downstream sync
  * fix(deps): update rust crate libc to 0.2.154
  * fix(deps): update rust crate ipnet to 2.9.0
  * fix(deps): update rust crate tower to 0.4.13
  * fix(deps): update rust crate tokio-stream to 0.1.15
  * fix(deps): update rust crate prost to 0.12.4
  * fix(deps): update rust crate iptables to 0.5.1
  * [skip-ci] Packit: remove el8 jobs
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate serde to 1.0.199
  * Add suffix to Aardvark internal network filenames
  * fix port forward with strict RPF and multi networks
  * renovate: stop rebasing PRs automatically
  * chore(deps): update rust crate chrono to 0.4.38
  * fix(deps): update rust crate serde_json to 1.0.116
  * fix(deps): update rust crate netlink-sys to 0.8.6
  * nftables: only dump netavark table rules
  * update nftables to 0.4
  * fix aardvark-dns netns check
  * fix(deps): update rust crate tokio to 1.37
  * fix(deps): update rust crate netlink-packet-route to 0.19.0
  * Update to nix-0.28.0
  * fix(deps): update rust crate mozim to 0.2.3
  * fix(deps): update rust crate nispor to 1.2.18
  * Update chrono
  * fix(deps): update rust crate serde_json to 1.0.115
  * build(deps): bump mio from 0.8.9 to 0.8.11
  * [skip-ci] rpm: aardvark-dns is a hard dep across the board
  * Update Rust crate env_logger to 0.11.3
  * Update Rust crate serde to 1.0.197
  * Update Rust crate tempfile to 3.10.1
  * Update Rust crate log to 0.4.21
  * Update Rust crate zbus to 3.15.2
  * Update Rust crate serde_json to 1.0.114
  * Update Rust crate env_logger to 0.11.2
  * Update Rust crate chrono to 0.4.34
  * Update Rust crate tonic-build to 0.11
  * Update Rust crate tonic to 0.11
  * fix netavark update to not start a new aardvark-dns
  * Update Rust crate tempfile to 3.10.0
  * Update Rust crate zbus to 3.15.0
  * Update Rust crate tokio to 1.36
  * Update Rust crate chrono to 0.4.33
  * Do not perform network namespace detection on AV update
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Update Rust crate serde_json to 1.0.113
  * Update Rust crate serde_json to 1.0.112
  * Update Rust crate env_logger to 0.11.1
  * update README with nftables support
  * Bump to v1.11.0-dev
  * perf-netavark: accept fw driver as argument
  * perf-netavark: fix missing --config arg</changelog>
  <changelog author="danish.prakash@suse.com" date="1723032000">- Update to version 1.12.1:
  * Release v1.12.1
  * Update release notes for v1.12.1
  * Change nv cargo categories
  * Bump to 1.13.0-dev
  * Release 1.12
  * Release Notes for 1.12
  * run cargo update
  * rpm: use nftables as default for f41
  * fix(deps): update rust crate serde_json to 1.0.121
  * fix(deps): update rust crate tokio to 1.39.2
  * aardvark-dns: trim whitespaces from error text
  * fix(deps): update rust crate env_logger to 0.11.5
  * [skip-ci] RPM: handle iptables/nftables dependencies
  * fix aardvark-dns error handling
  * fix(deps): update rust crate tokio to 1.39.1
  * fix(deps): update rust crate env_logger to 0.11.4
  * fix(deps): update rust crate tokio to 1.38.1
  * update mozim to 0.2.4 (bsc#1236567)
  * fix(deps): update rust crate serde_json to 1.0.120
  * netavark: dhcp_proxy: use dns servers from dhcp lease
  * fix(deps): update rust crate serde_json to 1.0.119
  * fix(deps): update rust crate netlink-packet-route to 0.20.1
  * fix(deps): update rust crate log to 0.4.22
  * Fix Epoch so upgrade path is preserved from Fedora/RHEL.
  * test: add macvlan metric test
  * fix(deps): update rust crate serde_json to 1.0.118
  * fix(deps): update rust crate url to 2.5.2
  * fix(deps): update rust crate prost to 0.12.6
  * fix(deps): update rust crate url to 2.5.1
  * fix(deps): update rust crate iptables to 0.5.2
  * [CI:BUILD] rpm: Update Rust macro usage
  * fix(deps): update rust crate nftables to 0.4.1
  * fix(deps): update rust crate tokio to 1.38.0
  * Bump to 1.12.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1725969600">- Update to version 1.12.2:
  * Release v1.12.2
  * Release notes for 1.12.2
  * fix new rust 1.80 lint issues
  * silence new rust 1.80 warnings
  * aardvark: on start failure delete entries again
  * iptables: make dns rules cover tcp as well
  * nftables: make dns rules cover tcp as well</changelog>
  <changelog author="danish.prakash@suse.com" date="1730289600">- Update to version 1.13.0:
  * Release v1.13.0
  * Updates release notes for v1.13.0
  * run cargo update
  * fix(deps): update rust crate hyper-util to 0.1.10
  * [skip-ci] Packit: Remove epel targets
  * fix(deps): update rust crate nftables to 0.5.0
  * fix(deps): update rust crate anyhow to 1.0.91
  * fix(deps): update rust crate tokio to 1.41.0
  * fix(deps): update rust crate anyhow to 1.0.90
  * Updated to zbus4
  * chore(deps): update dependency containers/automation_images to v20241010
  * test-dhcp: fix NOP test
  * fix new lint errors with rust 1.81
  * fix(deps): update rust crate clap to ~4.5.20
  * contrib/container_images: remove no longer used images
  * cirrus: check for msrv build
  * add new rust image to check for MSRV
  * define a MSRV policy
  * [skip-ci] Packit: constrain koji and bodhi to the fedora package
  * chore(deps): update rust crate once_cell to 1.20.2
  * fix(deps): update rust-futures monorepo to 0.3.31
  * OWNERS file audit and update
  * update tonic and prost dependencies
  * update tower to v0.5.1
  * fix(deps): update rust crate sysctl to 0.6.0
  * fix(deps): update rust crate netlink-packet-route to 0.21.0
  * chore(deps): update rust crate tempfile to 3.13.0
  * chore(deps): update rust crate once_cell to 1.20.1
  * fix(deps): update rust crate nispor to 1.2.21
  * fix(deps): update rust crate anyhow to 1.0.89
  * nftables: add dns dnat rule first
  * iptables: add dns dnat rule first
  * fix(deps): update rust crate anyhow to 1.0.88
  * nft: remove port forwarding rules correctly
  * fix(deps): update rust crate tokio-stream to 0.1.16
  * nft: do not parse localhost string ip
  * nft: use append() over push() where possible
  * Packit: add sidetag to release with aardvark-dns
  * fix(deps): update rust crate tokio to 1.40.0
  * fix(deps): update rust crate libc to 0.2.157
  * fix(deps): update rust crate tokio to 1.39.3
  * fix(deps): update rust crate libc to 0.2.156
  * aardvark: on start failure delete entries again
  * iptables: make dns rules cover tcp as well
  * nftables: make dns rules cover tcp as well
  * fix(deps): update rust crate serde_json to 1.0.123
  * remove superfluous formatters from debug stmt
  * chore(deps): update rust crate tempfile to 3.12.0
  * fix new rust 1.80 lint issues
  * silence new rust 1.80 warnings
  * chore(deps): update rust crate tempfile to 3.11.0
  * fix(deps): update rust crate serde_json to 1.0.122
  * Bumping main back to v1.13.0-dev for development</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1730462400">- Set default firewall driver based on the project configuration (bsc#1231424)
  * Require correct dependencies
  * Add netavark-iptables.conf and netavark-nftables.conf</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1732708800">- Fix source definition for netavark-iptables.conf and netavark-nftables.conf</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1733832000">- Update to version 1.13.1:
  * Release v1.13.1
  * Release notes for v1.13.1
  * setup: on av errors cleanup again
  * nftables: add daddr match to port forward jump rule</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1739275200">- Update to version 1.14.0:
  * Release v1.14.0
  * release notes for v1.14.0
  * update release notes from v1.13.1
  * run cargo update
  * Finalize firewalld port forwarding support
  * chore(deps): update rust crate once_cell to 1.20.3
  * fix(deps): update rust crate rand to 0.9.0
  * Add handling for firewalld's StrictForwardPorts setting
  * fix lint issues wirh rust 1.84
  * chore(deps): update dependency containers/automation_images to v20250131
  * chore(deps): update rust crate tempfile to 3.16.0
  * rename macvlan_dhcp.rs to dhcp.rs
  * bridge: only allow dhcp with unmanaged mode
  * bridge: support DHCP ipam driver
  * fix(deps): update rust crate ipnet to 2.11.0
  * fix(deps): update rust crate serde_json to 1.0.136
  * fix(deps): update rust crate log to 0.4.24
  * bridge: add vlan support
  * fix(deps): update rust crate tokio to 1.43.0
  * fix(deps): update rust crate serde_json to 1.0.135
  * New VM Images
  * fix(deps): update rust crate clap to ~4.5.23
  * chore(deps): update rust crate tempfile to 3.15.0
  * fix(deps): update rust crate nispor to 1.2.22
  * fix(deps): update rust crate serde_json to 1.0.134
  * fix(deps): update rust crate env_logger to 0.11.6
  * Add container hostname to DHCP requests and use container id as client id
  * fix(deps): update rust crate mozim to 0.2.5
  * generate protobuf in OUT_DIR
  * fix(deps): update rust crate tower to 0.5.2
  * Cargo.lock: bump some versions
  * run cargo update
  * cargo: set rust-version
  * fix new rust 1.83 lint errors
  * OWNERS: remove edsantiago
  * setup: on av errors cleanup again
  * nftables: add daddr match to port forward jump rule
  * network: bridge: don't change forwarding sysctl for internal bridges
  * network: bridge: add support for unmanaged mode
  * test-dhcp: remove deprecated ifconfig/brctl commands
  * fix new rust 1.82 lint errors
  * update ci images
  * fix(deps): update rust crate serde_json to 1.0.133
  * network: bridge: add support for host_interface_name option
  * network: add support for network-specific options
  * fix(deps): update rust crate ipnet to 2.10.1
  * chore(deps): update rust crate tempfile to 3.14.0
  * fix(deps): update rust crate tokio to 1.41.1
  * fix(deps): update rust crate anyhow to 1.0.93
  * fix(deps): update rust crate url to 2.5.3
  * [skip-ci] RPM: cleanup changelog conditionals
  * fix(deps): update rust crate anyhow to 1.0.92
  * Bump to 1.14.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1739534400">- Remove netavark-1.14.0.obscpio checked-in mistakenly.
- Use recommended way to require latest rust—require cargo.</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1742385600">- Update to version 1.14.1:
  * Release v1.14.1
  * Release notes for v1.14.0
  * Fix detect of Firewalld's StrictForwardPorts property
  * test/001-basic: Make commit test optional
  * cirrus: do not build debug bins
  * Makefile: do not rebuild if nothing changed
  * Makefile: uninstall netavark-firewalld-reload.service
  * docs/Makefile: several fixes
  * Makefile: build docs by default
  * Makefile: do not build twice</changelog>
</package>
<package pkgid="c9cd8a1778b1c688a7e0aef31aad5dd5afc5b58dfd50ddee7aaaae09908eba3961c6386a3ceb0c91f7dd683ce72b694d54b8b779d6b658277285f5ac1fd61a98" name="netcat-openbsd" arch="x86_64">
  <version epoch="0" ver="1.229" rel="160000.2.2"/>
  <changelog author="crrodriguez@opensuse.org" date="1389960000">- drop dependency on glib, strlcpy can be implemented with
  snprintf with glibc/linux
- drop "quilt" from buildrequires, no longer used.
- Use fvisibiliy=hidden to build, this is a program not
  a library and no symbols should be exported.
- modified patches:
  * glib-strlcpy.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop all patches that were never upstreamed:
  * connect-timeout.patch
  * dccp.patch
  * gcc-warnings.patch
  * getservbyname.patch
  * glib-strlcpy.patch
  * help-version-exit.patch
  * nc-1.84-udp_stop.patch
  * netcat-info.patch
  * netcat-openbsd-debian.patch
  * netcat-openbsd-examples.patch
  * netcat-openbsd-openbsd-compat.patch
  * no-strtonum.patch
  * pollhup.patch
  * quit-timer.patch
  * reuseaddr.patch
  * send-crlf.patch
  * silence-z.patch
  * socks-b64-prototype.patch
  * udp-scan-timeout.patch
  * verbose-message-to-stderr.patch
  * verbose-numeric-port.patch
- Switch to debian package to not waste resources on doing exactly
  the same.
- Switches URL for debian package
- Apply patches already prepared for debian package
  * port-to-linux-with-libsd.patch
  * compile-without-TLS-support.patch
  * connect-timeout.patch
  * get-sev-by-name.patch
  * send-crlf.patch
  * quit-timer.patch
  * udp-scan-timeout.patch
  * verbose-numeric-port.patch
  * dccp-support.patch
  * serialized-handling-multiple-clients.patch
  * set-TCP-MD5SIG-correctly-for-client-connections.patch
  * misc-failures-and-features.patch
- Do not use hand provided CMakeLists.txt but rely on upstream makefile</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Update to 1.195 release matching with debian
- Added new patches:
  * broadcast-support.patch
  * build-without-TLS-support.patch
  * destination-port-list.patch
  * use-flags-to-specify-listen-address.patch
- Refreshed patches:
  * connect-timeout.patch
  * dccp-support.patch
  * get-sev-by-name.patch
  * misc-failures-and-features.patch
  * port-to-linux-with-libsd.patch
  * quit-timer.patch
  * send-crlf.patch
  * serialized-handling-multiple-clients.patch
  * set-TCP-MD5SIG-correctly-for-client-connections.patch
  * udp-scan-timeout.patch
  * verbose-numeric-port.patch
- Drop patch compile-without-TLS-support.patch, renamed</changelog>
  <changelog author="tchvatal@suse.com" date="1568030400">- Update to 1.203 matching debian
- Remove patch verbose-numeric-port.patch
- Refresh patches:
  * broadcast-support.patch
  * build-without-TLS-support.patch
  * connect-timeout.patch
  * dccp-support.patch
  * destination-port-list.patch
  * get-sev-by-name.patch
  * misc-failures-and-features.patch
  * port-to-linux-with-libsd.patch
  * quit-timer.patch
  * send-crlf.patch
  * serialized-handling-multiple-clients.patch
  * set-TCP-MD5SIG-correctly-for-client-connections.patch
  * udp-scan-timeout.patch
  * use-flags-to-specify-listen-address.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1607342400">- Add port-select-on-connect.patch: if -s is given but not -p
  do not select port at bind() but at connect() time.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1608033600">- enable-udp-ip_recverr.patch: Enable IP_RECVERR on UDP sockets
  to match *bsd behaviour and avoid long timeouts if an error
  ocurrs.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1608033601">- Build with hidden visibility since no symbols should be exported</changelog>
  <changelog author="psimons@suse.com" date="1637582400">- Fix download URL. Debian has purged older versions from their
  servers.</changelog>
  <changelog author="hsk17@mail.de" date="1744113600">- add -std=gnu99 to CFLAGS to fix gcc15 compile time errors</changelog>
  <changelog author="psimons@suse.com" date="1749038400">- Update netcat to upstream version 1.229.
  * Fix build failure with GCC-15.
  * In UDP mode, do not test the connection (by writing "XXX" junk)
    when ‘-z’ is unset and the standard input is not a TTY.
  * rsync: Replace ‘-v’ flag with ‘-P’.
  * udp-scan-timeout.patch: Call connection_info() and udptest()
    call when ‘-z’ flag is set. This is the upstream behavior.
  * Add support for abstract namespace sockets in the AF_UNIX family.
  * Make getnameinfo(3) errors non-fatal in report_sock():
    report_sock() is used to show the peer's address/name and port
    when the '-v' flag is set. Reverse resolution errors need not
    be fatal.
  * Fix TCP MD5 signature support. The feature now requires the
    TCP_MD5SIG_EXT socket option, available since Linux 4.13.
  * Make -q0 quit immediately also with UDP sockets.
  * Re-enable specifying client socket for UNIX-domain datagram
    sockets. Regression introduced in version 1.187.
- Added "abstract-unix-domain-socket.patch": when using '-U' to
  connect() or bind() to a UNIX domain socket, if the address
  (path) starts with "@", it is read as an abstract namespace
  socket.
- Added "make-getnameinfo-errors-nonfatal-in-report_sock.patch":
  report_sock() is used to show the peer's address/name and port
  when the ‘-v’ flag is set. Reverse resolution errors need not be
  fatal.
- Renamed the misspelled "port-to-linux-with-libsd.patch" to
  "port-to-linux-with-libbsd.patch".
- Refreshed patches:
  * broadcast-support.patch
  * build-without-TLS-support.patch
  * connect-timeout.patch
  * dccp-support.patch
  * destination-port-list.patch
  * enable-udp-ip_recverr.patch
  * get-sev-by-name.patch
  * misc-failures-and-features.patch
  * port-select-on-connect.patch
  * port-to-linux-with-libbsd.patch
  * quit-timer.patch
  * send-crlf.patch
  * serialized-handling-multiple-clients.patch
  * set-TCP-MD5SIG-correctly-for-client-connections.patch
  * udp-scan-timeout.patch
  * use-flags-to-specify-listen-address.patch</changelog>
</package>
<package pkgid="5dbf0e73fa39f40365cfd251c66a59f758a5a8f4ffb77e13601741ee0a4dafae26028bb3a36677f8f9a9ee85e7bb25e319441278fc458e5449bf2768ca274a8b" name="netcfg" arch="noarch">
  <version epoch="0" ver="11.6" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1580904000">- Require libnss_usrfiles2 for /usr/etc [bnc#1162666]</changelog>
  <changelog author="mcalabkova@suse.com" date="1589803200">- Create /etc/exports.d directory (boo#1094328)</changelog>
  <changelog author="jsegitz@suse.com" date="1613649600">- services-create.pl: Switch to https (bsc#1182395)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626696000">- Add localhost.localdomain fallback hostname used by NetworkManager
  (bsc#1177835).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665489600">- Remove hosts.allow and hosts.deny config files as they are only
  used by tcpd, which is not installed by default, bsc#1099755</changelog>
  <changelog author="kukuk@suse.com" date="1695729600">- Remove hosts.equiv and hosts.lpd, the tools using them got
  dropped long ago.</changelog>
  <changelog author="kukuk@suse.com" date="1696420800">- Remove ftpusers, none of our ftp servers uses that anymore
- Remove defaultdomain, NIS got dropped</changelog>
  <changelog author="kukuk@suse.com" date="1700481600">- Remove empty netgroup example file from /etc [jsc#PED-240].
  NIS, the main consumer, got already dropped.
- Remove empty ethers example file, /usr/etc should not contain
  examples, for the format there is the manual page, does not
  support IPv6.</changelog>
  <changelog author="kukuk@suse.com" date="1700568000">- Fix syntax of localhost entries in hosts [bsc#1217355]</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1747915200">- Re-add /etc/services with a warning saying it was moved to
  /usr/etc/services [jsc#PED-12191].</changelog>
</package>
<package pkgid="eb45443668c712ee8d8c2bdad49d6216883978029974dd39485f307ca9be46c3a1e754c3b3fba8b082dd87fff7c4e6851a1b6e900bd0ad8dd5ba9600362833f5" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="160000.2.2"/>
  <changelog author="nfbrown@suse.com" date="1680004800">- Add 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0008-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be sed in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="pvorel@suse.cz" date="1681992000">- Update to version 2.6.3
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.3/2.6.3-Changelog
- Remove patches from this release:
  - 0006-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  - 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  - 0008-nfsd.man-fix-typo-in-section-on-scope.patch
- Remove systemd/50-nfs.conf (was removed in upstream in d8d29f85)
  and the realted patch (bsc#1200710).
  0005-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch.
- New file /usr/lib/udev/rules.d/60-nfs.rules (which replaced in upstream
  systemd/50-nfs.conf in 9466df03).
- Add fsidd:
  - /usr/lib/systemd/system/fsidd.service
  - /usr/lib/udev/rules.d/60-nfs.rules
  - /usr/sbin/fsidd</changelog>
  <changelog author="nfbrown@suse.com" date="1697457600">- 0001-export-fix-handling-of-error-from-match_fsid.patch
  Errors from match_fsid() shouldn't be fatal.
  (bsc#1214540)</changelog>
  <changelog author="nfbrown@suse.com" date="1700049600">- Build with --enable-junction so that nfsref is built
  https://lore.kernel.org/linux-nfs/DFBBA6DD-7F22-4A38-BAA2-DBD40EB81BB9@oracle.com/</changelog>
  <changelog author="nfbrown@suse.com" date="1701777600">- Update to version 2.6.4
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.4/2.6.4-Changelog
  - includes fixes for bsc#1210997
- Removed patchs from this release
  - 0001-export-fix-handling-of-error-from-match_fsid.patch
- Added some upstream patches
  - 0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
  - 0002-conffile-don-t-report-error-from-conf_init_file.patch
  - 0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
  - 0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
  These fix minor bugs and allow config files to be in /usr/etc.
  So also move config files to /usr/etc and create directories
  foo.conf.d for each config file, so other config file can easily
  be addded.
  (boo#1216740)</changelog>
  <changelog author="nfbrown@suse.com" date="1713787200">- nfs-utils.spec: Provide nfsidmap as well as obsoleting it.
  (bsc#1222947)</changelog>
  <changelog author="dmueller@suse.com" date="1724155200">- add 0001-gssd-revert-commit-a5f3b7ccb01c.patch,
  0002-gssd-revert-commit-513630d720bd.patch,
  0003-gssd-switch-to-using-rpc_gss_seccreate.patch,
  0004-gssd-handle-KRB5_AP_ERR_BAD_INTEGRITY-for-machine-cr.patch,
  0005-gssd-handle-KRB5_AP_ERR_BAD_INTEGRITY-for-user-crede.patch,
  0006-configure-check-for-rpc_gss_seccreate.patch: fixes for
  libtirpc 1.3.5</changelog>
  <changelog author="pvorel@suse.cz" date="1730203200">- Update to version 2.8.1
  - https://lore.kernel.org/linux-nfs/4a86eea3-973e-4535-8aa5-f3b8b5f7934d@redhat.com/
  - https://kernel.org/pub/linux/utils/nfs-utils/2.8.1/2.8.1-Changelog
  - Add new binary nfsdctl
  - The default number of nfsd threads is now 16 instead of 8
- Removed patchs from previous releases
  - 0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
  - 0002-conffile-don-t-report-error-from-conf_init_file.patch
  - 0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
  - 0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
  - 0001-gssd-revert-commit-a5f3b7ccb01c.patch
  - 0002-gssd-revert-commit-513630d720bd.patch
  - 0003-gssd-switch-to-using-rpc_gss_seccreate.patch
  - 0004-gssd-handle-KRB5_AP_ERR_BAD_INTEGRITY-for-machine-cr.patch
  - 0005-gssd-handle-KRB5_AP_ERR_BAD_INTEGRITY-for-user-crede.patch
  - 0006-configure-check-for-rpc_gss_seccreate.patch
- Turn nfs-utils-1.0.7-bind-syntax.patch to git patch (bug reference,
  easier to refresh via git, likely it can be now removed)
- Add BuildRequires libnl-3.0, readline</changelog>
  <changelog author="william.brown@suse.com" date="1733918400">- Require system-user-nobody for nfs-client as the statd user relies
  on `nogroup` from this package</changelog>
  <changelog author="dmueller@suse.com" date="1739016000">- update to 2.8.2:
  * exports: Fix referrals when --enable-junction=no
  * nfsidmap(v2): Add guards around [nfsidmap] usages of [sysconf].
  * libnsm(v2): fix the safer atomic filenames fix
  * libnsm: fix the safer atomic filenames fix
  * nfsd: dump default number of threads to 16
  * autoconf: don't build nfsdcltrack by default
  * nfs(5): Update rsize/wsize options
  * nfsdctl: clarify when versions can be set on the man page
  * nfsdctl: fix up the help text in version_usage()
  * libnsm: safer atomic filenames
  * nfs-utils: fixup statd testing simulator host arg
  * mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation</changelog>
</package>
<package pkgid="5d25d9d4054b28b0a8ad3ea7c419c394c6f945a388d7bb3efb9141ef868c0e617b285872b190bec1db37f5bba5caf9b2e87a41596825615989b6a16ca693d31f" name="nftables" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 1.0.8
  * Support for setting meta and ct mark from other fields in
    rules, e.g. set meta mark to ip dscp header field.
  * Enhacements for -o/--optimize to deal with NAT statements, to
    compact masquerade statements.
  * Support for stateful statements in anonymous maps, such as
    counters.
  * Support for resetting stateful expressions in sets, maps and
    elements, e.g. counters.
  * broute support to short-circuit bridge logic from the bridge
    prerouting hook and pass up packets to the local IP stack.
  * JSON support for table and chain comments.
- Added 0001-Revert-py-replace-distutils-with-setuptools.patch</changelog>
  <changelog author="jengelh@inai.de" date="1697716800">- Update to release 1.0.9
  * Custom conntrack timeouts can use time specification with
    units other than seconds.
  * Allow combination of dnat with numgen.
  * Allow for using constants as key in dynamic sets.
  * Support for matching on the target address of a IPv6 neighbour
    solicitation/advertisement.
  * Restore bitwise operations in combination with maps, e.g. jump
    to chain depending on bitwise operation on packet mark.
  * Fix crash with log prefix longer that 127 bytes.
- Drop merged 0001-Revert-py-replace-distutils-with-setuptools.patch</changelog>
  <changelog author="code@bnavigator.de" date="1704283200">- Fix the python bindings subpackages
  * The PEP517 python build requires setuptools
  * Actually use the rpm subpackage definition
  * The version is actually python3dist(nftables) = 0.1
  * is noarch and requires libnftables1 through dlopen, tell
    rpmlint
  * remove unused shebang</changelog>
  <changelog author="dmueller@suse.com" date="1704369600">- buildrequire setuptools explicitly as pip drops the dependency</changelog>
  <changelog author="jengelh@inai.de" date="1721217600">- Update to release 1.1.0
  * Restore compatibility set element dump with &lt;= 0.9.8
  * Disallow empty interface names
  * Restore rule replace command
  * Search for group, rt_mark, rt_realms at
    /etc/iproute2, /usr/share/iproute2
  * Resolve some timezone issues
  * Support for variables in map expressions
  * VLAN support</changelog>
  <changelog author="jengelh@inai.de" date="1727956800">- Update to release 1.1.1
  * Reduce netlink cache dependencies to speed up incremental
    updates.
  * Allow zero burst in byte ratelimiter expression.
  * Fix double-free when users call nft_ctx_clear_vars() followed
    by nft_ctx_free().
  * Document that the tproxy statement is non-terminal (unlike in
    iptables). This allows for tproxy+log and tproxy+mark combos,
    see man nft(8) for details.
  * Add egress support for the `list hooks` subcommand.</changelog>
  <changelog author="jengelh@inai.de" date="1741089600">- Add 0001-tools-add-a-systemd-unit-for-static-rulesets.patch
  [boo#1237277]</changelog>
  <changelog author="jengelh@inai.de" date="1741435200">- Update 0001-tools-add-a-systemd-unit-for-static-rulesets.patch
  from new submission.</changelog>
  <changelog author="jengelh@inai.de" date="1744632000">- Update to release 1.1.2
  * Allow for expressing protocol dependency on sets.
  * Support for more advanced bitwise operations with statements.
  * Set element auto-merge now skips elements with
    timeout/expiration.
  * Memory footprint reduction for set elements.
  * Updated `nft monitor` to report flowtable events.
  * Support for merging bitmask matching in set/map with
  - o/--optimize.
  * Improved MPTCP support with symbol table for subtypes.</changelog>
  <changelog author="jengelh@inai.de" date="1745323200">- Update to release 1.1.3
  * Fix incorrect bytecode for vlan pcp mangling from netdev family
    chains such as ingress/egress: `... vlan pcp set 6 counter`
  * Fix bogus element in large concatenated set ranges, leading to:
    ``16777216 . 00:11:22:33:44:55 . 10.1.2.3 comment "123"``
    instead of:
    ``"lo" . 00:11:22:33:44:55 . 10.1.2.3 comment "123"``
  * Restore set auto-merge feature with timeouts, disabled in the
    previous v1.1.2 release.</changelog>
</package>
<package pkgid="fa50433614e5ac7873b5187a0b035c24b49243dbb9c96c0eab7e4d8ac901effb689e7bd243680fde6d4e77e1e06b3ed3a1d4d3f7911c7988b757ad0a97b8ede6" name="nss-mdns" arch="x86_64">
  <version epoch="0" ver="0.15.1" rel="160000.3.2"/>
  <changelog author="vuntz@novell.com" date="1241179200">- Remove AutoReqProv: it's default now.
- Also fix a typo in the description.</changelog>
  <changelog author="jengelh@medozas.de" date="1260878400">- Add baselibs.conf as a source</changelog>
  <changelog author="vuntz@opensuse.org" date="1342008000">- Add nss-mdns-config script as a source, and install it in
  /usr/sbin: this script can be used to enable/disable mdns in
  /etc/nsswitch.conf (-4/-6 can be used to restrict
  enabling/disabling to IPv4/IPv6).
- Change %post/%preun scriptlets to use new nss-mdns-config script
  instead of custom perl-fu.
- Do not restrict mdns support in /etc/nsswitch.conf to IPv4: just
  pass --enable to nss-mdns-config in %post. Fix bnc#710231.
- Only call nss-mdns-config in %post on first install, to avoid
  overwriting changes done by users. Fix nss-mdns side of
  bnc#729796.
- Do not call sed to change /etc/nsswitch.conf to remove services
  not provided by nss-mdns anymore: when we need this, we'll be
  able to integrate this in nss-mdns-config.</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="ledest@gmail.com" date="1413633600">- Fix bashisms in nss-mdns-config.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553774400">- Update to version 0.14.1:
  + No code changes.
  + Fix unit tests to properly work on s390x.
- Changes from version 0.14.0:
  + Fix -Wformat-truncation problem during reading of the allow
    file.
- Changes from version 0.13.2:
  + No code changes.
  + Change how ./configure --enable/disable-tests works:
  - --enable-tests: tests are enabled and will fail if
    dependencies are not found.
  - --disable-tests: tests are not enabled and will not be built
    even if dependencies are found.
  - no flag given: tests are conditionally enabled if
    dependencies are found.
- Changes from version 0.13.1:
  + Very minor code changes (should result in no binary changes).
  + Reformat source to 80 columns.
  + Improve configure options to allow disabling tests even if the
    testing libraries are present.
  + Automake is now non-recursive.
  + Hardcoded paths are now exposed as configure variables.
- Changes from version 0.13:
  + Fix an old memory leak in reverse lookup.
  + Fix the broken workaround for nscd segfaults (not all clients
    would see all results).
  + Simplify buffer management.
  + More unit tests, more cleanups, and fewer gotos.
- Changes from version 0.12:
  + Fix segfault when using nscd.
  + Remove untested, unmaintained BSD support (please help out if
    you would like BSD support to return!).
- Changes from version 0.11:
  + Moved to new GitHub location, docs migrated to markdown.
  + The long-deprecated LEGACY mode is removed.
  + The long-deprecated HONOUR_SEARCH_DOMAINS option is removed.
  + Unit tests are now included, with make check.
  + nss-mdns now implements standard heuristics for detecting
    .local unicast resolution and will automatically disable
    resolution when a local server responds to .local requests.
  + _nss_mdns_gethostbyname3_r and _nss_mdns_gethostbyname4_r are
    now implemented.
  + Full dual-stack IPv4/IPv6 support is implemented.
- Run spec-cleaner, modernize spec.
- Update URL and Source to new upstream home.
- Drop unaligned.diff: Fixed upstream.
- Add pkgconfig(check) BuildRequires and make_check macro, run
  buildtime tests.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Move libraries into the standard dir (/usr/lib*).
  nss_winbind already lives there, which I take as an indicator
  this move will work.</changelog>
  <changelog author="schwab@suse.de" date="1589889600">- nss-mdns-config: Use /usr/etc/nsswitch.conf as input if
  /etc/nsswitch.conf doesn't exist yet</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- Update to version 0.15.1:
  + Updated README.md for clarity
  + The return of BSD support!
  + Support for `AVAHI_SOCKET` in `/run` (instead of legacy
    `/var/run`).</changelog>
</package>
<package pkgid="151c3d7feabed165b8c24c8cb1f2014abef4ad7b6c2056bede58ecb1fb1ba2e71cb9afd56e4b6bcd76ebf4c92114264b9f4b36b17236e76de7b116e130a37b75" name="numactl" arch="x86_64">
  <version epoch="0" ver="2.0.19.14.g690a72c" rel="160000.2.2"/>
  <changelog author="trenn@suse.de" date="1706616000">- Update to version 2.0.17.4.g63befa8:
  * Fix CodeQl Warn: Wrong type of arguments to formatting function
  * libnuma: Fix incorrect print and exit of numa_preferred/_many APIs
  * libnuma: Fix unexpected output
  * Fix README.md
  * Increase version number
  * Fix build badge
  * Fix README.md
  * Update README.md
  * Add configure file for release
  * Fix unused function return warning in numastat
  * fix complain() fuction print newline
  * Document that numa_police_memory may cause data races
  * Add numastat_diff from jirka-h
  * Enable v1 compatibility for unused getnodemask test
  * libnuma: Handle initialization without sysfs
  * Support empty memory nodes
  * numactl: Add --version option to print version
  * Remove obsolete numamon file
  * numactl: Use standard tab indent for print_node_cpus
  * Avoid using /proc/cpuinfo in test suite
  * numact: Add --cpu-compress option
  * Pin release workflow script to minimize risk of supply chain attacks
  * move_pages: Fix warning (missing hunk from earlier revert)
  * numastat: Remove unused functions
  * distance: Remove unused variable (NFC)
  * numademo: Adjust memcpy test bandwidth calculation
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * Refactor print_node_cpus to display CPU ranges instead of individual CPUs
  * numactl: Fix manual for --preferred and --preferred-many
  * Revert "Fix build error on riscv64 by linking libatomic"
  * Include &lt;fcntl.h&gt; instead of &lt;sys/fcntl.h&gt;
  * Fix the example usage in the numactl manual
  * Fix issue #190 about numa_exit_on_warn does not work
  * Create SECURITY.md
  * fix: fix memory leaks when run with -H
  * use mems allowed nodes to test prefer_many policy.
  * fix typo in memhog.8
  * Update move_pages.c
  * migspeed don't have to be linked against librt
  * Add MPOL_F_RELATIVE/STATIC_NODES</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707134400">- Update to version 2.0.17.8.g67984e5:
  * numastat: Print package version number instead of own.
  * numastat: Remove commented out perl code
  * Check for MPOL_PREFERRED_MANY lazily
  * libnuma: add numa_set_mempolicy_home_node API</changelog>
  <changelog author="trenn@suse.de" date="1707393600">- Update to version 2.0.18.0.g3871b1c:
  * Increase version number to 2.0.18
  * man pages: fix table include preprocessor</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="trenn@suse.de" date="1715601600">- Update to version 2.0.18.5.g4bfdcc6:
  * numactl: Add documentation for weighted interleave
  * numactl: Fix RESOURCE_LEAK in show()
  * numademo: Fix the using of the uninitialized value
  * Add `-w` and `--weighted-interleave` for weighted interleave mode
  * Fix fallback for set_mempolicy_home_node syscall</changelog>
  <changelog author="trenn@suse.de" date="1728561600">- Update to version 2.0.18.10.g6c14bd5:
  * Save and restore errno when probing for SET_PREFERRED_MANY
  * libnuma: fix nodemask allocation size for get_mempolicy
  * Update numactl.c
  * numastat: eliminate hard-coded tables
  * Don't fail build when set_mempolicy_home_node syscall is unknown
  * numactl: Add documentation for weighted interleave
  * numactl: Fix RESOURCE_LEAK in show()
  * numademo: Fix the using of the uninitialized value
  * Add `-w` and `--weighted-interleave` for weighted interleave mode
  * Fix fallback for set_mempolicy_home_node syscall</changelog>
  <changelog author="trenn@suse.de" date="1744372800">- Update to version 2.0.19.13.g63e0223:
  * libnuma.c: Introduce numa_preferred_err()
  * numactl: Add --show option support for MPOL_WEIGHTED_INTERLEAVE
  * Add numa_get_weighted_interleave_mask() API
  * libnuma: Add APIs for weighted-interleaved allocations
  * libnuma.c: Fix memleak in numa_has_home_node()
  * Replace fgrep with grep -F to fix warning
  * Make numa_available respect EPERM</changelog>
  <changelog author="trenn@suse.de" date="1750766400">- Fix Node0 does not exist (bsc#1244492)
  A 4abeee1aac20a7a2552870e0359b8df013ae9037.patch</changelog>
  <changelog author="trenn@suse.de" date="1751284800">- Update to version 2.0.19.14.g690a72c:
  * numastat command fails on LPAR which is not having node0
  Patch is now upstream:
  https://github.com/numactl/numactl/pull/246
  D    4abeee1aac20a7a2552870e0359b8df013ae9037.patch
  Patches are wrong or not needed anymore:
  https://github.com/numactl/numactl/pull/246
  D    0001-Fixed-segfault-when-no-node-could-be-found-in-sysfs-.patch
  D    numactl-clearcache-pie.patch</changelog>
  <changelog author="trenn@suse.de" date="1754308800">- bsc#1247093 bsc#1246858
  Cleanup code by reverting 2 patches and get back to old
  has_preferred_many initialization.
  This allows to call numa_set_bind_policy early again.
  A    Cleanup-No-need-to-suppress-possible-errno-anymore.patch
  A    Cleanup-move-has_preferred_many-to-numa_init-again.patch</changelog>
</package>
<package pkgid="5719d97a8af837e1eaba4595ef33bdaa0055592cf3c5d01ba1c6a1c4bef2cdbf7a624d81b25dfe528e1a052e871409c6f3ec5268b907289a655f0c27060e66f9" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.126.18_k6.12.0_160000.26" rel="160000.1.1"/>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
</package>
<package pkgid="370f253d8690d86146c8ab2bcfdfc0d37315193d974cc871ea0d6014072c0c0958c235754a7771b01c4c00fd448898990bebced43aebdd54139363beb156edee" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.11+29.g35e62868" rel="160000.1.1"/>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+4.g16c450a7:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
  <changelog author="dwagner@suse.de" date="1759752000">- Update to version 2.11+29.g35e62868:
  * nvme: add --compat flag for 'gen-tls-key' and 'check-tls-key' (bsc#1246914)
  * netapp-ontapdev: update invalid device handling (bsc#1247017)
  * netapp-smdev: update invalid device handling (bsc#1247017)
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)
  * netapp-ontapdev: update basestr headers in verbose output
  * netapp-smdev: add verbose output
  * netapp-smdev: remove redundant code
  * nvme-netapp: update err messages
  * netapp-ontapdev: fix JSON output for nsze &amp; nuse
  * netapp-ontapdev: fix fw version handling
  * netapp-ontapdev: add verbose output</changelog>
</package>
<package pkgid="ddf8f82298117f1ed535f8627f4b2a7825b61cbe69f9079b504f146fa489a77dd2c2ef0fe2cd3f1f208e49b291308a59eea97767b33658b4c560a14606ab5133" name="oath-toolkit" arch="x86_64">
  <version epoch="0" ver="2.6.11.12" rel="160000.3.2"/>
  <changelog author="schwab@suse.de" date="1533556800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="mardnh@gmx.de" date="1609243200">- Update to version 2.6.5
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.
    KEY and OTP may now be given as '-' to mean stdin, or @FILE to
    read from a particular file.  This is recommended on multi-user
    systems, since secrets as command line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.
  * Doc fixes.
- Update to version 2.6.4
  * libpskc: New --with-xmlsec-crypto-engine to hard-code crypto
    engine.  Use it like --with-xmlsec-crypto-engine=gnutls or
  - -with-xmlsec-crypto-engine=openssl if the default dynamic
    loading fails because of runtime linker search path issues.
  * oathtool --totp --verbose now prints TOTP hash mode.
  * oathtool: Hash names (e.g., SHA256) for --totp are now upper
    case.  Lower/mixed case hash names are supported for
    compatibility.
  * pam_oath: Fail gracefully for missing users.
    This allows you to incrementally add support for OATH
    authentication instead of forcing it on all users.
  * Fix libpskc memory corruption bug.
  * Fix man pages.
  * Build fixes.
- Update to version 2.6.3
  * pam_oath: Fix self-tests.
- Drop not longer needed patches:
  * 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch
  * 0003-pam_oath-assign-safe-default-to-alwaysok-config-memb.patch
  * 0002-update_gnulibs_files.patch
  * gnulib-libio.patch
- Use source verification
- Use proper source URLs</changelog>
  <changelog author="mardnh@gmx.de" date="1611144000">- Update to version 2.6.6
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.  KEY and OTP may now be given as '-' to mean
    stdin, or @FILE to read from a particular file.  This is
    recommended on multi-user systems, since secrets as command
    line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.</changelog>
  <changelog author="mardnh@gmx.de" date="1619956800">- Update to version 2.6.7
  * pam_oath: Support variables in usersfile string parameter.
    These changes introduce the ${USER} and ${HOME} placeholder
    values for the usersfile string in the pam_oath configuration
    file. The placeholder values allow the user credentials file
    to be stored in a file path that is relative to the user, and
    mimics similar behavior found in google-authenticator-libpam.
    The motivation for these changes is to allow for
    non-privileged processes to use pam_oath (e.g., for 2FA with
    xscreensaver). Non-privileged and non-suid programs are
    unable to use pam_oath. These changes are a proposed
    alternative to a suid helper binary as well.
  * doc: Fix project URL in man pages.
  * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config.
  * build: Modernize autotools usage.
    Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE
    to make rebuilding from source more safe with future automake
    versions.
  * Updated gnulib files.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- url -&gt; https</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659441600">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="mardnh@gmx.de" date="1688904000">- Update to version 2.6.8
  * libpskc: Fixes for recent libxmlsec releases.
  * pam_oath: Provide fallback pam_modutil_getpwnam implementation.
  * pam_oath: Don't fail authentication when pam_modutil_getpwnam
  doesn't ** know the user when usersfile don't include ${USER}
  or ${HOME}.
  * pam_oath: Self-test improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.6.11
  * liboath: Handle invalid base32 encoded secrets.  Fixes: #41.
  * Various build fixes including updated gnulib files.
  * Improve compatibility with recent libxmlsec.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726228800">- Fix security issue CVE-2024-47191 by adding
  0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch .
- Add patch to implement new null_usersfile_okay argument
  42-null_usersfile_okay.patch .
- Makes this version 2.6.11.12 to be able to depend on it.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1729080000">- Update 0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch
  with bsc#1231699 improvements for security fix CVE-2024-47191</changelog>
</package>
<package pkgid="b9067359e3bcba3789121ae90e49f841962355074b8ff9c27f66c96ac4c6c24c39e8d371634e8e91613bf7e85e0850f243387d52a52b2bcd4c25a157d4ebf19d" name="oath-toolkit-xml" arch="noarch">
  <version epoch="0" ver="2.6.11.12" rel="160000.3.2"/>
  <changelog author="schwab@suse.de" date="1533556800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="mardnh@gmx.de" date="1609243200">- Update to version 2.6.5
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.
    KEY and OTP may now be given as '-' to mean stdin, or @FILE to
    read from a particular file.  This is recommended on multi-user
    systems, since secrets as command line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.
  * Doc fixes.
- Update to version 2.6.4
  * libpskc: New --with-xmlsec-crypto-engine to hard-code crypto
    engine.  Use it like --with-xmlsec-crypto-engine=gnutls or
  - -with-xmlsec-crypto-engine=openssl if the default dynamic
    loading fails because of runtime linker search path issues.
  * oathtool --totp --verbose now prints TOTP hash mode.
  * oathtool: Hash names (e.g., SHA256) for --totp are now upper
    case.  Lower/mixed case hash names are supported for
    compatibility.
  * pam_oath: Fail gracefully for missing users.
    This allows you to incrementally add support for OATH
    authentication instead of forcing it on all users.
  * Fix libpskc memory corruption bug.
  * Fix man pages.
  * Build fixes.
- Update to version 2.6.3
  * pam_oath: Fix self-tests.
- Drop not longer needed patches:
  * 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch
  * 0003-pam_oath-assign-safe-default-to-alwaysok-config-memb.patch
  * 0002-update_gnulibs_files.patch
  * gnulib-libio.patch
- Use source verification
- Use proper source URLs</changelog>
  <changelog author="mardnh@gmx.de" date="1611144000">- Update to version 2.6.6
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.  KEY and OTP may now be given as '-' to mean
    stdin, or @FILE to read from a particular file.  This is
    recommended on multi-user systems, since secrets as command
    line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.</changelog>
  <changelog author="mardnh@gmx.de" date="1619956800">- Update to version 2.6.7
  * pam_oath: Support variables in usersfile string parameter.
    These changes introduce the ${USER} and ${HOME} placeholder
    values for the usersfile string in the pam_oath configuration
    file. The placeholder values allow the user credentials file
    to be stored in a file path that is relative to the user, and
    mimics similar behavior found in google-authenticator-libpam.
    The motivation for these changes is to allow for
    non-privileged processes to use pam_oath (e.g., for 2FA with
    xscreensaver). Non-privileged and non-suid programs are
    unable to use pam_oath. These changes are a proposed
    alternative to a suid helper binary as well.
  * doc: Fix project URL in man pages.
  * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config.
  * build: Modernize autotools usage.
    Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE
    to make rebuilding from source more safe with future automake
    versions.
  * Updated gnulib files.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- url -&gt; https</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659441600">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="mardnh@gmx.de" date="1688904000">- Update to version 2.6.8
  * libpskc: Fixes for recent libxmlsec releases.
  * pam_oath: Provide fallback pam_modutil_getpwnam implementation.
  * pam_oath: Don't fail authentication when pam_modutil_getpwnam
  doesn't ** know the user when usersfile don't include ${USER}
  or ${HOME}.
  * pam_oath: Self-test improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.6.11
  * liboath: Handle invalid base32 encoded secrets.  Fixes: #41.
  * Various build fixes including updated gnulib files.
  * Improve compatibility with recent libxmlsec.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726228800">- Fix security issue CVE-2024-47191 by adding
  0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch .
- Add patch to implement new null_usersfile_okay argument
  42-null_usersfile_okay.patch .
- Makes this version 2.6.11.12 to be able to depend on it.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1729080000">- Update 0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch
  with bsc#1231699 improvements for security fix CVE-2024-47191</changelog>
</package>
<package pkgid="72596accb0b703d3548dd953b4befcbbd89cc94707d8edf3545b199e0b24e8687ddf1b34d24340d2e324abde57cc8301c7cc0454fa904ff56d3401d8a7abc7c8" name="open-iscsi" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="160000.2.2"/>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1703073600">- Updated to latest upstream: two small changes, with no known
  functional changes:
  * Incorrect documentation for `iscsiadm -m session` print level
    (upstream issue #432)
  * Stop using deprecated inet_aton and inet_ntoa (upstream issue
    [#435])
- Also, stopped using pre-prepared tarballs for the build, instead
  now using a service file to get latest SUSE srouces directly.
  This removed these two files:
  * open-iscsi-2.1.9-suse.tar.bz2, and
  * open-iscsi-SUSE-latest.diff.bz2
  whcih were both created by a shell script, and added a service-
  file-generated file of the form:
  * open-iscsi-2.1.9.suse+TAG_OFFSET.tar.xz
  where TAG_OFFSET is of the form "COMMIT_COUNT.HASH", where
  COMMIT_COUNT is the count of commits since 2.1.9-suse (in this
  case), and HASH is the git commit hash being used.</changelog>
  <changelog author="lduncan@suse.com" date="1727697600">- Update to version 2.1.10.suse+51.fea0fde82ed1:
  * Incudes upstream version 2.1.10 plus some fixes
  * Fix firmware targets startup to always be "onboot" (#482)
    (bsc#1228084)
  * Change a discovery function to void return type (#481)
  * Fix gcc issues (#480)
  * Bugfix read specific sysfs value "off" of session attribute (#466)
  * Fix bug where abort_tmo read failures were ignored. (#467)
  * grammar nitpicks (#464)
  * Fix memory leak in iscsi_check_session_use_count (#465)
  * improve the comments in idbm_lock() (#458)
  * Make it visible when memory allocation failure (#457)
  * Better handle multiple iscsiadm commands (#453)
  * iscsiadm: allow hostnames in node-mode commands (#451)
  * Modify how workqueue priority is set (#445)
  * Fix authmethod check by printing a warning message when CHAP used and authmethod=None (#443)
  * iscsid: Rescan devices on relogin (#444)
  * Adds missing characters in README. (#440)
  * Turn off iSCSI NOP-Outs, by default.
  * fix: add usr/iscsid_req.h missinig underline (#431) (#436)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="lduncan@suse.com" date="1744027200">- Update to version 2.1.11.suse+65.65365e1cdedb:
  * doc: fixup iscsiadm man page option for -r (#501)
  * Modify log function to print session id (#498)
  * Fix minor typo ("authenticaton") (#500)
  * Preparing for version 2.1.11 (#499)
  * iscsid: Rate limit session reopen log messages (#492)
  * IPv6 support for iBFT iSCSI boot (#493)
  * Improve iscsiadm command line parsing messages (#494)
  * More testing cleanup, and fix dprint test usage (#491)
  * Fix a typo in test/README (#486)
  * iscsid: Fix hang during login with scan=manual (#485)
  * fix 4 issues which are finded when building with clang 17 (#478)</changelog>
  <changelog author="lduncan@suse.com" date="1744027201">- Change SPEC file so that open-iscsi lock files always go
  in /run/lock/iscsi (bsc#1239107)</changelog>
  <changelog author="lduncan@suse.com" date="1744804800">- Update to version 2.1.11.suse+66.13c070123738:
  * Fix iscsid.conf NOP configuration (bsc#1240541)</changelog>
  <changelog author="lduncan@suse.com" date="1752408000">- Update to version 2.1.11.suse+73.1723affc61eb:
  * README for rpm build directory
  * Fix issue with IPv6 adapter interfaces (#508, bsc#1240969)
  * fwparam_ppc.c: Fix the calloc-transposed-args issue (#504)
  * Makefile: fix "No rule to make target 'iscsiuio/Makefile.in" issue (#506)
  * Fix typo in initiator.c (#507)
- Fixed some issues in this changes file
  * One date had incorrect format from 2014
  * Two separator lines were formatted incrrectly</changelog>
</package>
<package pkgid="14244b7da6c196a5f7c6e6ce27c7cbfe80fde0c9bccbe7764948e6b7fa5d42fc25bb8d4cfa1ccdbc728fa3c762ee07289e990cbfab6e9d444a521b5f94a3a52e" name="open-isns" arch="x86_64">
  <version epoch="0" ver="0.102" rel="160000.2.2"/>
  <changelog author="mliska@suse.cz" date="1571832000">- Move back "%global _lto_cflags ..." line as it's needed
  for the following error:
  E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libisns.a.
  The recursion in macro was caused by fact that the macro was not
  defined for some time in prjconfig.</changelog>
  <changelog author="lduncan@suse.com" date="1572264000">- Updated SPEC file %_lto_cflags definition so that it does not
  cause recursion.</changelog>
  <changelog author="lduncan@suse.com" date="1580472000">- Update to version 0.100:
  * Updated ChangeLog with latest fixes
  * Create and use pythong unittest framework
  * Ignore SO lib
  * Handle restarting test harness server correctly
  * Fix mdebug.c so it compiles when enabled.
  * Running make twice should not rebuild everything
  * Change isns_portal_string() to use static mem
  * Adding python compiled files
  * fixed issues with old openssl usage
  * Added debugging, moved .cvsignore to .gitignore
  * Preparing for version v0.100
  * Fix problem with parsing IPv6 Addresses with brakcets.
  * General cleanup for the compiler.
  * Travis-CI and Coverity Scan setup
  * openssl: handle newer version with ifdefs
  * Remove old compiler option, and add "-Werror".
  * Change isns_portal_string() to return allocated string.
  * add tags to ignored list of files
  * Fix compiler complaint about possible alignment issue
  Replacing open-isns-0.99.tar.xz with open-isns-0.100.tar.xz.
  Also, added latest (not yet tagged) fixes from upstream,
  adding patch, and add in a 586-fix, adding:
  * open-isns-updates.diff.bz2, and
  * open-isns-fix-586-time.patch</changelog>
  <changelog author="lduncan@suse.com" date="1607083200">- Updated to latest upstream, including:
  * Add man page for isnssetup.
  * Fix broken server authentication initialization.
  * Update version string to "0.100".
  * Added a TODO: 'make depend' not worrking
  * libisns: remove sighold and sigrelse
  * fix compilation without deprecated OpenSSL APIs
  * socket.c: include poll.h instead of sys/poll.h for POSIX compatibility
  * Fix 586 compile issue and remove -Werror
  * Do not ignore write() return value.
  * Fix compiler issue when n
  Which updates open-isns-updates.diff.bz2, and removes the
  no-longer-needed patch open-isns-fix-586-time.patch.
  Also, security will be enabled/configured with this update.</changelog>
  <changelog author="lduncan@suse.com" date="1607083201">- Updated SPEC file to Recommend open-iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1607342400">- Added file isns.xml for firewalld, updated SPEC file for it,
  since SuSEfirewall2 is deprecated.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Removed isns.xml, as firewalld already supplies this file.
  Note that SuSEFirewall2 is also no longer supported, which
  obviates the need for the file "open-isns-firewall.service",
  which was used in SLES but not in openSUSE.</changelog>
  <changelog author="lduncan@suse.com" date="1612180800">- Update to version 0.101:
  * Updated ChangeLog for version v0.101
  * Preparing for version 0.101
  * Fix parsing of GetNextRsp
  * Added TODO to test "isnsd --init"
  * Add man page for isnssetup.
  * Fix broken server authentication initialization.
  * Update version string to "0.100".
  * Added a TODO: 'make depend' not worrking
  * libisns: remove sighold and sigrelse
  * fix compilation without deprecated OpenSSL APIs
  * socket.c: include poll.h instead of sys/poll.h for POSIX compatibility
  * Fix 586 compile issue and remove -Werror
  * Do not ignore write() return value.
  * Fix compiler issue when not in security mode
  * Ignore common build files
  This removed the need for open-isns-updates.diff.bz2 (for now), since
  those commits are in version v0.101.</changelog>
  <changelog author="lduncan@suse.com" date="1662638400">- Update to version 0.102:
  * Preparing for version v0.102
  * meson: just specify subdir for header-file install.
  * build: only specify version in one place
  * Fix two compiler warnings in slp.c
  * meson: update README
  * meson: small option usage cleanup
  * meson: several updates based on review
  * meson: fix error building shared lib with version
  * meson: convert some args to 'features'
  * meson: update README with meson info
  * Add a decprecation warning to configure script.
  * meson: Add ability to disable static library build
  * meson builds now working
  * git: ignore all shared library files
  * build: Remove these two files, no longer used
  * Add a package config file for libisns.a
  * isnsd: socket: Make sure to create IPv6 socket default
  * isnsadm: Fix unparse command line options "-V" and "-r"
  * Typo: s/overried/override/
  * Removed bash-specific function definitions.
  Also, added patch to quiet compiler (soon upstream):
  * Quiet-a-commpiler-warning.patch
  This changes the SPEC file to use the new meson build system,
  supported in open-isns starting with version 0.102, instead of
  autoconf/make.
  Changes in the code:
  * no longer deliver isnsetup script or man page (development only)
  * now deliver a package config file for the library
  * now deliver both the static library and a shared library</changelog>
  <changelog author="kukuk@suse.com" date="1693915200">- Disable SLP by default for Factory and ALP (bsc#1214884)</changelog>
</package>
<package pkgid="7e97c6b08f329861cf7416782ee523c7b36174d3df65fa3dbb48aa8e5eee0655d91ffa4b723d69f180209cedea69e59e2db82b7da2f0a6599f5ba3a2abea19d0" name="open-lldp" arch="x86_64">
  <version epoch="0" ver="1.1+106.74c0600a8692" rel="160000.2.2"/>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="lduncan@suse.com" date="1698408000">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="lduncan@suse.com" date="1705233600">- Update to version v1.1+106.74c0600a8692 (from upstream/branch-1.1):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data
  * lldpad: ieee8023: reorder disabling pMAC and disabling MM TX
  * uapi: Provide a copy of const.h
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * ChangeLog: mention Additional Ethernet Capabilities TLV
  * lldptool: add man page for Additional Ethernet Capabilities TLV
  * lldptool: add CLI interface for Additional Ethernet Capabilities TLV
  * lldpad: ieee8023: allow changing the addFragSize advertisement
  * lldpad: ieee8023: add Additional Ethernet Capabilities TLV logic
  * lldpad: ieee8023: make ieee8023_data() return a pointer to ieee8023_user_data
  * lldpad: ethtool netlink accessors for MAC merge layer
  * lldpad: ieee8023: add basic rchange procedure
  * uapi: copy ethtool definitions for MAC Merge layer from Linux
  * uapi: update linux/netlink.h copy
  * uapi: import ethtool kernel headers from net-next
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference</changelog>
</package>
<package pkgid="1b02f8a3ca84ab77579b3bf5ec6b5bb4ca56f78a263831a86af54b385d4ad963e49422674690a1b19a3b9588aa476d737fe8d852eb4106fd60e62500bd1c2e82" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="13.0.10" rel="160000.1.1"/>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
</package>
<package pkgid="6611a101a1b3a62e4f34138396e946a79bd836e51d5e8d35dbfdc22f6f5ebc13a39fc563beb556267c71b0f648d1649b53089d1abdd1d508358c99f1104b3f14" name="openSUSE-build-key" arch="x86_64">
  <version epoch="0" ver="1.0" rel="160000.1.116"/>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1670241600">- Package OBS project key if available. Useful when forking
  openSUSE-build-key for use in appliances.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681473600">- Added a new 4096 openSUSE container key
  - build-container-202304-d684afec-64390cff.asc
  - build-container-202304-d684afec-64390cff.pem
- Removed and obsoleted old 2048 build key of Tumbleweed
  - gpg-pubkey-3dbdc284-53674dd4.asc</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1686052800">- openSUSE-build-key-import.service,openSUSE-build-key-import.service.timer,
  import-openSUSE-build-key:
  Add systemd timer and service framework that imports new keys.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1708344000">- added new suse container key, moved the old one to -old</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709726400">- add unexpired openSUSE zSystems key (bsc#1220993)
  - replace gpg-pubkey-f6ab3975-5edd7d4f.asc
  - by gpg-pubkey-f6ab3975-62e9e6fb.asc</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710417600">- Install import-openSUSE-build-key to %{_sbindir}: align to where
  the .service file is launching the script from (boo#1221427).</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1711281600">- Requires(post): coreutils is missing
  * instead of adding it, change the post scriptlet:
    do not use touch, use shell redirection</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1711454400">- Fix import-openSUSE-build-key:set proper timer name to try to
  stop (openSUSE-build-key-import.timer, not
  suse-build-key-import.timer) (boo#1221948).</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1712750400">- SLM 6.0 key (ALP / SLF1) RSA 4096 bit key
  - gpg-pubkey-09d9ea69-645b99ce.asc
- 2024 SUSE Linux Enterprise 15 SP6 RSA 4096 bit key
  - gpg-pubkey-3fa1d6ce-63c9481c.asc
- SLM 6.0 key (ALP / SLF1) RSA 4096 bit reserve key
  - gpg-pubkey-73f03759-626bd414.asc
- 2024 SUSE Linux Enterprise 15 SP6 RSA 4096 bit reserve key
  - gpg-pubkey-d588dc46-63c939db.asc
- obsoleted a incorrectly used DSA1024 key (used in Slowroll).</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1718971200">- Ensure that SLM 6.0 key is installed on Leap Micro and Leap 16
- install SLFO / SLM 6.0 key and SLES 15 SP6+ key by default</changelog>
</package>
<package pkgid="2cd710904a5da7f48bab6aa2b4c4987f4ab231993442534d2164f9e3f6d090fe49a1bb3c95596c1b9eaad1ec4bb9cafbaed8bbdf7e726d264cafe42eda6e2517" name="openSUSE-repos-LeapMicro" arch="x86_64">
  <version epoch="0" ver="20250606.b852490" rel="160000.1.82"/>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1733745600">- Disable Leap flavor building on Leap Micro 6.1+
  which newly contains sle_version</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1738670400">- Fix build with RPM 4.20: the construct %else ifarch … was never
  valid; anything behing 'else' was simply ignored and now leads to
  an error.</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1740052800">- Update to version 20250220.13a9986:
  * Use arch specific repodata on Leap 16.0 (#77)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1741003200">- Update to version 20250303.f74564e:
  * Enable experimental parallel downloads for Leap and TW (#79)
  * Fix $arch -&gt; $basearch for Leap 16.0
  * Add /etc/profile.d/opensuse_repos.sh</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1741780800">- Update to version 20250312.dd33dd1:
  * Add openh264 repo for Leap 16.0 (#76)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1742817600">- Update to version 20250324.7d1bc96:
  * Add non-oss / non-oss-debug repos for Leap 16.0 (#80)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1747828800">- Fix url for Leap 16 tmp migration repo</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1748260800">- Update to version 20250526.4556805:
  * Default zypp parallel downloads for 16.0 and TW
  * Enable NVIDIA repository for Leap 16.0</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1748952000">- Update to version 20250604.94835c9:
  * Add gpgkey for codecs-o-o as well
  * Drop opensuse_repos.sh</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1749211200">- Update to version 20250606.b852490:
  * Update repo definitions for Leap Micro 6.2</changelog>
</package>
<package pkgid="0bcda526ccf6d8955746ab3ab32fc04efaa0a157b46fe1e086fd5c759053bac41a3ade329bf7c59cc7934b7fe71502515687925024a9affbba5c7014d95b2887" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.26.1" rel="160000.2.2"/>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702468800">- Update to OpenSC 0.24.0:
  * Security
  - CVE-2023-40660: Fix Potential PIN bypass
    (#2806, frankmorgner/OpenSCToken#50, #2807)
  - CVE-2023-40661: Important dynamic analyzers reports
  - CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption
    using symmetric keys (f1993dc)
  * General improvements
  - Fix compatibility of EAC with OpenSSL 3.0 (#2674)
  - Enable use_file_cache by default (#2501)
  - Use custom libctx with OpenSSL &gt;= 3.0 (#2712, #2715)
  - Fix record-based files (#2604)
  - Fix several race conditions (#2735)
  - Run tests under Valgrind (#2756)
  - Test signing of data bigger than 512 bytes (#2789)
  - Update to OpenPACE 1.1.3 (#2796)
  - Implement logout for some of the card drivers (#2807)
  - Fix wrong popup position of opensc-notify (#2901)
  - Fixed various issues reported by OSS-Fuzz and Coverity regarding card
    drivers, PKCS#11 and PKCS#15 init
  * PKCS#11
  - Check card presence state in C_GetSessionInfo (#2740)
  - Remove onepin-opensc-pkcs11 module (#2681)
  - Do not use colons in the token info label (#2760)
  - Present profile objects in all slots with the CKA_TOKEN attribute to
    resolve issues with NSS (#2928, #2924)
  - Use secure memory for PUK (#2906)
  - Don't logout to preserve concurrent access from different processes
    (#2907)
  - Add more examples to manual page (#2936)
  - Present profile objects in all virtual slots (#2928)
  - Provide CKA_TOKEN attribute for profile objects (#2924)
  - Improve --slot parameter documentation (#2951)
  * PKCS#15
  - Honor cache offsets when writing file cache (#2858)
  - Prevent needless amount of PIN prompts from pkcs15init layer (#2916)
  - Propagate CKA_EXTRACTABLE and SC_PKCS15_PRKEY_ACCESS_SENSITIVE from and
    back to PKCS#11 (#2936)
  * Minidriver
  - Fix for private keys that do not need a PIN (#2722)
  - Unbreak decipher when the first null byte of PKCS#1.5 padding is
    missing (#2939*
  * pkcs11-tool
  - Fix RSA key import with OpenSSL 3.0 (#2656)
  - Add support for attribute filtering when listing objects (#2687)
  - Add support for --private flag when writing certificates (#2768)
  - Add support for non-AEAD ciphers to the test mode (#2780)
  - Show CKA_SIGN attribute for secret keys (#2862)
  - Do not attempt to read CKA_ALWAYS_AUTHENTICATE on secret keys
    (#2864, #2913)
  - Show Sign/VerifyRecover attributes (#2888)
  - Add option to import generic keys (#2955)
  * westcos-tool
  - Generate 2k RSA keys by default (b53fc5c)
  * pkcs11-register
  - Disable autostart on Linux by default (#2680)
  * IDPrime
  - Add support for IDPrime MD 830, 930 and 940 (#2666)
  - Add support for SafeNet eToken 5110 token (#2812)
  - Process index even without keyrefmap and use correct label for second
    PIN (#2878)
  - Add support for Gemalto IDPrime 940C (#2941)
  * EPass2003
  - Change of PIN requires verification of the PIN (#2759)
  - Fix incorrect CMAC computation for subkeys (#2759, issue #2734)
  - Use true random number for mutual authentication for SM (#2766)
  - Add verification of data coming from the token in the secure messaging
    mode (#2772)
  - Avoid success when using unsupported digest and fix data length for RAW
    ECDSA signatures (#2845)
  * OpenPGP
  - Fix select data command (#2753, issue #2752)
  - Unbreak ed/curve25519 support (#2892)
  * eOI
  - Add support for Slovenian eID card (eOI) (#2646)
  * Italian CNS
  - Add support for IDEMIA (Oberthur) tokens (#2483)
  * PIV
  - Add support for Swissbit iShield FIDO2 Authenticator (#2671)
  - Implement PIV secure messaging (#2053)
  * SkeID
  - Add support for Slovak eID cards (#2672)
  * isoApplet
  - Support ECDSA with off-card hashing (#2642)
  * MyEID
  - Fix WRAP operation when using T0 (#2695)
  - Identify changes on the card and enable use_file_cache (#2798)
  - Workaround for unwrapping using 2K RSA key (#2921)
  * SC-HSM
  - Add support for opensc-tool --serial (#2675)
  - Fix unwrapping of 4096 keys with handling reader limits (#2682)
  - Indicate supported hashes and MGF1s (#2827)
- Remove patches:
  * opensc-CVE-2023-40660-1of2.patch
  * opensc-CVE-2023-40660-2of2.patch
  * opensc-CVE-2023-40661-1of12.patch
  * opensc-CVE-2023-40661-2of12.patch
  * opensc-CVE-2023-40661-3of12.patch
  * opensc-CVE-2023-40661-4of12.patch
  * opensc-CVE-2023-40661-5of12.patch
  * opensc-CVE-2023-40661-6of12.patch
  * opensc-CVE-2023-40661-7of12.patch
  * opensc-CVE-2023-40661-8of12.patch
  * opensc-CVE-2023-40661-9of12.patch
  * opensc-CVE-2023-40661-10of12.patch
  * opensc-CVE-2023-40661-11of12.patch
  * opensc-CVE-2023-40661-12of12.patch
  * opensc-CVE-2023-4535.patch
  * opensc-CVE-2023-2977.patch
  * opensc-NULL_pointer_fix.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1708862400">- Add CVE-2024-1454.patch.
  Fix for CVE-2024-1454 / bsc#1219868.</changelog>
  <changelog author="mardnh@gmx.de" date="1709985600">- Update to version 0.25.0
  Security
  * CVE-2023-5992: Fix Side-channel leaks while stripping
    encryption PKCS#1.5 padding in OpenSC.
  * CVE-2024-1454: Fix Potential use-after-free in AuthentIC driver
    during card enrollment in pkcs15init.
  General improvements
  * Remove support for old card drivers Akis, GPK, Incrypto34 and
    Westcos, disable Cyberflex driver.
  * Fix 64b to 32b conversions.
  * Improvements for the p11test.
  * Fix reader initialization without SCardControl.
  * Make RSA PKCS#1 v1.5 depadding constant-time.
  * Add option for disabling PKCS#1 v1.5 depadding (type 01 and 02)
    on the card.
  * Fixed various issues reported by OSS-Fuzz and Coverity in
    drivers, PKCS#11 and PKCS#15 layer.
- Add patch:
  * opensc-docbook-xsl-fix.patch
- Drop not longer needed patches:
  * CVE-2024-1454.patch
- Introduce subpackage for bash-completion</changelog>
  <changelog author="mardnh@gmx.de" date="1710331200">- Build with support for libeac (OpenPACE)</changelog>
  <changelog author="mardnh@gmx.de" date="1712318400">- Update to verion 0.25.1
  General improvements
  * Add missing file to dist tarball to build documentation.
  minidriver
  * Fix RSA decryption with PKCS#1 v1.5 padding.
  * Fix crash when app is not set.</changelog>
  <changelog author="angel.yankov@suse.com" date="1727784000">- Security fix: [opensc-CVE-2024-45620, bsc#1230076]
- Security fix: [opensc-CVE-2024-45619, bsc#1230075]
- Security fix: [opensc-CVE-2024-45618, bsc#1230074]
- Security fix: [opensc-CVE-2024-45617, bsc#1230073]
- Security fix: [opensc-CVE-2024-45616, bsc#1230072]
- Security fix: [opensc-CVE-2024-45615, bsc#1230071]
  * opensc: pkcs15init: Usage of uninitialized values in libopensc and pkcs15init
  * opensc: Uninitialized values after incorrect check or usage of APDU response values in libopensc
  * opensc: Uninitialized values after incorrect or missing checking return values of functions in libopensc
  * opensc: Uninitialized values after incorrect or missing checking return values of functions in pkcs15init
  * opensc: Incorrect handling length of buffers or files in libopensc
  * opensc: Incorrect handling of the length of buffers or files in pkcs15init
  * Added patches:
  - opensc-CVE-2024-45615.patch
  - opensc-CVE-2024-45616.patch
  - opensc-CVE-2024-45617.patch
  - opensc-CVE-2024-45618.patch
  - opensc-CVE-2024-45619.patch
  - opensc-CVE-2024-45620.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727784001">- - Security fix: [CVE-2024-8443, bsc#1230364]
  * opensc: heap buffer overflow in OpenPGP driver when generating key
  * Added patch: opensc-CVE-2024-8443.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1731585600">- Update to version 0.26.0
  Security
  * CVE-2024-45615: Usage of uninitialized values in libopensc#
    and pkcs15init (#3225).
  * CVE-2024-45616: Uninitialized values after incorrect check or
    usage of APDU response values in libopensc (#3225)
  * CVE-2024-45617: Uninitialized values after incorrect or missing
    checking return values of functions in libopensc (#3225)
  * CVE-2024-45618: Uninitialized values after incorrect or missing
    checking return values of functions in pkcs15init (#3225)
  * CVE-2024-45619: Incorrect handling length of buffers or files
    in libopensc (#3225)
  * CVE-2024-45620: Incorrect handling of the length of buffers or
    files in pkcs15init (#3225)
  * CVE-2024-8443: Heap buffer overflow in OpenPGP driver when
    generating key (#3219)
  General improvements
  * Fix reselection of DF after error in PKCS#15 layer (#3067)
  * Unify OpenSSL logging throughout code (#2922)
  * Extend the p11test to support kryoptic (#3141)
  * Fix for error in PCSC reconnection (#3150)
  * Fixed various issues reported by OSS-Fuzz and Coverity in
    drivers, PKCS#11 and PKCS#15 layer
  PKCS#15
  * Documentation for PKCS#15 profile files (#3132)
  minidriver
  * Support PinCacheAlwaysPrompt usable for PIV cards (#3167)
  pkcs11-tool
  * Show URI when listing token information (#3125) and objects
  * Do not limit size of objects to 5000 bytes (#3174)
  * Add support for AES CMAC (#3184)
  * Add support for AES GCM encryption (#3195)
  * Add support for RSA OAEP encryption (#3175)
  * Add support for HKDF (#3193)
  * Implement better support for wrapping and unwrapping (#3198)
  * Add support for EdDSA sign and verify (#2979)
  pkcs15-crypt
  * Fix PKCS#1 encoding function to correctly detect padding type
  piv-tool
  * Fix RSA key generation (#3158)
  * Avoid possible state change when matching unknown card (#3112)
  sc-hsm-tool
  * Cleanse buffer with plaintext key share (#3226)
  pkcs11-register
  * Fix pkcs11-register defaults on macOS and Windows (#3053)
  IDPrime
  * Fix identification of IDPrime 840 cards (#3146)
  * Fix container mapping for IDPrime 940 cards (#3220)
  * Reorder ATRs for matching cards (#3154)
  OpenPGP
  * Fix state tracking after erasing card (#3024)
  Belpic
  * Disable Applet V1.8 (#3109)
  MICARDO
  * Deactivate driver (#3152)
  SmartCard-HSM
  * Fix signing with secp521r1 signature (#3157)
  eOI
  * Set model via sc_card_ctl function (#3189)
  Rutoken
  * increase the minimum PIN size to support Rutoken ECP BIO.
  JPKI
  * Adjust parameters for public key in PKCS#15 emulator (#3182)
  D-Trust
  * Add support for ECDSA signatures and ECDH key agreement for
    D-Trust Signatures Cards 4.1/4.4 (#3240, #3248)
- Drop patches (changes now in upstream):
  * opensc-CVE-2024-45615.patch
  * opensc-CVE-2024-45616.patch
  * opensc-CVE-2024-45617.patch
  * opensc-CVE-2024-45618.patch
  * opensc-CVE-2024-45619.patch
  * opensc-CVE-2024-45620.patch
  * opensc-CVE-2024-8443.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1736856000">- Update to version 0.26.1
  General improvements
  * Align allocations of sc_mem_secure_alloc (#3281).
  * Fix -O3 gcc optimization failure on amd64 and ppc64el (#3299).
  pkcs11-spy
  * Avoid crash while spying C_GetInterface() (#3275).
  TCOS
  * Fix reading certificate (#3296).</changelog>
</package>
<package pkgid="32d7619d63448ad15855887cdecc52c7b4d4f617ca250a7db011ae383e21b096da3c92a87658108eff870f8adb3704b5164c8a53cd582d5dffe4b41e2bd580db" name="openssh" arch="x86_64">
  <version epoch="0" ver="10.0p2" rel="160000.4.1"/>
  <changelog author="alarrosa@suse.com" date="1739880000">- Update to openssh 9.9p2:
  = Security
  * Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
    (inclusive) contained a logic error that allowed an on-path
    attacker (a.k.a MITM) to impersonate any server when the
    VerifyHostKeyDNS option is enabled. This option is off by
    default.
  * Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
    (inclusive) is vulnerable to a memory/CPU denial-of-service
    related to the handling of SSH2_MSG_PING packets. This
    condition may be mitigated using the existing
    PerSourcePenalties feature.
  Both vulnerabilities were discovered and demonstrated to be
  exploitable by the Qualys Security Advisory team. The openSSH
  team thanks them for their detailed review of OpenSSH.
  = Bugfixes
  * ssh(1), sshd(8): fix regression in Match directive that caused
    failures when predicates and their arguments were separated by
    '=' characters instead of whitespace (bz3739).
  * sshd(8): fix the "Match invalid-user" predicate, which was
    matching incorrectly in the initial pass of config evaluation.
  * ssh(1), sshd(8), ssh-keyscan(1): fix mlkem768x25519-sha256 key
    exchange on big-endian systems.
  * Fix a number of build problems on particular operating systems
    and configurations.
- Remove patches that are already included in 9.9p2:
  * 0001-fix-utmpx-ifdef.patch
  * 0002-upstream-fix-regression-introduced-when-I-switched-the-Match.patch
  * 0003-upstream-fix-previous-change-to-ssh_config-Match_-which-broken-on.patch
  * 0004-upstream-fix-ML-KEM768x25519-KEX-on-big-endian-systems-spotted-by.patch
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="dmueller@suse.com" date="1739966400">- merge openssh-fips into the main openssh package (bsc#1185116)</changelog>
  <changelog author="hillwood@opensuse.org" date="1742299200">- Disable seccomp_filter and rlimitsandbox sandbox for loongarch.
  seccomp_filter and rlimitsandbox not supported on loongarch64 yet.</changelog>
  <changelog author="alarrosa@suse.com" date="1743595200">- Add patch to fix parsing of CFLAGS with duplicated -pie flags,
  which break 'make tests'. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3806 .
  * fix-nopie-flag.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1744027200">- Do not try to create /etc/ssh in sshd-gen-keys-start
  (bsc#1238191). sshd-gen-keys-start transitions to a SELinux
  domain that doesn't have the necessary permissions. Based on
  a SR by Johannes Segitz &lt;jsegitz@suse.com&gt;.</changelog>
  <changelog author="alarrosa@suse.com" date="1744200000">- Update to openssh 10.0p1:
  = Potentially-incompatible changes
  * This release removes support for the weak DSA signature
    algorithm, completing the deprecation process that began in
    2015 (when DSA was disabled by default) and repeatedly warned
    over the last 12 months.
  * scp(1), sftp(1): pass "ControlMaster no" to ssh when invoked by
    scp &amp; sftp. This disables implicit session creation by these
    tools when ControlMaster was set to yes/auto by configuration,
    which some users found surprising. This change will not prevent
    scp/sftp from using an existing multiplexing session if one had
    already been created. GHPR557
  * This release has the version number 10.0 and announces itself
    as "SSH-2.0-OpenSSH_10.0". Software that naively matches
    versions using patterns like "OpenSSH_1*" may be confused by
    this.
  * sshd(8): this release removes the code responsible for the
    user authentication phase of the protocol from the per-
    connection sshd-session binary to a new sshd-auth binary.
    Splitting this code into a separate binary ensures that the
    crucial pre-authentication attack surface has an entirely
    disjoint address space from the code used for the rest of the
    connection. It also yields a small runtime memory saving as the
    authentication code will be unloaded after the authentication
    phase completes. This change should be largely invisible to
    users, though some log messages may now come from "sshd-auth"
    instead of "sshd-session". Downstream distributors of OpenSSH
    will need to package the sshd-auth binary.
  * sshd(8): this release disables finite field (a.k.a modp)
    Diffie-Hellman key exchange in sshd by default. Specifically,
    this removes the "diffie-hellman-group*" and
    "diffie-hellman-group-exchange-*" methods from the default
    KEXAlgorithms list. The client is unchanged and continues to
    support these methods by default. Finite field Diffie Hellman
    is slow and computationally expensive for the same security
    level as Elliptic Curve DH or PQ key agreement while offering
    no redeeming advantages. ECDH has been specified for the SSH
    protocol for 15 years and some form of ECDH has been the
    default key exchange in OpenSSH for the last 14 years.
  * sshd(8): this release removes the implicit fallback to
    compiled-in groups for Diffie-Hellman Group Exchange KEX when
    the moduli file exists but does not contain moduli within the
    client-requested range.  The fallback behaviour remains for the
    case where the moduli file does not exist at all. This allows
    administrators more explicit control over which DH groups will
    be selected, but can lead to connection failures if the moduli
    file is edited incorrectly. bz#2793
  = Security
  * sshd(8): fix the DisableForwarding directive, which was failing
    to disable X11 forwarding and agent forwarding as documented.
    X11 forwarding is disabled by default in the server and agent
    forwarding is off by default in the client.
  = New features
  * ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256
    is now used by default for key agreement. This algorithm is
    considered to be safe against attack by quantum computers,
    is guaranteed to be no less strong than the popular
    curve25519-sha256 algorithm, has been standardised by NIST
    and is considerably faster than the previous default.
  * ssh(1): prefer AES-GCM to AES-CTR mode when selecting a cipher
    for the connection. The default cipher preference list is now
    Chacha20/Poly1305, AES-GCM (128/256) followed by AES-CTR
    (128/192/256).
  * ssh(1): add %-token and environment variable expansion to the
    ssh_config SetEnv directive.
  * ssh(1): allow %-token and environment variable expansion in
    the ssh_config User directive, with the exception of %r and %C
    which would be self-referential. bz#3477
  * ssh(1), sshd(8): add "Match version" support to ssh_config and
    sshd_config. Allows matching on the local version of OpenSSH,
    e.g. "Match version OpenSSH_10.*".
  * ssh(1): add support for "Match sessiontype" to ssh_config.
    Allows matching on the type of session initially requested,
    either "shell" for interactive sessions, "exec" for command
    execution sessions, "subsystem" for subsystem requests, such as
    sftp, or "none" for transport/forwarding-only sessions.
  * ssh(1): add support for "Match command ..." support to
    ssh_config, allowing matching on the remote command as
    specified on the command-line.
  * ssh(1): allow 'Match tagged ""' and 'Match command ""' to match
    empty tag and command values respectively.
  * sshd(8): allow glob(3) patterns to be used in sshd_config
    AuthorizedKeysFile and AuthorizedPrincipalsFile directives.
    bz2755
  * sshd(1): support the VersionAddendum in the client, mirroring
    the option of the same name in the server; bz2745
  * ssh-agent(1): the agent will now delete all loaded keys when
    signaled with SIGUSR1. This allows deletion of keys without
    having access to $SSH_AUTH_SOCK.
  * Portable OpenSSH, ssh-agent(1): support systemd-style socket
    activation in ssh-agent using the LISTEN_PID/LISTEN_FDS
    mechanism. Activated when these environment variables are set,
    the agent is started with the -d or -D option and no socket
    path is set. GHPR502
  * ssh-keygen(1): support FIDO tokens that return no attestation
    data, e.g. recent WinHello. GHPR542
  * ssh-agent(1): add a "-Owebsafe-allow=..." option to allow the
    default FIDO application ID allow-list to be overridden.
  * Add a work-in-progress tool to verify FIDO attestation blobs
    that ssh-keygen can optionally write when enrolling FIDO keys.
    This tool is available under
    regress/misc/ssh-verify-attestation for experimentation but is
    not installed by "make install".
  * ssh-keygen(1): allow "-" as output file for moduli screening.
    GHPR393
  = Bugfixes
  * sshd(8): remove assumption that the sshd_config and any configs
    it includes can fit in a (possibly enlarged) socket buffer.
    Previously it was possible to create a sufficiently large
    configuration that could cause sshd to fail to accept any
    connection. sshd(8) will now actively manage sending its config
    to the sshd-session sub-process.
  * ssh(1): don't start the ObscureKeystrokeTiming mitigations if
    there has been traffic on a X11 forwarding channel recently.
    Should fix X11 forwarding performance problems when this
    setting is enabled. bz3655
  * ssh(1): prohibit the comma character in hostnames accepted, but
    allow an underscore as the first character in a hostname.
  * sftp(1): set high-water when resuming a "put". Prevents bogus
    "server reordered acks" debug message.
  * ssh(1), sshd(8): fix regression in openssh-9.8, which would
    fail to accept "Match criteria=argument" as well as the
    documented "Match criteria argument" syntax in ssh_config and
    sshd_config. bz3739
  * sftp(1), ssh(1): fix a number possible NULL dereference bugs,
    including Coverity CIDs 405019 and 477813.
  * sshd(8): fix PerSourcePenalty incorrectly using "crash" penalty
    when LoginGraceTime was exceeded. bz3797
  * sshd(8): fix "Match invalid-user" from incorrectly being
    activated in initial configuration pass when no other
    predicates were present on the match line
  * sshd(8): fix debug logging of user specific delay. GHPR#552
  * sshd(8): improve debug logging across sub-process boundaries.
    Previously some log messages were lost early in the sshd-auth
    and sshd-session processes' life.
  * ssh(1): require control-escape character sequences passed via
    the '-e ^x' command-line to be exactly two characters long.
    Avoids one byte out-of-bounds read if ssh is invoked as
    "ssh -e^ ..." GHPR368
  * ssh(1), sshd(8): prevent integer overflow in x11 port handling.
    These are theoretically possible if the admin misconfigured
    X11DisplayOffset or the user misconfigures their own $DISPLAY,
    but don't happen in normal operation. bz#3730
  * ssh-keygen(1): don't mess up ssh-keygen -l output when the file
    contains CR characters; GHPR236 bz3385.
  * sshd(8): add rate limits to logging of connections dropped by
    PerSourcePenalties. Previously these could be noisy in logs.
  * ssh(1): fix argument of "Compression" directive in ssh -G
    config dump, which regressed in openssh-9.8.
  * sshd(8): fix a corner-case triggered by UpdateHostKeys when
    sshd refuses to accept the signature returned by an agent
    holding host keys during the hostkey rotation sub-protocol.
    This situation could occur in situations where a PKCS#11
    smartcard that lacked support for particular signature
    algorithms was used to store host keys.
  * ssh-keygen(1): when using RSA keys to sign messages with
    "ssh-keygen -Y", select the signature algorithm based on the
    requested hash algorithm ("-Ohashalg=xxx"). This allows using
    something other than the default of rsa-sha2-512, which may not
    be supported on all signing backends, e.g. some smartcards only
    support SHA256.
  * ssh(1), sshd(8), ssh-keyscan(1): fix ML-KEM768x25519 KEX on
    big-endian systems.
  * Many regression and interop test improvements.
  = Portability
  * All: add support for AWS-LC (AWS libcrypto). bz3784
  * sshd(8): add wtmpdb support as a Y2038 safe wtmp replacement.
  * sshd(8): add support for locking sshd into memory, enabled with
    the --with-linux-memlock-onfault configure flag.
  * Add support for building a standalone sk-libfido2 library,
    enabled by --with-security-key-standalone
  * ssh(1), sshd(8), ssh-keyscan(1): include __builtin_popcount
    replacement function. for compilers that lack it.
  * All: Check for and replace le32toh, le64toh, htole64
    separately. It appears that at least some versions of endian.h
    in glibc do not have the latter two. bz#3794
  * Remove ancient RHL 6.x config in RPM spec.
- Rebase patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.7p1-cavstest-ctr.patch
  * openssh-7.7p1-cavstest-kdf.patch
  * openssh-7.7p1-fips_checks.patch
  * openssh-8.0p1-gssapi-keyex.patch
  * openssh-8.1p1-audit.patch
  * openssh-7.7p1-ldap.patch
  * openssh-reenable-dh-group14-sha1-default.patch
  * openssh-8.4p1-vendordir.patch
  * logind_set_tty.patch
  * openssh-mitigate-lingering-secrets.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-6.6p1-privsep-selinux.patch
  * openssh-6.6.1p1-selinux-contexts.patch
  * openssh-9.6p1-crypto-policies-man.patch
  * openssh-7.6p1-cleanup-selinux.patch
- Drop patches now included upstream:
  * wtmpdb.patch
  * fix-x11-regression-bsc1229449.patch
  * fix-nopie-flag.patch
- Drop patch since SHA-1 isn't considered secure and the default
  kex list comes from crypto-policies anyway:
  * openssh-reenable-dh-group14-sha1-default.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1744286400">- "Update" to openssh 10.0p2:
  - There was an issue during the packaging of 10.0p1 which made it
    identify itself as 10.0p2 so 10.0p1 is now considered identical
    to 10.0p2 and upstream won't release a separate 10.0p2 package.</changelog>
  <changelog author="hpj@suse.com" date="1745323200">- Add openssh-send-extra-term-env.patch, which appends a few
  environment variables useful for terminal identification to the
  default send and accept lists.</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1772452800">- Add openssh-7.7p1-gssapi-new-unique.patch (bsc#1258166). This
  allows using SSSD with a non-file backend.</changelog>
</package>
<package pkgid="805f4a05733158a1d16d76306f78ee66f5a31a04382ee2e0328de3f5e7dbfcbc99d7ea220d477d2baeb435f8d71e9d9280a4c8ed6ae37630f7b387b0bad28742" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="10.0p2" rel="160000.4.1"/>
  <changelog author="alarrosa@suse.com" date="1739880000">- Update to openssh 9.9p2:
  = Security
  * Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
    (inclusive) contained a logic error that allowed an on-path
    attacker (a.k.a MITM) to impersonate any server when the
    VerifyHostKeyDNS option is enabled. This option is off by
    default.
  * Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
    (inclusive) is vulnerable to a memory/CPU denial-of-service
    related to the handling of SSH2_MSG_PING packets. This
    condition may be mitigated using the existing
    PerSourcePenalties feature.
  Both vulnerabilities were discovered and demonstrated to be
  exploitable by the Qualys Security Advisory team. The openSSH
  team thanks them for their detailed review of OpenSSH.
  = Bugfixes
  * ssh(1), sshd(8): fix regression in Match directive that caused
    failures when predicates and their arguments were separated by
    '=' characters instead of whitespace (bz3739).
  * sshd(8): fix the "Match invalid-user" predicate, which was
    matching incorrectly in the initial pass of config evaluation.
  * ssh(1), sshd(8), ssh-keyscan(1): fix mlkem768x25519-sha256 key
    exchange on big-endian systems.
  * Fix a number of build problems on particular operating systems
    and configurations.
- Remove patches that are already included in 9.9p2:
  * 0001-fix-utmpx-ifdef.patch
  * 0002-upstream-fix-regression-introduced-when-I-switched-the-Match.patch
  * 0003-upstream-fix-previous-change-to-ssh_config-Match_-which-broken-on.patch
  * 0004-upstream-fix-ML-KEM768x25519-KEX-on-big-endian-systems-spotted-by.patch
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="dmueller@suse.com" date="1739966400">- merge openssh-fips into the main openssh package (bsc#1185116)</changelog>
  <changelog author="hillwood@opensuse.org" date="1742299200">- Disable seccomp_filter and rlimitsandbox sandbox for loongarch.
  seccomp_filter and rlimitsandbox not supported on loongarch64 yet.</changelog>
  <changelog author="alarrosa@suse.com" date="1743595200">- Add patch to fix parsing of CFLAGS with duplicated -pie flags,
  which break 'make tests'. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3806 .
  * fix-nopie-flag.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1744027200">- Do not try to create /etc/ssh in sshd-gen-keys-start
  (bsc#1238191). sshd-gen-keys-start transitions to a SELinux
  domain that doesn't have the necessary permissions. Based on
  a SR by Johannes Segitz &lt;jsegitz@suse.com&gt;.</changelog>
  <changelog author="alarrosa@suse.com" date="1744200000">- Update to openssh 10.0p1:
  = Potentially-incompatible changes
  * This release removes support for the weak DSA signature
    algorithm, completing the deprecation process that began in
    2015 (when DSA was disabled by default) and repeatedly warned
    over the last 12 months.
  * scp(1), sftp(1): pass "ControlMaster no" to ssh when invoked by
    scp &amp; sftp. This disables implicit session creation by these
    tools when ControlMaster was set to yes/auto by configuration,
    which some users found surprising. This change will not prevent
    scp/sftp from using an existing multiplexing session if one had
    already been created. GHPR557
  * This release has the version number 10.0 and announces itself
    as "SSH-2.0-OpenSSH_10.0". Software that naively matches
    versions using patterns like "OpenSSH_1*" may be confused by
    this.
  * sshd(8): this release removes the code responsible for the
    user authentication phase of the protocol from the per-
    connection sshd-session binary to a new sshd-auth binary.
    Splitting this code into a separate binary ensures that the
    crucial pre-authentication attack surface has an entirely
    disjoint address space from the code used for the rest of the
    connection. It also yields a small runtime memory saving as the
    authentication code will be unloaded after the authentication
    phase completes. This change should be largely invisible to
    users, though some log messages may now come from "sshd-auth"
    instead of "sshd-session". Downstream distributors of OpenSSH
    will need to package the sshd-auth binary.
  * sshd(8): this release disables finite field (a.k.a modp)
    Diffie-Hellman key exchange in sshd by default. Specifically,
    this removes the "diffie-hellman-group*" and
    "diffie-hellman-group-exchange-*" methods from the default
    KEXAlgorithms list. The client is unchanged and continues to
    support these methods by default. Finite field Diffie Hellman
    is slow and computationally expensive for the same security
    level as Elliptic Curve DH or PQ key agreement while offering
    no redeeming advantages. ECDH has been specified for the SSH
    protocol for 15 years and some form of ECDH has been the
    default key exchange in OpenSSH for the last 14 years.
  * sshd(8): this release removes the implicit fallback to
    compiled-in groups for Diffie-Hellman Group Exchange KEX when
    the moduli file exists but does not contain moduli within the
    client-requested range.  The fallback behaviour remains for the
    case where the moduli file does not exist at all. This allows
    administrators more explicit control over which DH groups will
    be selected, but can lead to connection failures if the moduli
    file is edited incorrectly. bz#2793
  = Security
  * sshd(8): fix the DisableForwarding directive, which was failing
    to disable X11 forwarding and agent forwarding as documented.
    X11 forwarding is disabled by default in the server and agent
    forwarding is off by default in the client.
  = New features
  * ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256
    is now used by default for key agreement. This algorithm is
    considered to be safe against attack by quantum computers,
    is guaranteed to be no less strong than the popular
    curve25519-sha256 algorithm, has been standardised by NIST
    and is considerably faster than the previous default.
  * ssh(1): prefer AES-GCM to AES-CTR mode when selecting a cipher
    for the connection. The default cipher preference list is now
    Chacha20/Poly1305, AES-GCM (128/256) followed by AES-CTR
    (128/192/256).
  * ssh(1): add %-token and environment variable expansion to the
    ssh_config SetEnv directive.
  * ssh(1): allow %-token and environment variable expansion in
    the ssh_config User directive, with the exception of %r and %C
    which would be self-referential. bz#3477
  * ssh(1), sshd(8): add "Match version" support to ssh_config and
    sshd_config. Allows matching on the local version of OpenSSH,
    e.g. "Match version OpenSSH_10.*".
  * ssh(1): add support for "Match sessiontype" to ssh_config.
    Allows matching on the type of session initially requested,
    either "shell" for interactive sessions, "exec" for command
    execution sessions, "subsystem" for subsystem requests, such as
    sftp, or "none" for transport/forwarding-only sessions.
  * ssh(1): add support for "Match command ..." support to
    ssh_config, allowing matching on the remote command as
    specified on the command-line.
  * ssh(1): allow 'Match tagged ""' and 'Match command ""' to match
    empty tag and command values respectively.
  * sshd(8): allow glob(3) patterns to be used in sshd_config
    AuthorizedKeysFile and AuthorizedPrincipalsFile directives.
    bz2755
  * sshd(1): support the VersionAddendum in the client, mirroring
    the option of the same name in the server; bz2745
  * ssh-agent(1): the agent will now delete all loaded keys when
    signaled with SIGUSR1. This allows deletion of keys without
    having access to $SSH_AUTH_SOCK.
  * Portable OpenSSH, ssh-agent(1): support systemd-style socket
    activation in ssh-agent using the LISTEN_PID/LISTEN_FDS
    mechanism. Activated when these environment variables are set,
    the agent is started with the -d or -D option and no socket
    path is set. GHPR502
  * ssh-keygen(1): support FIDO tokens that return no attestation
    data, e.g. recent WinHello. GHPR542
  * ssh-agent(1): add a "-Owebsafe-allow=..." option to allow the
    default FIDO application ID allow-list to be overridden.
  * Add a work-in-progress tool to verify FIDO attestation blobs
    that ssh-keygen can optionally write when enrolling FIDO keys.
    This tool is available under
    regress/misc/ssh-verify-attestation for experimentation but is
    not installed by "make install".
  * ssh-keygen(1): allow "-" as output file for moduli screening.
    GHPR393
  = Bugfixes
  * sshd(8): remove assumption that the sshd_config and any configs
    it includes can fit in a (possibly enlarged) socket buffer.
    Previously it was possible to create a sufficiently large
    configuration that could cause sshd to fail to accept any
    connection. sshd(8) will now actively manage sending its config
    to the sshd-session sub-process.
  * ssh(1): don't start the ObscureKeystrokeTiming mitigations if
    there has been traffic on a X11 forwarding channel recently.
    Should fix X11 forwarding performance problems when this
    setting is enabled. bz3655
  * ssh(1): prohibit the comma character in hostnames accepted, but
    allow an underscore as the first character in a hostname.
  * sftp(1): set high-water when resuming a "put". Prevents bogus
    "server reordered acks" debug message.
  * ssh(1), sshd(8): fix regression in openssh-9.8, which would
    fail to accept "Match criteria=argument" as well as the
    documented "Match criteria argument" syntax in ssh_config and
    sshd_config. bz3739
  * sftp(1), ssh(1): fix a number possible NULL dereference bugs,
    including Coverity CIDs 405019 and 477813.
  * sshd(8): fix PerSourcePenalty incorrectly using "crash" penalty
    when LoginGraceTime was exceeded. bz3797
  * sshd(8): fix "Match invalid-user" from incorrectly being
    activated in initial configuration pass when no other
    predicates were present on the match line
  * sshd(8): fix debug logging of user specific delay. GHPR#552
  * sshd(8): improve debug logging across sub-process boundaries.
    Previously some log messages were lost early in the sshd-auth
    and sshd-session processes' life.
  * ssh(1): require control-escape character sequences passed via
    the '-e ^x' command-line to be exactly two characters long.
    Avoids one byte out-of-bounds read if ssh is invoked as
    "ssh -e^ ..." GHPR368
  * ssh(1), sshd(8): prevent integer overflow in x11 port handling.
    These are theoretically possible if the admin misconfigured
    X11DisplayOffset or the user misconfigures their own $DISPLAY,
    but don't happen in normal operation. bz#3730
  * ssh-keygen(1): don't mess up ssh-keygen -l output when the file
    contains CR characters; GHPR236 bz3385.
  * sshd(8): add rate limits to logging of connections dropped by
    PerSourcePenalties. Previously these could be noisy in logs.
  * ssh(1): fix argument of "Compression" directive in ssh -G
    config dump, which regressed in openssh-9.8.
  * sshd(8): fix a corner-case triggered by UpdateHostKeys when
    sshd refuses to accept the signature returned by an agent
    holding host keys during the hostkey rotation sub-protocol.
    This situation could occur in situations where a PKCS#11
    smartcard that lacked support for particular signature
    algorithms was used to store host keys.
  * ssh-keygen(1): when using RSA keys to sign messages with
    "ssh-keygen -Y", select the signature algorithm based on the
    requested hash algorithm ("-Ohashalg=xxx"). This allows using
    something other than the default of rsa-sha2-512, which may not
    be supported on all signing backends, e.g. some smartcards only
    support SHA256.
  * ssh(1), sshd(8), ssh-keyscan(1): fix ML-KEM768x25519 KEX on
    big-endian systems.
  * Many regression and interop test improvements.
  = Portability
  * All: add support for AWS-LC (AWS libcrypto). bz3784
  * sshd(8): add wtmpdb support as a Y2038 safe wtmp replacement.
  * sshd(8): add support for locking sshd into memory, enabled with
    the --with-linux-memlock-onfault configure flag.
  * Add support for building a standalone sk-libfido2 library,
    enabled by --with-security-key-standalone
  * ssh(1), sshd(8), ssh-keyscan(1): include __builtin_popcount
    replacement function. for compilers that lack it.
  * All: Check for and replace le32toh, le64toh, htole64
    separately. It appears that at least some versions of endian.h
    in glibc do not have the latter two. bz#3794
  * Remove ancient RHL 6.x config in RPM spec.
- Rebase patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.7p1-cavstest-ctr.patch
  * openssh-7.7p1-cavstest-kdf.patch
  * openssh-7.7p1-fips_checks.patch
  * openssh-8.0p1-gssapi-keyex.patch
  * openssh-8.1p1-audit.patch
  * openssh-7.7p1-ldap.patch
  * openssh-reenable-dh-group14-sha1-default.patch
  * openssh-8.4p1-vendordir.patch
  * logind_set_tty.patch
  * openssh-mitigate-lingering-secrets.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-6.6p1-privsep-selinux.patch
  * openssh-6.6.1p1-selinux-contexts.patch
  * openssh-9.6p1-crypto-policies-man.patch
  * openssh-7.6p1-cleanup-selinux.patch
- Drop patches now included upstream:
  * wtmpdb.patch
  * fix-x11-regression-bsc1229449.patch
  * fix-nopie-flag.patch
- Drop patch since SHA-1 isn't considered secure and the default
  kex list comes from crypto-policies anyway:
  * openssh-reenable-dh-group14-sha1-default.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1744286400">- "Update" to openssh 10.0p2:
  - There was an issue during the packaging of 10.0p1 which made it
    identify itself as 10.0p2 so 10.0p1 is now considered identical
    to 10.0p2 and upstream won't release a separate 10.0p2 package.</changelog>
  <changelog author="hpj@suse.com" date="1745323200">- Add openssh-send-extra-term-env.patch, which appends a few
  environment variables useful for terminal identification to the
  default send and accept lists.</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1772452800">- Add openssh-7.7p1-gssapi-new-unique.patch (bsc#1258166). This
  allows using SSSD with a non-file backend.</changelog>
</package>
<package pkgid="804801c6f096a5946bfbe90577d235dbc7b659159d40884d3fe24fc992b8b5ff31330ed7d78ad174f52a7f4ce60777261afeed0fc8e087cf6ee8e6f16aefb5de" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="10.0p2" rel="160000.4.1"/>
  <changelog author="alarrosa@suse.com" date="1739880000">- Update to openssh 9.9p2:
  = Security
  * Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
    (inclusive) contained a logic error that allowed an on-path
    attacker (a.k.a MITM) to impersonate any server when the
    VerifyHostKeyDNS option is enabled. This option is off by
    default.
  * Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
    (inclusive) is vulnerable to a memory/CPU denial-of-service
    related to the handling of SSH2_MSG_PING packets. This
    condition may be mitigated using the existing
    PerSourcePenalties feature.
  Both vulnerabilities were discovered and demonstrated to be
  exploitable by the Qualys Security Advisory team. The openSSH
  team thanks them for their detailed review of OpenSSH.
  = Bugfixes
  * ssh(1), sshd(8): fix regression in Match directive that caused
    failures when predicates and their arguments were separated by
    '=' characters instead of whitespace (bz3739).
  * sshd(8): fix the "Match invalid-user" predicate, which was
    matching incorrectly in the initial pass of config evaluation.
  * ssh(1), sshd(8), ssh-keyscan(1): fix mlkem768x25519-sha256 key
    exchange on big-endian systems.
  * Fix a number of build problems on particular operating systems
    and configurations.
- Remove patches that are already included in 9.9p2:
  * 0001-fix-utmpx-ifdef.patch
  * 0002-upstream-fix-regression-introduced-when-I-switched-the-Match.patch
  * 0003-upstream-fix-previous-change-to-ssh_config-Match_-which-broken-on.patch
  * 0004-upstream-fix-ML-KEM768x25519-KEX-on-big-endian-systems-spotted-by.patch
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="dmueller@suse.com" date="1739966400">- merge openssh-fips into the main openssh package (bsc#1185116)</changelog>
  <changelog author="hillwood@opensuse.org" date="1742299200">- Disable seccomp_filter and rlimitsandbox sandbox for loongarch.
  seccomp_filter and rlimitsandbox not supported on loongarch64 yet.</changelog>
  <changelog author="alarrosa@suse.com" date="1743595200">- Add patch to fix parsing of CFLAGS with duplicated -pie flags,
  which break 'make tests'. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3806 .
  * fix-nopie-flag.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1744027200">- Do not try to create /etc/ssh in sshd-gen-keys-start
  (bsc#1238191). sshd-gen-keys-start transitions to a SELinux
  domain that doesn't have the necessary permissions. Based on
  a SR by Johannes Segitz &lt;jsegitz@suse.com&gt;.</changelog>
  <changelog author="alarrosa@suse.com" date="1744200000">- Update to openssh 10.0p1:
  = Potentially-incompatible changes
  * This release removes support for the weak DSA signature
    algorithm, completing the deprecation process that began in
    2015 (when DSA was disabled by default) and repeatedly warned
    over the last 12 months.
  * scp(1), sftp(1): pass "ControlMaster no" to ssh when invoked by
    scp &amp; sftp. This disables implicit session creation by these
    tools when ControlMaster was set to yes/auto by configuration,
    which some users found surprising. This change will not prevent
    scp/sftp from using an existing multiplexing session if one had
    already been created. GHPR557
  * This release has the version number 10.0 and announces itself
    as "SSH-2.0-OpenSSH_10.0". Software that naively matches
    versions using patterns like "OpenSSH_1*" may be confused by
    this.
  * sshd(8): this release removes the code responsible for the
    user authentication phase of the protocol from the per-
    connection sshd-session binary to a new sshd-auth binary.
    Splitting this code into a separate binary ensures that the
    crucial pre-authentication attack surface has an entirely
    disjoint address space from the code used for the rest of the
    connection. It also yields a small runtime memory saving as the
    authentication code will be unloaded after the authentication
    phase completes. This change should be largely invisible to
    users, though some log messages may now come from "sshd-auth"
    instead of "sshd-session". Downstream distributors of OpenSSH
    will need to package the sshd-auth binary.
  * sshd(8): this release disables finite field (a.k.a modp)
    Diffie-Hellman key exchange in sshd by default. Specifically,
    this removes the "diffie-hellman-group*" and
    "diffie-hellman-group-exchange-*" methods from the default
    KEXAlgorithms list. The client is unchanged and continues to
    support these methods by default. Finite field Diffie Hellman
    is slow and computationally expensive for the same security
    level as Elliptic Curve DH or PQ key agreement while offering
    no redeeming advantages. ECDH has been specified for the SSH
    protocol for 15 years and some form of ECDH has been the
    default key exchange in OpenSSH for the last 14 years.
  * sshd(8): this release removes the implicit fallback to
    compiled-in groups for Diffie-Hellman Group Exchange KEX when
    the moduli file exists but does not contain moduli within the
    client-requested range.  The fallback behaviour remains for the
    case where the moduli file does not exist at all. This allows
    administrators more explicit control over which DH groups will
    be selected, but can lead to connection failures if the moduli
    file is edited incorrectly. bz#2793
  = Security
  * sshd(8): fix the DisableForwarding directive, which was failing
    to disable X11 forwarding and agent forwarding as documented.
    X11 forwarding is disabled by default in the server and agent
    forwarding is off by default in the client.
  = New features
  * ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256
    is now used by default for key agreement. This algorithm is
    considered to be safe against attack by quantum computers,
    is guaranteed to be no less strong than the popular
    curve25519-sha256 algorithm, has been standardised by NIST
    and is considerably faster than the previous default.
  * ssh(1): prefer AES-GCM to AES-CTR mode when selecting a cipher
    for the connection. The default cipher preference list is now
    Chacha20/Poly1305, AES-GCM (128/256) followed by AES-CTR
    (128/192/256).
  * ssh(1): add %-token and environment variable expansion to the
    ssh_config SetEnv directive.
  * ssh(1): allow %-token and environment variable expansion in
    the ssh_config User directive, with the exception of %r and %C
    which would be self-referential. bz#3477
  * ssh(1), sshd(8): add "Match version" support to ssh_config and
    sshd_config. Allows matching on the local version of OpenSSH,
    e.g. "Match version OpenSSH_10.*".
  * ssh(1): add support for "Match sessiontype" to ssh_config.
    Allows matching on the type of session initially requested,
    either "shell" for interactive sessions, "exec" for command
    execution sessions, "subsystem" for subsystem requests, such as
    sftp, or "none" for transport/forwarding-only sessions.
  * ssh(1): add support for "Match command ..." support to
    ssh_config, allowing matching on the remote command as
    specified on the command-line.
  * ssh(1): allow 'Match tagged ""' and 'Match command ""' to match
    empty tag and command values respectively.
  * sshd(8): allow glob(3) patterns to be used in sshd_config
    AuthorizedKeysFile and AuthorizedPrincipalsFile directives.
    bz2755
  * sshd(1): support the VersionAddendum in the client, mirroring
    the option of the same name in the server; bz2745
  * ssh-agent(1): the agent will now delete all loaded keys when
    signaled with SIGUSR1. This allows deletion of keys without
    having access to $SSH_AUTH_SOCK.
  * Portable OpenSSH, ssh-agent(1): support systemd-style socket
    activation in ssh-agent using the LISTEN_PID/LISTEN_FDS
    mechanism. Activated when these environment variables are set,
    the agent is started with the -d or -D option and no socket
    path is set. GHPR502
  * ssh-keygen(1): support FIDO tokens that return no attestation
    data, e.g. recent WinHello. GHPR542
  * ssh-agent(1): add a "-Owebsafe-allow=..." option to allow the
    default FIDO application ID allow-list to be overridden.
  * Add a work-in-progress tool to verify FIDO attestation blobs
    that ssh-keygen can optionally write when enrolling FIDO keys.
    This tool is available under
    regress/misc/ssh-verify-attestation for experimentation but is
    not installed by "make install".
  * ssh-keygen(1): allow "-" as output file for moduli screening.
    GHPR393
  = Bugfixes
  * sshd(8): remove assumption that the sshd_config and any configs
    it includes can fit in a (possibly enlarged) socket buffer.
    Previously it was possible to create a sufficiently large
    configuration that could cause sshd to fail to accept any
    connection. sshd(8) will now actively manage sending its config
    to the sshd-session sub-process.
  * ssh(1): don't start the ObscureKeystrokeTiming mitigations if
    there has been traffic on a X11 forwarding channel recently.
    Should fix X11 forwarding performance problems when this
    setting is enabled. bz3655
  * ssh(1): prohibit the comma character in hostnames accepted, but
    allow an underscore as the first character in a hostname.
  * sftp(1): set high-water when resuming a "put". Prevents bogus
    "server reordered acks" debug message.
  * ssh(1), sshd(8): fix regression in openssh-9.8, which would
    fail to accept "Match criteria=argument" as well as the
    documented "Match criteria argument" syntax in ssh_config and
    sshd_config. bz3739
  * sftp(1), ssh(1): fix a number possible NULL dereference bugs,
    including Coverity CIDs 405019 and 477813.
  * sshd(8): fix PerSourcePenalty incorrectly using "crash" penalty
    when LoginGraceTime was exceeded. bz3797
  * sshd(8): fix "Match invalid-user" from incorrectly being
    activated in initial configuration pass when no other
    predicates were present on the match line
  * sshd(8): fix debug logging of user specific delay. GHPR#552
  * sshd(8): improve debug logging across sub-process boundaries.
    Previously some log messages were lost early in the sshd-auth
    and sshd-session processes' life.
  * ssh(1): require control-escape character sequences passed via
    the '-e ^x' command-line to be exactly two characters long.
    Avoids one byte out-of-bounds read if ssh is invoked as
    "ssh -e^ ..." GHPR368
  * ssh(1), sshd(8): prevent integer overflow in x11 port handling.
    These are theoretically possible if the admin misconfigured
    X11DisplayOffset or the user misconfigures their own $DISPLAY,
    but don't happen in normal operation. bz#3730
  * ssh-keygen(1): don't mess up ssh-keygen -l output when the file
    contains CR characters; GHPR236 bz3385.
  * sshd(8): add rate limits to logging of connections dropped by
    PerSourcePenalties. Previously these could be noisy in logs.
  * ssh(1): fix argument of "Compression" directive in ssh -G
    config dump, which regressed in openssh-9.8.
  * sshd(8): fix a corner-case triggered by UpdateHostKeys when
    sshd refuses to accept the signature returned by an agent
    holding host keys during the hostkey rotation sub-protocol.
    This situation could occur in situations where a PKCS#11
    smartcard that lacked support for particular signature
    algorithms was used to store host keys.
  * ssh-keygen(1): when using RSA keys to sign messages with
    "ssh-keygen -Y", select the signature algorithm based on the
    requested hash algorithm ("-Ohashalg=xxx"). This allows using
    something other than the default of rsa-sha2-512, which may not
    be supported on all signing backends, e.g. some smartcards only
    support SHA256.
  * ssh(1), sshd(8), ssh-keyscan(1): fix ML-KEM768x25519 KEX on
    big-endian systems.
  * Many regression and interop test improvements.
  = Portability
  * All: add support for AWS-LC (AWS libcrypto). bz3784
  * sshd(8): add wtmpdb support as a Y2038 safe wtmp replacement.
  * sshd(8): add support for locking sshd into memory, enabled with
    the --with-linux-memlock-onfault configure flag.
  * Add support for building a standalone sk-libfido2 library,
    enabled by --with-security-key-standalone
  * ssh(1), sshd(8), ssh-keyscan(1): include __builtin_popcount
    replacement function. for compilers that lack it.
  * All: Check for and replace le32toh, le64toh, htole64
    separately. It appears that at least some versions of endian.h
    in glibc do not have the latter two. bz#3794
  * Remove ancient RHL 6.x config in RPM spec.
- Rebase patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.7p1-cavstest-ctr.patch
  * openssh-7.7p1-cavstest-kdf.patch
  * openssh-7.7p1-fips_checks.patch
  * openssh-8.0p1-gssapi-keyex.patch
  * openssh-8.1p1-audit.patch
  * openssh-7.7p1-ldap.patch
  * openssh-reenable-dh-group14-sha1-default.patch
  * openssh-8.4p1-vendordir.patch
  * logind_set_tty.patch
  * openssh-mitigate-lingering-secrets.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-6.6p1-privsep-selinux.patch
  * openssh-6.6.1p1-selinux-contexts.patch
  * openssh-9.6p1-crypto-policies-man.patch
  * openssh-7.6p1-cleanup-selinux.patch
- Drop patches now included upstream:
  * wtmpdb.patch
  * fix-x11-regression-bsc1229449.patch
  * fix-nopie-flag.patch
- Drop patch since SHA-1 isn't considered secure and the default
  kex list comes from crypto-policies anyway:
  * openssh-reenable-dh-group14-sha1-default.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1744286400">- "Update" to openssh 10.0p2:
  - There was an issue during the packaging of 10.0p1 which made it
    identify itself as 10.0p2 so 10.0p1 is now considered identical
    to 10.0p2 and upstream won't release a separate 10.0p2 package.</changelog>
  <changelog author="hpj@suse.com" date="1745323200">- Add openssh-send-extra-term-env.patch, which appends a few
  environment variables useful for terminal identification to the
  default send and accept lists.</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1772452800">- Add openssh-7.7p1-gssapi-new-unique.patch (bsc#1258166). This
  allows using SSSD with a non-file backend.</changelog>
</package>
<package pkgid="07b63a6179d3d36cf4ab646004af849aa39423a5c950137ca55b650a71f216c1298afcba239ad31ba8002593551fda1c46eef97842ab3b32bea86fab65f4d4b0" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="10.0p2" rel="160000.4.1"/>
  <changelog author="alarrosa@suse.com" date="1739880000">- Update to openssh 9.9p2:
  = Security
  * Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
    (inclusive) contained a logic error that allowed an on-path
    attacker (a.k.a MITM) to impersonate any server when the
    VerifyHostKeyDNS option is enabled. This option is off by
    default.
  * Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
    (inclusive) is vulnerable to a memory/CPU denial-of-service
    related to the handling of SSH2_MSG_PING packets. This
    condition may be mitigated using the existing
    PerSourcePenalties feature.
  Both vulnerabilities were discovered and demonstrated to be
  exploitable by the Qualys Security Advisory team. The openSSH
  team thanks them for their detailed review of OpenSSH.
  = Bugfixes
  * ssh(1), sshd(8): fix regression in Match directive that caused
    failures when predicates and their arguments were separated by
    '=' characters instead of whitespace (bz3739).
  * sshd(8): fix the "Match invalid-user" predicate, which was
    matching incorrectly in the initial pass of config evaluation.
  * ssh(1), sshd(8), ssh-keyscan(1): fix mlkem768x25519-sha256 key
    exchange on big-endian systems.
  * Fix a number of build problems on particular operating systems
    and configurations.
- Remove patches that are already included in 9.9p2:
  * 0001-fix-utmpx-ifdef.patch
  * 0002-upstream-fix-regression-introduced-when-I-switched-the-Match.patch
  * 0003-upstream-fix-previous-change-to-ssh_config-Match_-which-broken-on.patch
  * 0004-upstream-fix-ML-KEM768x25519-KEX-on-big-endian-systems-spotted-by.patch
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="dmueller@suse.com" date="1739966400">- merge openssh-fips into the main openssh package (bsc#1185116)</changelog>
  <changelog author="hillwood@opensuse.org" date="1742299200">- Disable seccomp_filter and rlimitsandbox sandbox for loongarch.
  seccomp_filter and rlimitsandbox not supported on loongarch64 yet.</changelog>
  <changelog author="alarrosa@suse.com" date="1743595200">- Add patch to fix parsing of CFLAGS with duplicated -pie flags,
  which break 'make tests'. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3806 .
  * fix-nopie-flag.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1744027200">- Do not try to create /etc/ssh in sshd-gen-keys-start
  (bsc#1238191). sshd-gen-keys-start transitions to a SELinux
  domain that doesn't have the necessary permissions. Based on
  a SR by Johannes Segitz &lt;jsegitz@suse.com&gt;.</changelog>
  <changelog author="alarrosa@suse.com" date="1744200000">- Update to openssh 10.0p1:
  = Potentially-incompatible changes
  * This release removes support for the weak DSA signature
    algorithm, completing the deprecation process that began in
    2015 (when DSA was disabled by default) and repeatedly warned
    over the last 12 months.
  * scp(1), sftp(1): pass "ControlMaster no" to ssh when invoked by
    scp &amp; sftp. This disables implicit session creation by these
    tools when ControlMaster was set to yes/auto by configuration,
    which some users found surprising. This change will not prevent
    scp/sftp from using an existing multiplexing session if one had
    already been created. GHPR557
  * This release has the version number 10.0 and announces itself
    as "SSH-2.0-OpenSSH_10.0". Software that naively matches
    versions using patterns like "OpenSSH_1*" may be confused by
    this.
  * sshd(8): this release removes the code responsible for the
    user authentication phase of the protocol from the per-
    connection sshd-session binary to a new sshd-auth binary.
    Splitting this code into a separate binary ensures that the
    crucial pre-authentication attack surface has an entirely
    disjoint address space from the code used for the rest of the
    connection. It also yields a small runtime memory saving as the
    authentication code will be unloaded after the authentication
    phase completes. This change should be largely invisible to
    users, though some log messages may now come from "sshd-auth"
    instead of "sshd-session". Downstream distributors of OpenSSH
    will need to package the sshd-auth binary.
  * sshd(8): this release disables finite field (a.k.a modp)
    Diffie-Hellman key exchange in sshd by default. Specifically,
    this removes the "diffie-hellman-group*" and
    "diffie-hellman-group-exchange-*" methods from the default
    KEXAlgorithms list. The client is unchanged and continues to
    support these methods by default. Finite field Diffie Hellman
    is slow and computationally expensive for the same security
    level as Elliptic Curve DH or PQ key agreement while offering
    no redeeming advantages. ECDH has been specified for the SSH
    protocol for 15 years and some form of ECDH has been the
    default key exchange in OpenSSH for the last 14 years.
  * sshd(8): this release removes the implicit fallback to
    compiled-in groups for Diffie-Hellman Group Exchange KEX when
    the moduli file exists but does not contain moduli within the
    client-requested range.  The fallback behaviour remains for the
    case where the moduli file does not exist at all. This allows
    administrators more explicit control over which DH groups will
    be selected, but can lead to connection failures if the moduli
    file is edited incorrectly. bz#2793
  = Security
  * sshd(8): fix the DisableForwarding directive, which was failing
    to disable X11 forwarding and agent forwarding as documented.
    X11 forwarding is disabled by default in the server and agent
    forwarding is off by default in the client.
  = New features
  * ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256
    is now used by default for key agreement. This algorithm is
    considered to be safe against attack by quantum computers,
    is guaranteed to be no less strong than the popular
    curve25519-sha256 algorithm, has been standardised by NIST
    and is considerably faster than the previous default.
  * ssh(1): prefer AES-GCM to AES-CTR mode when selecting a cipher
    for the connection. The default cipher preference list is now
    Chacha20/Poly1305, AES-GCM (128/256) followed by AES-CTR
    (128/192/256).
  * ssh(1): add %-token and environment variable expansion to the
    ssh_config SetEnv directive.
  * ssh(1): allow %-token and environment variable expansion in
    the ssh_config User directive, with the exception of %r and %C
    which would be self-referential. bz#3477
  * ssh(1), sshd(8): add "Match version" support to ssh_config and
    sshd_config. Allows matching on the local version of OpenSSH,
    e.g. "Match version OpenSSH_10.*".
  * ssh(1): add support for "Match sessiontype" to ssh_config.
    Allows matching on the type of session initially requested,
    either "shell" for interactive sessions, "exec" for command
    execution sessions, "subsystem" for subsystem requests, such as
    sftp, or "none" for transport/forwarding-only sessions.
  * ssh(1): add support for "Match command ..." support to
    ssh_config, allowing matching on the remote command as
    specified on the command-line.
  * ssh(1): allow 'Match tagged ""' and 'Match command ""' to match
    empty tag and command values respectively.
  * sshd(8): allow glob(3) patterns to be used in sshd_config
    AuthorizedKeysFile and AuthorizedPrincipalsFile directives.
    bz2755
  * sshd(1): support the VersionAddendum in the client, mirroring
    the option of the same name in the server; bz2745
  * ssh-agent(1): the agent will now delete all loaded keys when
    signaled with SIGUSR1. This allows deletion of keys without
    having access to $SSH_AUTH_SOCK.
  * Portable OpenSSH, ssh-agent(1): support systemd-style socket
    activation in ssh-agent using the LISTEN_PID/LISTEN_FDS
    mechanism. Activated when these environment variables are set,
    the agent is started with the -d or -D option and no socket
    path is set. GHPR502
  * ssh-keygen(1): support FIDO tokens that return no attestation
    data, e.g. recent WinHello. GHPR542
  * ssh-agent(1): add a "-Owebsafe-allow=..." option to allow the
    default FIDO application ID allow-list to be overridden.
  * Add a work-in-progress tool to verify FIDO attestation blobs
    that ssh-keygen can optionally write when enrolling FIDO keys.
    This tool is available under
    regress/misc/ssh-verify-attestation for experimentation but is
    not installed by "make install".
  * ssh-keygen(1): allow "-" as output file for moduli screening.
    GHPR393
  = Bugfixes
  * sshd(8): remove assumption that the sshd_config and any configs
    it includes can fit in a (possibly enlarged) socket buffer.
    Previously it was possible to create a sufficiently large
    configuration that could cause sshd to fail to accept any
    connection. sshd(8) will now actively manage sending its config
    to the sshd-session sub-process.
  * ssh(1): don't start the ObscureKeystrokeTiming mitigations if
    there has been traffic on a X11 forwarding channel recently.
    Should fix X11 forwarding performance problems when this
    setting is enabled. bz3655
  * ssh(1): prohibit the comma character in hostnames accepted, but
    allow an underscore as the first character in a hostname.
  * sftp(1): set high-water when resuming a "put". Prevents bogus
    "server reordered acks" debug message.
  * ssh(1), sshd(8): fix regression in openssh-9.8, which would
    fail to accept "Match criteria=argument" as well as the
    documented "Match criteria argument" syntax in ssh_config and
    sshd_config. bz3739
  * sftp(1), ssh(1): fix a number possible NULL dereference bugs,
    including Coverity CIDs 405019 and 477813.
  * sshd(8): fix PerSourcePenalty incorrectly using "crash" penalty
    when LoginGraceTime was exceeded. bz3797
  * sshd(8): fix "Match invalid-user" from incorrectly being
    activated in initial configuration pass when no other
    predicates were present on the match line
  * sshd(8): fix debug logging of user specific delay. GHPR#552
  * sshd(8): improve debug logging across sub-process boundaries.
    Previously some log messages were lost early in the sshd-auth
    and sshd-session processes' life.
  * ssh(1): require control-escape character sequences passed via
    the '-e ^x' command-line to be exactly two characters long.
    Avoids one byte out-of-bounds read if ssh is invoked as
    "ssh -e^ ..." GHPR368
  * ssh(1), sshd(8): prevent integer overflow in x11 port handling.
    These are theoretically possible if the admin misconfigured
    X11DisplayOffset or the user misconfigures their own $DISPLAY,
    but don't happen in normal operation. bz#3730
  * ssh-keygen(1): don't mess up ssh-keygen -l output when the file
    contains CR characters; GHPR236 bz3385.
  * sshd(8): add rate limits to logging of connections dropped by
    PerSourcePenalties. Previously these could be noisy in logs.
  * ssh(1): fix argument of "Compression" directive in ssh -G
    config dump, which regressed in openssh-9.8.
  * sshd(8): fix a corner-case triggered by UpdateHostKeys when
    sshd refuses to accept the signature returned by an agent
    holding host keys during the hostkey rotation sub-protocol.
    This situation could occur in situations where a PKCS#11
    smartcard that lacked support for particular signature
    algorithms was used to store host keys.
  * ssh-keygen(1): when using RSA keys to sign messages with
    "ssh-keygen -Y", select the signature algorithm based on the
    requested hash algorithm ("-Ohashalg=xxx"). This allows using
    something other than the default of rsa-sha2-512, which may not
    be supported on all signing backends, e.g. some smartcards only
    support SHA256.
  * ssh(1), sshd(8), ssh-keyscan(1): fix ML-KEM768x25519 KEX on
    big-endian systems.
  * Many regression and interop test improvements.
  = Portability
  * All: add support for AWS-LC (AWS libcrypto). bz3784
  * sshd(8): add wtmpdb support as a Y2038 safe wtmp replacement.
  * sshd(8): add support for locking sshd into memory, enabled with
    the --with-linux-memlock-onfault configure flag.
  * Add support for building a standalone sk-libfido2 library,
    enabled by --with-security-key-standalone
  * ssh(1), sshd(8), ssh-keyscan(1): include __builtin_popcount
    replacement function. for compilers that lack it.
  * All: Check for and replace le32toh, le64toh, htole64
    separately. It appears that at least some versions of endian.h
    in glibc do not have the latter two. bz#3794
  * Remove ancient RHL 6.x config in RPM spec.
- Rebase patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.7p1-cavstest-ctr.patch
  * openssh-7.7p1-cavstest-kdf.patch
  * openssh-7.7p1-fips_checks.patch
  * openssh-8.0p1-gssapi-keyex.patch
  * openssh-8.1p1-audit.patch
  * openssh-7.7p1-ldap.patch
  * openssh-reenable-dh-group14-sha1-default.patch
  * openssh-8.4p1-vendordir.patch
  * logind_set_tty.patch
  * openssh-mitigate-lingering-secrets.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-6.6p1-privsep-selinux.patch
  * openssh-6.6.1p1-selinux-contexts.patch
  * openssh-9.6p1-crypto-policies-man.patch
  * openssh-7.6p1-cleanup-selinux.patch
- Drop patches now included upstream:
  * wtmpdb.patch
  * fix-x11-regression-bsc1229449.patch
  * fix-nopie-flag.patch
- Drop patch since SHA-1 isn't considered secure and the default
  kex list comes from crypto-policies anyway:
  * openssh-reenable-dh-group14-sha1-default.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1744286400">- "Update" to openssh 10.0p2:
  - There was an issue during the packaging of 10.0p1 which made it
    identify itself as 10.0p2 so 10.0p1 is now considered identical
    to 10.0p2 and upstream won't release a separate 10.0p2 package.</changelog>
  <changelog author="hpj@suse.com" date="1745323200">- Add openssh-send-extra-term-env.patch, which appends a few
  environment variables useful for terminal identification to the
  default send and accept lists.</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1772452800">- Add openssh-7.7p1-gssapi-new-unique.patch (bsc#1258166). This
  allows using SSSD with a non-file backend.</changelog>
</package>
<package pkgid="797b1aaaa5aef045d62f242992ac84a2f7d66c494f50a02533b6bbbb14398861214a8b3d7fbeb757ea9e6946e6fa20ec16a206b772e516a32152e181777432f2" name="openssh-server-config-rootlogin" arch="x86_64">
  <version epoch="0" ver="10.0p2" rel="160000.4.1"/>
  <changelog author="alarrosa@suse.com" date="1739880000">- Update to openssh 9.9p2:
  = Security
  * Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
    (inclusive) contained a logic error that allowed an on-path
    attacker (a.k.a MITM) to impersonate any server when the
    VerifyHostKeyDNS option is enabled. This option is off by
    default.
  * Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
    (inclusive) is vulnerable to a memory/CPU denial-of-service
    related to the handling of SSH2_MSG_PING packets. This
    condition may be mitigated using the existing
    PerSourcePenalties feature.
  Both vulnerabilities were discovered and demonstrated to be
  exploitable by the Qualys Security Advisory team. The openSSH
  team thanks them for their detailed review of OpenSSH.
  = Bugfixes
  * ssh(1), sshd(8): fix regression in Match directive that caused
    failures when predicates and their arguments were separated by
    '=' characters instead of whitespace (bz3739).
  * sshd(8): fix the "Match invalid-user" predicate, which was
    matching incorrectly in the initial pass of config evaluation.
  * ssh(1), sshd(8), ssh-keyscan(1): fix mlkem768x25519-sha256 key
    exchange on big-endian systems.
  * Fix a number of build problems on particular operating systems
    and configurations.
- Remove patches that are already included in 9.9p2:
  * 0001-fix-utmpx-ifdef.patch
  * 0002-upstream-fix-regression-introduced-when-I-switched-the-Match.patch
  * 0003-upstream-fix-previous-change-to-ssh_config-Match_-which-broken-on.patch
  * 0004-upstream-fix-ML-KEM768x25519-KEX-on-big-endian-systems-spotted-by.patch
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="dmueller@suse.com" date="1739966400">- merge openssh-fips into the main openssh package (bsc#1185116)</changelog>
  <changelog author="hillwood@opensuse.org" date="1742299200">- Disable seccomp_filter and rlimitsandbox sandbox for loongarch.
  seccomp_filter and rlimitsandbox not supported on loongarch64 yet.</changelog>
  <changelog author="alarrosa@suse.com" date="1743595200">- Add patch to fix parsing of CFLAGS with duplicated -pie flags,
  which break 'make tests'. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3806 .
  * fix-nopie-flag.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1744027200">- Do not try to create /etc/ssh in sshd-gen-keys-start
  (bsc#1238191). sshd-gen-keys-start transitions to a SELinux
  domain that doesn't have the necessary permissions. Based on
  a SR by Johannes Segitz &lt;jsegitz@suse.com&gt;.</changelog>
  <changelog author="alarrosa@suse.com" date="1744200000">- Update to openssh 10.0p1:
  = Potentially-incompatible changes
  * This release removes support for the weak DSA signature
    algorithm, completing the deprecation process that began in
    2015 (when DSA was disabled by default) and repeatedly warned
    over the last 12 months.
  * scp(1), sftp(1): pass "ControlMaster no" to ssh when invoked by
    scp &amp; sftp. This disables implicit session creation by these
    tools when ControlMaster was set to yes/auto by configuration,
    which some users found surprising. This change will not prevent
    scp/sftp from using an existing multiplexing session if one had
    already been created. GHPR557
  * This release has the version number 10.0 and announces itself
    as "SSH-2.0-OpenSSH_10.0". Software that naively matches
    versions using patterns like "OpenSSH_1*" may be confused by
    this.
  * sshd(8): this release removes the code responsible for the
    user authentication phase of the protocol from the per-
    connection sshd-session binary to a new sshd-auth binary.
    Splitting this code into a separate binary ensures that the
    crucial pre-authentication attack surface has an entirely
    disjoint address space from the code used for the rest of the
    connection. It also yields a small runtime memory saving as the
    authentication code will be unloaded after the authentication
    phase completes. This change should be largely invisible to
    users, though some log messages may now come from "sshd-auth"
    instead of "sshd-session". Downstream distributors of OpenSSH
    will need to package the sshd-auth binary.
  * sshd(8): this release disables finite field (a.k.a modp)
    Diffie-Hellman key exchange in sshd by default. Specifically,
    this removes the "diffie-hellman-group*" and
    "diffie-hellman-group-exchange-*" methods from the default
    KEXAlgorithms list. The client is unchanged and continues to
    support these methods by default. Finite field Diffie Hellman
    is slow and computationally expensive for the same security
    level as Elliptic Curve DH or PQ key agreement while offering
    no redeeming advantages. ECDH has been specified for the SSH
    protocol for 15 years and some form of ECDH has been the
    default key exchange in OpenSSH for the last 14 years.
  * sshd(8): this release removes the implicit fallback to
    compiled-in groups for Diffie-Hellman Group Exchange KEX when
    the moduli file exists but does not contain moduli within the
    client-requested range.  The fallback behaviour remains for the
    case where the moduli file does not exist at all. This allows
    administrators more explicit control over which DH groups will
    be selected, but can lead to connection failures if the moduli
    file is edited incorrectly. bz#2793
  = Security
  * sshd(8): fix the DisableForwarding directive, which was failing
    to disable X11 forwarding and agent forwarding as documented.
    X11 forwarding is disabled by default in the server and agent
    forwarding is off by default in the client.
  = New features
  * ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256
    is now used by default for key agreement. This algorithm is
    considered to be safe against attack by quantum computers,
    is guaranteed to be no less strong than the popular
    curve25519-sha256 algorithm, has been standardised by NIST
    and is considerably faster than the previous default.
  * ssh(1): prefer AES-GCM to AES-CTR mode when selecting a cipher
    for the connection. The default cipher preference list is now
    Chacha20/Poly1305, AES-GCM (128/256) followed by AES-CTR
    (128/192/256).
  * ssh(1): add %-token and environment variable expansion to the
    ssh_config SetEnv directive.
  * ssh(1): allow %-token and environment variable expansion in
    the ssh_config User directive, with the exception of %r and %C
    which would be self-referential. bz#3477
  * ssh(1), sshd(8): add "Match version" support to ssh_config and
    sshd_config. Allows matching on the local version of OpenSSH,
    e.g. "Match version OpenSSH_10.*".
  * ssh(1): add support for "Match sessiontype" to ssh_config.
    Allows matching on the type of session initially requested,
    either "shell" for interactive sessions, "exec" for command
    execution sessions, "subsystem" for subsystem requests, such as
    sftp, or "none" for transport/forwarding-only sessions.
  * ssh(1): add support for "Match command ..." support to
    ssh_config, allowing matching on the remote command as
    specified on the command-line.
  * ssh(1): allow 'Match tagged ""' and 'Match command ""' to match
    empty tag and command values respectively.
  * sshd(8): allow glob(3) patterns to be used in sshd_config
    AuthorizedKeysFile and AuthorizedPrincipalsFile directives.
    bz2755
  * sshd(1): support the VersionAddendum in the client, mirroring
    the option of the same name in the server; bz2745
  * ssh-agent(1): the agent will now delete all loaded keys when
    signaled with SIGUSR1. This allows deletion of keys without
    having access to $SSH_AUTH_SOCK.
  * Portable OpenSSH, ssh-agent(1): support systemd-style socket
    activation in ssh-agent using the LISTEN_PID/LISTEN_FDS
    mechanism. Activated when these environment variables are set,
    the agent is started with the -d or -D option and no socket
    path is set. GHPR502
  * ssh-keygen(1): support FIDO tokens that return no attestation
    data, e.g. recent WinHello. GHPR542
  * ssh-agent(1): add a "-Owebsafe-allow=..." option to allow the
    default FIDO application ID allow-list to be overridden.
  * Add a work-in-progress tool to verify FIDO attestation blobs
    that ssh-keygen can optionally write when enrolling FIDO keys.
    This tool is available under
    regress/misc/ssh-verify-attestation for experimentation but is
    not installed by "make install".
  * ssh-keygen(1): allow "-" as output file for moduli screening.
    GHPR393
  = Bugfixes
  * sshd(8): remove assumption that the sshd_config and any configs
    it includes can fit in a (possibly enlarged) socket buffer.
    Previously it was possible to create a sufficiently large
    configuration that could cause sshd to fail to accept any
    connection. sshd(8) will now actively manage sending its config
    to the sshd-session sub-process.
  * ssh(1): don't start the ObscureKeystrokeTiming mitigations if
    there has been traffic on a X11 forwarding channel recently.
    Should fix X11 forwarding performance problems when this
    setting is enabled. bz3655
  * ssh(1): prohibit the comma character in hostnames accepted, but
    allow an underscore as the first character in a hostname.
  * sftp(1): set high-water when resuming a "put". Prevents bogus
    "server reordered acks" debug message.
  * ssh(1), sshd(8): fix regression in openssh-9.8, which would
    fail to accept "Match criteria=argument" as well as the
    documented "Match criteria argument" syntax in ssh_config and
    sshd_config. bz3739
  * sftp(1), ssh(1): fix a number possible NULL dereference bugs,
    including Coverity CIDs 405019 and 477813.
  * sshd(8): fix PerSourcePenalty incorrectly using "crash" penalty
    when LoginGraceTime was exceeded. bz3797
  * sshd(8): fix "Match invalid-user" from incorrectly being
    activated in initial configuration pass when no other
    predicates were present on the match line
  * sshd(8): fix debug logging of user specific delay. GHPR#552
  * sshd(8): improve debug logging across sub-process boundaries.
    Previously some log messages were lost early in the sshd-auth
    and sshd-session processes' life.
  * ssh(1): require control-escape character sequences passed via
    the '-e ^x' command-line to be exactly two characters long.
    Avoids one byte out-of-bounds read if ssh is invoked as
    "ssh -e^ ..." GHPR368
  * ssh(1), sshd(8): prevent integer overflow in x11 port handling.
    These are theoretically possible if the admin misconfigured
    X11DisplayOffset or the user misconfigures their own $DISPLAY,
    but don't happen in normal operation. bz#3730
  * ssh-keygen(1): don't mess up ssh-keygen -l output when the file
    contains CR characters; GHPR236 bz3385.
  * sshd(8): add rate limits to logging of connections dropped by
    PerSourcePenalties. Previously these could be noisy in logs.
  * ssh(1): fix argument of "Compression" directive in ssh -G
    config dump, which regressed in openssh-9.8.
  * sshd(8): fix a corner-case triggered by UpdateHostKeys when
    sshd refuses to accept the signature returned by an agent
    holding host keys during the hostkey rotation sub-protocol.
    This situation could occur in situations where a PKCS#11
    smartcard that lacked support for particular signature
    algorithms was used to store host keys.
  * ssh-keygen(1): when using RSA keys to sign messages with
    "ssh-keygen -Y", select the signature algorithm based on the
    requested hash algorithm ("-Ohashalg=xxx"). This allows using
    something other than the default of rsa-sha2-512, which may not
    be supported on all signing backends, e.g. some smartcards only
    support SHA256.
  * ssh(1), sshd(8), ssh-keyscan(1): fix ML-KEM768x25519 KEX on
    big-endian systems.
  * Many regression and interop test improvements.
  = Portability
  * All: add support for AWS-LC (AWS libcrypto). bz3784
  * sshd(8): add wtmpdb support as a Y2038 safe wtmp replacement.
  * sshd(8): add support for locking sshd into memory, enabled with
    the --with-linux-memlock-onfault configure flag.
  * Add support for building a standalone sk-libfido2 library,
    enabled by --with-security-key-standalone
  * ssh(1), sshd(8), ssh-keyscan(1): include __builtin_popcount
    replacement function. for compilers that lack it.
  * All: Check for and replace le32toh, le64toh, htole64
    separately. It appears that at least some versions of endian.h
    in glibc do not have the latter two. bz#3794
  * Remove ancient RHL 6.x config in RPM spec.
- Rebase patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.7p1-cavstest-ctr.patch
  * openssh-7.7p1-cavstest-kdf.patch
  * openssh-7.7p1-fips_checks.patch
  * openssh-8.0p1-gssapi-keyex.patch
  * openssh-8.1p1-audit.patch
  * openssh-7.7p1-ldap.patch
  * openssh-reenable-dh-group14-sha1-default.patch
  * openssh-8.4p1-vendordir.patch
  * logind_set_tty.patch
  * openssh-mitigate-lingering-secrets.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-6.6p1-privsep-selinux.patch
  * openssh-6.6.1p1-selinux-contexts.patch
  * openssh-9.6p1-crypto-policies-man.patch
  * openssh-7.6p1-cleanup-selinux.patch
- Drop patches now included upstream:
  * wtmpdb.patch
  * fix-x11-regression-bsc1229449.patch
  * fix-nopie-flag.patch
- Drop patch since SHA-1 isn't considered secure and the default
  kex list comes from crypto-policies anyway:
  * openssh-reenable-dh-group14-sha1-default.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1744286400">- "Update" to openssh 10.0p2:
  - There was an issue during the packaging of 10.0p1 which made it
    identify itself as 10.0p2 so 10.0p1 is now considered identical
    to 10.0p2 and upstream won't release a separate 10.0p2 package.</changelog>
  <changelog author="hpj@suse.com" date="1745323200">- Add openssh-send-extra-term-env.patch, which appends a few
  environment variables useful for terminal identification to the
  default send and accept lists.</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1772452800">- Add openssh-7.7p1-gssapi-new-unique.patch (bsc#1258166). This
  allows using SSSD with a non-file backend.</changelog>
</package>
<package pkgid="990dc2c9688398b1d3da1afdf0f04c430873d78f5cc4c4afb76ae6647173c4bafb76b78d50da13976592b66e464fdecfd48fe8e67b4e2e7d58c41fc83ab0529f" name="openssl-3" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="160000.7.1"/>
  <changelog author="pmonreal@suse.com" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="lucas.mulling@suse.com" date="1755432000">- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl3-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl3-CVE-2025-9232.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="angel.yankov@suse.com" date="1771934400">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="lucas.mulling@suse.com" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
</package>
<package pkgid="e45d9f6afb7d1229c2846ea6403178be1f2a945b0e3ac048025903c9d51704d17b43059872b095a9d9290dcfa1ef6bfbef388569a2089f2e039f497f594565ae" name="openssl" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="160000.2.2"/>
  <changelog author="otto.hollmann@suse.com" date="1700740800">- Update to 3.1.4 (jsc#PED-6570)</changelog>
  <changelog author="pmonreal@suse.com" date="1706529600">- New libopenssl-fips-provider package.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1707825600">- Add Conflicts, Provides: openssl(cli) (bsc#1210313)</changelog>
  <changelog author="pmonreal@suse.com" date="1708689600">- Build the 32bit flavor of libopenssl-fips-provider [bsc#1220232]
  * Update baselibs.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Update to 3.2.3</changelog>
  <changelog author="lucas.mulling@suse.com" date="1739275200">- Update to 3.2.4</changelog>
  <changelog author="lucas.mulling@suse.com" date="1743768000">- Update to 3.5.0</changelog>
</package>
<package pkgid="b29061744cfed5b77c70774de2c48ed2041d5e408d704c5e323c0684cd75ae4a65064d33000f97f1994d724c1a80248cf56e1678143d1c886289fcc2629375b5" name="opensuse-migration-tool" arch="noarch">
  <version epoch="0" ver="20260421.e72b645" rel="160000.1.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1757678400">- Update to version 20250815.344dba5:
  * Keep only Experimental in the title
  * Install custom dialogrc with a green theme</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1759320000">- Update to version 20251001.d4b9783:
  * Be consistently not using abbreviations in zypper
  * Refactor upgrade for not just Tumbleweed
  * Update migration matrix
  * Add support from MicroOS-Slowroll -&gt; MicroOS
  * Enable MicroOS-Slowroll migration target
  * fix: remove the check for x86-64-v3 flag `movbe` from the v2 check
  * Update README to remove duplicate warning
  * Revise experimental usage warning in README
  * Update screenshot
  * Keep only Experimental in the title</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1760702400">- Update to version 20251017.e28f94c:
  * fix: remove the check for x86-64-v3 flag xsave from the v2 check</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1761739200">- Update to version 20251029.ed0d12d:
  * Update opensuse-migration-tool</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1762516800">- Drop accidentally created submodule
  * Add opensuse-migration-tool to .gitignore</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1767873600">- Update to version 20260106.d2cfd39:
  * Update scripts/20_pulse2pipewire.sh
  * Update scripts/20_ia32.sh
  * Update scripts/20_pulse2pipewire.sh
  * Consistent no-use of sudo in migration scripts
  * Update scripts/10_keepapparmor.sh
  * Update scripts/10_keepselinux.sh
  * Update scripts/10_keepapparmor.sh
  * Update scripts/10_keepapparmor.sh
  * Update opensuse-migration-tool
  * Update scripts/10_keepselinux.sh
  * Improve DRYRUN option to work well even from scripts
  * Enable migration to SElinux with proper dryrun
  * Update 10_keepselinux.sh
  * Update 10_keepapparmor.sh
  * Update 10_keepapparmor.sh</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1769428800">- Add dependency on update-bootloader to fix boo#1255897
  pattern-base-selinux could be skipped if update-bootloader was missing</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1770206400">- Update to version 20260204.2cf77a3:
  * Drop requires on update-bootloader as it's not available on 15.6.
    Install it in post-script on target of migration instead. boo#1255897
  * Refine post-scritps
  * Ensure update bootloader is installed in post scripts
  * don't install selinux-policy-targeted-gaming by default</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1775649600">- Update to version 20260408.218e5ee:
  * Add support for Leap Micro to Leap migration
  * Add quick start guide for git installation
  * Use .tar.xz for some reason obs service tar fails on 15.6</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1776772800">- Update to version 20260421.e72b645:
  * Update ports temp repo url for Tumbleweed</changelog>
</package>
<package pkgid="43f5956a1800e614bec7a955b6420b9596842f47a42ec9a37fd7693368f339d62eddb20070fa9047cc9cee928e2014d76bdf235f9e35df9e18448ad930b2973b" name="openvswitch" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="160000.3.1"/>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1707998400">- Fix CVE-2023-3966 [bsc#1219465] openvswitch3: Invalid memory access in Geneve with HW offload
- Added patch,
    +openvswitch-CVE-2023-3966.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mjambor@suse.com" date="1717502400">- GCC 14 started to advertise c_atomic extension, older versions
  didn't do that.  Add check for __clang__, so GCC doesn't include
  headers designed for Clang
  (openvswitch-2.17.8-gcc14-build-fix.patch) [boo#1225906]</changelog>
  <changelog author="pgajdos@suse.com" date="1722340800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1724846400">- Update openvswitch to 3.3.1. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v3.3.1/NEWS
- Update OVN to 24.03.3. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v24.03.3/NEWS
- Drop upstream fixed patches,
  * CVE-2023-1668.patch
  * CVE-2023-3152.patch
  * CVE-2023-5366.patch
  * openvswitch-2.17.8-gcc14-build-fix.patch
  * openvswitch-CVE-2023-3966.patch
- Updated the patch for version v3.3.1
  * install-ovsdb-tools.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1734350400">- Add proper dependency on /usr/sbin/ipsec on openvswitch-ipsec:
  without the binary present, the service crashes on startup
  (boo#1234617).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1737979200">- Update openvswitch to 3.3.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v3.3.2/NEWS
- Update OVN to 24.03.5. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v24.03.5/NEWS
  - This update fix CVE-2025-0650 ovn: egress ACLs may be bypassed
    via specially crafted UDP packet (bsc#1236353)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1742558400">- Update OVN to 25.03.0 for a list of changes, check
  https://github.com/ovn-org/ovn/blob/v25.03.0/NEWS (jsc#PED-11228)
- Update openvswitch to 3.5.0 for a list of changes, check
  https://www.openvswitch.org/releases/NEWS-3.5.0.txt (jsc#PED-11228)
- Rename "python3-ovs" to "python3-openvswitch" for distro consistency
- Update patch file 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1764158400">- Update OVN to 25.03.1
  * Bug fixes
- Update Openvswitch to 3.5.2
  * Bug fixes</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767960000">- Update OVN to 25.03.2
  - Bug fixes
  - Dynamic Routing:
  * Add the option "dynamic-routing-redistribute-local-only" to Logical
    Routers and Logical Router Ports which refines the way in which
    chassis-specific Advertised_Routes (e.g., for NAT and LB IPs) are
    advertised.
  * Add the option "dynamic-routing-vrf-id" to Logical Routers which allows
    CMS to specify the Linux routing table id for a given vrf.
  - Add ovn-nbctl lsp-add-router-port which will create router port on
    specified LS.
  - Add ovn-nbctl lsp-add-localnet-port which will create localnet port on
    specified LS.</changelog>
</package>
<package pkgid="e45435a8b69edd8b017401e7175aa9740be6246b7a44357e52da0f9528c5a453643477f8be96a739763a4c0c3a4c3840efee24ae943e5bf7f4aab6c8302ab21c" name="osinfo-db" arch="noarch">
  <version epoch="0" ver="20250606" rel="160000.3.1"/>
  <changelog author="carnold@suse.com" date="1737115200">- Add support for SLES-16 (bsc#1236252) (jsc#PED-8910)
  add-sles16-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1737720000">- Add support for openSUSE Leap 16.0 (jsc#PED-8910)
  add-opensuse-leap-16.0-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1737979200">- Update to database version 20250124 (jsc#PED-8910)
  osinfo-db-20250124.tar.xz
- Drop patches contained in new tarball
  add-opensuse-leap-15.6-support.patch
  add-sle15sp6-support.patch
  add-slem5.5-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1740139200">- Add for SLES 16 / Leap 16, &lt;firmware arch="x86_64" type="efi"/&gt;
  add-sles16-support.patch
  add-opensuse-leap-16.0-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1740657600">- Modify SLES and Leap 16 database entries to define new volume id
  of Agama 12 ISOs (bsc#1236401)
  add-sles16-support.patch
  add-opensuse-leap-16.0-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1743163200">- bsc#1240121 - [SLEMicro6.2] osinfo-db: Add support for slem6.2 to
  the database
  add-slem6.2-support.patch
- bsc#1240338 - virt-manager: Windows Server 2025 is not
  automatically detected and missing from manual selection
  add-Windows-Server-2025.patch</changelog>
  <changelog author="carnold@suse.com" date="1747742400">- bsc#1243296 - What version of virt-manager-common supports SLES16
  ISO layout
  add-sles16-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1749816000">- Update to database version 20250606 (jsc#PED-12706)
  osinfo-db-20250606.tar.xz
- Drop add-Windows-Server-2025.patch</changelog>
  <changelog author="carnold@suse.com" date="1757505600">- Fix the definition of Leap 16.0 to match the current names of the
  Leap 16.0 ISOs and the Volume IDs contained within those ISOs.
  (bsc#1236401)
  add-opensuse-leap-16.0-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1761220800">- bsc#1252429 - virt-manager does not detect Leap 16.0 offline ISO
  add-opensuse-leap-16.0-support.patch</changelog>
</package>
<package pkgid="3eaefbcd7edcbf1d1612153844a38dc443e066ec1b8d4ae4129325456f878efbb97bf154f20d59a402fc59dcaacb359741eca62ac33bcc6357a6bf38fa5833e5" name="p11-kit" arch="x86_64">
  <version epoch="0" ver="0.25.5" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1646827200">- make sure p11-kit components have matching versions (boo#1196812)</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip testsuite on qemu arches, it fails</changelog>
  <changelog author="pmonreal@suse.com" date="1695211200">- Update to 0.25.0:
  * add PKCS#11 3.0 support
  * add support for profile objects
  * add ability to adjust module and config paths at run-time via
    system environmental exports
  * make terminal output nicer
  * p11-kit: add command to print merged configuration
  * p11-kit: add commands to list, add and delete profiles of a token
  * trust: add command to check format of .p11-kit files
  * virtual: fix libffi type signatures for PKCS#11 3.0 functions
  * server: fix umask setting when --group is specified
  * server: check SHELL only when neither --sh nor --csh is specified
  * rpc: use space string in C_InitToken
  * rpc: fix two off-by-one errors identified by asan
  * modules: make logging message more translatable
  * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms
  * pkcs11.h: add IBM specific mechanism and attributes
  * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms
  * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption
  * po: update translations from Transifex
- Update upstream p11-kit.keyring file
- Add missing lang files
- Switch to using Meson as the build system</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211201">- Add d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch: Fix probing
  of C_GetInterface.</changelog>
  <changelog author="pmonreal@suse.com" date="1698408000">- Update to 0.25.1:
  * fix probing of C_GetInterface [#535]
  * p11-kit: add command to list tokens [#581]
  * p11-kit: add command to list mechanisms supported by a token [#576]
  * p11-kit: add command to generate private-public keypair on a token
    [#551, #582]
  * p11-kit: add commands to import/export certificates and public
    keys into/from a token [#543, #549, #568, #588]
  * p11-kit: add commands to list and delete objects of a token
    [#533, #544, #571]
  * p11-kit: add --login option to login into a token with object
    and profile management commands [#587]
  * p11-kit: adjust behavior of PKCS#11 profile management commands
    [#558, #560, #583, #591]
  * p11-kit: print PKCS#11 URIs in list-modules [#532]
  * bug and build fixes [#528 #529, #534, #537, #540, #541, #545,
    [#547], #550, #557, #572, #575, #579, #585, #586, #590]
  * test fixes [#553, #580]
  * Remove patch fixed upstream:
  - d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698926400">- Update to 0.25.2:
  * fix error code checking of readpassphrase for --login option [#595]
  * build fixes [#594]
  * test fixes [#596]</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 0.25.3:
  * rpc: fix serialization of NULL mechanism pointer [#601]
  * fix meson build failure in macOS (appleframeworks not found) [#603]</changelog>
  <changelog author="mjambor@suse.com" date="1721995200">- Added a backport of an upstream commit in p11-kit-d938f4a8a3a2.patch
  to avoid passing an incompatible pointer type to a function which is
  an error by default in GCC 14.</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 0.25.4:
  * rpc: add support for recursive attributes
  * p11-kit: add function to check run-time version of the library
  * p11-kit: expose version information through macros
  * p11-kit: add option to specify CKA_ID in generate-keypair and
    import-object commands
  * p11-kit: add --provider option to specify PKCS#11 module when
    using p11-kit commands
  * p11-kit: fix a bug where eddsa mechanism isn't recognized in
    generate-keypair
  * p11-kit: fallback to C_GetFunctionList when C_GetInterface
    returns CKR_FUNCTION_NOT_SUPPORTED
  * bug and build fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1726228801">- Update to 0.25.5:
  * iter: fix recursive attribute loading
  * fix building on FreeBSD 14.0 (amd64)
  * Remove p11-kit-d938f4a8a3a2.patch upstream</changelog>
</package>
<package pkgid="93cf58240e4a0082e114b92e1683fd4b1e217138a5a244931f0f35d26a60fdcac9c51aa00f90757c42e808f42ed8e641f31e0898784612b40f62c9f3596482c6" name="p11-kit-tools" arch="x86_64">
  <version epoch="0" ver="0.25.5" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1646827200">- make sure p11-kit components have matching versions (boo#1196812)</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip testsuite on qemu arches, it fails</changelog>
  <changelog author="pmonreal@suse.com" date="1695211200">- Update to 0.25.0:
  * add PKCS#11 3.0 support
  * add support for profile objects
  * add ability to adjust module and config paths at run-time via
    system environmental exports
  * make terminal output nicer
  * p11-kit: add command to print merged configuration
  * p11-kit: add commands to list, add and delete profiles of a token
  * trust: add command to check format of .p11-kit files
  * virtual: fix libffi type signatures for PKCS#11 3.0 functions
  * server: fix umask setting when --group is specified
  * server: check SHELL only when neither --sh nor --csh is specified
  * rpc: use space string in C_InitToken
  * rpc: fix two off-by-one errors identified by asan
  * modules: make logging message more translatable
  * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms
  * pkcs11.h: add IBM specific mechanism and attributes
  * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms
  * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption
  * po: update translations from Transifex
- Update upstream p11-kit.keyring file
- Add missing lang files
- Switch to using Meson as the build system</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211201">- Add d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch: Fix probing
  of C_GetInterface.</changelog>
  <changelog author="pmonreal@suse.com" date="1698408000">- Update to 0.25.1:
  * fix probing of C_GetInterface [#535]
  * p11-kit: add command to list tokens [#581]
  * p11-kit: add command to list mechanisms supported by a token [#576]
  * p11-kit: add command to generate private-public keypair on a token
    [#551, #582]
  * p11-kit: add commands to import/export certificates and public
    keys into/from a token [#543, #549, #568, #588]
  * p11-kit: add commands to list and delete objects of a token
    [#533, #544, #571]
  * p11-kit: add --login option to login into a token with object
    and profile management commands [#587]
  * p11-kit: adjust behavior of PKCS#11 profile management commands
    [#558, #560, #583, #591]
  * p11-kit: print PKCS#11 URIs in list-modules [#532]
  * bug and build fixes [#528 #529, #534, #537, #540, #541, #545,
    [#547], #550, #557, #572, #575, #579, #585, #586, #590]
  * test fixes [#553, #580]
  * Remove patch fixed upstream:
  - d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698926400">- Update to 0.25.2:
  * fix error code checking of readpassphrase for --login option [#595]
  * build fixes [#594]
  * test fixes [#596]</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 0.25.3:
  * rpc: fix serialization of NULL mechanism pointer [#601]
  * fix meson build failure in macOS (appleframeworks not found) [#603]</changelog>
  <changelog author="mjambor@suse.com" date="1721995200">- Added a backport of an upstream commit in p11-kit-d938f4a8a3a2.patch
  to avoid passing an incompatible pointer type to a function which is
  an error by default in GCC 14.</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 0.25.4:
  * rpc: add support for recursive attributes
  * p11-kit: add function to check run-time version of the library
  * p11-kit: expose version information through macros
  * p11-kit: add option to specify CKA_ID in generate-keypair and
    import-object commands
  * p11-kit: add --provider option to specify PKCS#11 module when
    using p11-kit commands
  * p11-kit: fix a bug where eddsa mechanism isn't recognized in
    generate-keypair
  * p11-kit: fallback to C_GetFunctionList when C_GetInterface
    returns CKR_FUNCTION_NOT_SUPPORTED
  * bug and build fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1726228801">- Update to 0.25.5:
  * iter: fix recursive attribute loading
  * fix building on FreeBSD 14.0 (amd64)
  * Remove p11-kit-d938f4a8a3a2.patch upstream</changelog>
</package>
<package pkgid="82a4492d68c0505d7773c1e2179d9b17ef069600136d96401614cdf7141937d4e5da9add4baabb62818b6bb128bf4e3c91f1551ea7b821e1e25eaab45292aa19" name="pam" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="160000.3.1"/>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
</package>
<package pkgid="2bae3763b5fa3a1ff0a5053517eeb5e45bdba76b9e5d949f81be0e7f7238845a88f108b3d3b0b427f024517c295bb821f44d0568b435c7b8dfad850e541de959" name="pam-config" arch="x86_64">
  <version epoch="0" ver="2.13+git.20250715" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1707825600">- Update to version 2.11
  - pam_gnome_keyring: use options in AUTH [bsc#1219767]</changelog>
  <changelog author="kukuk@suse.com" date="1712836800">- Update to version 2.11+git.20240411:
  * Configure Himmelblau correctly w/ other services present
  * Configure other services correctly w/ Himmelblau present
  * Himmelblau session is only optional</changelog>
  <changelog author="kukuk@suse.com" date="1716811200">- Update to version 2.11+git.20240527:
  * Move ecryptfs/fscrypt earlier in session list [bsc#1225290]</changelog>
  <changelog author="kukuk@suse.com" date="1718884800">- Update to version 2.11+git.20240620:
  * Call pam_fscrypt/pam_ecryptfs as first session module
    [bsc#1226452]</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Update to version 2.11+git.20240906:
  * Move pam_limits before pam_systemd</changelog>
  <changelog author="kukuk@suse.com" date="1726056000">- Update to version 2.11+git.20240911:
  * Only add pam_limits if available</changelog>
  <changelog author="kukuk@suse.com" date="1726056001">- Add PreRequires for pam-extra, several other packages depend on
  that pam_limits is installed and enabled by default</changelog>
  <changelog author="kukuk@suse.com" date="1744372800">- Update to version 2.12+git.20250411:
  * Release version 2.12
  * Call ecryptfs/fscrypt before pam_unix (#30)
  * Don't exit with error if admin disabled pam-config</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 2.12+git.20250516:
  * Don't add pam_env twice</changelog>
  <changelog author="kukuk@suse.com" date="1752580800">- Update to version 2.13+git.20250715:
  * Release version 2.13
  * Place himmelblau near the top of pam stack [bsc#1243418]</changelog>
</package>
<package pkgid="a43220a3980b0c778da4e3dbe6c808ad547cb7c5642a498c4361917bab78a2467e785333689aae3cb08066e3e5160f7570a1b3c6be34f7916ac79df96e9ef926" name="pam-extra" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="160000.3.1"/>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
</package>
<package pkgid="48eb3ae9cd7453de94c553124991b509f16f0b9095aa66162d6dd24313f54f268213ea7bd722e1ec5bfa8a42f95b8fc934ab8970e913b5ba2cc8d21d0efc5f62" name="pam_oath" arch="x86_64">
  <version epoch="0" ver="2.6.11.12" rel="160000.3.2"/>
  <changelog author="schwab@suse.de" date="1533556800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="mardnh@gmx.de" date="1609243200">- Update to version 2.6.5
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.
    KEY and OTP may now be given as '-' to mean stdin, or @FILE to
    read from a particular file.  This is recommended on multi-user
    systems, since secrets as command line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.
  * Doc fixes.
- Update to version 2.6.4
  * libpskc: New --with-xmlsec-crypto-engine to hard-code crypto
    engine.  Use it like --with-xmlsec-crypto-engine=gnutls or
  - -with-xmlsec-crypto-engine=openssl if the default dynamic
    loading fails because of runtime linker search path issues.
  * oathtool --totp --verbose now prints TOTP hash mode.
  * oathtool: Hash names (e.g., SHA256) for --totp are now upper
    case.  Lower/mixed case hash names are supported for
    compatibility.
  * pam_oath: Fail gracefully for missing users.
    This allows you to incrementally add support for OATH
    authentication instead of forcing it on all users.
  * Fix libpskc memory corruption bug.
  * Fix man pages.
  * Build fixes.
- Update to version 2.6.3
  * pam_oath: Fix self-tests.
- Drop not longer needed patches:
  * 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch
  * 0003-pam_oath-assign-safe-default-to-alwaysok-config-memb.patch
  * 0002-update_gnulibs_files.patch
  * gnulib-libio.patch
- Use source verification
- Use proper source URLs</changelog>
  <changelog author="mardnh@gmx.de" date="1611144000">- Update to version 2.6.6
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.  KEY and OTP may now be given as '-' to mean
    stdin, or @FILE to read from a particular file.  This is
    recommended on multi-user systems, since secrets as command
    line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.</changelog>
  <changelog author="mardnh@gmx.de" date="1619956800">- Update to version 2.6.7
  * pam_oath: Support variables in usersfile string parameter.
    These changes introduce the ${USER} and ${HOME} placeholder
    values for the usersfile string in the pam_oath configuration
    file. The placeholder values allow the user credentials file
    to be stored in a file path that is relative to the user, and
    mimics similar behavior found in google-authenticator-libpam.
    The motivation for these changes is to allow for
    non-privileged processes to use pam_oath (e.g., for 2FA with
    xscreensaver). Non-privileged and non-suid programs are
    unable to use pam_oath. These changes are a proposed
    alternative to a suid helper binary as well.
  * doc: Fix project URL in man pages.
  * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config.
  * build: Modernize autotools usage.
    Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE
    to make rebuilding from source more safe with future automake
    versions.
  * Updated gnulib files.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- url -&gt; https</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659441600">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="mardnh@gmx.de" date="1688904000">- Update to version 2.6.8
  * libpskc: Fixes for recent libxmlsec releases.
  * pam_oath: Provide fallback pam_modutil_getpwnam implementation.
  * pam_oath: Don't fail authentication when pam_modutil_getpwnam
  doesn't ** know the user when usersfile don't include ${USER}
  or ${HOME}.
  * pam_oath: Self-test improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.6.11
  * liboath: Handle invalid base32 encoded secrets.  Fixes: #41.
  * Various build fixes including updated gnulib files.
  * Improve compatibility with recent libxmlsec.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726228800">- Fix security issue CVE-2024-47191 by adding
  0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch .
- Add patch to implement new null_usersfile_okay argument
  42-null_usersfile_okay.patch .
- Makes this version 2.6.11.12 to be able to depend on it.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1729080000">- Update 0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch
  with bsc#1231699 improvements for security fix CVE-2024-47191</changelog>
</package>
<package pkgid="a2c00aca96c8fe9640e2fc1737a506e462437dc58ed0204e0a8c066aeb2c23de5e333ce498c7bbfd4fc6f217f1681bf1b25df8b30c846ea755cd9edefe19c125" name="pam_pkcs11" arch="x86_64">
  <version epoch="0" ver="0.6.13" rel="160000.2.2"/>
  <changelog author="jsegitz@suse.com" date="1634212800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * pkcs11_eventmgr.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642248000">- update to 0.6.12:
  * Limit signature length to 65536 bytes
  * A number of bug fixes and OpenSSL compatibility updates
  * console output color updates
  * Add support of ECDSA signature in addition to RSA</changelog>
  <changelog author="pgajdos@suse.com" date="1659096000">-  use pam rpm macros [bsc#1190957]</changelog>
  <changelog author="schubi@suse.com" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="davide.benini@suse.com" date="1715083200">- Fix for bsc#1221255:
  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch</changelog>
  <changelog author="simon.vogl@gmx.net" date="1727179200">- Fix for boo#1230870:
  * Add patch 0001-memory-leak-fixes.patch
- Add -Wno-implicit-function-declaration to CFLAGS to fix build
  with gcc14 and newer</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="angel.yankov@suse.com" date="1738843200">- Update to 0.6.13
  * Added pkcs11-eventmgr systemd service unit.
  * Updated Russian translations for pam_pkcs11 (thx Max Kosmach      and Andrey Cherepanov).
  * Fixed possible authentication bypass (CVE-2025-24032):
  * Use signatures to verify authentication by default      (thx Frank Morgner).
  * Fixed possible authentication bypass (CVE-2025-24531):
  * Restoring the original card_only / wait_for_card behavior      (thx Matthias Gerstner, Frank Morgner).
  * Move pam_securetty.so upward in the example PAM config.
  * Set 'slot_num' configuration parameter to 0 by default     (thx Jpereyra316).
  * Print details about configuration parse errors (thx Jpereyra316).
  * Add Chinese (Simplified) translation.
  * Capitalize all PAM messages (thx Alynx Zhou).
  * Made pkcs11_make_hash_link support whitespaces in file names
  * Drop 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch
  * Drop 0001-memory-leak-fixes.patch
  * Rebase pam_pkcs11-0.5.3-nss-conf.patch
  * Rebase pam_pkcs11-0.6.0-nss-autoconf.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1747656000">- Removes pam_env from auth stack for security reason [bsc#1243226]</changelog>
</package>
<package pkgid="7d8f1d6cdb706232a5f409f9df439e22f2af011cc5aad39933787cffbb866ec68c3004ed7a0b88f99bb8c8917d6a76d3542a1a8971b0bef41ec195c0db23d8c6" name="pam_pwquality" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="160000.3.2"/>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.4.2:
  * Fix regression in handling retry, enforce_for_root, and
    local_users_only options introduced with the previous
    release.</changelog>
  <changelog author="dsauer@suse.com" date="1602849600">- update to 1.4.4
  * e11f2bd Fix regression with enabling cracklib check
  * 02e6728 Use make macros in rpm spec file
  * xxxxxxx Translated using Weblate (Polish, Turkish, Ukrainian)
- update to 1.4.3
  * 1213d33 Update translation files
  * a951fbe Add --disable-cracklib-check configure parameter
  * 6a8845b fixup static compilation
  * 92c6066 python: Add missing getters/setters for newly added settings
  * bfef79d Add usersubstr check
  * 09a2e65 pam_pwquality: Add debug message for the local_users_only option
  * a6f7705 Fix some gcc warnings
  * 8c8a260 pwmake: Properly validate the bits parameter.
  * 7be4797 we use Fedora Weblate now
  * xxxxxxx Translated using Weblate (Azerbaijani, Bulgarian,
    Chinese (Simplified), Czech, French, Friulian, Hungarian, Italian,
    Japanese, Norwegian Bokmål, Persian, Russian, Spanish, Turkish)</changelog>
  <changelog author="josef.moellers@suse.com" date="1609848000">- Do not use macro %make_build pre SLE-15
  Use "make -O %{?_smp_mflags}" instead
  [libpwquality.spec]</changelog>
  <changelog author="dimstar@opensuse.org" date="1632830400">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
  (boo#1191042).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Add python-rpm-macros to BuildRequires (boo#1194757).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672056000">- Update to version 1.4.5:
  + Minor bug fixes and documentation enhancements.
  + Updated translations.</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1703073600">- add: prereq "pam-config" in baselibs.conf
  * post scriptlet in pam_pwquality-32bit runs: pam-config</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- Drop python 2.x support (it's been 4 years).
- Add python3-setuptools BuildRequires which is needed for
  distutils.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736510400">- Add libpwquality-fix-python-install.patch: Fix installation of
  python bindings after moving to setuptools.</changelog>
  <changelog author="schubi@suse.com" date="1737720000">- pwquality.conf moved from /etc/security to /usr/lib/security</changelog>
</package>
<package pkgid="4fc58948b79382124c0c93fd2f1a65bf86dda95f77b8109067eb52fcc23355e96cb854cf65c2f7756a99e4ade6abbfa6029e278ca6990ae187200a7b9df194f6" name="pam_u2f" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="160000.2.2"/>
  <changelog author="kbabioch@suse.com" date="1524052800">- Update to version 1.0.6:
  - Fix an issue when using syslog as a debug facility.
  - Do not honor cue if no sutable device is found.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Update to version 1.0.7:
  - Add authpending_file to signal authentication activity
  - Add nodetect to skip to avoid unnecessary cue messages</changelog>
  <changelog author="kbabioch@suse.de" date="1559649600">- Version 1.0.8 (released 2019-06-04)
  * Fix insecure debug file handling CVE-2019-12209 (bsc#1135729).
  * Fix debug file descriptor leak CVE-2019-12210 (bsc#1135727).
  * Fix a non-critical buffer oob access.
- Applied spec-cleaner</changelog>
  <changelog author="idonmez@suse.com" date="1602763200">- Update to version 1.1.0
  * Add support to FIDO2 (move from libu2f-host+libu2f-server to libfido2)
  * Add support to User Verification
  * Add support to PIN Verification
  * Add support to Resident Credentials
  * Add support to SSH credential format
- Drop libu2f-host and libu2f-server BuildRequires
- Add BuildRequires on pkgconfig(libfido2)
- Add explicit BuildRequires on pkgconfig(libcrypto), this was being
  pulled down implicitly before.</changelog>
  <changelog author="t.gruner@katodev.de" date="1621512000">- Update to version 1.1.1 (released 2021-05-19)
  * Fix an issue where PIN authentication could be bypassed (CVE-2021-31924).
  * Fix an issue with nodetect and non-resident credentials.
  * Fix build issues with musl libc.
  * Add support for self-attestation in pamu2fcfg.
  * Fix minor bugs found by fuzzing.</changelog>
  <changelog author="paolo.perego@suse.com" date="1634126400">- Update to version 1.2.0 (released 2021-09-22)
  * Added support for EdDSA keys.
  * Added support for SSH ed25519-sk keys.
  * Added authenticator filtering based on user verification options.
  * Fixed an issue with privilege restoration on MacOS.
  * Fixed an issue where credentials created with pamu2fcfg 1.0.8 or earlier were not handled correctly if their origin and appid differed.
  * Miscellaneous improvements to the documentation.
  * Miscellaneous minor bug fixes found by fuzzing.
- Fix for bsc#1190961 - Removed hardcoded library pathnames using %{_pam_moduledir}</changelog>
  <changelog author="t.gruner@katodev.de" date="1634558400">- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="dmueller@suse.com" date="1653825600">- update to 1.2.1:
  * Fixed an issue where native credentials could be truncated, resulting in
    failure to authenticate or successful authentication with missing options.
  * Stricter parsing of sshformat credentials.
  * pamu2fcfg now allows a combination of the --username and --nouser options.
  * Improved documentation on FIDO2 options.
- add keyring for validation</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 1.3.0:
  * Add sanity checking of UV options to pamu2fcfg.
  * Add support for username expansion in the authfile path.
  * Improvements to the documentation.</changelog>
  <changelog author="paolo.perego@suse.com" date="1737115200">- update to 1.3.1:
  * Fix incorrect usage of PAM_IGNORE (YSA-2025-01, CVE-2025-23013, bsc#1233517).
  * Changed return value when nouserok is enabled and the user has no
  credentials, PAM_IGNORE is used instead of PAM_SUCCESS.
  * Hardened checks of authfile permissions.
  * Hardened checks for nouserok.
  * Improved debug messages.
  * Improved documentation.</changelog>
</package>
<package pkgid="a06178a0416699c8ab4a20327f5c10273406cd40c9497ad6607bdb6b3bd518b7f23b9ca999d3c8e47d101da294b730990153769133d274a9ee02a54be819d412" name="parted" arch="x86_64">
  <version epoch="0" ver="3.6" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1634644800">- BuildRequire python3-base: Fix execution of test suite. Otherwise
  we fail with
  ./t0282-gpt-move-backup.sh: /usr/bin/python3: bad interpreter: No
  such file or directory.</changelog>
  <changelog author="aschnell@suse.com" date="1634644801">- fixed name of shared library package and split off
  libparted-fs-resize (bsc#1191778)</changelog>
  <changelog author="aschnell@suse.com" date="1650456000">- update to version 3.5:
  * Add support for JSON output.
  * Add support for linux-home flag for GPT.
  * Add --fix option.
  added patches:
  - direct-handling-of-partition-type-id-and-uuid.patch
  - parted-json-no-type-flag.patch
  refreshed patches:
  - libparted-open-the-device-RO-and-lazily-switch-to-RW.patch
  - parted-2.4-ncursesw6.patch
  - parted-add-ignore-busy-option.patch
  - parted-fix-resizepart-and-rm-command.patch
  - parted-implement-wipesignatures-option.patch
  - parted-print-max-partitions-for-yast.patch
  - parted-type.patch
  - tests-disable.patch
  removed patches:
  - parted-escape-printed-device-path.patch
  - parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="aschnell@suse.com" date="1652875200">- add new type command from upstream
  added patches:
  - type-command.patch</changelog>
  <changelog author="dmueller@suse.com" date="1654084800">- use static keyring file (and switch to the release team keyring)</changelog>
  <changelog author="aschnell@suse.com" date="1655985600">- drop type flag (SUSE specific) to fix bsc#1190847
  refreshed patches:
  - parted-mac.patch
  - tests-adapt-to-SUSE.patch
  drop patches:
  - parted-type.patch
  - parted-type-accept-hex.patch
  - parted-json-no-type-flag.patch</changelog>
  <changelog author="aschnell@suse.com" date="1696507200">- updated fatresize to version 0.2 which includes a man-page
  removed patches:
  - fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="aschnell@suse.com" date="1706702400">- update to version 3.6:
  - Support GPT partition attribute bit 63 as no_automount flag
  - Add type commands to set type-id on MS-DOS and type-uuid on GPT
  - Add swap flag support to the dasd disklabel
  - Add display of GPT disk and partition UUIDs in JSON output
  refreshed patches:
  - parted-mac.patch
  - libparted-dasd-implicit-partition-disk-flag.patch
  - tests-disable.patch
  removed patches:
  - direct-handling-of-partition-type-id-and-uuid.patch
  - type-command.patch
  - libparted-dasd-improve-lvm-raid-flag-handling.patch
  - libparted-dasd-add-swap-flag-handling-for-DASD-CDL.patch</changelog>
  <changelog author="aschnell@suse.com" date="1708516800">- avoid deprecated rpm syntax</changelog>
  <changelog author="aschnell@suse.com" date="1737547200">- fixed build with gcc15
  added patches:
  - parted-do-version.patch</changelog>
</package>
<package pkgid="ecbfad8117998dcf9a57280962ca0ef643d3ba5392afdd42140a375a507fd8a6d55667a5236a5ee58b3e73eae08db7fd9b6f0497b2ee1b8157fb5d882980e830" name="passt" arch="x86_64">
  <version epoch="0" ver="20250415.2340bbf" rel="160000.2.2"/>
  <changelog author="cathy.hu@suse.com" date="1726142400">- Fix passt-selinux to use selinux macros instead of calling semodule
  by hand, which leads to unwanted policy reload on Micro (bsc#1229132)</changelog>
  <changelog author="dcermak@suse.com" date="1730721600">- Update to version 20241030.ee7d0b6:
  * util: Don't use errno after a successful call in __daemon()
  * udp: Take care of cert-int09-c clang-tidy warning for enum udp_iov_idx
  * treewide: Address cert-err33-c clang-tidy warnings for clock and timer functions
  * treewide: Suppress clang-tidy warning if we already use O_CLOEXEC
  * Makefile: Disable readability-math-missing-parentheses clang-tidy check
  * treewide: Silence cert-err33-c clang-tidy warnings for fprintf()
  * treewide: Comply with CERT C rule ERR33-C for snprintf()
  * Makefile: Exclude qrap.c from clang-tidy checks
  * tcp: unify l2 TCPv4 and TCPv6 queues and structures
  * tcp: set ip and eth headers in l2 tap queues on the fly
  * test: remove obsolete images
  * tcp: cleanup tcp_buf_data_from_sock()
  * tcp: Use runtime tests for TCP_INFO fields
  * tcp: Generalise probing for tcpi_snd_wnd field
  * tcp: Remove compile-time dependency on struct tcp_info version
  * tcp_splice: fcntl(2) returns the size of the pipe, if F_SETPIPE_SZ succeeds
  * tcp_splice: splice() all we have to the writing side, not what we just read
  * tcp: Use structures to construct initial TCP options
  * fwd: Direct inbound spliced forwards to the guest's external address
  * test: Clarify test for spliced inbound transfers
  * passt.1: Clarify and update "Handling of local addresses" section
  * passt.1: Mark --stderr as deprecated more prominently
  * test: Wait for DAD on DHCPv6 addresses
  * test: Explicitly wait for DAD to complete on SLAAC addresses
  * arp: Fix a handful of small warts
  * tcp: Send "empty" handshake ACK before first data segment
  * test: Pass TRACE from run_term() into ./run from_term
  * test/lib/term: Always use printf for messages with escape sequences
  * conf: Add --dns-host option to configure host side nameserver
  * conf: Add command line switch to enable IP_FREEBIND socket option
  * udp: Update UDP checksum using an iovec array
  * tcp: Update TCP checksum using an iovec array
  * checksum: Add an offset argument in csum_iov()
  * pcap: Add an offset argument in pcap_iov()
  * tcp: Use tcp_payload_t rather than tcphdr
  * test: Kernel binary can now be passed via the KERNEL environmental variable
  * inany: Add inany_pton() helper
  * tcp, udp: Make {tcp,udp}_sock_init() take an inany address
  * util, pif: Replace sock_l4() with pif_sock_l4()
  * udp: Don't attempt to get dual-stack sockets in nonsensical cases
  * tcp: Allow checksum to be disabled
  * udp: Allow checksum to be disabled
  * util: Remove possible quadratic behaviour from write_remainder()
  * util: Add helper to write() all of a buffer
  * tcp: Make tcp_update_seqack_wnd()s force_seq parameter explicitly boolean
  * tcp: Simplify ifdef logic in tcp_update_seqack_wnd()
  * tcp: Clean up tcpi_snd_wnd probing
  * tcp: Make some extra functions private
  * tcp: Avoid overlapping memcpy() in DUP_ACK handling
  * tcp: Remove redundant initialisation of iov[TCP_IOV_ETH].iov_base</changelog>
  <changelog author="dcermak@suse.com" date="1732536000">- Update to version 20241121.238c69f:
  * tcp: Acknowledge keep-alive segments, ignore them for the rest
  * tcp: Reset ACK_TO_TAP_DUE flag whenever an ACK isn't needed anymore
  * ndp: Don't send unsolicited RAs if NDP is disabled
  * ndp: Don't send unsolicited router advertisement if we can't, yet
  * selinux: Use auth_read_passwd() interface for all our getpwnam() needs
  * ndp: Send unsolicited Router Advertisements
  * passt: Seed libc's pseudo random number generator
  * util: Add general low-level random bytes helper
  * ndp: Make route lifetime a #define
  * ndp: Use struct assignment in preference to memcpy() for IPv6 addresses
  * ndp: Split out helpers for sending specific NDP message types
  * ndp: Add ndp_send() helper
  * ndp: Remove redundant update to addr_seen
  * cppcheck: Don't check the system headers
  * linux_dep: Fix CLOSE_RANGE_UNSHARE availability handling
  * linux_dep: Move close_range() conditional handling to linux_dep.h
  * log: Only check for FALLOC_FL_COLLAPSE_RANGE availability at runtime
  * tap, tcp, util: Add some missing SOCK_CLOEXEC flags
  * passt: Use NOLINT clang-tidy block instead of NOLINTNEXTLINE
  * util: Define small and big thresholds for socket buffers as unsigned long long
  * tap: Cast TAP_BUF_BYTES - ETH_MAX_MTU to ssize_t, not TAP_BUF_BYTES
  * dhcpv6: Turn some option headers pointers to const
  * dhcpv6: Use for loop instead of goto to avoid false positive cppcheck warning
  * tcp: unify payload and flags l2 frames array
  * test: Improve test for NDP assigned prefix
  * test: Don't require 64-bit prefixes in perf tests
  * test: Make nstool hold robust against interruptions to control clients
  * test: Rename propagating signal handler
  * util: Work around cppcheck bug 6936
  * udp: Don't dereference uflow before NULL check in udp_reply_sock_handler()
  * ndp: Use const pointer for ndp_ns packet
  * linux_dep: Generalise tcp_info.h to handling Linux extension compatibility
  * fwd: Squash different-signedness comparison warning
  * util: Remove unused ffsl() function
  * clang: Add rudimentary clangd configuration
  * Makefile: Don't attempt to auto-detect stack size
  * Makefile: Use -DARCH for qrap only
  * seccomp: Simplify handling of AUDIT_ARCH
  * Makefile: Move NETNS_RUN_DIR definition to C code
  * netlink: RTA_PAYLOAD() returns int, not size_t
  * flow: Correct type of flowside_at_sidx()
  * arch: Avoid explicit access to 'environ'
  * clang: Move clang-tidy configuration from Makefile to .clang-tidy
  * Makefile: Simplify exclusion of qrap from static checks
  * clang: Add .clang-format file
  * test: Adjust misplaced sleeps in two_guests code
  * tap: Explicitly cast TUNSETIFF to fix build warning with musl on ppc64le
  * tcp: Fix build against musl, __sum16 comes from linux/types.h</changelog>
  <changelog author="dcermak@suse.com" date="1732708800">- Update to version 20241127.c0fbc7e:
  * dhcp: Honour broadcast flag (RFC 2131, 4.1)
  * dhcp: Introduce support for Rapid Commit (option 80, RFC 4039)
  * dhcp: Use -1 as "missing option" length instead of 0
  * treewide: Introduce 'local mode' for disconnected setups
  * test: Improve logic for waiting for SLAAC &amp; DAD to complete in NDP tests
  * ndp: Don't send first periodic router advertisement right after guest connects
  * test/perf: Select a single IPv6 namespace address in pasta tests
  * conf, passt.1: Update --mac-addr default in usage() and man page
  * passt.1: Fix "default" note about --map-guest-addr</changelog>
  <changelog author="dcermak@suse.com" date="1734004800">- Update to version 20241211.09478d5:
  * treewide: Dodge dynamic memory allocation in strerror() from glibc &gt; 2.40
  * pasta: make it possible to disable socket splicing
  * tap: Call vu_init() with --fd
  * tap: Use a common function to start a new connection
  * udp_vu: update segment size
  * flow: Remove over-zealous sanity checks in flow_sidx_hash()
  * udp: Improve detail of UDP endpoint sanity checking
  * perf/passt_vu_tcp: Make it shine
  * tcp_vu: Compute IPv4 header checksum if dlen changes
  * Makefile: Use make internal string functions
  * tcp_vu: Remove unnecessary tcp_vu_update_check() function
  * tcp: Merge tcp_fill_headers[46]() with each other
  * tcp: Merge tcp_update_check_tcp[46]()
  * tcp: Pass TCP header and payload separately to tcp_fill_headers[46]()
  * tcp: Pass TCP header and payload separately to tcp_update_check_tcp[46]()
  * iov, checksum: Replace csum_iov() with csum_iov_tail()
  * iov: iov tail helpers
  * tcp_vu: Change 'dlen' to ssize_t in tcp_vu_data_from_sock()
  * Fix build on 32bit target
  * virtio: check if avail ring is configured
  * tcp: Move tcp_l2_buf_fill_headers() to tcp_buf.c
  * test: Add tests for passt in vhost-user mode
  * vhost-user: add vhost-user
  * passt: rename tap_sock_init() to tap_backend_init()
  * tcp: Export headers functions
  * udp: Prepare udp.c to be shared with vhost-user
  * vhost-user: introduce vhost-user API
  * vhost-user: introduce virtio API
  * packet: replace struct desc by struct iovec</changelog>
  <changelog author="dcermak@suse.com" date="1737547200">- Update to version 20250121.4f2c8e7:
  * vhost_user: Drop packet with unsupported iovec array
  * tcp: Set PSH flag for last incoming packets in a batch
  * tcp: Set ACK flag on *all* RST segments, even for client in SYN-SENT state
  * tcp: Disable Nagle's algorithm (set TCP_NODELAY) on all sockets
  * tcp: Buffer sizes are *not* inherited on accept()/accept4()
  * vhost_user: remove ASSERT() on iovec number
  * vhost-user: Report to front-end we support VHOST_USER_PROTOCOL_F_DEVICE_STATE
  * vhost-user: add VHOST_USER_SET_DEVICE_STATE_FD command
  * vhost-user: add VHOST_USER_CHECK_DEVICE_STATE command
  * vhost-user: Report to front-end we support VHOST_USER_PROTOCOL_F_LOG_SHMFD
  * vhost-user: add VHOST_USER_SET_LOG_BASE command
  * vhost-user: Pass vu_dev to more virtio functions
  * vhost-user: add VHOST_USER_SET_LOG_FD command
  * vhost-user: update protocol features and commands list
  * tcp: Mask EPOLLIN altogether if we're blocked waiting on an ACK from the guest
  * tcp: Set EPOLLET when when reading from a socket fails with EAGAIN
  * tcp: Don't subscribe to EPOLLOUT events on STALLED
  * tcp: Fix ACK sequence getting out of sync on EPOLLOUT wake-up
  * vhost_user: fix multibuffer from linux
  * test/pasta_podman: Run Podman tests on a single CPU thread
  * checksum: fix checksum with odd base address
  * tcp_splice: Set (again) TCP_NODELAY on both sides
  * seccomp: Unconditionally allow accept(2) even if accept4(2) is present
  * virtio: Use const pointer for vu_dev
  * udp_flow: Don't block multicast and broadcast messages
  * Makefile: Report error and stop if we can't set TARGET
  * README: Mark vhost-user as supported</changelog>
  <changelog author="dcermak@suse.com" date="1739793600">- Update to version 20250217.a1e48a0:
  * test: Add migration tests
  * migrate: Migrate TCP flows
  * repair, passt-repair: Build and warning fixes for musl
  * tcp_splice: A typo three years ago and SO_RCVLOWAT is gone
  * tcp_splice: Don't wake up on input data if we can't write it anywhere
  * vhost_user: Clear ring address on GET_VRING_BASE
  * tcp, tcp_splice: Don't set SO_SNDBUF and SO_RCVBUF to maximum values
  * tcp: Keep updating window and checking for socket data after FIN from guest
  * contrib/selinux: Enable mapping guest memory for libvirt guests
  * selinux: Add rules needed to run tests
  * rampstream: Add utility to test for corruption of data streams
  * tcp: Get bound address for connected inbound sockets too
  * vhost_user: Make source quit after reporting migration state
  * Add interfaces and configuration bits for passt-repair
  * migrate: Migrate guest observed addresses
  * migrate: Skeleton of live migration logic
  * passt-repair: Fix off-by-one in check for number of file descriptors
  * tcp_vu: Fix off-by one in header count array adjustment
  * tcp: Implement conservative zero-window probe on ACK timeout
  * tcp: Don't discard window information on keep-alive segments
  * dhcp, dhcpv6: Add hostname and client fqdn ops
  * conf: Don't map DNS traffic to host, if host gateway is a resolver
  * passt-repair: Send one confirmation *per command*, not *per socket*
  * dhcp: Don't re-use request message for reply
  * passt-repair: Dodge "structurally unreachable code" warning from Coverity
  * passt-repair: Fix calculation of payload length from cmsg_len
  * passt-repair: Don't use perror(), accept ECONNRESET as termination
  * conf, passt.1: Un-deprecate --host-lo-to-ns-lo
  * debug: Add tcpdump to mbuto.img
  * apparmor: Workaround for unconfined libvirtd when triggered by unprivileged user
  * passt-repair.1: Fix indication of TCP_REPAIR constants
  * passt-repair: Build fixes for musl
  * passt-repair: use _exit() over return
  * treewide: use _exit() over exit()
  * tcp: Simplify handling of getsockname()
  * migrate: Fix several errors with passt-repair
  * doc: Add mock of migration source and target
  * tcp: Get socket port and address using getsockname() when connecting from guest
  * Introduce passt-repair
  * vhost_user: Turn some vhost-user message reports to trace()
  * util: Add read_remainder() and read_all_buf()
  * tcp_splice, udp_flow: fcntl64() support on PPC64 depends on glibc version
  * vhost_user: On 32-bit ARM, mmap() is not available, mmap2() is used instead
  * tcp: Don't reset outbound connection on SYN retries
  * pasta.te: fix demo.sh and remove one duplicate rule
  * tcp: Add HOSTSIDE(x), HOSTFLOW(x) macros
  * util: Rename and make global vu_remove_watch()
  * tcp: Always pass NULL event with EPOLL_CTL_DEL
  * vhost-user: Implement an empty VHOST_USER_SEND_RARP command
  * netlink: Skip loopback interface while looking for a template</changelog>
  <changelog author="dcermak@suse.com" date="1741262400">- Introduce apparmor subpackage, fixes bsc#1238597</changelog>
  <changelog author="dcermak@suse.com" date="1742472000">- Update to version 20250320.32f6212:
  * Makefile: Enable -Wformat-security
  * conf: Include libgen.h for basename(), fix build against musl
  * tcp: Flush socket before checking for more data in active close state
  * migrate: Bump migration version number
  * migrate, tcp: Migrate RFC 7323 timestamp
  * migrate, tcp: More careful marshalling of mss parameter during migration
  * passt-repair: Fix build with -Werror=format-security
  * tcp, flow: Better use flow specific logging heleprs
  * conf: Unify several paths in conf_ports()
  * test/perf: Simplify iperf3 server lifetime management
  * conf: Limit maximum MTU based on backend frame size
  * pcap: Correctly set snaplen based on tap backend type
  * Simplify sizing of pkt_buf
  * tap: Use explicit defines for maximum length of L2 frame
  * packet: Remove redundant TAP_BUF_BYTES define
  * packet: Give explicit name to maximum packet size
  * conf: Detect vhost-user mode earlier
  * conf: Move mode detection into helper function
  * conf: Use the same optstring for passt and pasta modes
  * flow, repair: Wait for a short while for passt-repair to connect
  * passt-repair: Add directory watch
  * cppcheck: Add suppressions for "logically" exported functions
  * vhost_user: Don't export several functions
  * tcp: Don't export tcp_update_csum()
  * checksum: Don't export various functions
  * log: Don't export passt_vsyslog()
  * treewide: Mark assorted functions static
  * udp: create and send ICMPv6 to local peer when applicable
  * tap: break out building of udp header from tap_udp6_send function
  * udp: create and send ICMPv4 to local peer when applicable
  * tap: break out building of udp header from tap_udp4_send function
  * conf: Be more precise about minimum MTUs
  * tcp: Send RST in response to guest packets that match no connection
  * tap: Consider IPv6 flow label when building packet sequences
  * ip: Helpers to access IPv6 flow label
  * migrate, tcp: Don't flow_alloc_cancel() during incoming migration
  * tcp: Unconditionally move to CLOSED state on tcp_rst()
  * tcp: Correct error code handling from tcp_flow_repair_socket()
  * migrate, flow: Don't attempt to migrate TCP flows without passt-repair
  * migrate, flow: Trivially succeed if migrating with no flows
  * selinux: Fixes/workarounds for passt and passt-repair, mostly for libvirt usage
  * seccomp.sh: Silence stty errors
  * tap: always set the no_frag flag in IPv4 headers
  * contrib/fedora: Actually install passt-repair SELinux policy file
  * dhcp: Add option code byte in calculation for OPT_MAX boundary check
  * Makefile: Use mmap2() as alternative for mmap() in valgrind extra syscalls
  * conf: Use 0 instead of -1 as "unassigned" mtu value
  * conf: More thorough error checking when parsing --mtu option
  * flow: Clean up and generalise flow traversal macros
  * flow: Remove unneeded bound parameter from flow traversal macros
  * flow: Remove unneeded index from foreach_* macros
  * flow: Add flow_perror() helper
  * tcp: Don't pass both flow pointer and flow index
  * tcp: Remove spurious prototype for tcp_flow_migrate_shrink_window
  * tcp: More type safety for tcp_flow_migrate_target_ext()
  * tcp_vu: head_cnt need not be global
  * tap: Remove unused ETH_HDR_INIT() macro
  * packet: Don't pass start and offset separately to packet_check_range()
  * packet: Use flexible array member in struct pool
  * dhcp: Remove option 255 length byte</changelog>
  <changelog author="dcermak@suse.com" date="1744804800">- Update to version 20250415.2340bbf:
  * udp: Propagate errors on listening and brand new sockets
  * udp: Minor re-organisation of udp_sock_recverr()
  * udp: Add udp_pktinfo() helper
  * udp: Deal with errors as we go in udp_sock_fwd()
  * udp: Pass socket &amp; flow information direction to error handling functions
  * udp: Be quieter about errors on UDP receive
  * udp: Fix breakage of UDP error handling by PKTINFO support
  * conf: Honour --dns-forward for local resolver even with --no-map-gw
  * conf: Split add_dns_resolv() into separate IPv4 and IPv6 versions
  * udp, udp_flow: Track our specific address on socket interfaces
  * inany: Improve ASSERT message for bad socket family
  * udp: Use PKTINFO cmsgs to get destination address for received datagrams
  * tcp_splice: Don't clobber errno before checking for EAGAIN
  * tcp_splice: Don't double count bytes read on EINTR
  * conf: Add missing return in conf_nat(), fix --map-guest-addr none
  * udp_flow: Save 8 bytes in struct udp_flow on 64-bit architectures
  * udp_flow: Don't discard packets that arrive between bind() and connect()
  * udp: Fold udp_splice_prepare and udp_splice_send into udp_sock_to_sock
  * udp: Rework udp_listen_sock_data() into udp_sock_fwd()
  * udp_flow: Take pif and port as explicit parameters to udp_flow_from_sock()
  * udp: Move UDP_MAX_FRAMES to udp.c
  * udp: Merge vhost-user and "buf" listening socket paths
  * udp: Split spliced forwarding path from udp_buf_reply_sock_data()
  * udp: Parameterize number of datagrams handled by udp_*_reply_sock_data()
  * udp: Don't bother to batch datagrams from "listening" socket
  * udp: Polish udp_vu_sock_info() and remove from vu specific code
  * udp: Make udp_sock_recv() take max number of frames as a parameter
  * udp: Use connect()ed sockets for initiating side
  * udp: support traceroute in direction tap-socket
  * passt-repair: Ensure that read buffer is NULL-terminated
  * udp: Correct some seccomp filter annotations
  * udp: Simplify updates to UDP flow timestamp
  * udp: Remove redundant udp_at_sidx() call in udp_tap_handler()
  * passt-repair: Correct off-by-one error verifying name
  * migrate, tcp: bind() migrated sockets in repair mode
  * platform requirements: Add test for address conflicts with TCP_REPAIR
  * platform requirements: Add attributes to die() function
  * platform requirements: Fix clang-tidy warning
  * udp: Improve name of UDP related ICMP sending functions
  * udp: Don't attempt to forward ICMP socket errors to other sockets
  * pasta, passt-repair: Support multiple events per read() in inotify handlers
  * udp: correct source address for ICMP messages
  * build: normalize arm targets
  * udp: Add helper function for creating connected UDP socket
  * udp: Always hash socket facing flowsides
  * udp: Better handling of failure to forward from reply socket
  * udp: Share more logic between vu and non-vu reply socket paths
  * udp_vu: Factor things out of udp_vu_reply_sock_data() loop
  * udp: Simplify checking of epoll event bits
  * udp: Common invocation of udp_sock_errs() for vhost-user and "buf" paths
  * packet: Upgrade severity of most packet errors
  * packet: ASSERT on signs of pool corruption
  * util: Add abort_with_msg() and ASSERT_WITH_MSG() helpers
  * packet: Rework packet_get() versus packet_get_try()
  * packet: Move checks against PACKET_MAX_LEN to packet_check_range()
  * packet: Avoid integer overflows in packet_get_do()
  * packet: Correct type of PACKET_MAX_LEN
  * tap: Clarify calculation of TAP_MSGS
  * tap: Make size of pool_tap[46] purely a tuning parameter
  * packet: More cautious checks to avoid pointer arithmetic UB
  * vu_common: Tighten vu_packet_check_range()</changelog>
</package>
<package pkgid="ed4569d616b410bef9b4a60d63449e22de6d544717cde22c65a203b192797d173e80256e7951b16be8c1bf8ad953de5fe9b72bef1feb3ecec4fbb732f1a6a017" name="passt-selinux" arch="noarch">
  <version epoch="0" ver="20250415.2340bbf" rel="160000.2.2"/>
  <changelog author="cathy.hu@suse.com" date="1726142400">- Fix passt-selinux to use selinux macros instead of calling semodule
  by hand, which leads to unwanted policy reload on Micro (bsc#1229132)</changelog>
  <changelog author="dcermak@suse.com" date="1730721600">- Update to version 20241030.ee7d0b6:
  * util: Don't use errno after a successful call in __daemon()
  * udp: Take care of cert-int09-c clang-tidy warning for enum udp_iov_idx
  * treewide: Address cert-err33-c clang-tidy warnings for clock and timer functions
  * treewide: Suppress clang-tidy warning if we already use O_CLOEXEC
  * Makefile: Disable readability-math-missing-parentheses clang-tidy check
  * treewide: Silence cert-err33-c clang-tidy warnings for fprintf()
  * treewide: Comply with CERT C rule ERR33-C for snprintf()
  * Makefile: Exclude qrap.c from clang-tidy checks
  * tcp: unify l2 TCPv4 and TCPv6 queues and structures
  * tcp: set ip and eth headers in l2 tap queues on the fly
  * test: remove obsolete images
  * tcp: cleanup tcp_buf_data_from_sock()
  * tcp: Use runtime tests for TCP_INFO fields
  * tcp: Generalise probing for tcpi_snd_wnd field
  * tcp: Remove compile-time dependency on struct tcp_info version
  * tcp_splice: fcntl(2) returns the size of the pipe, if F_SETPIPE_SZ succeeds
  * tcp_splice: splice() all we have to the writing side, not what we just read
  * tcp: Use structures to construct initial TCP options
  * fwd: Direct inbound spliced forwards to the guest's external address
  * test: Clarify test for spliced inbound transfers
  * passt.1: Clarify and update "Handling of local addresses" section
  * passt.1: Mark --stderr as deprecated more prominently
  * test: Wait for DAD on DHCPv6 addresses
  * test: Explicitly wait for DAD to complete on SLAAC addresses
  * arp: Fix a handful of small warts
  * tcp: Send "empty" handshake ACK before first data segment
  * test: Pass TRACE from run_term() into ./run from_term
  * test/lib/term: Always use printf for messages with escape sequences
  * conf: Add --dns-host option to configure host side nameserver
  * conf: Add command line switch to enable IP_FREEBIND socket option
  * udp: Update UDP checksum using an iovec array
  * tcp: Update TCP checksum using an iovec array
  * checksum: Add an offset argument in csum_iov()
  * pcap: Add an offset argument in pcap_iov()
  * tcp: Use tcp_payload_t rather than tcphdr
  * test: Kernel binary can now be passed via the KERNEL environmental variable
  * inany: Add inany_pton() helper
  * tcp, udp: Make {tcp,udp}_sock_init() take an inany address
  * util, pif: Replace sock_l4() with pif_sock_l4()
  * udp: Don't attempt to get dual-stack sockets in nonsensical cases
  * tcp: Allow checksum to be disabled
  * udp: Allow checksum to be disabled
  * util: Remove possible quadratic behaviour from write_remainder()
  * util: Add helper to write() all of a buffer
  * tcp: Make tcp_update_seqack_wnd()s force_seq parameter explicitly boolean
  * tcp: Simplify ifdef logic in tcp_update_seqack_wnd()
  * tcp: Clean up tcpi_snd_wnd probing
  * tcp: Make some extra functions private
  * tcp: Avoid overlapping memcpy() in DUP_ACK handling
  * tcp: Remove redundant initialisation of iov[TCP_IOV_ETH].iov_base</changelog>
  <changelog author="dcermak@suse.com" date="1732536000">- Update to version 20241121.238c69f:
  * tcp: Acknowledge keep-alive segments, ignore them for the rest
  * tcp: Reset ACK_TO_TAP_DUE flag whenever an ACK isn't needed anymore
  * ndp: Don't send unsolicited RAs if NDP is disabled
  * ndp: Don't send unsolicited router advertisement if we can't, yet
  * selinux: Use auth_read_passwd() interface for all our getpwnam() needs
  * ndp: Send unsolicited Router Advertisements
  * passt: Seed libc's pseudo random number generator
  * util: Add general low-level random bytes helper
  * ndp: Make route lifetime a #define
  * ndp: Use struct assignment in preference to memcpy() for IPv6 addresses
  * ndp: Split out helpers for sending specific NDP message types
  * ndp: Add ndp_send() helper
  * ndp: Remove redundant update to addr_seen
  * cppcheck: Don't check the system headers
  * linux_dep: Fix CLOSE_RANGE_UNSHARE availability handling
  * linux_dep: Move close_range() conditional handling to linux_dep.h
  * log: Only check for FALLOC_FL_COLLAPSE_RANGE availability at runtime
  * tap, tcp, util: Add some missing SOCK_CLOEXEC flags
  * passt: Use NOLINT clang-tidy block instead of NOLINTNEXTLINE
  * util: Define small and big thresholds for socket buffers as unsigned long long
  * tap: Cast TAP_BUF_BYTES - ETH_MAX_MTU to ssize_t, not TAP_BUF_BYTES
  * dhcpv6: Turn some option headers pointers to const
  * dhcpv6: Use for loop instead of goto to avoid false positive cppcheck warning
  * tcp: unify payload and flags l2 frames array
  * test: Improve test for NDP assigned prefix
  * test: Don't require 64-bit prefixes in perf tests
  * test: Make nstool hold robust against interruptions to control clients
  * test: Rename propagating signal handler
  * util: Work around cppcheck bug 6936
  * udp: Don't dereference uflow before NULL check in udp_reply_sock_handler()
  * ndp: Use const pointer for ndp_ns packet
  * linux_dep: Generalise tcp_info.h to handling Linux extension compatibility
  * fwd: Squash different-signedness comparison warning
  * util: Remove unused ffsl() function
  * clang: Add rudimentary clangd configuration
  * Makefile: Don't attempt to auto-detect stack size
  * Makefile: Use -DARCH for qrap only
  * seccomp: Simplify handling of AUDIT_ARCH
  * Makefile: Move NETNS_RUN_DIR definition to C code
  * netlink: RTA_PAYLOAD() returns int, not size_t
  * flow: Correct type of flowside_at_sidx()
  * arch: Avoid explicit access to 'environ'
  * clang: Move clang-tidy configuration from Makefile to .clang-tidy
  * Makefile: Simplify exclusion of qrap from static checks
  * clang: Add .clang-format file
  * test: Adjust misplaced sleeps in two_guests code
  * tap: Explicitly cast TUNSETIFF to fix build warning with musl on ppc64le
  * tcp: Fix build against musl, __sum16 comes from linux/types.h</changelog>
  <changelog author="dcermak@suse.com" date="1732708800">- Update to version 20241127.c0fbc7e:
  * dhcp: Honour broadcast flag (RFC 2131, 4.1)
  * dhcp: Introduce support for Rapid Commit (option 80, RFC 4039)
  * dhcp: Use -1 as "missing option" length instead of 0
  * treewide: Introduce 'local mode' for disconnected setups
  * test: Improve logic for waiting for SLAAC &amp; DAD to complete in NDP tests
  * ndp: Don't send first periodic router advertisement right after guest connects
  * test/perf: Select a single IPv6 namespace address in pasta tests
  * conf, passt.1: Update --mac-addr default in usage() and man page
  * passt.1: Fix "default" note about --map-guest-addr</changelog>
  <changelog author="dcermak@suse.com" date="1734004800">- Update to version 20241211.09478d5:
  * treewide: Dodge dynamic memory allocation in strerror() from glibc &gt; 2.40
  * pasta: make it possible to disable socket splicing
  * tap: Call vu_init() with --fd
  * tap: Use a common function to start a new connection
  * udp_vu: update segment size
  * flow: Remove over-zealous sanity checks in flow_sidx_hash()
  * udp: Improve detail of UDP endpoint sanity checking
  * perf/passt_vu_tcp: Make it shine
  * tcp_vu: Compute IPv4 header checksum if dlen changes
  * Makefile: Use make internal string functions
  * tcp_vu: Remove unnecessary tcp_vu_update_check() function
  * tcp: Merge tcp_fill_headers[46]() with each other
  * tcp: Merge tcp_update_check_tcp[46]()
  * tcp: Pass TCP header and payload separately to tcp_fill_headers[46]()
  * tcp: Pass TCP header and payload separately to tcp_update_check_tcp[46]()
  * iov, checksum: Replace csum_iov() with csum_iov_tail()
  * iov: iov tail helpers
  * tcp_vu: Change 'dlen' to ssize_t in tcp_vu_data_from_sock()
  * Fix build on 32bit target
  * virtio: check if avail ring is configured
  * tcp: Move tcp_l2_buf_fill_headers() to tcp_buf.c
  * test: Add tests for passt in vhost-user mode
  * vhost-user: add vhost-user
  * passt: rename tap_sock_init() to tap_backend_init()
  * tcp: Export headers functions
  * udp: Prepare udp.c to be shared with vhost-user
  * vhost-user: introduce vhost-user API
  * vhost-user: introduce virtio API
  * packet: replace struct desc by struct iovec</changelog>
  <changelog author="dcermak@suse.com" date="1737547200">- Update to version 20250121.4f2c8e7:
  * vhost_user: Drop packet with unsupported iovec array
  * tcp: Set PSH flag for last incoming packets in a batch
  * tcp: Set ACK flag on *all* RST segments, even for client in SYN-SENT state
  * tcp: Disable Nagle's algorithm (set TCP_NODELAY) on all sockets
  * tcp: Buffer sizes are *not* inherited on accept()/accept4()
  * vhost_user: remove ASSERT() on iovec number
  * vhost-user: Report to front-end we support VHOST_USER_PROTOCOL_F_DEVICE_STATE
  * vhost-user: add VHOST_USER_SET_DEVICE_STATE_FD command
  * vhost-user: add VHOST_USER_CHECK_DEVICE_STATE command
  * vhost-user: Report to front-end we support VHOST_USER_PROTOCOL_F_LOG_SHMFD
  * vhost-user: add VHOST_USER_SET_LOG_BASE command
  * vhost-user: Pass vu_dev to more virtio functions
  * vhost-user: add VHOST_USER_SET_LOG_FD command
  * vhost-user: update protocol features and commands list
  * tcp: Mask EPOLLIN altogether if we're blocked waiting on an ACK from the guest
  * tcp: Set EPOLLET when when reading from a socket fails with EAGAIN
  * tcp: Don't subscribe to EPOLLOUT events on STALLED
  * tcp: Fix ACK sequence getting out of sync on EPOLLOUT wake-up
  * vhost_user: fix multibuffer from linux
  * test/pasta_podman: Run Podman tests on a single CPU thread
  * checksum: fix checksum with odd base address
  * tcp_splice: Set (again) TCP_NODELAY on both sides
  * seccomp: Unconditionally allow accept(2) even if accept4(2) is present
  * virtio: Use const pointer for vu_dev
  * udp_flow: Don't block multicast and broadcast messages
  * Makefile: Report error and stop if we can't set TARGET
  * README: Mark vhost-user as supported</changelog>
  <changelog author="dcermak@suse.com" date="1739793600">- Update to version 20250217.a1e48a0:
  * test: Add migration tests
  * migrate: Migrate TCP flows
  * repair, passt-repair: Build and warning fixes for musl
  * tcp_splice: A typo three years ago and SO_RCVLOWAT is gone
  * tcp_splice: Don't wake up on input data if we can't write it anywhere
  * vhost_user: Clear ring address on GET_VRING_BASE
  * tcp, tcp_splice: Don't set SO_SNDBUF and SO_RCVBUF to maximum values
  * tcp: Keep updating window and checking for socket data after FIN from guest
  * contrib/selinux: Enable mapping guest memory for libvirt guests
  * selinux: Add rules needed to run tests
  * rampstream: Add utility to test for corruption of data streams
  * tcp: Get bound address for connected inbound sockets too
  * vhost_user: Make source quit after reporting migration state
  * Add interfaces and configuration bits for passt-repair
  * migrate: Migrate guest observed addresses
  * migrate: Skeleton of live migration logic
  * passt-repair: Fix off-by-one in check for number of file descriptors
  * tcp_vu: Fix off-by one in header count array adjustment
  * tcp: Implement conservative zero-window probe on ACK timeout
  * tcp: Don't discard window information on keep-alive segments
  * dhcp, dhcpv6: Add hostname and client fqdn ops
  * conf: Don't map DNS traffic to host, if host gateway is a resolver
  * passt-repair: Send one confirmation *per command*, not *per socket*
  * dhcp: Don't re-use request message for reply
  * passt-repair: Dodge "structurally unreachable code" warning from Coverity
  * passt-repair: Fix calculation of payload length from cmsg_len
  * passt-repair: Don't use perror(), accept ECONNRESET as termination
  * conf, passt.1: Un-deprecate --host-lo-to-ns-lo
  * debug: Add tcpdump to mbuto.img
  * apparmor: Workaround for unconfined libvirtd when triggered by unprivileged user
  * passt-repair.1: Fix indication of TCP_REPAIR constants
  * passt-repair: Build fixes for musl
  * passt-repair: use _exit() over return
  * treewide: use _exit() over exit()
  * tcp: Simplify handling of getsockname()
  * migrate: Fix several errors with passt-repair
  * doc: Add mock of migration source and target
  * tcp: Get socket port and address using getsockname() when connecting from guest
  * Introduce passt-repair
  * vhost_user: Turn some vhost-user message reports to trace()
  * util: Add read_remainder() and read_all_buf()
  * tcp_splice, udp_flow: fcntl64() support on PPC64 depends on glibc version
  * vhost_user: On 32-bit ARM, mmap() is not available, mmap2() is used instead
  * tcp: Don't reset outbound connection on SYN retries
  * pasta.te: fix demo.sh and remove one duplicate rule
  * tcp: Add HOSTSIDE(x), HOSTFLOW(x) macros
  * util: Rename and make global vu_remove_watch()
  * tcp: Always pass NULL event with EPOLL_CTL_DEL
  * vhost-user: Implement an empty VHOST_USER_SEND_RARP command
  * netlink: Skip loopback interface while looking for a template</changelog>
  <changelog author="dcermak@suse.com" date="1741262400">- Introduce apparmor subpackage, fixes bsc#1238597</changelog>
  <changelog author="dcermak@suse.com" date="1742472000">- Update to version 20250320.32f6212:
  * Makefile: Enable -Wformat-security
  * conf: Include libgen.h for basename(), fix build against musl
  * tcp: Flush socket before checking for more data in active close state
  * migrate: Bump migration version number
  * migrate, tcp: Migrate RFC 7323 timestamp
  * migrate, tcp: More careful marshalling of mss parameter during migration
  * passt-repair: Fix build with -Werror=format-security
  * tcp, flow: Better use flow specific logging heleprs
  * conf: Unify several paths in conf_ports()
  * test/perf: Simplify iperf3 server lifetime management
  * conf: Limit maximum MTU based on backend frame size
  * pcap: Correctly set snaplen based on tap backend type
  * Simplify sizing of pkt_buf
  * tap: Use explicit defines for maximum length of L2 frame
  * packet: Remove redundant TAP_BUF_BYTES define
  * packet: Give explicit name to maximum packet size
  * conf: Detect vhost-user mode earlier
  * conf: Move mode detection into helper function
  * conf: Use the same optstring for passt and pasta modes
  * flow, repair: Wait for a short while for passt-repair to connect
  * passt-repair: Add directory watch
  * cppcheck: Add suppressions for "logically" exported functions
  * vhost_user: Don't export several functions
  * tcp: Don't export tcp_update_csum()
  * checksum: Don't export various functions
  * log: Don't export passt_vsyslog()
  * treewide: Mark assorted functions static
  * udp: create and send ICMPv6 to local peer when applicable
  * tap: break out building of udp header from tap_udp6_send function
  * udp: create and send ICMPv4 to local peer when applicable
  * tap: break out building of udp header from tap_udp4_send function
  * conf: Be more precise about minimum MTUs
  * tcp: Send RST in response to guest packets that match no connection
  * tap: Consider IPv6 flow label when building packet sequences
  * ip: Helpers to access IPv6 flow label
  * migrate, tcp: Don't flow_alloc_cancel() during incoming migration
  * tcp: Unconditionally move to CLOSED state on tcp_rst()
  * tcp: Correct error code handling from tcp_flow_repair_socket()
  * migrate, flow: Don't attempt to migrate TCP flows without passt-repair
  * migrate, flow: Trivially succeed if migrating with no flows
  * selinux: Fixes/workarounds for passt and passt-repair, mostly for libvirt usage
  * seccomp.sh: Silence stty errors
  * tap: always set the no_frag flag in IPv4 headers
  * contrib/fedora: Actually install passt-repair SELinux policy file
  * dhcp: Add option code byte in calculation for OPT_MAX boundary check
  * Makefile: Use mmap2() as alternative for mmap() in valgrind extra syscalls
  * conf: Use 0 instead of -1 as "unassigned" mtu value
  * conf: More thorough error checking when parsing --mtu option
  * flow: Clean up and generalise flow traversal macros
  * flow: Remove unneeded bound parameter from flow traversal macros
  * flow: Remove unneeded index from foreach_* macros
  * flow: Add flow_perror() helper
  * tcp: Don't pass both flow pointer and flow index
  * tcp: Remove spurious prototype for tcp_flow_migrate_shrink_window
  * tcp: More type safety for tcp_flow_migrate_target_ext()
  * tcp_vu: head_cnt need not be global
  * tap: Remove unused ETH_HDR_INIT() macro
  * packet: Don't pass start and offset separately to packet_check_range()
  * packet: Use flexible array member in struct pool
  * dhcp: Remove option 255 length byte</changelog>
  <changelog author="dcermak@suse.com" date="1744804800">- Update to version 20250415.2340bbf:
  * udp: Propagate errors on listening and brand new sockets
  * udp: Minor re-organisation of udp_sock_recverr()
  * udp: Add udp_pktinfo() helper
  * udp: Deal with errors as we go in udp_sock_fwd()
  * udp: Pass socket &amp; flow information direction to error handling functions
  * udp: Be quieter about errors on UDP receive
  * udp: Fix breakage of UDP error handling by PKTINFO support
  * conf: Honour --dns-forward for local resolver even with --no-map-gw
  * conf: Split add_dns_resolv() into separate IPv4 and IPv6 versions
  * udp, udp_flow: Track our specific address on socket interfaces
  * inany: Improve ASSERT message for bad socket family
  * udp: Use PKTINFO cmsgs to get destination address for received datagrams
  * tcp_splice: Don't clobber errno before checking for EAGAIN
  * tcp_splice: Don't double count bytes read on EINTR
  * conf: Add missing return in conf_nat(), fix --map-guest-addr none
  * udp_flow: Save 8 bytes in struct udp_flow on 64-bit architectures
  * udp_flow: Don't discard packets that arrive between bind() and connect()
  * udp: Fold udp_splice_prepare and udp_splice_send into udp_sock_to_sock
  * udp: Rework udp_listen_sock_data() into udp_sock_fwd()
  * udp_flow: Take pif and port as explicit parameters to udp_flow_from_sock()
  * udp: Move UDP_MAX_FRAMES to udp.c
  * udp: Merge vhost-user and "buf" listening socket paths
  * udp: Split spliced forwarding path from udp_buf_reply_sock_data()
  * udp: Parameterize number of datagrams handled by udp_*_reply_sock_data()
  * udp: Don't bother to batch datagrams from "listening" socket
  * udp: Polish udp_vu_sock_info() and remove from vu specific code
  * udp: Make udp_sock_recv() take max number of frames as a parameter
  * udp: Use connect()ed sockets for initiating side
  * udp: support traceroute in direction tap-socket
  * passt-repair: Ensure that read buffer is NULL-terminated
  * udp: Correct some seccomp filter annotations
  * udp: Simplify updates to UDP flow timestamp
  * udp: Remove redundant udp_at_sidx() call in udp_tap_handler()
  * passt-repair: Correct off-by-one error verifying name
  * migrate, tcp: bind() migrated sockets in repair mode
  * platform requirements: Add test for address conflicts with TCP_REPAIR
  * platform requirements: Add attributes to die() function
  * platform requirements: Fix clang-tidy warning
  * udp: Improve name of UDP related ICMP sending functions
  * udp: Don't attempt to forward ICMP socket errors to other sockets
  * pasta, passt-repair: Support multiple events per read() in inotify handlers
  * udp: correct source address for ICMP messages
  * build: normalize arm targets
  * udp: Add helper function for creating connected UDP socket
  * udp: Always hash socket facing flowsides
  * udp: Better handling of failure to forward from reply socket
  * udp: Share more logic between vu and non-vu reply socket paths
  * udp_vu: Factor things out of udp_vu_reply_sock_data() loop
  * udp: Simplify checking of epoll event bits
  * udp: Common invocation of udp_sock_errs() for vhost-user and "buf" paths
  * packet: Upgrade severity of most packet errors
  * packet: ASSERT on signs of pool corruption
  * util: Add abort_with_msg() and ASSERT_WITH_MSG() helpers
  * packet: Rework packet_get() versus packet_get_try()
  * packet: Move checks against PACKET_MAX_LEN to packet_check_range()
  * packet: Avoid integer overflows in packet_get_do()
  * packet: Correct type of PACKET_MAX_LEN
  * tap: Clarify calculation of TAP_MSGS
  * tap: Make size of pool_tap[46] purely a tuning parameter
  * packet: More cautious checks to avoid pointer arithmetic UB
  * vu_common: Tighten vu_packet_check_range()</changelog>
</package>
<package pkgid="860ee5af84b161ed8e6da5b75b50b6ecbd9c7cac772dcc52941c7da5c8fef7bd97709f6e8eb2d6e3d08f87d89cd367868a695c67d7050c6216bf70405ba4ec22" name="patch" arch="x86_64">
  <version epoch="0" ver="2.7.6" rel="160000.3.1"/>
  <changelog author="jdelvare@suse.de" date="1521720000">- Move COPYING from %doc to %license.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052800">Fix CVE-2018-1000156 (bsc#1088420, savannah#53566).
- ed-style-01-missing-input-files.patch: Allow input files to be
  missing for ed-style patches.
- ed-style-02-fix-arbitrary-command-execution.patch,
  ed-style-03-update-test-Makefile.patch: Fix arbitrary command
  execution in ed-style patches.
- ed-style-04-invoke-ed-directly.patch: Invoke ed directly instead
  of using the shell.
- ed-style-05-minor-cleanups.patch: Minor cleanups in do_ed_script.
- ed-style-06-fix-test-failure.patch: Fix 'ed-style' test failure.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052801">- Add ed as BuildRequires so ed-style patches can be checked by
  the test suite.</changelog>
  <changelog author="jdelvare@suse.de" date="1525867200">- ed-style-07-dont-leak-tmp-file.patch,
  ed-style-08-dont-leak-tmp-file-multi.patch: Fix temporary file
  leak when applying ed-style patches (bsc#1092500,
  savannah#53820).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Do not query %{verbose} to add V=1 or not: verbose changed
  semantics between rpm versions and there is currently no variant
  supporting rpm &lt; 4.17 and rpm &gt;= 4.17.</changelog>
  <changelog author="jdelvare@suse.de" date="1652184000">- fix-swapping-fake-lines-in-pch_swap.patch: Fix swapping fake
  lines in pch_swap. This bug was causing a double free leading to
  a crash (boo#1080985 CVE-2018-6952).
- abort-when-cleaning-up-fails.patch: Abort when cleaning up fails.
  This bug could cause an infinite loop when a patch wouldn't
  apply, leading to a segmentation fault (boo#1111572).
- dont-follow-symlinks-unless-asked.patch: Don't follow symlinks
  unless --follow-symlinks is given. This increases the security
  against malicious patches (boo#1142041 CVE-2019-13636).
- pass-the-correct-stat-to-backup-files.patch: Pass the correct
  stat to backup files. This bug would occasionally cause backup
  files to be missing when all hunks failed to apply (boo#1198106).</changelog>
  <changelog author="coolo@suse.com" date="1653393600">- Do not link unversioned file by URL
- Replace group keyring not intended for release checking with
  (expired since 2018) public key of Andreas</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1722340800">- CVE-2019-20633.patch: Fix double-free/OOB read in pch.c (bsc#1167721)</changelog>
  <changelog author="jdelvare@suse.com" date="1770033600">- CVE-2021-45261.patch: Clear range of pointers before they are
  used/freed (boo#1194037 CVE-2021-45261).</changelog>
</package>
<package pkgid="28ef1fdb7afd169d33ce6cbf79edb69f9e6d7cfbfe46152077449ff53b7ccfa5d68a3b1b7af69ba511325b87de0af413bc82fda29cdcdfcae92de8d0537b7429" name="patterns-base-base" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.2.55"/>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707825600">- add adcli, sssd-ad and sssd-krb5 to sssd pattern (jsc#SMO-292)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707912000">- removed haveged (bsc#1219910)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1708689600">- include cockpit metapackage in the cockpit pattern</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709208000">- add libopenssl-3-fips-provider and crypto-policies-scripts
  as requires for the FIPS pattern. (bsc#1220390 bsc#1217361)
- rename fips pattern to provide pattern() = fips for use by people
  using zypper in -t pattern fips (bsc#1220390 bsc#1213798)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1710158400">- fix typo in libopenssl3 (bsc#1217934)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1712232000">- rename patterns-alp
- put Micro-specific patterns to separate package</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1713268800">- use clout-init-config-suse instead of -ALP which no longer
  exists</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1717156800">- require openSUSE-build key on openSUSE</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1727352000">- Bump to 6.1</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1759147200">- Bump to 6.2
- Micro 6.2 Thunderbolt enablement code-o-o#leap/features#242</changelog>
</package>
<package pkgid="d3e62c7c2db5a70e3e7c8f931999a5e8883f28b1c0ff46b881cae128450045c3d26e1c81550a6296768bd2d16c988211ba4a2ea099d5a42ae243754e2fcc2e58" name="patterns-base-bootloader" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.2.55"/>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707825600">- add adcli, sssd-ad and sssd-krb5 to sssd pattern (jsc#SMO-292)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707912000">- removed haveged (bsc#1219910)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1708689600">- include cockpit metapackage in the cockpit pattern</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709208000">- add libopenssl-3-fips-provider and crypto-policies-scripts
  as requires for the FIPS pattern. (bsc#1220390 bsc#1217361)
- rename fips pattern to provide pattern() = fips for use by people
  using zypper in -t pattern fips (bsc#1220390 bsc#1213798)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1710158400">- fix typo in libopenssl3 (bsc#1217934)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1712232000">- rename patterns-alp
- put Micro-specific patterns to separate package</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1713268800">- use clout-init-config-suse instead of -ALP which no longer
  exists</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1717156800">- require openSUSE-build key on openSUSE</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1727352000">- Bump to 6.1</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1759147200">- Bump to 6.2
- Micro 6.2 Thunderbolt enablement code-o-o#leap/features#242</changelog>
</package>
<package pkgid="0efea9233c24037c6d58a1ff42a4d2e7a3836ba3f1d2a1badd04014c9e16a14c33433d2b8c04c0d009504209b399e7af017e7c6bbd800543b9ae26677d07d17e" name="patterns-base-cockpit" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.2.55"/>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707825600">- add adcli, sssd-ad and sssd-krb5 to sssd pattern (jsc#SMO-292)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707912000">- removed haveged (bsc#1219910)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1708689600">- include cockpit metapackage in the cockpit pattern</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709208000">- add libopenssl-3-fips-provider and crypto-policies-scripts
  as requires for the FIPS pattern. (bsc#1220390 bsc#1217361)
- rename fips pattern to provide pattern() = fips for use by people
  using zypper in -t pattern fips (bsc#1220390 bsc#1213798)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1710158400">- fix typo in libopenssl3 (bsc#1217934)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1712232000">- rename patterns-alp
- put Micro-specific patterns to separate package</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1713268800">- use clout-init-config-suse instead of -ALP which no longer
  exists</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1717156800">- require openSUSE-build key on openSUSE</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1727352000">- Bump to 6.1</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1759147200">- Bump to 6.2
- Micro 6.2 Thunderbolt enablement code-o-o#leap/features#242</changelog>
</package>
<package pkgid="7d9afc97430d66533490288670f679594e9a6585a3ba3e823c2d58aa789d4088d9a112f36bb0616a1062bed5f615c781be8fa2dbfd86acea9a03514147d12e58" name="patterns-base-fips" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.2.55"/>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707825600">- add adcli, sssd-ad and sssd-krb5 to sssd pattern (jsc#SMO-292)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707912000">- removed haveged (bsc#1219910)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1708689600">- include cockpit metapackage in the cockpit pattern</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709208000">- add libopenssl-3-fips-provider and crypto-policies-scripts
  as requires for the FIPS pattern. (bsc#1220390 bsc#1217361)
- rename fips pattern to provide pattern() = fips for use by people
  using zypper in -t pattern fips (bsc#1220390 bsc#1213798)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1710158400">- fix typo in libopenssl3 (bsc#1217934)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1712232000">- rename patterns-alp
- put Micro-specific patterns to separate package</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1713268800">- use clout-init-config-suse instead of -ALP which no longer
  exists</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1717156800">- require openSUSE-build key on openSUSE</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1727352000">- Bump to 6.1</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1759147200">- Bump to 6.2
- Micro 6.2 Thunderbolt enablement code-o-o#leap/features#242</changelog>
</package>
<package pkgid="32c6453892e32ee70d8daf7fc95fed025d53572e9d890e283d05666dbfe43ad3cb4b09354e816d0c72dd4e358c32bcafecb1450e0455b01c82fd2e52a046af5d" name="patterns-base-hardware" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.2.55"/>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707825600">- add adcli, sssd-ad and sssd-krb5 to sssd pattern (jsc#SMO-292)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707912000">- removed haveged (bsc#1219910)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1708689600">- include cockpit metapackage in the cockpit pattern</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709208000">- add libopenssl-3-fips-provider and crypto-policies-scripts
  as requires for the FIPS pattern. (bsc#1220390 bsc#1217361)
- rename fips pattern to provide pattern() = fips for use by people
  using zypper in -t pattern fips (bsc#1220390 bsc#1213798)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1710158400">- fix typo in libopenssl3 (bsc#1217934)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1712232000">- rename patterns-alp
- put Micro-specific patterns to separate package</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1713268800">- use clout-init-config-suse instead of -ALP which no longer
  exists</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1717156800">- require openSUSE-build key on openSUSE</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1727352000">- Bump to 6.1</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1759147200">- Bump to 6.2
- Micro 6.2 Thunderbolt enablement code-o-o#leap/features#242</changelog>
</package>
<package pkgid="850b8112bd3644d3e022703f94e00fa8a929f72252a8149de31432e7f411ca60c94df6dcfdb2ee9dceb21217b1b48c69774d78a8bdd703095e61ae7b5e6851b0" name="patterns-base-kvm_host" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.2.55"/>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707825600">- add adcli, sssd-ad and sssd-krb5 to sssd pattern (jsc#SMO-292)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707912000">- removed haveged (bsc#1219910)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1708689600">- include cockpit metapackage in the cockpit pattern</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709208000">- add libopenssl-3-fips-provider and crypto-policies-scripts
  as requires for the FIPS pattern. (bsc#1220390 bsc#1217361)
- rename fips pattern to provide pattern() = fips for use by people
  using zypper in -t pattern fips (bsc#1220390 bsc#1213798)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1710158400">- fix typo in libopenssl3 (bsc#1217934)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1712232000">- rename patterns-alp
- put Micro-specific patterns to separate package</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1713268800">- use clout-init-config-suse instead of -ALP which no longer
  exists</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1717156800">- require openSUSE-build key on openSUSE</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1727352000">- Bump to 6.1</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1759147200">- Bump to 6.2
- Micro 6.2 Thunderbolt enablement code-o-o#leap/features#242</changelog>
</package>
<package pkgid="b08f74e50ceab75161a732a701f970b8044e0edf89d6405b5a521ea93bb9e2b65058085064f3516639476e9a54f30092c482362b34bc567ef64c5353ca96f105" name="patterns-base-minimal_base" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.2.55"/>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707825600">- add adcli, sssd-ad and sssd-krb5 to sssd pattern (jsc#SMO-292)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707912000">- removed haveged (bsc#1219910)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1708689600">- include cockpit metapackage in the cockpit pattern</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709208000">- add libopenssl-3-fips-provider and crypto-policies-scripts
  as requires for the FIPS pattern. (bsc#1220390 bsc#1217361)
- rename fips pattern to provide pattern() = fips for use by people
  using zypper in -t pattern fips (bsc#1220390 bsc#1213798)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1710158400">- fix typo in libopenssl3 (bsc#1217934)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1712232000">- rename patterns-alp
- put Micro-specific patterns to separate package</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1713268800">- use clout-init-config-suse instead of -ALP which no longer
  exists</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1717156800">- require openSUSE-build key on openSUSE</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1727352000">- Bump to 6.1</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1759147200">- Bump to 6.2
- Micro 6.2 Thunderbolt enablement code-o-o#leap/features#242</changelog>
</package>
<package pkgid="01cc5e3a0544f2def763348c6afc66f8447ffd1dbbdda199fd142910404a6daf4b36963c65c756dc8a0a687e258650423f94bc922097572227b96332f3ce42d9" name="patterns-base-salt_minion" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.2.55"/>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707825600">- add adcli, sssd-ad and sssd-krb5 to sssd pattern (jsc#SMO-292)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707912000">- removed haveged (bsc#1219910)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1708689600">- include cockpit metapackage in the cockpit pattern</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709208000">- add libopenssl-3-fips-provider and crypto-policies-scripts
  as requires for the FIPS pattern. (bsc#1220390 bsc#1217361)
- rename fips pattern to provide pattern() = fips for use by people
  using zypper in -t pattern fips (bsc#1220390 bsc#1213798)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1710158400">- fix typo in libopenssl3 (bsc#1217934)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1712232000">- rename patterns-alp
- put Micro-specific patterns to separate package</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1713268800">- use clout-init-config-suse instead of -ALP which no longer
  exists</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1717156800">- require openSUSE-build key on openSUSE</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1727352000">- Bump to 6.1</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1759147200">- Bump to 6.2
- Micro 6.2 Thunderbolt enablement code-o-o#leap/features#242</changelog>
</package>
<package pkgid="b985bc5f8dc19e4569868c1e4a5fe145f34599d73f0baa1c11c25273d4e2ef804b532c147b7124f3a58e17de79d5f55ec6360e44b10635df37272bb12f1ed62e" name="patterns-base-selinux" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.2.55"/>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707825600">- add adcli, sssd-ad and sssd-krb5 to sssd pattern (jsc#SMO-292)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707912000">- removed haveged (bsc#1219910)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1708689600">- include cockpit metapackage in the cockpit pattern</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709208000">- add libopenssl-3-fips-provider and crypto-policies-scripts
  as requires for the FIPS pattern. (bsc#1220390 bsc#1217361)
- rename fips pattern to provide pattern() = fips for use by people
  using zypper in -t pattern fips (bsc#1220390 bsc#1213798)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1710158400">- fix typo in libopenssl3 (bsc#1217934)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1712232000">- rename patterns-alp
- put Micro-specific patterns to separate package</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1713268800">- use clout-init-config-suse instead of -ALP which no longer
  exists</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1717156800">- require openSUSE-build key on openSUSE</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1727352000">- Bump to 6.1</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1759147200">- Bump to 6.2
- Micro 6.2 Thunderbolt enablement code-o-o#leap/features#242</changelog>
</package>
<package pkgid="5ea68b202bd3c16949353fba1c8891a02477705623389a6d0e7c1b5ec0f5de1a029d3ecbf41adea6c6687e86b2417c3ef0b15ef91253c6e0a0576ccd59c63b5c" name="patterns-base-sssd-ldap" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.2.55"/>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707825600">- add adcli, sssd-ad and sssd-krb5 to sssd pattern (jsc#SMO-292)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707912000">- removed haveged (bsc#1219910)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1708689600">- include cockpit metapackage in the cockpit pattern</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709208000">- add libopenssl-3-fips-provider and crypto-policies-scripts
  as requires for the FIPS pattern. (bsc#1220390 bsc#1217361)
- rename fips pattern to provide pattern() = fips for use by people
  using zypper in -t pattern fips (bsc#1220390 bsc#1213798)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1710158400">- fix typo in libopenssl3 (bsc#1217934)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1712232000">- rename patterns-alp
- put Micro-specific patterns to separate package</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1713268800">- use clout-init-config-suse instead of -ALP which no longer
  exists</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1717156800">- require openSUSE-build key on openSUSE</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1727352000">- Bump to 6.1</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1759147200">- Bump to 6.2
- Micro 6.2 Thunderbolt enablement code-o-o#leap/features#242</changelog>
</package>
<package pkgid="85e5fcb8003e7dc886797ccc33039c27a1b8ffa2e8abe20d396854dda62e3b0489666a7deb831ae353fcc6f98f80a2e48e3952010a33509e2e4a2acfd7c14d58" name="patterns-base-transactional" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.2.55"/>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707825600">- add adcli, sssd-ad and sssd-krb5 to sssd pattern (jsc#SMO-292)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1707912000">- removed haveged (bsc#1219910)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1708689600">- include cockpit metapackage in the cockpit pattern</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1709208000">- add libopenssl-3-fips-provider and crypto-policies-scripts
  as requires for the FIPS pattern. (bsc#1220390 bsc#1217361)
- rename fips pattern to provide pattern() = fips for use by people
  using zypper in -t pattern fips (bsc#1220390 bsc#1213798)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1710158400">- fix typo in libopenssl3 (bsc#1217934)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1712232000">- rename patterns-alp
- put Micro-specific patterns to separate package</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1713268800">- use clout-init-config-suse instead of -ALP which no longer
  exists</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1717156800">- require openSUSE-build key on openSUSE</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman@suse.com&gt;" date="1727352000">- Bump to 6.1</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1759147200">- Bump to 6.2
- Micro 6.2 Thunderbolt enablement code-o-o#leap/features#242</changelog>
</package>
<package pkgid="2a9527114801fa2d706e13f1f0e973720c375847ec0d666e16be961c89f08338225c0ecf9d51515f9386e76aef75c639f03adc2a37c877ed45470d4f2f65d18c" name="patterns-container-runtime_docker" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.1.74"/>
  <changelog author="jsrain@suse.com" date="1686830400">- initial version</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1701086400">- added missing libcontainers-sles-mounts (bsc#1216443)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1702987200">- add obsolete for microos patterns</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1718971200">- Add obsoletes for libcontainers-sles-mounts to allow migration from 5.X
  boo#1226722</changelog>
</package>
<package pkgid="0961b034bdc8aa49a7ca9d2f1910522463d6cd73a20a4d8bc6ba84fb4ac5bb2e2ecac67103a239730795b7a1ba1b1c21e08a23ffb76e9bfb17ef3028660e3d84" name="patterns-container-runtime_podman" arch="x86_64">
  <version epoch="0" ver="20251111" rel="160000.1.74"/>
  <changelog author="jsrain@suse.com" date="1686830400">- initial version</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1701086400">- added missing libcontainers-sles-mounts (bsc#1216443)</changelog>
  <changelog author="Jiri Srain &lt;jsrain@suse.com&gt;" date="1702987200">- add obsolete for microos patterns</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1718971200">- Add obsoletes for libcontainers-sles-mounts to allow migration from 5.X
  boo#1226722</changelog>
</package>
<package pkgid="4be11457b863e989c667956c3c3f2481e413d2686522ed0db0e2027235030fb502b33da9200646a294f947eedbaa61129bfd89b960f369950e4b1e0a2f93c74d" name="pciutils" arch="x86_64">
  <version epoch="0" ver="3.13.0" rel="160000.3.1"/>
  <changelog author="gmbr3@opensuse.org" date="1652356800">- Make shared library executable</changelog>
  <changelog author="dmueller@suse.com" date="1669982400">- update to 3.9.0:
  * We decode Compute Express Link (CXL) capabilities.
  * The tree mode of lspci is now compatible with filtering options.
  * When setpci is used with a named register, it checks whether
    the register is present in the particular header type.
  * Linux: The intel-conf[12] back-ends prefer to use ioperm() instead
    of iopl() to gain access to I/O ports.
  * mmio-conf1(-ext): Added a new back-end implementing the intel-conf1
    interface over MMIO. This is useful on some ARM machines, but it
    requires manual configuration of the MMIO addresses.
  * As usually, updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1683806400">- Update to 3.10.0:
  - Fixed bug in definition of versioned symbol aliases
    in shared libpci, which made compiling with link-time
    optimization fail.
  - Filters now accept "0x..." syntax for backward compatibility.
  - Windows: The cfgmgr32 back-end which provides the list of devices
    can be combined with another back-end which provides access
    to configuration space.
  - ECAM (Enhanced Configuration Access Mechanism), which is defined
    by the PCIe standard, is now supported. It requires root privileges,
    access to physical memory, and also manual configuration on some
    systems.
  - lspci: Tree view now works on multi-domain systems. It now respects
    filters properly.
  - Last but not least, pci.ids were updated to the current snapshot
    of the database. This includes overall cleanup of entries with
    non-ASCII characters in their names -- such characters are allowed,
    but only if they convey interesting information (e.g., umlauts
    in German company names, but not the "registered trade mark" sign).</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1717934400">- update to 3.12.0:
  * lspci decodes the IDE (Integrity &amp; Data Encryption) and
    TEE-IO extended capabilities.
  * Optimization flags used for compiling individual object files
    should be the same as optimization flags for linking the final
    executable to make link-time optimization possible.
  * no longer look up subsystems in the HWDB
  * Updated pci.ids
- include changes from 3.11:
  * update-pciids now supports XZ compression
  * update-pciids now sends itself as the User-Agent.
  * Added a pcilmr utility for PCIe lane margining
  * ECAM back-end now scans ACPI and BIOS memory faster.
  * Linux systems without pread/pwrite are no longer supported
  * Improved decoding of PCIe control and status registers.
  * Decoding of CXL capabilities now supports up to CXL 3.0.
  * lspci now displays interrupt message numbers consistently across
    different capabilities.
  * Cache of IDs resolved via DNS, which was located in ~/.pci-ids
    by default, is now stored according to the XDG base directory
    specification in $XDG_CACHE_HOME/pci-ids.
  * All source files now have SPDX license identifiers.
  * various minor bug fixes and updated pci.ids.</changelog>
  <changelog author="dmueller@suse.com" date="1719748800">- update to 3.13.0:
  * lspci decodes CXL 1.1 device link status information.
  * Further development of the pcilmr (the link margining
    utility)
  * Dump parsing supports 6-digit domain numbers.
  * Bug fixes in PCIe link state reporting.
  * Decode more fields in PCIe AER capability.
  * Fixed build on Linux systems with musl libc.
  * Updated pci.ids.</changelog>
  <changelog author="psimons@suse.com" date="1721390400">- Synchronize SLE-15 and openSUSE:Factory [jsc#PED-8393, bsc#1224138].
  The following patches are now obsolete in version 3.13.0:
  * lspci-Fixed-buffer-overflows-in-ls-tree.c.patch
  * pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  * pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch</changelog>
  <changelog author="psimons@suse.com" date="1741867200">- Synchronize SLE-12 and openSUSE:Factory [jsc#PED-4587].
  The following patches are now obsolete in version 3.13.0:
  * add-decoding-of-vendor-specific-vpd-fields.patch
  * pciutils-3.1.7-fix-memory-leak-in-get_cache_name.patch
  * pciutils-3.2.0_update-dist.patch
  * pciutils-3.5.1-add-support-for-32-bit-pci-domains.patch
  * pciutils-lspci-Correct-Root-Capabilities-CRS-Software-Visibil.patch
  * show-gen4-speed-properly.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1761134400">- pciutils.spec: Add a strict dependency to libpci. [bsc#1252338]
  Mixing different versions of pciutils and libpci could result in
  a segmentation fault due to incompatible ABI.</changelog>
</package>
<package pkgid="0f44c574ef04f5aa083a7f56d5a13ffb84ef3778e938105f6d652d8a51c51dcb27f5baab9764d49866eee373b7c8a1be17942c92f870c23906ec5beb1bfb9832" name="pcp-conf" arch="noarch">
  <version epoch="0" ver="6.2.0" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1702555200">- declare the users/groups we create in the preinstall scripts
  (this is needed for newer rpm versions)</changelog>
  <changelog author="tina.mueller@suse.com" date="1706788800">- Change YAML::XS::LibYAML to YAML::XS as this is the module to be used</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1711972800">- Upgrade to 6.2.0 (bsc#1217826 CVE-2023-6917, bsc#1217783):
  * Changes from pcp-6.2.0:
  - Client tools and utilities:
    pmlogger: default to creating version 3 PCP archives
    pmie, pmlogger, pmcd, pmproxy: init script hardening to
    run less as root:root, more as pcp:pcp and more safely
    pcp-reboot-init: new systemd service for $PCP_RC_DIR setup
    pcp2arrow: new, export metrics to parquet format for pandas
    pcp-atop: deterministic process sort when handling NULLs
    pcp-atop: update to v2.10.0 upstream code
    pcp-htop: update to latest upstream fixes
    pcp-geolocate: function with older versions of python
    pcp-meminfo: resolve possible 'broken pipe' diagnostics
    pcp-ss: fix handling of listening state sockets to match ss
    pcp-ss: fix the UDP UNCONN vs LISTEN state handling
  - PMDA additions, enhancements and bug fixes:
    pmdaproc: improvements for process accounting metrics
    pmdalinux: add pgpromote* and pgdemote* memory metrics
    pmdalinux: add metric sysfs.module.zswap.max_pool_percent
    pmdalinux: add new SNMP metric network.ip.outtransmits
    pmdasummary: send state change 0 (no change) back to pmcd
    pmdapostgresql: support the psycopg3 python module as well
    pmdaopenmetrics: kepler support - live metrics and logging
  - Server-side utilities and log management scripts:
    pmlogrewrite, pmlogredact: fix for missing data volumes
    pmcd: cosmetic change to avoid pipe2 name clash
    runaspcp: new helper utility for unprivileged rc scripts
    pmnsmerge: be more defensive in qsort comparison routine
    pmlogsize: fix qsort comparison function handling of equality
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: pmOpenLog refactor for handling previous log files
    libpcp: new __pmCleanMapDir routine to aid log culling
    libpcp &amp; pmcd: READY-NOT-READY hardening
    libpcp: avoid possible thread issues (coverity)
    libpcp: refactor pmDupContext for thread safety
    libpcp_import: add guard in pmiPutMark to prevent SIGSEGV
  - Build, infrastructure and packaging updates:
    build: changes to re-enable builds for FreeBSD 12, 13, 14
    build: add diffutils rpm dep as pmdaproc script uses diff
    build: add main.yml for building and publishing container
    build: resolve compiler warnings in various tools/libraries
    packaging: use tmpfiles.d method to create PCP_RUN_DIR
    build: packaging changes for openSUSE 15.5 and 15.6
    debian: do not ship empty directory /usr/lib/pkgconfig
    build: el10 systemd-presets for pmcd/pmie/pmlogger enabling
    build: drop rpm dep on bpftool as local version used only
    build: change perl YAML::XS::LibYAML module to YAML::XS
  - Security Enhanced Linux:
    selinux: policy improvements for CentOS/RHEL 7 and 8
  - Documentation:
    docs: Fedora 39 found some tbl(1)/troff(1) issues, fix
    docs: add an explicit code-of-conduct for PCP
    docs: pmns(5) note that metric names must only contain ASCII
    docs: update the BPF README to describe bpftool reality
  * Changes from pcp-6.1.1:
  - Client tools and utilities:
    pmie: add -o/--format to control output format with archives
    pcp-geolocate: automatic latitude and longitude metric labels
    pcp-atop: fix segv encountered on a multi-node NUMA system
    pcp-atop: add last level cache support using pmdaresctrl
    pcp-htop: updated with latest fixes from htop.dev
    pcp-netstat: without time options report one sample only
    pcp-netstat: add machine header info
    pcp-meminfo: without time options report one sample only
    pcp-meminfo: add machine header info
    pcp-buddyinfo: resolve a key issue when using python v2
    pcp-zoneinfo: ensure determinism in pcp-zoneinfo output
    pcp-zoneinfo: fix failure with older PCP metric instances
  - PMDA additions, enhancements and bug fixes:
    pmdaresctrl: new PMDA for x86_64 last level cache metrics
    pmdafarm: new Seagate Field Access Reliability Metrics PMDA
    pmdadarwin: updated for changes in NFS stats management
    pmdalinux: new mem.util metrics from recent kernel versions
    pmdalinux: new networking metrics relating to MPTcpExt
    pmdasockets: allow sockets with duplicate sources to exist
    pmdabpftrace: rework exit/wait handling to avoid errors
    pmdahaproxy: fixed connect script handling of string quoting
    pmdastatsd: fixed metadata for a couple of metrics
    pmdalinux: fixed semantics for mem.vmstat.nr_free_cma metric
    pmdadenki: simplification and refactoring of metrics
    pmdagfs2: correct permissions of several installed files
    pmdakvm: fixed semantics for kvm.largepages metric
  - Server-side utilities and log management scripts:
    pmproxy: add support for HTTP compression
    pmlogger: rework heuristic for Latest folio creation
    pmlogctl: fix incorrect rewriting of PCP_ARCHIVE_DIR
    pmlogredact: add latitude and longitude labels to redacted set
    pmlogrewrite: resolve a small memory leak
    pmlogrewrite: use PM_CTXFLAG_METADATA_ONLY for speed
    pmcd: add $PMCD_CREDS_TIMEOUT as an alternative to -q
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: new PM_CTXFLAG_METADATA_ONLY flag for pmNewContext
    libpcp: fix a couple of derived metric bugs
    libpcp_web: implement config override by canonical env vars
  - Misc build, infrastructure and packaging updates:
    build: new CI build to keep PCP for MacOS up-to-date
    build: several fixes to tools when compiling with clang
    build: install pmlog[redact,reduce,rewrite] on default PATH
    build: default to using a path-prefixed PCP_PYTHON_PROG
    build: update the Fedora container to f38
    build: drop of i386/i686 architectures from Fedora builds
    build: enable build of pmdalibvirt on CentOS 7 platform
    build: enable Qt6 in Fedora and post-RHEL-9 rpm spec files
    build: add pyodbc rpm dep for pcp-pmda-mssql in RHEL 9
  - Security Enhanced Linux:
    selinux: allow pmproxy use the io_uring API
    selinux: policy fixes for recent AVCs on RHEL 7.9
    selinux: add netlink_kobject_uevent_socket getattr (bpftrace)
  - Documentation:
    man pages: change all to map font CW -&gt; CR for latest groff
    man: note pmseries Redis timeseries load order limitation
  * Changes from pcp-6.1.0:
  - pmlogredact: new command for archive anonymisation
  - pcp-atop: new bar graph visualisation mode
  - pcp-atop: update to atoptool.nl 2.9.1 sources
  - pcp-htop: support dynamic screens (user-configurable tabs)
  - pcp-htop: update to latest upstream source
  - pcp-htop: default screens for filesystems, disks and cgroups
  - pcp-htop: non-default screens for several libbpf modules
  - pcp-htop: fix mishandling of some process argument shading
  - pcp-buddyinfo: new tool reporting Linux buddyinfo stats
  - pcp-meminfo: new tool reporting Linux kernel memory stats
  - pcp-netstat: new tool reporting networking statistics
  - pcp-slabinfo: new tool reporting Linux slabinfo kernel stats
  - pcp-zoneinfo: new tool reporting Linux zoneinfo kernel stats
  - pmsleep,pmpause: add -w where option for systemd annotation
  - pmieconf: move test_action from primary into a separate group
  - pmieconf: update webhook action for better EDA integration
  - pmlogconf: remove latency-inducing fsync on config write
  - pmlogconf: updates for new metrics used in pcp-atop
  - pmdalinux: add three new /proc/vmstat pscan/pgsteal metrics
  - pmdalinux: fix bug when lsb-release is only /etc/*-release file
  - pmdabpf: add -q/--tryload command line option
  - pmdaopenmetrics: reduce transient instance logs, improve labels
  - libpcp: improved SSL error reporting
  - selinux: add policy updates for pmproxy (io_uring,ipc_lock)
  - build: support for Qt6, drop remaining Qt4 configure-support
  - build: updated licence strings in spec files to follow SPDX
  - build: default to using a path-prefixed PCP_PYTHON_PROG
  - build: fix several makefile clean targets for deb packagers
  - build: configure.ac update to autoconf 2.71
  - build: add tarball upload to release workflow
  - docs: pmie updates to explain action behaviour with archives
  - docs: retire "archive log" phrase from man pages and books
  - docs: transition Artifactory (no free service) to Packagecloud
  * Changes from pcp-6.0.5:
  - pmie: ensure pmie.log.YYYYMMDD is owned by pcp:pcp
  - pcp2json: extend pcp2json with an option to send HTTP POSTs
  - pmlogger: fix pidfile update; pmlogger.pid is for primary only
  - pmdumptext: fix scaling when -i command line option is used
  - pmlogextract: improve resilience in corner-case conditions
  - pmdasmart: additional NVME power state metrics
  - pmdasmart: additional NVME disk information metrics
  - pmdasmart: update help with proper description of DC status
  - pmdasmart: filter out zram devices when probing for devices
  - pmdahacluster: handle pacemaker 2.1.5 crm_mon output changes
  - pmcd: improve debugging flags and diagnostics in general
  - libpcp_pmda: refactor and improve library diagnostics
  - selinux: updates to policy for pmlogger and pmlogger_daily
  - build: switch rpm spec files to SPDX license identifiers
  - build, qa: numerous updates to improve PCP on OpenBSD
  - build: switch from registry.centos.org to quay.io for el6/el7
  - ci: add centos6 back into the fold as its on quay.io now
  - ci: add Debian 12, drop Ubuntu 16 and Fedora 35
  * Changes from pcp-6.0.4:
  - pmcd: propogate a new PMCD_HOSTNAME_CHANGE flag to clients
  - pmdumplog: support preferred alternate name pmlogdump
  - pmlogger: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmlogger_janitor: new script called from pmlogger_check
  - pmlogger: add -d directory argument for alternate naming schemes
  - pmlogrewrite: fix remaining corner case for indom renumbering
  - pmie: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmie: catching SIGUSR1 triggers a pending task dump
  - pmie_{check,daily}: change pmie.log handling regime
  - pmieconf: add support for a webhook action to pmieconf
  - pmieconf: add a wall rule action for adm group members
  - pmieconf: add support for an action testing rule
  - pmieconf: use correct pmieconf percent type for thermal throttle
  - pmieconf: add minimum pct conjunction to entropy for small poolsizes
  - pminfo: use -b to batch pmDesc retrievals as well as pmResult
  - pmstat: fix corner case handling of automatic pmcd reconnect
  - pcp2influxdb: add requests.post timeout to avoid hangs
  - pcp-dstat: fixes CSV output to show all (not visible) plugins
  - pcp-htop: support File Descriptor Meter
  - pcp-htop: sync latest fixes from upstream htop
  - pcp-mpstat: fixed broken pipe issue
  - pcp-ps: fix exception handling for process name
  - rc scripts: ensure pmcd.conf not rewritten unnecessarily
  - pmdalinux: add a couple of new /proc/net/snmp ICMP metrics
  - pmdalinux: add new network.tcp.tcpplbrehash metric
  - pmdaproc: add new proc.smaps.pss_dirty metric
  - pmdarabbitmq: add timeout handling to http requests
  - pmdastatsd: stats and blocklisted metric names alignment
  - libpcp: new pmAddDerivedText API for derived metric help text
  - libpcp: check level parameter on entry to pmLookupText
  - libpcp: new PMAPI error code addition for bad API arguments
  - libpcp: allow derived metrics semantics of 'similar' indoms
  - selinux: add missing context information on farm services
  - build: fix a number of Debian sub-package dependency issues
  * Changes from pcp-6.0.3:
  - build: fix Debian postinst script handling of missing systemctl
  - pmdaproc: support per-cgroup IRQ PSI metrics in recent kernels
  - pmdalinux: support for system wide IRQ PSI metrics in recent kernels
  - pmlogrewrite: improved handling of unused instance domains
  * Changes from pcp-6.0.2:
  - Client tools and utilities:
    pcp-atop: update to latest upstream atoptool.nl sources
    pcp-atop: cgroup, NUMA memory and NUMA CPU support
    pcp-htop: update to latest upstream htop.dev sources
    pcp-dstat: fix handling of --swap with -f (full) option
    pcp-dstat: fix columns for --net-packets
    pcp-mpstat: fix handling of log-once summary metric values
    pcp-mpstat: improve error handling for the current values
    pcp-ps: added capabilities to show N samples with archives
    pcp-ps: fix handling of the -o option
    pcp-ps: fix broken pipe errors when piping to head(1)
    pcp-ps: fix process "START" column calculation and rounding
    pcp-pidstat: fix broken pipe errors when piping to head(1)
    pmdumplog: extend -x so -xxx reports timestamps in Epoch format
    pmlogger: refactor getting FQDN for local host
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set config default for biosnoop module to disabled
    pmdabpf: port forward to latest vendored libbpf-tools code
    pmdalinux: boolean metric network.interface.virtual from sysfs
    pmdalinux: more careful slabinfo 32/64 bit type multiplication
    pmdalinux: add NUMA external fragmentation metric via sysfs
    pmdalinux: fix pmid numbering issue with hinv.map.scsi_id
    pmdanfsclient: fix srcport handling for RDMA and UDP mounts
    pmdaopenmetrics: validate all names before using them for metrics
    pmdaoverhead: new PMDA to measure overhead for groups of processes
    pmdastatsd: static metric memory leak fix
    pmdastatsd: ragel parser refactor and fix
  - Server-side utilities and log management scripts:
    pmieconf: new pmie rule checking file descriptor limits
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: fix buffer issue for user/group name lookups
    libpcp_web: improve error handling in pmseries AST parser
  - Misc build, infrastructure and packaging updates:
    configure.ac: fixes for improved C99 compatibility
    configure.ac: use QTDIR search path only when given
    MacOS: build: fix shared library builds on modern Macs
    OpenBSD: build updates for clang, Qt and openssl
    libbpf: updated minimium version to 0.8.0, ARM and PPC support
    Qt: update minimum required versions for libqwt
    Drop no-longer-used pmlogger_daily_report systemd rpm spec code
    Determine clang version without optional llvm-config utility
    Another attempt to get the man/man-db/mandoc stuff sorted
  - Security Enhanced Linux:
    Policy updates for pmdastatsd
  - Documentation and QA infrastructure:
    Add help text for some OpenBSD kernel instance domains
    Provide more detailed explanation for default PMLOGGER_INTERVAL
    pmdaChildren(3): clarify the memory allocation scheme
    pcp-ps(1) man page fixes.
  * Changes from pcp-6.0.1:
  - Security Enhanced Linux:
    selinux: rework policy to use optional_policy
    selinux: rework policy to use an independent policy
    selinux: new cluster_exec_t policy handling for pmdahacluster(1)
    selinux: retire those parts of the build affecting CentOS 6
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set perf_buffer__poll timeout to 0 for optimal sampling
    pmdabpf: add CO-RE biosnoop
    pmdabpf: no BPF debug messages unless debugging (-Ddev0)
    pmdalinux: add "squashfs" to the list of ignored filesystem types
    pmdasnmp: install agent specific configuration file to PMDATMPDIR
    pmdakvm: initialise perf_event interface only if/when needed
  - Client tools and utilities:
    pcp-ps: initial version of a PCP implementation of ps(1)
    pcp-dstat: add --nomissed command line option for large systems
    pmfind, libpcp_web: MMV and shutdown memory management fixes
    pmlogreduce: fix corner-case in temporal index generation
    pmlogcheck: tighten some pmlogcheck pass0 checks
    pmseries: fix sampling when start &lt; first sample or series has gaps
    shell completion: improve pmrep/zsh instance completion in live mode
    shell tools: convert fgrep and egrep over to grep -F and -E
  - Server-side utilities and log management scripts:
    pmlogger_daily_report: no longer needs any systemd support now
    pmlogger_daily.sh: fix pmlogger_daily_report test for zeroconf
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_web: fix race conditions affecting pmproxy
    libpcp_web: allow scalar operands in pmseries expressions
    libpcp_web: add pmseries float multiplication
  - Misc build, infrastructure and packaging updates:
    build: add PCP archive analysis container
    build: updates to fix Windows platform builds
    build: update configure.ac to allow builds on Mac M1 (arm64)
    build: make openSUSE spec file builds work again
    containers: remove /build directory
    debian: use deb-systemd-helper if available
    build: fix libpcp check-statics regexp error with objects in subdirs
    build: podman PMDA no longer has deps, make it unconditional
    build: don't package and install pmrep xtract-names helper
    build: updates to hiredis code for pmseries and pmproxy
    build: updates to hiredis-cluster code for pmseries and pmproxy
    build: fix Makepkgs handling of argument parameters
    build: use vendored github.com/libbpf/bpftool/libbpf and update
    build: use vendored github.com/iovisor/bcc/libbpf-tools
    build: use vendored git.code.sf.net/p/qwt and update
    build: fix bpf PMDA inclusion check
    build: fix windows default pmcd.conf entry, dup path component
    build: rework Python3 and Python2 configure.ac logic
    packaging: fix rpm systemd-sysusers on f37 and rawhide
  - Documentation and QA infrastructure:
    docs: small typo fixes relating to secure connections
    docs: fix sheet2pcp(1) man page quoting in examples
    pmdasample: additional metrics for testing cases
  * Changes from pcp-6.0.0:
  - Major changes:
    1. Add version 3 PCP archive support: instance domain change-deltas,
    Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary
    timezones support, 64-bit file offsets used throughout for larger
    (beyond 2GB) individual volumes.
  * * Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting. **
  * * Version 2 archives remain the default (for next few years). **
    2. Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
    this impacts on libpcp, PMAPI clients and PMCD use of encryption;
    these are now configured and used consistently with pmproxy HTTPS
    support and redis-server, which were both already using OpenSSL.
    3. New nanosecond precision timestamp PMAPI calls for PCP library
    interfaces that make use of timestamps.  These are all optional,
    and full backward compatibility is preserved for existing tools.
  - Client tools and utilities:
    pcp2elasticsearch: implement authentication support
    pcp-dstat: implement support for the top-alike plugins
    pcp-dstat: add plugin configuration for ZFS metrics
    pcp-dstat: battery charge remaining config using denki metrics
    pcp-htop: update to latest stable upstream release
    pcp-htop: initial support for screen tabs in the user interface
    pcp-pidstat: correct operation of the -p ALL|SELF options
    pmlogger: small changes for handling derived metrics better
    pmlogger, import: support configurable default archive version
    pcp2xxx: ignore pmrep-specific options
    pmlogger: extra hardening, backtrace symbol improvements
    pmlogger: add -V (output archive version) command line option
    pmseries: add sum(), avg() and stdev() functions
    pmseries: add nth_percentile() and topk() functions
    pmseries: add max_inst() and max_sample() functions
    pmseries: add min_inst() and min_sample() functions
    pmseries: be more defensive during shutdown error paths
    pmseries: fix assumption that any 40-character string is a SID
    pmseries: allow reporting values from SIDs (not just queries)
    sheet2pcp: add -V (output archive version) command line option
    ganglia2pcp: add -V (output archive version) command line option
    iostat2pcp: add -V (output archive version) command line option
  - PMDA additions, enhancements and bug fixes:
    pmdaapache: do time_t manipulation with sufficient space
    pmdabcc: sync bcc PMDA modules with upstream bcc tools
    pmdabpf: adds CO-RE (Compile Once - Run Everywhere) modules
    (exitsnoop, oomkill, bashreadline, mountsnoop, vfsstat,
    opensnoop, fsslower, statsnoop, tcpconnlat, tcpconnect)
    pmdabpf: support x86, arm and powerpc
    pmdabpf: fixed persistence of indom and cluster identifiers
    pmdabpf: rework setrlimit() logic for some small memory hosts
    pmdabpftrace: move example autostart scripts to /usr/share
    pmdabpftrace: update biolatency example script for kernel 5.16+
    pmdadenki: fix battery detection for non-intel systems
    pmdadenki: add support for multiple active batteries
    pmdadenki: support the -D option for debugging
    pmdadenki: improve labels associated with metrics
    pmdadenki: add battery capacity metric
    pmdadenki: add separate indom help text
    pmdalinux: add new MpTcpExt metrics from latest Linux 5.x kernels
    pmdalinux: updates for latest /proc/net/netstat kernel changes
    pmdalinux: improve network metrics help text
    pmdalinux: fix of tty metrics on s390x platform
    pmdamailq: update to ensure Y2038-safe time_t handling
    pmdammv: use highest available timestamp resolution
    pmdaopenvswitch: additional interface and coverage stats
    pmdapostfix: harden against a not-yet-running postfix
    pmdaproc: fix psargs string for processes with very large PIDs
    pmdaproc: fix cgroup cpu metrics refresh structures
    pmdasockets: prevent string overwrite of ss_stats_t fields
    pmdasockets: add checking to the pmStore filter strings
    pmdastatsd: fix detection of failure memory allocation
  - Server-side utilities and log management scripts:
    pmproxy: allow request parameters to be sent in the request body
    pmproxy: fix race on teardown of pcp protocol proxy clients
    pmproxy: improve error checking, check uv_pipe_bind result
    pmproxy: harden logging interfaces, racing with startup
    pmieconf: add several pmie rules for Open vSwitch metrics
    pmlogrewrite: subtle change in semantics for error checking
    pmlogreduce: allow sub-second values for -t option
    pmlogreduce: temporal index, add entries after 100k of data volume
    pmlogcheck: beef up pass 0 to check metadata record types
    pmlogconf: fix reprobing with interactive changes
    pmlogmv: fallback to copy for cross-mount case when link fails
    pmlogmv: add -c (paranoid checksum) option
    pmlogger_farm: add default configuration file for farm loggers
    pmlogger_check: increase PMLOGGER_REQUEST_TIMEOUT from 2 to 10 secs
    pmlogger_daily: callbacks for extra daily log processing tasks
    pmlogger_daily, pmlogger_check: additional systemd-driven changes
    pmlogger_daily: move redirection of stdout+stderr earlier in script
    pmlogger_daily: abandom use of fmt(1) - not portable - uses awk now
    pmlogger_daily_report.sh: some major efficiency improvements
    pmlogger_daily_report: re-enabled for rpm and deb builds
    pmie_check: avoid leaving lock file and temp dir behind
    pm{log,ie}ctl: handle embedded shell syntax in control lines
    pm{log,ie}ctl: add -C args option to pass "args" to pm{logger,ie}_check
    systemd units: pmlogger and pmie farm conditional use of type=exec
    rc-pmcd: reorder the systemd paths attempted in migrate_pid_cgroup
    dbpmda: fix an overlapping copy and add error handling
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_archive: new library for apps that write PCP archives
    libpcp: optimize indom handling in fetchgroup code
    libpcp: drop time_t abuse in getdate.y, use safe sizes
    libpcp: add __pmDumpPDUTrace() and circular trace buffer
    libpcp: add PM_ERR_FEATURE, PM_ERR_TLS error codes
    libpcp: refactor __pmDumpStack(), improve direct calling tools
    libpcp_qmc: require Qt5.6 as the minimum version for builds
    libpcp_qmc: resolve the Qt::endl warning more cleanly
    libpcp_web: stop Redis initialization if Redis version tool old
    libpcp_web: honour config settings that disable redis completely
    libpcp_web: fix memory leaks in discovery, query parsing and APIs
    libpcp_web: honor exclude.metrics setting in pmseries --load
    libpcp_web: run pmFetchArchive(3) in a worker thread
    libpcp_web: fix race condition tearing down load baton
    libpcp_pmda: ensure indom cache write handles time_t safely
    libpcp_import: add interface for setting output log version
    libpcp_import: interfaces for samples with high-resolution timestamps
    python api: updates to allow building from outside git repo
    python api: allow tools using pmconfig module to ignore options
    python api: add python wrappers for highres PMAPI routines
    python api: correct refcounting on pmParseMetricSpec source buffer
  - Security Enhanced Linux:
    selinux: additional policy rules, esp glusterd_log_t
    selinux: bcc PMDA policy to exec private memfd ctypes/libffi objects
    selinux: make use of syslogd_var_run_t map rule conditional
    selinux: policy updates needed for the pmdasockets metrics
    selinux: fine-tune netlink_tcpdiag_socket policy for all platforms
  - Misc build, infrastructure and packaging updates:
    build: latest distros supported (ubuntu 22.04, fedora 37, rhel9, etc)
    build: reproducible debian build efforts
    build: use standard dpkg buildflags variables.
    build: add BuildRequires: python*-pymongo to mongodb PMDA
    build: detect libbpf version for the BPF PMDA
    build: do not transform symlink targets when generating the source tarball
    build: update artifactory deploy script, add recalculate_metadata subtask
    build: update configure script for python2 retirement in rhel9
    build: convert libpcp check-statics to using readelf if available
    build: updates to libpcp check-statics for OpenBSD
    build: fix configure detection of backtrace() and associated hooks
    build: fixed source dependencies within libpcp_web makefile
    build: add rpm conflicts lines on postgresql-pgpool-II
    build: remove pmclient reliance on libpcp.h for timed sleep
    build: remove mmvdump reliance on libpcp.h for mmap wrapper
    build: make perl truly conditional in the PCP build
    build: drop no-longer-needed NSS/NSPR package deps
    build: resolve ostree non-writable /var for pmieconf
    packaging: update rpm specs to solve systemd warnings
    container: bump base image version
    Makepkgs: fix for Debian build (and Qt packaging failure in CI)
    vendor: switch to git-subtree for iovisor/bcc libbpf-tools code
  - Documentation and QA infrastructure:
    docs: update notes about sar2pcp, iostat2pcp in pcpcompat(1)
    docs: add section to pcpcompat(1) about python2
    docs: add fix for readthedocs compilation error
    docs: updates to the Quick Guide documents
    docs: clatifications to pmrep et al: man pages
    docs: improve pmproxy timeseries and pmseries load documentation
    docs: further improvements and fixes to the INSTALL doc
    docs: add pmlogger(1) -V, describe $PCP_ARCHIVE_VERSION in pcp.conf.
    docs: small fixes to the pcp-pidstat man page
    docs: fix webapi documentation typo around polltimeout
    pylint: numerous issues resolved, tracking latest versions
    qa: regression tests for bpftrace PMDA: check probes
    qa: pmdabcc pylint fixups
    qa: rework Redis PING-PONG checks
    qa/check: run tests under timeout(1) control if possible
    qa-summary: allow unified reporting from CI and QA Farm
    qa/admin/show-me-all &amp; qa/show-me: changes for CI integration
    qa/check: add support for "triaged" tests
    ci: send report to Slack when QA workflow is triggered manually
    ci: add required packages to enable bpf PMDA on CentOS Stream 9
    ci: run CodeQL daily and for each PR
    ci: run full QA on pull requests, save history
    ci: unset XDG_RUNTIME_DIR when invoking podman
- Refresh patches:
  * 0001-Install-libraries-without-exec-permission.patch
  * 0002-Remove-CPAN-rpaths.patch
  * 0003-Remove-runlevel-4-from-init-scripts.patch
  * 0010-services-switch-logutil-and-pmieutil-scripts-from-ty.patch
- Change dependency from openssl-devel &gt;= 1.1.1 to openssl-devel &gt;= 1.0.2p.
  Required for SLE-12, builds just fine.
- Disable 'pmda-infiniband' subpackage for SLE-12.
  Required so it builds cleanly.
- Introduce pmda-resctrl package, disabled for architectures other
  than x86_64.
- Change the architecture for various subpackages to 'noarch' as they
  contain no binaries, this lowers rpmlint's badness score
  substantially.
- Disable 'pmda-mssql', as it fails to build.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712145600">- Add fix for bsc#1222121 CVE-2024-3019:
  * 0011-disable-redis-proxying-by-default.patch</changelog>
  <changelog author="dmueller@suse.com" date="1713182400">- move pmlogger_daily into main package (bsc#1222815)
- fix compile flags conflusion</changelog>
  <changelog author="martin.schreiner@suse.com" date="1732708800">- Replace dejavu-fonts with liberation-fonts.
- Fix for bsc#1232695.</changelog>
  <changelog author="pgajdos@suse.com" date="1737460800">- Fix symlink race; CVE-2024-45770; (bsc#1230552)
  + 0012-src-pmpost-pmpost.c-guard-against-possible-symlink-a.patch
- Fix pmstore corruption; CVE-2024-45769 (bsc#1230551)
  + 0013-src-libpcp-src-p_result.c-correct-buffer-over-run-te.patch
  + 0014-src-libpcp-src-p_result.c-hardening-of-the-result-PD.patch
  + 0015-src-libpcp-src-p_result.c-hardening-of-result-PDU-ev.patch
  + 0016-src-libpcp-src-p_result.c-rework-PDU-integrity-check.patch
  + 0017-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0018-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0019-src-libpcp-src-p_result.c-32-bit-fix-for-SUSE-Issue-.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742904000">- Enable custom pcp-selinux module (bsc#1237260)</changelog>
  <changelog author="cathy.hu@suse.com" date="1746014400">- Add missing dependencies for selinux-policy-targeted in
  %post for pcp-selinux (bsc#1242052)</changelog>
</package>
<package pkgid="11f4e49eed7f8c2459f50180fab48a376b06546fea285c88582e8a517fe27070a735d41df02d05f2d6373a08aef1f9682be39898a749401bfd8f220b6541ab45" name="pcr-oracle" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="160000.1.1"/>
  <changelog author="glin@suse.com" date="1740139200">- Update the License tag to GPL-2.0-or-later to match the license
  declaration in the source files</changelog>
  <changelog author="glin@suse.com" date="1740571200">- Add fix-bsc1230316-predict-sbatlevelrt.patch to predict
  SbatLevelRT for the next boot (bsc#1230316)</changelog>
  <changelog author="glin@suse.com" date="1741348800">- Add fix-bsc1230316-predict-sbatlevelrt-sb-off.patch to fix the
  prediction of SbatLevelRT when Secure Boot is disabled
  (bsc#1230316)
- Add fix-bsc1230316-make-pcr4-hard-requirement.patch to make PCR4
  a hard requirement for SbatLevelRT prediction (bsc#1230316)</changelog>
  <changelog author="aplanas@suse.com" date="1743508800">- Update to 0.5.5
  + Merge of pending patches into the project
  + No new feature since last release
- Change source to the openSUSE project
- Remove patches (merged)
  + fix-bsc1230316-make-pcr4-hard-requirement.patch
  + fix-bsc1230316-predict-sbatlevelrt.patch
  + fix-bsc1230316-predict-sbatlevelrt-sb-off.patch
  + fix_efi_measure_and_shim.patch
  + fix-event-reshash-for-cryptouuid.patch
  + fix_grub_bls_cmdline.patch
  + fix_grub_bls_entry.patch
  + fix_loader_conf.patch
  + fix-testcase-empty-efi-variables.patch
  + support-ecc-srk.patch</changelog>
  <changelog author="glin@suse.com" date="1747137600">- Update to 0.5.6
  + rsa: adopt OpenSSL 3.0 API to generate RSA key
  + Drop the code for openSSL &lt; 3.0.0
  + Look for signing authority in alternative database
  (bsc#1241957)
- Bump the requirement of libopenssl-devel to 3.0.0</changelog>
  <changelog author="glin@suse.com" date="1748520000">- Update to 0.5.7
  + Support ppc64 events
  + Fix the string comparison for the alternative event
    (bsc#1241957)
- Add the new BuildRequires: libelf-devel and libfdisk-devel</changelog>
  <changelog author="glin@suse.com" date="1759838400">- Update to 0.5.8
  + Fix unsealing failure when using non default PCR bank
  + Extra checks for TPM self-test (bsc#1249079)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1769428800">- Enable build on %{arm} as it is required by sdbootutil</changelog>
  <changelog author="glin@suse.com" date="1770033600">- Update to 0.5.9
  + Fix event skipping due to double increment
  + Add '--persistent-srk' to make SRK persistent (bsc#1248516)</changelog>
  <changelog author="glin@suse.com" date="1773662400">- Update to 0.6.0
  + Initial support for CI tests
  + Fix additional arguments following the PCR index
  + CI: Shutdown the swtpm instance after tests
  + Fix stop event check crash for grub-command (bsc#1258119)
  + Print PCR values during signing or sealing</changelog>
</package>
<package pkgid="ea61626a804fb0812d470cc584f6fe74c747b1f337e6393ec433d126d9587de99a3290169f1c489698d4cf80813b33780a07acc1987156c5e368df68c38aefef" name="pcsc-ccid" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="160000.2.2"/>
  <changelog author="axel.braun@gmx.de" date="1627214400">- Version 1.4.35
  * Add support of
  - ArkSigner Connect2Sign
  - Circle CCR7115 ICC
  - Circle CCR7315
  - Circle CIR215 CL
  - Circle CIR215 PICC
  - Circle CIR315
  - Circle CIR315 (idProduct: 0x3100)
  - Circle CIR315 CL
  - Circle CIR315 Dual &amp; 1S
  - Circle CIR415 CL &amp; 1S
  - Circle Idaxis SecurePIV
  - DUALi DE-ABCM6 RFRW
  - Feitian R701
  - Generic EMV Smartcard Reader (0x058C:0x9590)
  - INMAX DWR18 HC
  - INMAX DWR18 HPC
  - Identiv Identiv uTrust 4711 F CL + SAM Reader
  - Identiv uTrust 3721 Contactless Reader
  - Infocrypt HWDSSL DEVICE
  - Infocrypt Token++ lite
  - MK Technology KeyPass D1
  - SONY Felica RC-S300/P
  - SONY Felica RC-S300/S
  - SONY Felica RC-S660/U
  - SYNNIX CL-2100R
  - SoloKeys Solo 2
  - Spyrus Inc PocketVault P-3X (idProduct: 0x3203)
  * parse: use "ICCD token" for ICCD tokens
  * Support 4 card slots with Feitian R502 C9
  * ccid_usb: ask for bNumDataRatesSupported data rates
  * Solve a performance issue with T=1 and CCID_CLASS_AUTO_PPS_PROP
  * Fix a possible buffer overflow in T0ProcACK
  * IFDHSetProtocolParameters: set IFSC/IFSD only for TPDU readers
  * CCID serial: Reset buffers on failed read
  * Fix yylex missing symbol
  * Gemalto pinpad: fix incorrect bEntryValidationCondition for
    SecurePINVerify and SecurePINModify
  * Fix bit4id miniLector-EVO pinpad support
  * The Kobil TriBank reader does NOT support extended APDU</changelog>
  <changelog author="axel.braun@gmx.de" date="1630324800">- Version 1.4.36
  * Add support of
  - Lenovo Lenovo Smartcard Wired Keyboard II
  - REINER SCT tanJack USB
  - SafeNet eToken 5110+ FIPS
  - SafeNet eToken 5300 C
  - jSolutions s.r.o. Multi SIM card reader 4/8
  * parse: fix check when bNumDataRatesSupported = 0</changelog>
  <changelog author="axel.braun@gmx.de" date="1643284800">- verson 1.5.0
  * Add support of
  - ACS ACR1281U
  - Circle CCR7125 ICC
  - Circle CIR125 ICC
  - Circle CIR125-DOT ICC
  - Circle CIR215 CL with iProduct 0x2100
  - Circle CIR315 DI
  - Circle CIR315 with idProduct: 0x0324
  - Circle CIR315 with idProduct: 0x7004
  - Circle CIR415 CL
  - Circle CIR515 ICC
  - Circle CIR615 CL
  - Circle CIR615 CL &amp; 1S
  - ELYCTIS CL reader
  - Nitrokey Nitrokey 3
  - Thales Shield M4 Reader
  * Add support of simultaneous slot access on multi slots readers
  * Use FeliCa instead of Felica on SONY request
  * Fix SafeNet eToken 5110 SC issue
  * Allow vendor control commands for Omnikey 5427 CK
  * always compute readTimeout to use a value greater than default 3 seconds
  * Check the bSeq value when receiving a CCID frame
  * Avoid logging errors when a reader is removed
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1668513600">- version 1.5.1
  * Add support of
  - Access IS ATR220 with idProduct: 0x0184
  - Alcor Link AK9567
  - Alcor Link AK9572
  - BLUTRONICS TAURUS NFC
  - CHERRY SmartTerminal ST-1144
  - CREATOR CRT-603(CZ1) CCR
  - Dexon Tecnologias Digitais LTDA DXToken
  - ESMART Reader ER433x ICC
  - ESMART Reader ER773x Dual &amp; 1S
  - Flight system consulting Incredist
  - Ledger Nano S
  - Ledger Nano S Plus
  - Ledger Nano SP
  - Ledger Nano X
  - SafeNet eToken Fusion
  - Sensyl SSC-NFC Reader
  * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
  * configure.ac: add --enable-strict option
  * Fix a problem with AUTO PPS readers and ATR convention inverse cards
  * examples/scardcontrol:
  - add support of 6A xx error codes
  - check WinSCard error early
  - parse wLcdLayout &amp; bEntryValidationCondition
  * macOS: log non sensitive strings as "%{public}s"
  * Some other minor improvements</changelog>
  <changelog author="code@bnavigator.de" date="1675339200">- version 1.5.2
  * Add support of
  - KAPELSE KAP-LINK
  - LDU LANDI
  - Sensyl SSC-HV Reader
  - TOKEN2 MFA NFC Reader
  - TOKEN2 Molto2
  - Thales RF Reader
  * Alcor Micro AU9560: Remove high speeds since they are not
    supported
  * Hack for AlcorMicro AU9560 and Acos-ID card
  * configure.ac: disable the use of --disable-usbdropdir</changelog>
  <changelog author="axel.braun@gmx.de" date="1698667200">- version 1.5.4
  * fix a regression introduced in 1.5.3
- version 1.5.3
  * Add support of
  - ACS ACR1552 1S CL Reader
  - ACS ACR1552 CL Reader
  - ACS ACR1581
  - ACS ACR40T ICC Reader
  - ACS ACR40U ICC Reader
  - ACS WalletMate 1S CL Reader
  - Aktiv Rutoken SCR 3101 NFC Reader
  - CIRIGHT ONE PASS U2F
  - Dexon Tecnologias Digitais LTDA eSmartDX
  - Excelsecu Card reader
  - GHI NC001
  - Identiv uTrust Token Flex
  - SpringCard M519 with idProduct: 0x6212
  - SpringCard M519 with idProduct: 0x621A
  - WCMi SD5931
  * parse: create output.bin file
  * udev: Disable USB-persist for CCID devices
  * configure: fail if flex is not found
  * Some other minor improvements</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700136000">- Fix build dependency - require zlib-devel instead of zlib</changelog>
  <changelog author="jgwang@suse.com" date="1709208000">- Update to version 1.5.5
  * Add support of
  - Alpha-Project ANGARA Token
  - Broadcom Corp 58200 (idProduct: 0x5864)
  - Broadcom Corp 58200 (idProduct: 0x5865)
  - Imprivata USB CCID
  - KAPELSE eS-KAP-Ad
  - Kapelse inSide
  - KAPELSE KAP-Care
  - KAPELSE KAP-eCV
  - KAPELSE KAP-GO
  - KAPELSE KAP-LINK2
  - Kapelse KAP-Move
  - Kapelse Ti-Kap
  - rf IDEAS USB CCID
  - SIMHUB pcsc reader
  * support Kapelse readers on macOS (composite as multislot)
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1717588800">- Version 1.6.0
  - uses meson build system now
  - Add support of
  - Aladdin R.D. JCR SecurBio
  - AvidCard CAC Smart Card Reader
  - FujitsuTechnologySolutions GmbH Dual Smartcard Reader D321
  - Ledger Stax
  - NXP Pegoda 3
  - authenton #1- CTAP2.1
  - provide files for meson build tool (replaces autoconf/automake)
  - Add possibility to set/get NAD on T=1 for MEP
  - multi-slots readers
  - Better handling of reader removal
  - Use CLOCK_MONOTONIC for timeouts
  - Some other minor improvements</changelog>
  <changelog author="andrea.manzini@suse.com" date="1737806400">- Version 1.6.1
  * fix 'parse' build issues on some systems (pthread &amp; strlcpy)
  * Some other minor improvements</changelog>
</package>
<package pkgid="aaaac98401f4e765a7e192e3ae24615ad8acf867892ccecc448f3e8b6b9b0475e33caff2e66e8bf7dc3a30040fdaaaf2dd21108dd642f1edd42df130d64634bc" name="pcsc-lite" arch="x86_64">
  <version epoch="0" ver="2.0.1" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1636804800">- Change to systemd-sysusers</changelog>
  <changelog author="axel.braun@gmx.de" date="1638619200">- version 1.9.5
  * pcscd: autoexit even if no client connects
  * Fix variable substitution in systemd units
  * fix potential race conditions with powerState handling
  * Add and use tag TAG_IFD_DEVICE_REMOVED
  * UnitaryTests: port code to Python 3</changelog>
  <changelog author="axel.braun@gmx.de" date="1652356800">- version 1.9.6
  * do not fail reader removal in some specific cases (USB/Thunderbolt port)
  * improve documentation regarding /etc/reader.conf.d/
  * SCardGetStatusChange: speedup the case DISABLE_AUTO_POWER_ON
  * configure:
  . add --disable-strict option
    By default the compiler arguments are now:
  - Wall -Wextra -Wno-unused-parameter -Werror ${CFLAGS}
  . fail if flex is not found
  * fix different data races
  * pcscdaemon: -v displays internal constants values:
    MAX_READERNAME &amp; PCSCLITE_MAX_READERS_CONTEXTS
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1652443200">- version 1.9.7
  * disable strict compilation by default
  * fix 3 warnings</changelog>
  <changelog author="axel.braun@gmx.de" date="1655035200">- version 1.9.8
  * Install install_spy.sh &amp; uninstall_spy.sh scripts in docdir
  * SCardTransmit(): do not fail if receive buffer is "too large"
  * SCardControl(): do not fail if receive buffer is "too large"
  * fix some memory leaks on shutdown
  * use a better random number generator
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1662897600">- version 1.9.9
  * SCardEstablishContext() may return SCARD_W_SECURITY_VIOLATION if
    refused by Polkit
  * Fix SCardReleaseContext() failure on orphan handles
  * Fix SCardDisconnect() on orphan handle
  * pcsc-spy: log the pioSendPci &amp; pioRecvPci SCardTransmit() parameters
  * Improve the log from pcscd: log the return code in text instead of hex
  * Some other minor improvements</changelog>
  <changelog author="meissner@suse.com" date="1677931200">- add a 32 bit -devel package for use by wine development with wine 8.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1686312000">- Version 2.0.0
  * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
  * Add '--disable-polkit' option
  * Reset eventCounter when a reader is removed
  * Add "polkit" in "pcscd -v" output if enabled
  * Doxygen: document SCARD_E_INVALID_VALUE for some functions
  * use secure_getenv(3) if available
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1700913600">- version 2.0.1
  * SCardConnect(): return SCARD_W_SECURITY_VIOLATION when needed (polkit)
  * SCardCancel(): return SCARD_S_SUCCESS even if the client already finished
  * polkit is enabled by default
  * libpcscspy: fix a crash with NULL pointers
  * Doxygen: fix SCardBeginTransaction() documentation
  * fix pcscd internal thread safety issues (clang -fsanitize=thread)
  * Some other minor improvements</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="aaf4a2ee74d860490a656a6303fce7a897efa112eaaa8d95518bd8235516a9c94eeed99f04032cc5866d47ab55b89c9c20ab203431101a4a59156697104b86af" name="pcsc-tools" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="160000.2.2"/>
  <changelog author="mardnh@gmx.de" date="1594123200">- Update to version 1.5.7
  * 116 new ATRs
  * ATR_analysis: Update URL of the online parser
- Update to version 1.5.6
  * 62 new ATRs
  * pcsc_scan: better support of Windows
- Update to version 1.5.5
  * 353 new ATRs
  * scriptor: add -u option to make stdout unbuffered</changelog>
  <changelog author="mardnh@gmx.de" date="1636372800">- Update to version 1.5.8
  * 360 new ATRs
  * ATR_analysis:
    + fix TB2 parsing error
    + misc spelling fixes
  * pcsc_scan:
    + add maxtime option -t
    + add the option -c to list cards only once
    + no spinner in quiet mode (-q)
    + turn off colour if redirected output
    + Exit if no reader is found and -c or -r is used
- Run spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1643544000">- Update to version 1.6.0
  * 48 new ATRs
  * pcsc_scan:
  + drastically reduce the number of SCardGetStatusChange() calls
  + faster spinning animation</changelog>
  <changelog author="alarrosa@suse.com" date="1666267200">- Replace the requirement for perl(Gtk2) with perl(Gtk3) which is
  what's actually used.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 1.6.1:
  * Fix Hungarian eID URL
  * New ATR for OTP Bank Mastercard
  * new ATRs
  * pcsc_scan: add "wsvt25" as a color terminal</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to 1.6.2:
  * ATR_analysis: URL updates
  * new ATRs
  * LICENCE file now packaged</changelog>
  <changelog author="badboywj@gmail.com" date="1701086400">- update to 1.7.0:
  * 182 new ATRs
  * pcsc_scan:
    + add debug option -d
    + add PnP option -p
  * gscriptor: i18n and l10n in English (default), French
    and Russian
  * configure: add --enable-ATRparser=foobar to specify an
    ATR parser
  * minor fixes and improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1707652800">- update to 1.7.1:
  * New ATRs
  * build system changes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1739016000">- update to 1.7.2:
  * A number of new ATRs
  * build system and portability changes</changelog>
  <changelog author="mardnh@gmx.de" date="1742817600">- Update to version 1.7.3
  * A number of new ATRs.
  * build system and portability changes.</changelog>
</package>
<package pkgid="b10c68fa22db870ce5bd606dae8f520b587f57d65139ed898bd91b60b587c10db76af97015ca826a1ae4c7f568ec640add05017a9d9500383b17fdf5df9ffc3e" name="perl" arch="x86_64">
  <version epoch="0" ver="5.42.0" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1712923200">- Revert commit 7af2d2037375d58e700f9e1b217efb2c4db66133 as suggested
  by upstream perl
  * fixed locale being clobbered by perl [bsc#1220195]
  * new patch: perl-locale-backport.diff</changelog>
  <changelog author="opensuse@dstoecker.de" date="1718107200">- update to 5.40.0
  * New __CLASS__ Keyword
  * :reader attribute for field variables
  * Permit a space in -M command-line option
  * Restrictions to use VERSION declarations
  * New builtin::inf and builtin::nan functions (experimental)
  * New ^^ logical xor operator
  * try/catch feature is no longer experimental
  * for iterating over multiple values at a time is no longer experimental
  * builtin module is no longer experimental
  * The :5.40 feature bundle adds try
  * use v5.40; imports builtin functions
  * CVE-2023-47038 - Write past buffer end via illegal user-defined Unicode property
  * CVE-2023-47039 - Perl for Windows binary hijacking vulnerability
  * reset EXPR now calls set-magic on scalars
  * Calling the import method of an unknown package produces a warning
  * return no longer allows an indirect object
  * Class barewords no longer resolved as file handles in method calls
    under no feature "bareword_filehandles"
  * Using goto to jump from an outer scope into an inner scope is
    deprecated and will be removed completely in Perl 5.42. [GH #21601]
  * The negation OPs have been modified to support the generic TARGMY
    optimization. [GH #21442]
- Refresh perl-5.38.0.diff
- Drop perl-5.18.2-overflow.diff (no longer applicable)
- Drop perl-locale-backport.diff (proper fix in new version)
- Drop old manual package name based perl provides</changelog>
  <changelog author="mls@suse.de" date="1718625600">- move UNIVERSAL.pm into perl-base</changelog>
  <changelog author="opensuse@dstoecker.de" date="1720008000">- Insert manual provide for perl(Getopt::Long) until new version
  transition is done</changelog>
  <changelog author="mls@suse.de" date="1741348800">- update to 5.40.1
  * fix strftime sometimes crashing if a non-string was used as argument
  * some functions in the builtin:: package would crash when used after
  a tail call
  * fix utf8n_to_uvchr sometimes failing to correctly identify certain
  invalid UTF-8 sequences as invalid.</changelog>
  <changelog author="mls@suse.de" date="1742472000">- Drop BerkeleyDB support from core perl [jsc#PED-12413]</changelog>
  <changelog author="mls@suse.de" date="1744632000">- update to 5.40.2
  * fix heap buffer overflow with tr// [bsc#1241083] [CVE-2024-56406]</changelog>
  <changelog author="mls@suse.de" date="1749124800">- do not change the current directory when cloning an open
  directory handle [bnc#1244079] [CVE-2025-40909]
  new patch: perl-dirdup.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Replace usage of %jobs for reproducible builds (boo#1237231)
- Add perl-fixed-uname.patch to not store kernel version (boo#1230137)</changelog>
  <changelog author="mls@suse.de" date="1752235200">- update to 5.42.0
  * new pragma "source::encoding"
  * new ":writer" attribute on field variables
  * new "any" and "all" operators
  * lexical method declaration using "my method"
  * lexical method invocation operator "-&gt;&amp;"
  * switch and Smart Match operator kept, behind a feature
  * unicode 16.0 supported
  * assigning logical xor "^^=" operator
  * many performance enhancements
- drop perl-dirdup.diff (included upstream)</changelog>
</package>
<package pkgid="03f7752d45ce53caf13b92579bd384f85a1f3079f4ad8a7eb221f365c4806ca5982ae6c335d91780c36a561514aad58904b6538ec10c7cec42ef437365912830" name="perl-Cairo" arch="x86_64">
  <version epoch="0" ver="1.109" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1380888000">- updated to 1.104
  * Avoid misusing the macro PL_na, thus preventing potential issues when Cairo
  is used in conjunction with certain XS modules, among them XML::Parser and
  String::Approx.</changelog>
  <changelog author="coolo@suse.com" date="1440763200">- updated to 1.105
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="bwiedemann@suse.com" date="1440763201">- BuildRequire pkgconfig(cairo)</changelog>
  <changelog author="coolo@suse.com" date="1443787200">- updated to 1.106
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="dimstar@opensuse.org" date="1464868800">- Ignore make check failures for now (equal to other distros).
  Make tests fails since the upgrade to cairo 1.15.2, but now
  blocks a proper rebuild with perl 5.24. The failure is reported
  at fdo#96311.</changelog>
  <changelog author="timueller+perl@suse.de" date="1570536000">- updated to 1.107
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1570536001">- Add license LGPL-2.1-or-later to cpanspec.yml as it couldn't be detected
  automatically</changelog>
  <changelog author="timueller+perl@suse.de" date="1606305600">- updated to 1.108
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1606824000">- Add some files to skip_doc</changelog>
  <changelog author="timueller+perl@suse.de" date="1611230400">- updated to 1.109
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
</package>
<package pkgid="2ed381d38c70b794238b0183f0800695f756d826a0182b810eaf1cecccdb7fdd7411b4d2c80d20e1a0d858cc468c44d39ba77430f46df9ddb91763b4a616a098" name="perl-Cairo-GObject" arch="x86_64">
  <version epoch="0" ver="1.005" rel="160000.2.2"/>
  <changelog author="malcolmlewis@opensuse.org" date="1546862400">- Fix failing build, add build requires on cairo-gobject.
- Update LICENSE location.</changelog>
  <changelog author="coolo@suse.com" date="1566993600">- updated to 1.005
  see /usr/share/doc/packages/perl-Cairo-GObject/</changelog>
  <changelog author="tina.mueller@suse.com" date="1566993601">- Add BuildRequires:  pkgconfig(cairo-gobject)</changelog>
  <changelog author="tina.mueller@suse.com" date="1567080000">- Add license to cpanspec.yaml and spec</changelog>
</package>
<package pkgid="799ec66da477ac4360b341f40b9789166d73237c0c30b6c24c9c2e789b8b52c6b40796ebd25e517fbb19d16df003ae9a3f46643a57b4e7013bf76d6b8d1d9e40" name="perl-Error" arch="noarch">
  <version epoch="0" ver="0.170.300" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1391947200">- updated to 0.17022
  - Add "use warnings;" to everything (CPANTS Kwalitee).
  - Add a separate LICENSE file (CPANTS Kwalitee).</changelog>
  <changelog author="coolo@suse.com" date="1429185600">- updated to 0.17023
  see /usr/share/doc/packages/perl-Error/ChangeLog
  Feb 12 2015 &lt;shlomif@shlomifish.org&gt; (Shlomi Fish)
    Error.pm #0.17023
  - Minimal version of Module-Build reduced to 0.280801
  - https://rt.cpan.org/Public/Bug/Display.html?id=102062</changelog>
  <changelog author="coolo@suse.com" date="1433678400">- updated to 0.17024
  see /usr/share/doc/packages/perl-Error/ChangeLog
  May 30 2015 &lt;shlomif@shlomifish.org&gt; (Shlomi Fish)
    Error.pm #0.17024
  - Add link to the VCS repository in META.yml</changelog>
  <changelog author="coolo@suse.com" date="1502193600">- updated to 0.17025
  see /usr/share/doc/packages/perl-Error/ChangeLog
  Aug 07 2017 &lt;shlomif@shlomifish.org&gt; (Shlomi Fish)
    Error.pm #0.17025
  - Fix 'use Error::Simple' overriding the $VERSION
  - https://rt.cpan.org/Public/Bug/Display.html?id=122713
  - Thanks to Matthew Horsfall for the report.</changelog>
  <changelog author="coolo@suse.com" date="1527163200">- updated to 0.17026
  see /usr/share/doc/packages/perl-Error/Changes</changelog>
  <changelog author="coolo@suse.com" date="1541678400">- updated to 0.17027
  see /usr/share/doc/packages/perl-Error/Changes
  0.17027         2018-10-28
  - Documentation and examples enhancements.
  - https://bitbucket.org/shlomif/perl-error.pm/pull-requests/1/october-prc-some-minor-mostly-doc-changes/diff
  - Thanks to https://metacpan.org/author/JMERELO .</changelog>
  <changelog author="coolo@suse.com" date="1566648000">- updated to 0.17028
  see /usr/share/doc/packages/perl-Error/Changes
  0.17028         2019-08-23
  - Moved the VCS repo to https://github.com/shlomif/perl-error.pm
  - No other significant changes.</changelog>
  <changelog author="timueller+perl@suse.de" date="1580299200">- updated to 0.17029
  see /usr/share/doc/packages/perl-Error/Changes
  0.17029         2020-01-28
  - Rebuild for order of 'NAME' and 'VERSION' sections in the generated
    POD documentation (see 0.001004 in
    https://metacpan.org/changes/distribution/Pod-Weaver-PluginBundle-SHLOMIF
    ).
  - VERSION used to appear before NAME.</changelog>
  <changelog author="timueller+perl@suse.de" date="1739880000">- updated to 0.17030
  see /usr/share/doc/packages/perl-Error/ChangeLog</changelog>
  <changelog author="tina.mueller@suse.com" date="1739966400">- Normalize CPAN version
  See https://github.com/openSUSE/cpanspec/issues/47 for details.
  I found no reverse dependencies in devel:languages:perl depending
  on a certain version higher than the normalized.</changelog>
</package>
<package pkgid="688b3a90c53091b91db64355ba78da8249030c01d13c326bea41ba7e61283fc1f9e1b2dd191512ae4e2ef1ebcd228990b49dd6e46496442038c45507dba15a9a" name="perl-ExtUtils-Depends" arch="noarch">
  <version epoch="0" ver="0.8001" rel="160000.2.2"/>
  <changelog author="coolo@novell.com" date="1291118400">- switch to perl_requires macro</changelog>
  <changelog author="anicka@suse.cz" date="1291291200">- update to 0.303
  * Fix a race condition when running the tests in parallel.</changelog>
  <changelog author="coolo@novell.com" date="1291982400">- fix buildrequires</changelog>
  <changelog author="vcizek@novell.com" date="1296129600">- update to 0.304
  - More robust detection of gcc toolchains on Win32
  (Closes: RT#62455) (sisyphus).
  - Don't assume dlltool is called 'dlltool' on Win32+gcc. Ask Config.pm
  instead (Closes: RT#62455) (sisyphus).</changelog>
  <changelog author="coolo@suse.com" date="1380888000">- updated to 0.306
  - Fixed typo in RT queue URL; fixes RT#88960
  - Makefile.PL: converted to CPAN::Meta::Spec v2
  - Updated license in RPM spec file; closes RT#88196
  - Updated contact info and added git repo info to POD
  - Add comments for find_extra_libs method (closes RT#43900)
  - Fixed typo (closes RT#86572)</changelog>
  <changelog author="coolo@suse.com" date="1411128000">- updated to 0.401
  - Add README changes created by 'make dist' from the POD
  - Rename test modules
  - Test old/new schemes with .pm files
  - Move old/new scheme tests from middle of other stuff to end
  - Rename test packages to 8.3 unique
  0.400 Sun Aug 10 13:58:24 CEST 2014
  - In addition to the package variables $inc, $libs and @typemaps, write an
    'Inline' method to &lt;package&gt;::Install::Files for easier interoperability
    with the Inline module.
  - Accompany the 'Inline' method with a 'deps' method in
    &lt;package&gt;::Install::Files in addition to the @deps package variable.
  - Make ExtUtils::Depends-&gt;load use the 'Inline' and 'deps' methods by
    default, falling back to the package variables if the methods are not
    defined.
  - Make the docs recommend the 'Inline' and 'deps' approach for creating
    &lt;package&gt;::Install::Files manually, without
    ExtUtils::Depends::save_config.
  0.309 Sat Aug  2 15:23:03 PDT 2014
  - Depends.pm: use $DLEXT instead of $SO for library filename extensions
  - MANIFEST: remove MYMETA.* files
  - use DynaLoader::mod2fname if available
  - Added Android support
  0.308 Sun May 18 16:22:11 PDT 2014
  - Fix win32 test failure in t/02_save_load.t (closes RT#95301)
  0.307 Mon Apr 28 22:04:38 PDT 2014
  - $Data::Dumper::Terse set to 1 broke save_config
  - Document API expected by ::load function</changelog>
  <changelog author="coolo@suse.com" date="1422964800">- updated to 0.404
  - Depends.pm: sort deps in save_config() and get_makefile_vars(); patch
    submitted by Debian's reproducible build team for RT#101602
  - Use / to make ::load filename, not File::Spec - perldoc -f require
  0.403
  - Avoid using Test::More::done_testing() for to support building
    out-of-the-box on older perls.
  0.402 Sat Oct 18 18:06:19 EEST 2014
  - Set Data::Dumper::Sortkeys = 1 in ExtUtils::Depends-&gt;save_config();
    patch submitted by Niko Tyni of the Debian Perl Group; fixes RT#99260</changelog>
  <changelog author="coolo@suse.com" date="1449057600">- updated to 0.405
  see /usr/share/doc/packages/perl-ExtUtils-Depends/Changes
  0.405
  - Remove MYMETA.* from MANIFEST file; closes autogenerated RT ticket
    [#108554]</changelog>
  <changelog author="coolo@suse.com" date="1554897600">- updated to 0.8000
  see /usr/share/doc/packages/perl-ExtUtils-Depends/Changes
  0.8000
  - Bump version so https://metacpan.org/pod/ExtUtils::Depends shows the
    correct _ExtUtils::Depends_ module
  - Quote directories with spaces</changelog>
  <changelog author="timueller+perl@suse.de" date="1621252800">- updated to 0.8001
  see /usr/share/doc/packages/perl-ExtUtils-Depends/Changes
  0.8001
  - Remove hack (cf https://rt.cpan.org/Ticket/Display.html?id=45224)
    The hijacking of EUMM's `static_lib` method is now obsolete, as well as
    causing problems.
  - Also added a couple of code tidy-ups</changelog>
</package>
<package pkgid="b0cd21af27a5bc89ef025234eedb894a00ef73a9e74427bad922e6e95123359d6b928a54528ef8ba4751fe503fbd8de25e42221d2c145af27a3c3e5103471e1d" name="perl-ExtUtils-PkgConfig" arch="noarch">
  <version epoch="0" ver="1.160000" rel="160000.2.2"/>
  <changelog author="anicka@suse.cz" date="1232452800">- update to 1.12
  * Try to fix a test failure.</changelog>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="coolo@novell.com" date="1287489600">- add perl as explicit buildrequire</changelog>
  <changelog author="chris@computersalat.de" date="1290600000">- recreated by cpanspec 1.78
  o fix deps
- noarch pkg</changelog>
  <changelog author="coolo@novell.com" date="1291118400">- switch to perl_requires macro</changelog>
  <changelog author="coolo@suse.com" date="1321617600">- use original .tar.gz</changelog>
  <changelog author="coolo@suse.com" date="1370347200">- updated to 1.14
  - Skip tests for pkg-config binary with the '--max-version' switch on
    OpenBSD 5.2, due to a bug in OpenBSD's implemenation of 'pkg-config'
  - Updated Makefile.PL to use a META_MERGE block with WriteMakefile(); this
    block is what MetaCPAN reads when generating page output
  - Correctly handle major-only versions, like '2' (RT #68246).
  - Updated FSF address and copyrights</changelog>
  <changelog author="coolo@suse.com" date="1380888000">- updated to 1.15
  - Gracefully handle empty fields in pkg-config files.</changelog>
  <changelog author="coolo@suse.com" date="1429790400">- extend version to 6 digits to avoid problems with &gt;= 1.121</changelog>
  <changelog author="coolo@suse.com" date="1492862400">- updated to 1.16
  see /usr/share/doc/packages/perl-ExtUtils-PkgConfig/Changes
  1.16  Thu Apr 20 18:51:36 PDT 2017
  - Add exists() method, and update README (RT#77880)
  - Handle removal of '.' from @INC for Perl 5.24 (RT#120819)</changelog>
</package>
<package pkgid="503f890ab13a75606c35d0d3b7402819172e26ed50895356ce11e6342da4ad2e0b0ea39f8941e343ab0ec56c5a14a01342f80e52ce2852b493f792139dfe0a0e" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.51.0" rel="160000.1.2"/>
  <changelog author="mrueckert@suse.de" date="1741953600">- update to 2.49.0
  https://about.gitlab.com/blog/2025/03/14/whats-new-in-git-2-49-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.49.0/Documentation/RelNotes/2.49.0.adoc
- switch to zlib-ng for code 16
- docs switched to asciidoc</changelog>
  <changelog author="tiwai@suse.com" date="1742817600">- Add support of SHA256 git repo for gitk (bsc#1239989):
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="tiwai@suse.com" date="1749816000">- Refresh gitk SHA256 patch and add SHA256 support to git-gui (bsc#1239989):
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
  The previous patches are dropped:
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1750161600">- update to 2.50.0
  https://about.gitlab.com/blog/what-s-new-in-git-2-50-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.50.0/Documentation/RelNotes/2.50.0.adoc</changelog>
  <changelog author="tiwai@suse.com" date="1750939200">- Fix git-gui citool SHA256 repo handling:
  refreshed 0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1752062400">- update to 2.50.1 (boo#1245938 boo#1245939 boo#1245942 boo#1245943
  boo#1245946 boo#1245947)
  Security fixes for CVE-2025-27613, CVE-2025-27614,
  CVE-2025-46334, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385,
  and CVE-2025-48386
  CVE-2025-27613, Gitk:
  When a user clones an untrusted repository and runs Gitk without
  additional command arguments, any writable file can be created and
  truncated. The option "Support per-file encoding" must have been
  enabled. The operation "Show origin of this line" is affected as
  well, regardless of the option being enabled or not.
  CVE-2025-27614, Gitk:
  A Git repository can be crafted in such a way that a user who has
  cloned the repository can be tricked into running any script
  supplied by the attacker by invoking `gitk filename`, where
  `filename` has a particular structure.
  CVE-2025-46334, Git GUI (Windows only):
  A malicious repository can ship versions of sh.exe or typical
  textconv filter programs such as astextplain. On Windows, path
  lookup can find such executables in the worktree. These programs
  are invoked when the user selects "Git Bash" or "Browse Files" from
  the menu.
  CVE-2025-46835, Git GUI:
  When a user clones an untrusted repository and is tricked into
  editing a file located in a maliciously named directory in the
  repository, then Git GUI can create and overwrite any writable
  file.
  CVE-2025-48384, Git:
  When reading a config value, Git strips any trailing carriage
  return and line feed (CRLF). When writing a config entry, values
  with a trailing CR are not quoted, causing the CR to be lost when
  the config is later read.  When initializing a submodule, if the
  submodule path contains a trailing CR, the altered path is read
  resulting in the submodule being checked out to an incorrect
  location. If a symlink exists that points the altered path to the
  submodule hooks directory, and the submodule contains an executable
  post-checkout hook, the script may be unintentionally executed
  after checkout.
  CVE-2025-48385, Git:
  When cloning a repository Git knows to optionally fetch a bundle
  advertised by the remote server, which allows the server-side to
  offload parts of the clone to a CDN. The Git client does not
  perform sufficient validation of the advertised bundles, which
  allows the remote side to perform protocol injection.
  This protocol injection can cause the client to write the fetched
  bundle to a location controlled by the adversary. The fetched
  content is fully controlled by the server, which can in the worst
  case lead to arbitrary code execution.
  CVE-2025-48386, Git:
  The wincred credential helper uses a static buffer (`target`) as a
  unique key for storing and comparing against internal storage. This
  credential helper does not properly bounds check the available
  space remaining in the buffer before appending to it with
  `wcsncat()`, leading to potential buffer overflows.</changelog>
  <changelog author="mrueckert@suse.de" date="1752062401">- refreshed gitk sha256 patches:
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="tiwai@suse.com" date="1752580800">- update git-gui sha256 patches after the upstream review:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- Update to 2.51.0
  - UI, Workflows &amp; Features
  - Userdiff patterns for the R language have been added.
  - Documentation for "git send-email" has been updated with a
    bit more credential helper and OAuth information.
  - "git cat-file --batch" learns to understand %(objectmode)
    atom to allow the caller to tell missing objects (due to
    repository corruption) and submodules (whose commit objects
    are OK to be missing) apart.
  - "git diff --no-index dirA dirB" can limit the comparison with
    pathspec at the end of the command line, just like normal
    "git diff".
  - "git subtree" (in contrib/) learned to grok GPG signing its
    commits.
  - "git whatchanged" that is longer to type than "git log --raw"
    which is its modern rough equivalent has outlived its
    usefulness more than 10 years ago.  Plan to deprecate and
    remove it.
  - An interchange format for stash entries is defined, and
    subcommand of "git stash" to import/export has been added.
  - "git merge/pull" has been taught the "--compact-summary"
    option to use the compact-summary format, intead of diffstat,
    when showing the summary of the incoming changes.
  - "git imap-send" has been broken for a long time, which has
    been resurrected and then taught to talk OAuth2.0 etc.
  - Some error messages from "git imap-send" has been updated.
  - When "git daemon" sees a signal while attempting to accept()
    a new client, instead of retrying, it skipped it by mistake,
    which has been corrected.
  - The reftable ref backend has matured enough; Git 3.0 will
    make it the default format in a newly created repositories by
    default.
  - "netrc" credential helper has been improved to understand
    textual service names (like smtp) in addition to the numeric
    port numbers (like 25).
  - Lift the limitation to use changed-path filter in "git log"
    so that it can be used for a pathspec with multiple literal
    paths.
  - Clean up the way how signature on commit objects are exported
    to and imported from fast-import stream.
  - Remove unsupported, unused, and unsupportable old option from
    "git log".
  - Document recently added "git imap-send --list" with an
    example.
  - "git pull" learned to pay attention to pull.autostash
    configuration variable, which overrides
    rebase/merge.autostash.
  - "git for-each-ref" learns "--start-after" option to help
    applications that want to page its output.
  - "git switch" and "git restore" are declared to be no longer
    experimental.
  - "git -c alias.foo=bar foo -h baz" reported "'foo' is aliased
    to 'bar'" and then went on to run "git foo -h baz", which was
    unexpected.  Tighten the rule so that alias expansion is
    reported only when "-h" is the sole option.
  - Performance, Internal Implementation, Development Support etc.
  - "git pack-objects" learned to find delta bases from blobs at
    the same path, using the --path-walk API.
  - CodingGuidelines update.
  - Add settings for Solaris 10 &amp; 11.
  - Meson-based build/test framework now understands TAP output
    generated by our tests.
  - "Do not explicitly initialize to zero" rule has been
    clarified in the CodingGuidelines document.
  - A test helper "test_seq" function learned the "-f &lt;fmt&gt;"
    option, which allowed us to simplify a lot of test scripts.
  - A lot of stale stuff has been removed from the contrib/
    hierarchy.
  - "git push" and "git fetch" are taught to update refs in
    batches to gain performance.
  - Some code paths in "git prune" used to ignore the passed-in
    repository object and used the `the_repository` singleton
    instance instead, which has been corrected.
  - Update ".clang-format" and ".editorconfig" to match our style
    guide a bit better.
  - "make coccicheck" succeeds even when spatch made suggestions,
    which has been updated to fail in such a case.
  - Code clean-up around object access API.
  - Define .precision to more canned parse-options type to avoid
    bugs coming from using a variable with a wrong type to
    capture the parsed values.
  - Flipping the default hash function to SHA-256 at Git 3.0
    boundary is planned.
  - Declare weather-balloon we raised for "bool" type 18 months
    ago a success and officially allow using the type in our
    codebase.
  - GIT_TEST_INSTALLED was not honored in the recent topic
    related to SHA256 hashes, which has been corrected.
  - The pop_most_recent_commit() function can have quite
    expensive worst case performance characteristics, which has
    been optimized by using prio-queue data structure.
  - Move structure definition from unrelated header file to where
    it belongs.
  - To help our developers, document what C99 language features
    are being considered for adoption, in addition to what past
    experiments have already decided.
  - The reftable unit tests are now ported to the "clar" unit
    testing framework.
  - Redefine where the multi-pack-index sits in the object
    subsystem, which recently was restructured to allow multiple
    backends that support a single object source that belongs to
    one repository.  A MIDX does span multiple "object sources".
  - Reduce implicit assumption and dependence on the_repository
    in the object-file subsystem.
  - Fixes since v2.50 Unless otherwise noted, all the changes in
    2.50.X maintenance track, including security updates, are
    included in this release.
  - A memory-leak in an error code path has been plugged. (merge
    7082da85cb ly/commit-graph-graph-write-leakfix later to
    maint).
  - A memory-leak in an error code path has been plugged. (merge
    aedebdb6b9 ly/fetch-pack-leakfix later to maint).
  - Some leftover references to documentation source files that
    no longer exist, due to recent ".txt" -&gt; ".adoc" renaming,
    have been corrected. (merge 3717a5775a
    jw/doc-txt-to-adoc-refs later to maint).
  - "git stash -p &lt;pathspec&gt;" improvements. (merge 468817bab2
    pw/stash-p-pathspec-fixes later to maint).
  - "git send-email" incremented its internal message counter
    when a message was edited, which made logic that treats the
    first message specially misbehave, which has been corrected.
    (merge 2cc27b3501 ag/send-email-edit-threading-fix later to
    maint).
  - "git stash" recorded a wrong branch name when submodules are
    present in the current checkout, which has been corrected.
    (merge ffb36c64f2 kj/stash-onbranch-submodule-fix later to
    maint).
  - When asking to apply mailmap to both author and committer
    field while showing a commit object, the field that appears
    later was not correctly parsed and replaced, which has been
    corrected. (merge abf94a283f sa/multi-mailmap-fix later to
    maint).
  - "git maintenance" lacked the care "git gc" had to avoid
    holding onto the repository lock for too long during packing
    refs, which has been remedied. (merge 1b5074e614
    ps/maintenance-ref-lock later to maint).
  - Avoid regexp_constraint and instead use comparison_constraint
    when listing functions to exclude from application of
    coccinelle rules, as spatch can be built with different
    regexp engine X-&lt;. (merge f2ad545813
    jc/cocci-avoid-regexp-constraint later to maint).
  - Updating submodules from the upstream did not work well when
    submodule's HEAD is detached, which has been improved. (merge
    ca62f524c1 jk/submodule-remote-lookup-cleanup later to
    maint).
  - Remove unnecessary check from "git daemon" code. (merge
    0c856224d2 cb/daemon-fd-check-fix later to maint).
  - Use of sysctl() system call to learn the total RAM size used
    on BSDs has been corrected. (merge 781c1cf571
    cb/total-ram-bsd-fix later to maint).
  - Drop FreeBSD 4 support and declare that we support only
    FreeBSD 12 or later, which has memmem() supported. (merge
    0392f976a7 bs/config-mak-freebsd later to maint).
  - A diff-filter with negative-only specification like "git log
  - -diff-filter=d" did not trigger correctly, which has been
    fixed. (merge 375ac087c5 jk/all-negative-diff-filter-fix
    later to maint).
  - A failure to open the index file for writing due to
    conflicting access did not state what went wrong, which has
    been corrected. (merge 9455397a5c
    hy/read-cache-lock-error-fix later to maint).
  - Tempfile removal fix in the codepath to sign commits with SSH
    keys. (merge 4498127b04 re/ssh-sign-buffer-fix later to
    maint).
  - Code and test clean-up around string-list API. (merge
    6e5b26c3ff sj/string-list later to maint).
  - "git apply -N" should start from the current index and
    register only new files, but it instead started from an empty
    index, which has been corrected. (merge 2b49d97fcb
    rp/apply-intent-to-add-fix later to maint).
  - Leakfix with a new and a bit invasive test on pack-bitmap
    files. (merge bfd5522e98 ly/load-bitmap-leakfix later to
    maint).
  - "git fetch --prune" used to be O(n^2) expensive when there
    are many refs, which has been corrected. (merge 87d8d8c5d0
    ph/fetch-prune-optim later to maint).
  - When a ref creation at refs/heads/foo/bar fails, the files
    backend now removes refs/heads/foo/ if the directory is
    otherwise not used. (merge a3a7f20516
    ps/refs-files-remove-empty-parent later to maint).
  - "pack-objects" has been taught to avoid pointing into objects
    in cruft packs from midx.
  - "git remote" now detects remote names that overlap with each
    other (e.g., remote nickname "outer" and "outer/inner" are
    used at the same time), as it will lead to overlapping
    remote-tracking branches. (merge a5a727c448
    jk/remote-avoid-overlapping-names later to maint).
  - The gpg.program configuration variable, which names a
    pathname to the (custom) GPG compatible program, can now be
    spelled with ~tilde expansion. (merge 7d275cd5c0
    jb/gpg-program-variable-is-a-pathname later to maint).
  - Our &lt;sane-ctype.h&gt; header file relied on that the
    system-supplied &lt;ctype.h&gt; header is not later included, which
    would override our macro definitions, but "amazon linux"
    broke this assumption.  Fix this by preemptively including
    &lt;ctype.h&gt; near the beginning of &lt;sane-ctype.h&gt; ourselves.
    (merge 9d3b33125f ps/sane-ctype-workaround later to maint).
  - Clean-up compat/bswap.h mess. (merge f4ac32c03a
    ss/compat-bswap-revamp later to maint).
  - Meson-based build did not handle libexecdir setting
    correctly, which has been corrected. (merge 056dbe8612
    rj/meson-libexecdir-fix later to maint).
  - Document that we do not require "real" name when signing your
    patches off. (merge 1f0fed312a
    bc/contribution-under-non-real-names later to maint).
  - "git commit" that concludes a conflicted merge failed to
    notice and remove existing comment added automatically (like
    "# Conflicts:") when the core.commentstring is set to 'auto'.
    (merge 92b7c7c9f5 ac/auto-comment-char-fix later to maint).
  - "git rebase -i" with bogus rebase.instructionFormat
    configuration failed to produce the todo file after recording
    the state files, leading to confused "git status"; this has
    been corrected. (merge ade14bffd7
    ow/rebase-verify-insn-fmt-before-initializing-state later to
    maint).
  - A few file descriptors left unclosed upon program completion
    in a few test helper programs are now closed. (merge
    0f1b33815b hl/test-helper-fd-close later to maint).
  - Interactive prompt code did not correctly strip CRLF from the
    end of line on Windows. (merge 711a20827b js/prompt-crlf-fix
    later to maint).
  - The config API had a set of convenience wrapper functions
    that implicitly use the_repository instance; they have been
    removed and inlined at the calling sites.
  - "git add/etc -p" now honor the diff.context configuration
    variable, and also they learn to honor the -U&lt;n&gt; command-line
    option. (merge 2b3ae04011 lm/add-p-context later to maint).
  - The case where a new submodule takes a path where there used
    to be a completely different subproject is now dealt with a
    bit better than before. (merge 5ed8c5b465
    kj/renamed-submodule later to maint).
  - The deflate codepath in "git archive --format=zip" had a
    longstanding bug coming from misuse of zlib API, which has
    been corrected.
- drop patches included in update:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
- refreshed patches:
  CVE-2024-24577.patch
  completion-wordbreaks.diff
  git-tcsh-completion-fixes.diff
  setup-don-t-fail-if-commondir-reference-is-deleted.patch
- contrib/workdir is dropped. remove references for it.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1755691200">- Use zlib instead of zlib-ng for SLES16</changelog>
</package>
<package pkgid="c198c1ac542aaf2a55f57f729d0dcea3682e45bc64b5038fd556bbaf69e4d1f1a1f5e9014f5e47f2637cbe6dbb9a5f1991ba1625a98609464d320e65585dd4e3" name="perl-Glib" arch="x86_64">
  <version epoch="0" ver="1.3294" rel="160000.2.2"/>
  <changelog author="opensuse@dstoecker.de" date="1539000000">- Fix autogenerated changes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552651200">- Add perl-Glib-1.328-glib2.59-comment-linebreaks.patch: Fix build
  with new glib2. Patch from fedora.</changelog>
  <changelog author="coolo@suse.com" date="1554292800">- updated to 1.329
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1566907200">- Add patch and glib2-devel dependency to cpanspec.yml</changelog>
  <changelog author="coolo@suse.com" date="1566993600">- updated to 1.3291
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566993601">- Removed patch fixed upstream:
  * perl-Glib-1.328-glib2.59-comment-linebreaks.patch</changelog>
  <changelog author="timueller+perl@suse.de" date="1582113600">- updated to 1.3292
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1582200000">- Add manual license LGPL-2.1-or-later to cpanspec.yml</changelog>
  <changelog author="timueller+perl@suse.de" date="1591531200">- updated to 1.3293
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="timueller+perl@suse.de" date="1693915200">- updated to 1.3294
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
</package>
<package pkgid="a58d7fa83ca118f28fb810c1b99c80bd93c1e4e791909232c237f829f999649a2f9ed998a91886e4d825157aeb5447ce699a0521838e27bbbb77973c19b53c14" name="perl-Glib-Object-Introspection" arch="x86_64">
  <version epoch="0" ver="0.51.0" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1527076800">- updated to 0.045
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="coolo@suse.com" date="1538049600">- updated to 0.046
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="opensuse@dstoecker.de" date="1539000000">- Fix autogenerated changes</changelog>
  <changelog author="coolo@suse.com" date="1554292800">- updated to 0.047
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="tina.mueller@suse.com" date="1566907200">- Add BuildRequires to cpanspec.yaml and spec</changelog>
  <changelog author="coolo@suse.com" date="1566993600">- add license to cpanspec.yaml</changelog>
  <changelog author="timueller+perl@suse.de" date="1576065600">- updated to 0.048
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="timueller+perl@suse.de" date="1603368000">- updated to 0.049
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="timueller+perl@suse.de" date="1680004800">- updated to 0.050
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="timueller+perl@suse.de" date="1693915200">- updated to 0.051
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
</package>
<package pkgid="bb7b0d4cdce09423fa1d4094aaaecac424e01ad2152be3de852bc4615af4f5ee30c10fc2bf2d3391bd33ba00b1faae4cc885ebccc27b20e5fe564923e1b52c78" name="perl-Gtk3" arch="noarch">
  <version epoch="0" ver="0.038" rel="160000.2.2"/>
  <changelog author="malcolmlewis@opensuse.org" date="1546862400">- Add missing Gtk 3.0 typelib to build requires for failing test.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1563796800">- Updated to version 0.35:
  * Load GdkPixdata introspection data if gdk-pixbuf &gt;= 2.38.0,
    (RT#127071).</changelog>
  <changelog author="coolo@suse.com" date="1566993600">- updated to 0.036
  see /usr/share/doc/packages/perl-Gtk3/</changelog>
  <changelog author="tina.mueller@suse.com" date="1571659200">- Added manual dependencies:
  * BuildRequires:  typelib(GdkPixdata) = 2.0
  * BuildRequires:  typelib(Gtk) = 3.0</changelog>
  <changelog author="tina.mueller@suse.com" date="1572004800">- Require typelib(GdkPixdata) only in suse 01550 and higher</changelog>
  <changelog author="timueller+perl@suse.de" date="1584532800">- updated to 0.037
  see /usr/share/doc/packages/perl-Gtk3/</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1598270400">- Fix requires on typelib(GdkPixdata) for SLE 15+, Leap 15.2 and
  greater.
- Update cpanspec.yml for requires as well.</changelog>
  <changelog author="timueller+perl@suse.de" date="1611230400">- updated to 0.038
  see /usr/share/doc/packages/perl-Gtk3/</changelog>
</package>
<package pkgid="2f897a2a7475dc887b340d3dd0c670efb057c36eac461b90f061cc9146d8b66438d03d6f255ac7a89671619847767b3d0d96dbdef01d1e39f1dbea190a714b92" name="perl-base" arch="x86_64">
  <version epoch="0" ver="5.42.0" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1712923200">- Revert commit 7af2d2037375d58e700f9e1b217efb2c4db66133 as suggested
  by upstream perl
  * fixed locale being clobbered by perl [bsc#1220195]
  * new patch: perl-locale-backport.diff</changelog>
  <changelog author="opensuse@dstoecker.de" date="1718107200">- update to 5.40.0
  * New __CLASS__ Keyword
  * :reader attribute for field variables
  * Permit a space in -M command-line option
  * Restrictions to use VERSION declarations
  * New builtin::inf and builtin::nan functions (experimental)
  * New ^^ logical xor operator
  * try/catch feature is no longer experimental
  * for iterating over multiple values at a time is no longer experimental
  * builtin module is no longer experimental
  * The :5.40 feature bundle adds try
  * use v5.40; imports builtin functions
  * CVE-2023-47038 - Write past buffer end via illegal user-defined Unicode property
  * CVE-2023-47039 - Perl for Windows binary hijacking vulnerability
  * reset EXPR now calls set-magic on scalars
  * Calling the import method of an unknown package produces a warning
  * return no longer allows an indirect object
  * Class barewords no longer resolved as file handles in method calls
    under no feature "bareword_filehandles"
  * Using goto to jump from an outer scope into an inner scope is
    deprecated and will be removed completely in Perl 5.42. [GH #21601]
  * The negation OPs have been modified to support the generic TARGMY
    optimization. [GH #21442]
- Refresh perl-5.38.0.diff
- Drop perl-5.18.2-overflow.diff (no longer applicable)
- Drop perl-locale-backport.diff (proper fix in new version)
- Drop old manual package name based perl provides</changelog>
  <changelog author="mls@suse.de" date="1718625600">- move UNIVERSAL.pm into perl-base</changelog>
  <changelog author="opensuse@dstoecker.de" date="1720008000">- Insert manual provide for perl(Getopt::Long) until new version
  transition is done</changelog>
  <changelog author="mls@suse.de" date="1741348800">- update to 5.40.1
  * fix strftime sometimes crashing if a non-string was used as argument
  * some functions in the builtin:: package would crash when used after
  a tail call
  * fix utf8n_to_uvchr sometimes failing to correctly identify certain
  invalid UTF-8 sequences as invalid.</changelog>
  <changelog author="mls@suse.de" date="1742472000">- Drop BerkeleyDB support from core perl [jsc#PED-12413]</changelog>
  <changelog author="mls@suse.de" date="1744632000">- update to 5.40.2
  * fix heap buffer overflow with tr// [bsc#1241083] [CVE-2024-56406]</changelog>
  <changelog author="mls@suse.de" date="1749124800">- do not change the current directory when cloning an open
  directory handle [bnc#1244079] [CVE-2025-40909]
  new patch: perl-dirdup.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Replace usage of %jobs for reproducible builds (boo#1237231)
- Add perl-fixed-uname.patch to not store kernel version (boo#1230137)</changelog>
  <changelog author="mls@suse.de" date="1752235200">- update to 5.42.0
  * new pragma "source::encoding"
  * new ":writer" attribute on field variables
  * new "any" and "all" operators
  * lexical method declaration using "my method"
  * lexical method invocation operator "-&gt;&amp;"
  * switch and Smart Match operator kept, behind a feature
  * unicode 16.0 supported
  * assigning logical xor "^^=" operator
  * many performance enhancements
- drop perl-dirdup.diff (included upstream)</changelog>
</package>
<package pkgid="49a3235b3d4147baff86a290b400f4a7a7cd2d72dc5648c25188422ccc060a3cf4c23aeb47da3ecb422fa9416737aceba0127f6c673039174f25e1d5fdda8749" name="perl-pcsc" arch="x86_64">
  <version epoch="0" ver="1.4.16" rel="160000.2.2"/>
  <changelog author="sbrabec@suse.cz" date="1313582400">- New package, version 1.4.10.</changelog>
  <changelog author="sbrabec@suse.cz" date="1313668800">- Fix build for older products.</changelog>
  <changelog author="mardnh@gmx.de" date="1417608000">- update to version 1.4.13
- corrected Source URL
- ran spec-cleaner
- removed patch: pcsc-perl-noSCardSetTimeout.patch (included in upstream since 1.4.11)
- Changes since 1.4.10:
  * PCSC.pm: Support Perl 5.16
  Remove the warning:
  defined(@array) is deprecated at /usr/lib/perl/5.16.3/Chipcard/PCSC.pm line 69.
    (Maybe you should just omit the defined()?)
  Thanks to Viliam Pucik for the bug report
  * PCSC.xs: Also check for SVt_PVIV and not just SVt_IV.
  * PCSC.xs, PCSC.pm, test.pl: Use lines of less than 80 columns
  * PCSCperl.h: SCardCancelTransaction() is no more present in pcsc-lite
  * PCSC.pm, PCSC.pod, PCSC.xs, PCSCperl.h:
    SCardSetTimout is no more present in pcsc-lite &gt; 1.6.4
    It was a pcsc-lite specific and deprecated function</changelog>
  <changelog author="sbrabec@suse.com" date="1501502400">- Update to version 1.4.14:
  * Error processing fixes.
- Add gpg.keyring and pcsc-perl-1.4.14.tar.bz2.asc.</changelog>
  <changelog author="pgajdos@suse.com" date="1722254400">- version update to 1.4.16
  * moved to github
  * modernize a bit</changelog>
</package>
<package pkgid="7e086260256db5fa13a888de25e886dab45d5202d079e6aa8027a9470322fd83492a3aec4fb69b28aabf9db0e7c9802f72a2c9272e65ac5dd12836e14972c4fb" name="permctl" arch="x86_64">
  <version epoch="0" ver="1699_20250120" rel="160000.2.2"/>
  <changelog author="wolfgang.frisch@suse.com" date="1707220800">- Drop superfluous mkdir /usr/share/permissions/permissions.d
  This is now created by the Makefile. See also
  commit 5900bc1ffe6275298ded3c96dee03a5c98e4db1c</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1709035200">- Update to version 1699_20240223:
  * chkstat: replace ProcMountState enum by simple bool member
  * chkstat: minor style, spelling and documentation fixes
  * chkstat: drop types.h header
  * chkstat: make ProcMountState a private type of ChkStat
  * chkstat: EntryProcessor: rename some member variables for improved readability
  * chkstat: get rid of EntryContext and incorporate it into EntryProcessor
  * chkstat: split-off EntryProcessor from Chkstat main class
  * chkstat: define _GNU_SOURCE via Makefile
  * chkstat: processEntries(): make loop variables const
  * chkstat: split up checkHaveProc()
  * chkstat: ProfileParser: fix a bug when applying capabilities in custom root
  * chkstat: ProfileParser: make adding the root to paths transparent
  * chkstat: ProfileParser: refactor the now reduced codebase
  * chkstat: split off separate ProfileParser
  * chkstat: ProfileEntry: mark dropXID() const to support const ProfileEntry use
  * chkstat: parseProfile(): improve badProfileLine() calls
  * chkstat: drop deprecated capability check
  * chkstat: also move expandProfilePaths() into new VariableExpansions class
  * chkstat: split off variable expansion logic into separate class
  * chkstat: loadVariableExpansions(): a bit of refactoring
  * chkstat: parseSysconfig(): bit of refactoring
  * chkstat: remove deprecated CHECK_PERMISSIONS logic
  * chkstat: move assorted types into dedicated header
  * chkstat: replace #include guards by #pragma once
  * chkstat: split off command line arguments from Chkstat main class
  * chkstat: drop SaneValueArg wrapper
  * chkstat: document new packages.d directory
  * chkstat: drop TODO regarding ProfileEntry being changed on-the-fly
  * chkstat: harmonize FileCapabilities API
  * chkstat: support /usr/share/permissions/package.d for per-package drop-ins
  * chkstat: minor coding style fixes
  * chkstat: improve readability for rstrip() to strip trailing slashes
  * chkstat: remove trailing slashes from paths found on the command line
  * chkstat: add warning messages for rare error situations
  * chkstat: open profiles right away without racy `access()` check.
- Remove fix_version.sh, handle version with services</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1709640000">- Update to version 1699_20240305:
  * chkstat: EntryProcessor: make error handling in safeOpen() clearer
  * chkstat regtests: catch bad error reporting for non-existent files
  * chkstat: EntryProcessor: don't report errors for non-existent files</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1710158400">- Update to version 1699_20240307:
  * build system: migrate from Makefile to Meson
- adjust spec file to meson build</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1715601600">- Update to version 1699_20240513:
  * chkstat: has been renamed to permctl to better reflect its purpose. A
    symlink for backward compatibility will remain in place.
  * documentation: updated man pages
  * ACL support: permctl (formerly chkstat) now supports an additional `+acl`
    syntax to support assigning ACLs to files similar to the already existing
    support for file based capabilities.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1715601601">- rename chkstat package to permctl to match the new binary names. Establish
  Provides/Obsoletes to keep dependencies and old package cleanup in working
  order, see:
  https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package
- add BuildRequires for acl programs for tests to succeed. Still keep %check
  disabled, because the new ACL test fails without /etc/subuid, /etc/subgid
  setup.</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1716292800">- Update to version 1699_20240521:
  * permctl: return special exit code in --warn mode if entries need fixing</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1716552000">- Update to version 1699_20240522:
  * man pages: minor corrections (bsc#1224822)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1730203200">- Update to version 1699_20241029:
  * Add RPM macros; moved from rpm-config-SUSE
  * package RPM macros together with permctl, to avoid having to setup an
    extra sub-package.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1737374400">- Update to version 1699_20250120:
  * profiles: whitelist nvidia-modprobe (bsc#1230950)</changelog>
</package>
<package pkgid="eefce185b4e15b502ebbdab3dbe7007838a64cb72f8ea337988dfb3ebae1a7d1f9fae80297c2d0f8410f018211843554a9facb4ea63cd1788c715cc4b715adc9" name="permissions" arch="x86_64">
  <version epoch="0" ver="1699_20250120" rel="160000.2.2"/>
  <changelog author="wolfgang.frisch@suse.com" date="1707220800">- Drop superfluous mkdir /usr/share/permissions/permissions.d
  This is now created by the Makefile. See also
  commit 5900bc1ffe6275298ded3c96dee03a5c98e4db1c</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1709035200">- Update to version 1699_20240223:
  * chkstat: replace ProcMountState enum by simple bool member
  * chkstat: minor style, spelling and documentation fixes
  * chkstat: drop types.h header
  * chkstat: make ProcMountState a private type of ChkStat
  * chkstat: EntryProcessor: rename some member variables for improved readability
  * chkstat: get rid of EntryContext and incorporate it into EntryProcessor
  * chkstat: split-off EntryProcessor from Chkstat main class
  * chkstat: define _GNU_SOURCE via Makefile
  * chkstat: processEntries(): make loop variables const
  * chkstat: split up checkHaveProc()
  * chkstat: ProfileParser: fix a bug when applying capabilities in custom root
  * chkstat: ProfileParser: make adding the root to paths transparent
  * chkstat: ProfileParser: refactor the now reduced codebase
  * chkstat: split off separate ProfileParser
  * chkstat: ProfileEntry: mark dropXID() const to support const ProfileEntry use
  * chkstat: parseProfile(): improve badProfileLine() calls
  * chkstat: drop deprecated capability check
  * chkstat: also move expandProfilePaths() into new VariableExpansions class
  * chkstat: split off variable expansion logic into separate class
  * chkstat: loadVariableExpansions(): a bit of refactoring
  * chkstat: parseSysconfig(): bit of refactoring
  * chkstat: remove deprecated CHECK_PERMISSIONS logic
  * chkstat: move assorted types into dedicated header
  * chkstat: replace #include guards by #pragma once
  * chkstat: split off command line arguments from Chkstat main class
  * chkstat: drop SaneValueArg wrapper
  * chkstat: document new packages.d directory
  * chkstat: drop TODO regarding ProfileEntry being changed on-the-fly
  * chkstat: harmonize FileCapabilities API
  * chkstat: support /usr/share/permissions/package.d for per-package drop-ins
  * chkstat: minor coding style fixes
  * chkstat: improve readability for rstrip() to strip trailing slashes
  * chkstat: remove trailing slashes from paths found on the command line
  * chkstat: add warning messages for rare error situations
  * chkstat: open profiles right away without racy `access()` check.
- Remove fix_version.sh, handle version with services</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1709640000">- Update to version 1699_20240305:
  * chkstat: EntryProcessor: make error handling in safeOpen() clearer
  * chkstat regtests: catch bad error reporting for non-existent files
  * chkstat: EntryProcessor: don't report errors for non-existent files</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1710158400">- Update to version 1699_20240307:
  * build system: migrate from Makefile to Meson
- adjust spec file to meson build</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1715601600">- Update to version 1699_20240513:
  * chkstat: has been renamed to permctl to better reflect its purpose. A
    symlink for backward compatibility will remain in place.
  * documentation: updated man pages
  * ACL support: permctl (formerly chkstat) now supports an additional `+acl`
    syntax to support assigning ACLs to files similar to the already existing
    support for file based capabilities.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1715601601">- rename chkstat package to permctl to match the new binary names. Establish
  Provides/Obsoletes to keep dependencies and old package cleanup in working
  order, see:
  https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package
- add BuildRequires for acl programs for tests to succeed. Still keep %check
  disabled, because the new ACL test fails without /etc/subuid, /etc/subgid
  setup.</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1716292800">- Update to version 1699_20240521:
  * permctl: return special exit code in --warn mode if entries need fixing</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1716552000">- Update to version 1699_20240522:
  * man pages: minor corrections (bsc#1224822)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1730203200">- Update to version 1699_20241029:
  * Add RPM macros; moved from rpm-config-SUSE
  * package RPM macros together with permctl, to avoid having to setup an
    extra sub-package.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1737374400">- Update to version 1699_20250120:
  * profiles: whitelist nvidia-modprobe (bsc#1230950)</changelog>
</package>
<package pkgid="edd82bb67b077b8fa93004191d8357cfd1680e01394c6a968eb53c6e6ce8d74d13596e8889a78c2998d9a880835c1eb20e2c551e474683991159491121f15e31" name="permissions-config" arch="noarch">
  <version epoch="0" ver="1699_20250120" rel="160000.2.2"/>
  <changelog author="wolfgang.frisch@suse.com" date="1707220800">- Drop superfluous mkdir /usr/share/permissions/permissions.d
  This is now created by the Makefile. See also
  commit 5900bc1ffe6275298ded3c96dee03a5c98e4db1c</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1709035200">- Update to version 1699_20240223:
  * chkstat: replace ProcMountState enum by simple bool member
  * chkstat: minor style, spelling and documentation fixes
  * chkstat: drop types.h header
  * chkstat: make ProcMountState a private type of ChkStat
  * chkstat: EntryProcessor: rename some member variables for improved readability
  * chkstat: get rid of EntryContext and incorporate it into EntryProcessor
  * chkstat: split-off EntryProcessor from Chkstat main class
  * chkstat: define _GNU_SOURCE via Makefile
  * chkstat: processEntries(): make loop variables const
  * chkstat: split up checkHaveProc()
  * chkstat: ProfileParser: fix a bug when applying capabilities in custom root
  * chkstat: ProfileParser: make adding the root to paths transparent
  * chkstat: ProfileParser: refactor the now reduced codebase
  * chkstat: split off separate ProfileParser
  * chkstat: ProfileEntry: mark dropXID() const to support const ProfileEntry use
  * chkstat: parseProfile(): improve badProfileLine() calls
  * chkstat: drop deprecated capability check
  * chkstat: also move expandProfilePaths() into new VariableExpansions class
  * chkstat: split off variable expansion logic into separate class
  * chkstat: loadVariableExpansions(): a bit of refactoring
  * chkstat: parseSysconfig(): bit of refactoring
  * chkstat: remove deprecated CHECK_PERMISSIONS logic
  * chkstat: move assorted types into dedicated header
  * chkstat: replace #include guards by #pragma once
  * chkstat: split off command line arguments from Chkstat main class
  * chkstat: drop SaneValueArg wrapper
  * chkstat: document new packages.d directory
  * chkstat: drop TODO regarding ProfileEntry being changed on-the-fly
  * chkstat: harmonize FileCapabilities API
  * chkstat: support /usr/share/permissions/package.d for per-package drop-ins
  * chkstat: minor coding style fixes
  * chkstat: improve readability for rstrip() to strip trailing slashes
  * chkstat: remove trailing slashes from paths found on the command line
  * chkstat: add warning messages for rare error situations
  * chkstat: open profiles right away without racy `access()` check.
- Remove fix_version.sh, handle version with services</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1709640000">- Update to version 1699_20240305:
  * chkstat: EntryProcessor: make error handling in safeOpen() clearer
  * chkstat regtests: catch bad error reporting for non-existent files
  * chkstat: EntryProcessor: don't report errors for non-existent files</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1710158400">- Update to version 1699_20240307:
  * build system: migrate from Makefile to Meson
- adjust spec file to meson build</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1715601600">- Update to version 1699_20240513:
  * chkstat: has been renamed to permctl to better reflect its purpose. A
    symlink for backward compatibility will remain in place.
  * documentation: updated man pages
  * ACL support: permctl (formerly chkstat) now supports an additional `+acl`
    syntax to support assigning ACLs to files similar to the already existing
    support for file based capabilities.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1715601601">- rename chkstat package to permctl to match the new binary names. Establish
  Provides/Obsoletes to keep dependencies and old package cleanup in working
  order, see:
  https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package
- add BuildRequires for acl programs for tests to succeed. Still keep %check
  disabled, because the new ACL test fails without /etc/subuid, /etc/subgid
  setup.</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1716292800">- Update to version 1699_20240521:
  * permctl: return special exit code in --warn mode if entries need fixing</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1716552000">- Update to version 1699_20240522:
  * man pages: minor corrections (bsc#1224822)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1730203200">- Update to version 1699_20241029:
  * Add RPM macros; moved from rpm-config-SUSE
  * package RPM macros together with permctl, to avoid having to setup an
    extra sub-package.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1737374400">- Update to version 1699_20250120:
  * profiles: whitelist nvidia-modprobe (bsc#1230950)</changelog>
</package>
<package pkgid="0e7742fb07dce99da5d5fe7ffee1cbcf829e714fa020731ce6c093cbac0ffea0494c0a9b7ddfb09c35aa66da6ed94d4c8bd3a37c1e846c9c3a66ff24ea1b12da" name="pigz" arch="x86_64">
  <version epoch="0" ver="2.8" rel="160000.2.2"/>
  <changelog author="uli@suse.com" date="1317384000">- cross-build workaround: use fake cc script to work around build
  system that does not honor CC</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1354017600">- update to 2.2.5:
  * add --rsyncable functionality
  * many bug fixes
- remove all suse patches:
  * pigz-dictzip.patch, large and unmaintained patch. If somebody
    really needs that then we should rebase and test it. In this
    case --dictzip should be probably also added to original gzip.
  * pigz-always-thread.patch was a folloup of pigz-dictzip.patch
  * pigz-do-symlinks.patch added IMO dangerous and stupid behaviour
    for symlinks. The original behaviour is now again like we know
    it from gzip, bzip2 and xz.
  * pigz-spl.patch, why we hacked in special handling of .spl
    files?
  * Generally we want to have pigz to replace gzip (and vice versa)
    so better avoiding interface incompatibilities.
- cleanup spec file</changelog>
  <changelog author="adam@mizerski.pl" date="1363262400">- update to 2.3
  * Don't complain about missing suffix when not writing output file
  * Put all global variables in one global structure for readability
  * Do not decompress concatenated zlib streams -- only gzip streams
  * Add option for compression level 11 to use zopfli
  * Fix handling of junk after compressed data
- added pigz-lm.patch
  * adds missing "-lm"
- provide unpigz binary and manpage as symlink, not copy.
- removed fake cc script - build system honors CC
- cleanup spec file</changelog>
  <changelog author="p.drouand@gmail.com" date="1426075200">- Update to version 2.3.3
  * Portability improvements
  * Update copyright years in documentation
- Add build fix patches
  * pigz-fix-wrong-include.patch
  * pigz-fix-missing-linker.patch
- Remove pigz-lm.patch; fixed
- Use download Url as source</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1502884800">- Update to 2.3.4:
  * no upstream changelog provided</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Update to version 2.4:
  * Generate Zip64 format .zip files when the output is greater
    than or equal to 4 GiB.
  * Improved gzip options processing and return code compatibility
  * Some bug fixes
- Drop no longer needed patches:
  * pigz-fix-missing-linker.patch
  * pigz-fix-wrong-include.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1597233600">- Build with -fexceptions to get compiler/os specific (aka. sane)
  implementations of pthread_cleanup* routines.</changelog>
  <changelog author="dmueller@suse.com" date="1612699200">- update to 2.6:
  * Add --huffman/-H and --rle/U strategy options
  * Fix issue when compiling for no threads
  * Fail silently on a broken pipe
  * Add --alias/-A option to set .zip name for stdin input
  * Add --comment/-C option to add comment in .gz or .zip
  * Several bug and behavior fixes
- drop fortify.patch: obsolete</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1651924800">- update to 2.7:
  * Improved display of multiple-member gzip files
  * Better gzip compatibility and bug fixes
- add pigz-2.7-NOTHREAD-tests.patch to fix tests</changelog>
  <changelog author="pgajdos@suse.com" date="1693828800">- version update to 2.8
  - Fixed a version bug when compiling with the just-released zlib 1.3
  - Will save a modification time only for regular files (just like gzip since 1.10)
  - Will write all available uncompressed data on an error, for partial data recovery
- deleted patches
  - pigz-2.7-NOTHREAD-tests.patch (upstreamed)</changelog>
</package>
<package pkgid="f68505ff75b809c77c542071a8241ee1791ef3d973364c9f60ee3c6565466a5bb9c890ec9c01fa97afb9aca104be9fd79f8f1fc36ad5dc1005fc98eae73299f4" name="pinentry" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1611921600">- add _multibuild to separate out gui client builds</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1630152000">- pinentry 1.2.0:
  * qt: Show a warning if Caps Lock is on
  * qt: Support password formatting.  This makes generated
    passwords easier to transcribe
  * qt: Fix showing of pinentry window on Wayland
  * qt: Check passphrase constraints before accepting passphrase
    if passphrase constraints are requested to be enforced
  * qt: Improve detection of running in a GUI session
  * qt: Improve accessibility when entering new password</changelog>
  <changelog author="dimstar@opensuse.org" date="1645704000">- Fix name tag for multibuild: name tag should be conditional on
  the multibuild flavor.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Correction for previous change: ensure the packages built in the
  gui flavor do not change their package name. e.g pinentry-qt5
  wrongly got renamed to pinentry-gui-qt5.</changelog>
  <changelog author="dmueller@suse.com" date="1661428800">- update to 1.2.1:
  * qt: Support building with Qt 5.9.  [T5592]
  * curses: Handle an error at curses initialization.  [T5623]
  * curses: Specify fg/bg when an extention of Ncurses is not available.
  * qt: Fix translation of context menu entries.  [T5786]
  * qt: Further improve the accessibility.  [T5863]
  * qt: Fix moving focus to second input field when pressing Enter in
    first input field.  [T5866]
  * qt: Update the cursor position when reformatting the text.  [T5972]
  * qt: Use foreground raising code also with the confirm prompt.
  * Make the legacy qt4 version build again.  [T5569]
  * Make sure an entered PIN is always cleared from memory.  [T5977]
  * Build fixes for Windows.  [T5893]</changelog>
  <changelog author="pgajdos@suse.com" date="1677499200">- add %bcond option to disable fltk backend</changelog>
  <changelog author="fcrozat@suse.com" date="1685620800">- Update signature file and keyring with latest ones from download
  site, they were updated by another approved upstream maintainer.</changelog>
  <changelog author="dmueller@suse.com" date="1719748800">- update to 1.3.0:
  * qt: Add new Qt6 frontend.  [rP1e79123c38]
  * qt: Set parent window on Wayland.  [T6930]
  * qt: Fix capslock detection on Wayland.  [rP7dfc60a70d]
  * qt: Fix window icon on Wayland.  [T6887]
  * qt: Add support for external password manager with libsecret.
  * qt: Remove focus indication by text selection.  [T5863]
  * qt: Use same focus indication for labels as Kleopatra.
  * qt: Improve accessibility.  [T5863]
  * gnome3: Prefer gcr-4.  [rP069c219223]
  * curses: Fix timeout handling.  [rP08408498b3]
  * curses: Add SETREPEATOK and quality bar colors.
  * curses: Add password quality meter.  [rP2923707e75]
  * curses,tty: Upon SIGINT, let pinentry exit gracefully.
  * w32: Fix non-focused window and simplify code.
  * Disable secret storage integration when running on KDE
    Plasma.
  * The Windows CE support has been removed.</changelog>
  <changelog author="alexander.graul@suse.com" date="1721217600">- update to 1.3.1:
  * qt: Install and use pinentry icon. [rPf9c252a8d9]
  * qt: Small fix for Qt5. [rP844360c9c9]
  * qt: Fix Windows build of Qt6. [rP34019f954a]
  * New envvar PINENTRY_KDE_USE_WALLET to enable the secret
    storage integration on KDE. [rP23753cfb03]</changelog>
  <changelog author="bwiedemann@suse.com" date="1727006400">- Make pinentry-efl optional</changelog>
</package>
<package pkgid="9d870521797f2e7fb5b66b58c75a844361b871041d2925ad9cd406f8b3685a79dd9e3d94bb502e3a064b10d3c69349666bfc4cf3db6b4e005c9dbfe9c6584504" name="pkgconf" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="160000.2.2"/>
  <changelog author="ngompa13@gmail.com" date="1565611200">- Update to 1.6.3
  + Fixed a memory leak when deduplicating paths.
  + Fixed strndup-related build regression on Windows.
  + Added --modversion description to pkgconf(1) man page.
  + Properly tokenize versions. Versions cannot logically contain
    whitespace, as dependency-lists would not properly tokenize if
    they could. A diagnostic is generated for malformed version
    strings containing whitespace when --validate is used.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592222400">- Update to 1.7.3
  - Bug fixes:
  + Fix a possible out of boundary write when evaluating dependencies.
    Patch by Tobias Stöckmann.
  + Fix escaping logic on Windows.  Patch by Vincent Torri.
  + Fix out of boundary reads and writes with a malformed fragment.
    Patches by Tobias Stöckmann.
  + Fix a possible out of boundary write when evaluating tuples.
    Patch by Tobias Stöckmann.
  + Fix a windows-specific crash relating to path fixups.
  + Fix a possible out of boundary access in the parser for the
    cross-compile database.  Patch by Tobias Stöckmann.
  + Missing files for building with Meson are now included in the
    tarball.  Patch by Neal Gompa.
  + Fix calculation of package atoms on Windows with paths that
    use both directory separator characters.
  + Fix a possible buffer overflow involving newline escaping.
    Patch by Tobias Stöckmann.
  + Fix an out of boundary access in the parser.
    Patch by Tobias Stöckmann.
  + Fix leakage of strcmp() result value in pkgconf_compare_version()
    responses.
  + Return the default personality if loading a cross-compile
    personality file failed.
  + Do not complain about newlines when validating package versions.
  + Properly detect strndup() on Windows when building with Meson.
  - Enhancements:
  + A new --shared option and WantDefaultStatic cross-compile
    configuration option have been added.  This allows for toolchains
    to specify that static linking should be used by default.
  + Support for the PKG_CONFIG_MSVC_SYNTAX environment variable has
    been added.  Patch by Dan Kegel.
  + Support for the PKGCONF_PKG_PKGF_DONT_MERGE_SPECIAL_FRAGMENTS
    client flag which disables emulation of freedesktop.org pkg-config
    fragment merging semantics has been added.
    Patch by Karen Arutyunov.</changelog>
  <changelog author="ngompa13@gmail.com" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds (boo#1175039)</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- do not own directories provided by filesystem
- small cleanups inspired by spec-cleaner</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625054400">- Update to 1.7.4
  + Add PKG_CONFIG_DONT_DEFINE_PREFIX environment variable
  + Handle platforms where realpath(3) requires a pre-allocated
    buffer
  + Fix null-dereference crash when pulling a malformed
    'uninstalled' .pc file into a dependency tree.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1629720000">- Update to version 1.8.0:
  + Fix a minor memory leak relating to cross-personalities
  + Fix some edge cases with --redefine-prefix
  + Do not prepend sysroot_dir if the .pc file does not exist
    in the sysroot
  + Do not perform path filtering on default system include
    and library path lists.</changelog>
  <changelog author="qzhao@suse.com" date="1674993600">- Add pkgconf-CVE-2023-24056.patch: Backport commit 628b2b2baf from
  upstream, test for, and stop string processing, on truncation
  (bsc#1207394 CVE-2023-24056).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1702900800">- update to 2.1.0:
  * new solver for higher performance with complicated graphs
  * Add --license selector to the pkgconf CLI
  * Add flag --verbose and --solution to CLI
  * Changes and fixes to --modversion
  * bug fixes and developer visible changes
- drop pkgconf-CVE-2023-24056.patch, now included</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1707739200">- update to 2.1.1:
  * Fix --modversion with constraints
  * Reintroduce an optimization to the dependency graph walker
    which avoids revisiting already visited nodes
  * Add a regression test to check that the dependency flattener is
    working as expected</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716638400">- update to 2.2.0:
  * Significant solver rework to flatten both requires and
    requires.private dependencies in a single pass.  Improves
    performance slightly and ensures proper dependency order.
  * Improve --digraph output to reflect more of the solver's state
    in the rendered dependency graph.
  * Do not reference the graph root by name when presenting error
    messages about directly requested dependency nodes.</changelog>
</package>
<package pkgid="885a3c4c3512dfd29f3aed62553ecf2342770762ab1e5587405598898510b408b6ded3a4af008ff3396479e8160231a238b308723c6e215b5f3b031751708b8c" name="pkgconf-m4" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="160000.2.2"/>
  <changelog author="ngompa13@gmail.com" date="1565611200">- Update to 1.6.3
  + Fixed a memory leak when deduplicating paths.
  + Fixed strndup-related build regression on Windows.
  + Added --modversion description to pkgconf(1) man page.
  + Properly tokenize versions. Versions cannot logically contain
    whitespace, as dependency-lists would not properly tokenize if
    they could. A diagnostic is generated for malformed version
    strings containing whitespace when --validate is used.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592222400">- Update to 1.7.3
  - Bug fixes:
  + Fix a possible out of boundary write when evaluating dependencies.
    Patch by Tobias Stöckmann.
  + Fix escaping logic on Windows.  Patch by Vincent Torri.
  + Fix out of boundary reads and writes with a malformed fragment.
    Patches by Tobias Stöckmann.
  + Fix a possible out of boundary write when evaluating tuples.
    Patch by Tobias Stöckmann.
  + Fix a windows-specific crash relating to path fixups.
  + Fix a possible out of boundary access in the parser for the
    cross-compile database.  Patch by Tobias Stöckmann.
  + Missing files for building with Meson are now included in the
    tarball.  Patch by Neal Gompa.
  + Fix calculation of package atoms on Windows with paths that
    use both directory separator characters.
  + Fix a possible buffer overflow involving newline escaping.
    Patch by Tobias Stöckmann.
  + Fix an out of boundary access in the parser.
    Patch by Tobias Stöckmann.
  + Fix leakage of strcmp() result value in pkgconf_compare_version()
    responses.
  + Return the default personality if loading a cross-compile
    personality file failed.
  + Do not complain about newlines when validating package versions.
  + Properly detect strndup() on Windows when building with Meson.
  - Enhancements:
  + A new --shared option and WantDefaultStatic cross-compile
    configuration option have been added.  This allows for toolchains
    to specify that static linking should be used by default.
  + Support for the PKG_CONFIG_MSVC_SYNTAX environment variable has
    been added.  Patch by Dan Kegel.
  + Support for the PKGCONF_PKG_PKGF_DONT_MERGE_SPECIAL_FRAGMENTS
    client flag which disables emulation of freedesktop.org pkg-config
    fragment merging semantics has been added.
    Patch by Karen Arutyunov.</changelog>
  <changelog author="ngompa13@gmail.com" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds (boo#1175039)</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- do not own directories provided by filesystem
- small cleanups inspired by spec-cleaner</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625054400">- Update to 1.7.4
  + Add PKG_CONFIG_DONT_DEFINE_PREFIX environment variable
  + Handle platforms where realpath(3) requires a pre-allocated
    buffer
  + Fix null-dereference crash when pulling a malformed
    'uninstalled' .pc file into a dependency tree.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1629720000">- Update to version 1.8.0:
  + Fix a minor memory leak relating to cross-personalities
  + Fix some edge cases with --redefine-prefix
  + Do not prepend sysroot_dir if the .pc file does not exist
    in the sysroot
  + Do not perform path filtering on default system include
    and library path lists.</changelog>
  <changelog author="qzhao@suse.com" date="1674993600">- Add pkgconf-CVE-2023-24056.patch: Backport commit 628b2b2baf from
  upstream, test for, and stop string processing, on truncation
  (bsc#1207394 CVE-2023-24056).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1702900800">- update to 2.1.0:
  * new solver for higher performance with complicated graphs
  * Add --license selector to the pkgconf CLI
  * Add flag --verbose and --solution to CLI
  * Changes and fixes to --modversion
  * bug fixes and developer visible changes
- drop pkgconf-CVE-2023-24056.patch, now included</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1707739200">- update to 2.1.1:
  * Fix --modversion with constraints
  * Reintroduce an optimization to the dependency graph walker
    which avoids revisiting already visited nodes
  * Add a regression test to check that the dependency flattener is
    working as expected</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716638400">- update to 2.2.0:
  * Significant solver rework to flatten both requires and
    requires.private dependencies in a single pass.  Improves
    performance slightly and ensures proper dependency order.
  * Improve --digraph output to reflect more of the solver's state
    in the rendered dependency graph.
  * Do not reference the graph root by name when presenting error
    messages about directly requested dependency nodes.</changelog>
</package>
<package pkgid="7573d087f465e618cc9409efa80e73ebcedd0dc3f9f75023a6fbd65843eaaa499107d900d5e92089b69af34f42750d7076058d08bbf30523c6491a195c03934f" name="pkgconf-pkg-config" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="160000.2.2"/>
  <changelog author="ngompa13@gmail.com" date="1565611200">- Update to 1.6.3
  + Fixed a memory leak when deduplicating paths.
  + Fixed strndup-related build regression on Windows.
  + Added --modversion description to pkgconf(1) man page.
  + Properly tokenize versions. Versions cannot logically contain
    whitespace, as dependency-lists would not properly tokenize if
    they could. A diagnostic is generated for malformed version
    strings containing whitespace when --validate is used.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592222400">- Update to 1.7.3
  - Bug fixes:
  + Fix a possible out of boundary write when evaluating dependencies.
    Patch by Tobias Stöckmann.
  + Fix escaping logic on Windows.  Patch by Vincent Torri.
  + Fix out of boundary reads and writes with a malformed fragment.
    Patches by Tobias Stöckmann.
  + Fix a possible out of boundary write when evaluating tuples.
    Patch by Tobias Stöckmann.
  + Fix a windows-specific crash relating to path fixups.
  + Fix a possible out of boundary access in the parser for the
    cross-compile database.  Patch by Tobias Stöckmann.
  + Missing files for building with Meson are now included in the
    tarball.  Patch by Neal Gompa.
  + Fix calculation of package atoms on Windows with paths that
    use both directory separator characters.
  + Fix a possible buffer overflow involving newline escaping.
    Patch by Tobias Stöckmann.
  + Fix an out of boundary access in the parser.
    Patch by Tobias Stöckmann.
  + Fix leakage of strcmp() result value in pkgconf_compare_version()
    responses.
  + Return the default personality if loading a cross-compile
    personality file failed.
  + Do not complain about newlines when validating package versions.
  + Properly detect strndup() on Windows when building with Meson.
  - Enhancements:
  + A new --shared option and WantDefaultStatic cross-compile
    configuration option have been added.  This allows for toolchains
    to specify that static linking should be used by default.
  + Support for the PKG_CONFIG_MSVC_SYNTAX environment variable has
    been added.  Patch by Dan Kegel.
  + Support for the PKGCONF_PKG_PKGF_DONT_MERGE_SPECIAL_FRAGMENTS
    client flag which disables emulation of freedesktop.org pkg-config
    fragment merging semantics has been added.
    Patch by Karen Arutyunov.</changelog>
  <changelog author="ngompa13@gmail.com" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds (boo#1175039)</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- do not own directories provided by filesystem
- small cleanups inspired by spec-cleaner</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625054400">- Update to 1.7.4
  + Add PKG_CONFIG_DONT_DEFINE_PREFIX environment variable
  + Handle platforms where realpath(3) requires a pre-allocated
    buffer
  + Fix null-dereference crash when pulling a malformed
    'uninstalled' .pc file into a dependency tree.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1629720000">- Update to version 1.8.0:
  + Fix a minor memory leak relating to cross-personalities
  + Fix some edge cases with --redefine-prefix
  + Do not prepend sysroot_dir if the .pc file does not exist
    in the sysroot
  + Do not perform path filtering on default system include
    and library path lists.</changelog>
  <changelog author="qzhao@suse.com" date="1674993600">- Add pkgconf-CVE-2023-24056.patch: Backport commit 628b2b2baf from
  upstream, test for, and stop string processing, on truncation
  (bsc#1207394 CVE-2023-24056).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1702900800">- update to 2.1.0:
  * new solver for higher performance with complicated graphs
  * Add --license selector to the pkgconf CLI
  * Add flag --verbose and --solution to CLI
  * Changes and fixes to --modversion
  * bug fixes and developer visible changes
- drop pkgconf-CVE-2023-24056.patch, now included</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1707739200">- update to 2.1.1:
  * Fix --modversion with constraints
  * Reintroduce an optimization to the dependency graph walker
    which avoids revisiting already visited nodes
  * Add a regression test to check that the dependency flattener is
    working as expected</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716638400">- update to 2.2.0:
  * Significant solver rework to flatten both requires and
    requires.private dependencies in a single pass.  Improves
    performance slightly and ensures proper dependency order.
  * Improve --digraph output to reflect more of the solver's state
    in the rendered dependency graph.
  * Do not reference the graph root by name when presenting error
    messages about directly requested dependency nodes.</changelog>
</package>
<package pkgid="890cc3db4e6b89d56c961dd49be90f87e7098d6e88c6e1a3b398b8638436aa86ab9ae6b5957fe4dc11d984a5afebd18403018f078373c793b069e32a0ccebed5" name="podman" arch="x86_64">
  <version epoch="0" ver="5.4.2" rel="160000.4.1"/>
  <changelog author="danish.prakash@suse.com" date="1739793600">- Add patch for CVE-2024-11218 (bsc#1236270):
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
- Removed patches (merged upstream):
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Add missing podman-clean-transient unit
- Update to version 5.2.5:
  * Bump to v5.2.5 (bsc#1236507)
  * Update release notes for 5.2.5
  * Bump c/storage to v1.55.1 and Buildah to v1.37.5
  * RPM: remove dup Provides
  * Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
  * Bump to v5.2.5-dev
  * Bump to v5.2.4
  * Update release notes for v5.2.4
  * Validate the bind-propagation option to `--mount`
  * Bump Buildah to v1.37.4
  * vendor: update c/common to v0.60.4
  * Bump to v5.2.4-dev
  * Bump to v5.2.3
  * Update release notes for v5.2.3
  * [v5.2] Bump Buildah to v1.37.3
  * pkg/specgen: allow pasta when running inside userns
  * libpod: convert owner IDs only with :idmap
  * docs: update read the docs changes
  * allow exposed sctp ports
  * libpod: setupNetNS() correctly mount netns
  * vendor: update c/common to v0.60.3
  * [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
  * [skip-ci] Packit: Enable sidetags for bodhi updates
  * build: Update gvisor-tap-vsock to 0.7.5
  * CI: podman-machine: do not use cache registry
  * [CI:DOCS] Add v5.2.2 lib updates to RELEASE_NOTES.md
  * Bump to v5.2.3-dev
  * Bump to v5.2.2
  * Update RELEASE_NOTES for v5.2.2
  * [v5.2] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2
  * [v5.2] golangci-lint: make darwin linting happy
  * [v5.2] golangci-lint: make windows linting happy
  * [v5.2] test/e2e: remove kernel version check
  * [v5.2] golangci-lint: remove most skip dirs
  * [v5.2] set !remote build tags where needed
  * [v5.2] update golangci-lint to 1.60.1
  * Packit: update targets for propose-downstream
  * Create volume path before state initialization
  * Update Cirrus DEST_BRANCH
  * Bump to v5.2.2-dev
  * Bump to v5.2.1
  * Update release notes for v5.2.1
  * [v5.2] Add zstd:chunked test fix
  * [v5.2] Bump Buildah to v1.37.1, c/common v0.60.1, c/image v5.32.1
  * libpod: reset state error on init
  * libpod: do not save expected stop errors in ctr state
  * libpod: fix broken saveContainerError()
  * Bump to v5.2.1-dev
  * Bump to v5.2.0
  * Never skip checkout step in release workflow
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc3
  * Update release notes for v5.2.0-rc3
  * Tweak versions in register_images.go
  * fix network cleanup flake in play kube
  * WIP: Fixes for vendoring Buildah
  * Add --compat-volumes option to build and farm build
  * Bump Buildah, c/storage, c/image, c/common
  * libpod: bind ports before network setup
  * pkg/api: do not leak config pointers into specgen
  * build: Update gvisor-tap-vsock to 0.7.4
  * test/system: fix borken pasta interface name checks
  * test/system: fix bridge host.containers.internal test
  * CI: system tests: instrument to allow failure analysis
  * Use uploaded .zip for Windows action
  * RPM: podman-iptables.conf only on Fedora
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc2
  * Update release notes for v5.2.0-rc2
  * test/e2e: fix ncat tests
  * libpod: add hidden env to set sqlite timeout
  * Add support for StopSignal in quadlet .container files
  * podman pod stats: fix race when ctr process exits
  * Update module github.com/vbauerster/mpb/v8 to v8.7.4
  * libpod: correctly capture healthcheck output
  * Bump bundled krunkit to 0.1.2
  * podman stats: fix race when ctr process exists
  * nc -p considered harmful
  * podman pod stats: fix pod rm race
  * podman ps: fix racy pod name query
  * system connection remove: use Args function to validate
  * pkg/machine/compression: skip decompress bar for empty file
  * nc -p considered harmful
  * podman system df: fix fix ErrNoSuchCtr/Volume race
  * podman auto-update: fix ErrNoSuchCtr race
  * Fix name for builder in farm connection
  * 700-play.bats: use unique pod/container/image/volume names
  * safename: consistent within same test, and, dashes
  * 700-kube.bats: refactor $PODMAN_TMPDIR/test.yaml
  * 700-play.bats: eliminate $testYaml
  * 700-play.bats: refactor clumsy yamlfile creation
  * 700-play.bats: move _write_test_yaml up near top
  * chore(deps): update dependency setuptools to v71
  * Expand drop-in search paths * top-level (pod.d) * truncated (unit-.container.d)
  * Remove references and checks for --gpus
  * Do not crash on invalid filters
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.2.0
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc1
  * Keep the volume-driver flag deprecated
  * Vendor in latest containers(common, storage,image, buildah)
  * System tests: safe container/image/volume/etc names
  * Implement disable default mounts via command line
  * test: drop unmount for overlay
  * test: gracefully terminate server
  * libpod: shutdown Stop waits for handlers completion
  * libpod: cleanup store at shutdown
  * Add NetworkAlias= support to quadlet
  * cmd: call shutdown handler stop function
  * fix race conditions in start/attach logic
  * swagger: exlude new docker network types
  * vendor: bump c/storage
  * update to docker 27
  * contrib: use a distinct --pull-option= for each flag
  * Update warning message when using external compose provider
  * Update module github.com/cyphar/filepath-securejoin to v0.3.0
  * Ignore result of EvalSymlinks on ENOENT
  * test/upgrade: fix tests when netavark uses nftables
  * test/system: fix network reload test with nftables
  * test/e2e: rework some --expose tests
  * test: remove publish tests from e2e
  * CI: test nftables driver on fedora
  * CI: use local registry, part 3 of 3: for developers
  * CI: use local registry, part 2 of 3: fix tests
  * CI: use local registry, part 1 of 3: setup
  * CI: test composefs on rawhide
  * chore(deps): update module google.golang.org/grpc to v1.64.1 [security]
  * chore(deps): update dependency setuptools to ~=70.3.0
  * Improve container filenname ambiguity.
  * containers/attach: Note bug around goroutine leak
  * Drop minikube CI test
  * add libkrun test docs
  * fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0
  * cirrus: check for header files in source code check
  * pkg/machine/e2e: run debug command only for macos
  * create runtime's worker queue before queuing any job
  * test/system: fix pasta host.containers.internal test
  * Visual Studio BuildTools as a MinGW alternative
  * SetupRootless(): only reexec when needed
  * pkg/rootless: simplify reexec for container code
  * cirrus: add missing test/tools to danger files
  * fix(deps): update module golang.org/x/tools to v0.23.0
  * Windows Installer: switch to wix5
  * fix(deps): update module golang.org/x/net to v0.27.0
  * pkg/machine/e2e: print tests timings at the end
  * pkg/machine/e2e: run debug commands after init
  * pkg/machine/e2e: improve timeout handling
  * libpod: first delete container then cidfile
  * fix(deps): update module golang.org/x/term to v0.22.0
  * System test fixes
  * cirrus.yml: automatic skips based on source
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.0
  * podman events: fix error race
  * chore(deps): update dependency setuptools to ~=70.2.0
  * fix(deps): update module github.com/gorilla/schema to v1.4.1 [security]
  * Update CI VM images
  * pkg/machine/e2e: fix broken cleanup
  * pkg/machine/e2e: use tmp file for connections
  * test/system: fix podman --image-volume to allow tmpfs storage
  * CI: mount tmpfs for container storage
  * docs: --network remove missing leading sentence
  * specgen: parse devices even with privileged set
  * vendor: update c/storage
  * Remove the unused machine volume-driver
  * feat(quadlet): log option handling
  * Error when machine memory exceeds system memory
  * machine: Always use --log-file with gvproxy
  * CI: Build-Each-Commit test: run only on PRs
  * Small fixes for testing libkrun
  * Podman machine resets all providers
  * Clearly indicate names w/ URLencoded duplicates
  * [skip-ci] Packit: split rhel and centos-stream jobs
  * apple virtiofs: fix racy mount setup
  * cirrus: fix broken macos artifacts URL
  * libpod/container_top_linux.c: fix missing header
  * refactor(build): improve err when file specified by -f does not exist
  * Minor: Remove unhelpful comment
  * Update module github.com/openshift/imagebuilder to v1.2.11
  * Minor: Rename the OSX Cross task
  * [skip-ci] Remove conditionals from changelog
  * podman top: join the container userns
  * Run linting in parallel with building
  * Fix missing Makefile target dependency
  * build API: accept platform comma separated
  * [skip-ci] RPM: create podman-machine subpackage
  * ExitWithError() - more upgrades from Exit()
  * test/e2e: remove podman system service tests
  * cirrus: reduce int tests timeout
  * cirrus: remove redundant skip logic
  * pkg/machine/apple: machine stop timeout
  * CI: logformatter: link to correct PR base
  * Update module github.com/crc-org/crc/v2 to v2.38.0
  * ExitWithError(): continued
  * test/system: Add test steps for journald log check in quadlet
  * restore: fix missing network setup
  * podman run use pod userns even with --pod-id-file
  * macos-installer: bundle krunkit
  * remote API: fix pod top error reporting
  * libpod API: return proper error status code for pod start
  * fix #22233
  * added check for `registry.IsRemote()`. and correct error message.
  * fix #20686
  * pkg/machine/e2e: Remove unnecessary copy of machine image.
  * libpod: intermediate mount if UID not mapped into the userns
  * libpod: avoid chowning the rundir to root in the userns
  * libpod: do not chmod bind mounts
  * libpod: unlock the thread if possible
  * CI Cleanup: Remove cgroups v1 support
  * ExitWithError() - more upgrades from Exit()
  * remote: fix incorrect CONTAINER_CONNECTION parsing
  * container: pass KillSignal and StopTimeout to the systemd scope
  * libpod: fix comment
  * e2e: test container restore in pod by name
  * docs: Adds all PushImage supported paramters to openapi docs.
  * systests: kube: bump up a timeout
  * cirrus.yml: add CI:ALL mode to force all tests
  * cirrus.yml: implement skips based on source changes
  * CI VMs: bump
  * restore: fix container restore into pod
  * sqlite_state: Fix RewriteVolumeConfig
  * chore(deps): update dependency setuptools to ~=70.1.0
  * Quadlet - use specifier for unescaped values for templated container name
  * cirrus: check for system test leaks in nightly
  * test/system: check for leaks in teardown suite
  * test/system: speed up basic_{setup,teardown}()
  * test/system: fix up many tests that do not cleanup
  * test/system: fix podman --authfile=nonexistent-path
  * Update module github.com/containernetworking/plugins to v1.5.1
  * Update module github.com/checkpoint-restore/checkpointctl to v1.2.1
  * Update module github.com/spf13/cobra to v1.8.1
  * Update module github.com/gorilla/schema to v1.4.0
  * pkg/machine/wsl: force terminate wsl instance
  * pkg/machine/wsl: wrap command errors
  * [CI:DOCS] Quadlet - add note about relative path resolution
  * CI: do not install python packages at runtime
  * Release workflow: Include candidate descriptor
  * Minor: Fix indentation in GHA release workflow
  * GHA: Send release notification mail
  * GHA: Validate release version number
  * Remove references to --pull=true and --pull=false
  * ExitWithError, continued
  * podman: add new hidden flag --pull-option
  * [CI:DOCS] Fix typos in podman-build
  * infra: mark storageSet when imagestore is changed
  * [CI:DOCS] Add jnovy as reviewer and approver
  * fix(deps): update module google.golang.org/protobuf to v1.34.2
  * refactor(machine,wsl): improve operations of Windows API
  * --squash --layers=false should be allowed
  * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0
  * update golangci-lint to v1.59.1
  * Rename master to main in CONTRIBUTING.md
  * podman 5, pasta and inter-container networking
  * libpod: do not resuse networking on start
  * machine/linux: Switch to virtiofs by default
  * machine/linux: Support virtiofs mounts (retain 9p default)
  * machine/linux: Use memory-backend-memfd by default
  * ExitWithError() - continued
  * Enable libkrun provider to open a debug console
  * Add new targets on Windows makefile (winmake.ps1)
  * fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1
  * fix(deps): update module golang.org/x/tools to v0.22.0
  * fix(deps): update module golang.org/x/net to v0.26.0
  * libpod: fix 'podman kube generate' on FreeBSD
  * fix(deps): update module golang.org/x/sys to v0.21.0
  * libpod: do not leak systemd hc startup unit timer
  * vendor latest c/common
  * pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly
  * run bats -T, to profile timing hogs
  * test/system: speed up podman ps --external
  * test/system: speed up podman network connect/disconnect
  * test/system: speed up podman network reload
  * test/system: speed up quadlet - pod simple
  * test/system: speed up podman parallel build should not race
  * test/system: speed up podman cp dir from host to container
  * test/system: speed up podman build - workdir, cmd, env, label
  * test/system: speed up podman --log-level recognizes log levels
  * test/system: remove obsolete debug in net connect/disconnect test
  * test/system: speed up quadlet - basic
  * test/system: speed up user namespace preserved root ownership
  * System tests: add `podman system check` tests
  * Add `podman system check` for checking storage consistency
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0
  * fix(libpod): add newline character to the end of container's hostname file
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
  * fix(deps): update github.com/containers/image/v5 digest to aa93504
  * Fix 5.1 release note re: runlabel
  * test/e2e: use local skopeo not image
  * fix(deps): update golang.org/x/exp digest to fd00a4e
  * [CI:DOCS] Add contrib/podmanimage/stable path back in repo
  * chore(deps): update dependency requests to ~=2.32.3
  * fix(deps): update github.com/containers/image/v5 digest to 2343e81
  * libpod: do not move podman with --cgroups=disabled
  * Update release notes on Main to v5.1.0
  * test: look at the file base name
  * tests: simplify expected output
  * Sigh, new VMs again
  * Fail earlier when no containers exist in stats
  * Add Hyper-V option in windows installer
  * libpod: cleanup default cache on system reset
  * vendor: update c/image
  * test/system: speed up kube generate tmpfs on /tmp
  * test/system: speed up podman kube play tests
  * test/system: speed up podman shell completion test
  * test/system: simplify test signal handling in containers
  * test/system: speed up podman container rm ...
  * test/system: speed up podman ps - basic tests
  * test/system: speed up read-only from containers.conf
  * test/system: speed up podman logs - multi ...
  * test/system: speed up podman run --name
  * Debian: switch to crun
  * test/system: speed up podman generate systemd - envar
  * test/system: speed up podman-kube@.service template
  * test/system: speed up kube play healthcheck initialDelaySeconds
  * test/system: speed up exit-code propagation test
  * test/system: speed up "podman run --timeout"
  * test/system: fix slow kube play --wait with siginterrupt
  * undo auto-formatting
  * test/system: speed up podman events tests
  * Quadlet: Add support for .build files
  * test/system: speed up "podman auto-update using systemd"
  * test/system: remove podman wait test
  * tests: disable tests affected by a race condition
  * update golangci-lint to v1.59.0
  * kubernetes_support.md: Mark volumeMounts.subPath as supported
  * working name of pod on start and stop
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
  * Bump Buildah to v1.36.0
  * fix(deps): update module github.com/burntsushi/toml to v1.4.0
  * fix typo in Tutorials.rst
  * Mac PM test: Require pre-installed rosetta
  * test/e2e: fix new error message
  * Add configuration for podmansh
  * Update containers/common to latest main
  * Only stop chowning volumes once they're not empty
  * podman: fix --sdnotify=healthy with --rm
  * libpod: wait another interval for healthcheck
  * quadlet: Add a network requirement on .image units
  * test, pasta: Ignore deprecated addresses in tests
  * [CI:DOCS] performance: update network docs
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
  * CI: disable minikube task
  * [CI:DOCS] Fix windows action trigger
  * chore(deps): update dependency setuptools to v70
  * Check AppleHypervisor before accessing it
  * fix(deps): update module github.com/containernetworking/plugins to v1.5.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2
  * add podman-clean-transient.service service to rootless
  * [CI:DOCS] Update podman network docs
  * fix incorrect host.containers.internal entry for rootless bridge mode
  * vendor latest c/common main
  * Add Rosetta support for Apple Silicon mac
  * bump main to 5.2.0-dev
  * Use a defined constant instead of a hard-coded magic value
  * cirrus: use faster VM's for integration tests
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c
  * [CI:DOCS] Fix Mac pkg link
  * test: remove test_podman* scripts
  * test/system: fix documentation
  * Return StatusNotFound when multiple volumes matching occurs
  * container_api: do not wait for healtchecks if stopped
  * libpod: wait for healthy on main thread
  * `podman events`: check for an error after we finish reading events
  * remote API: restore v4 payload in container inspect
  * Fix updating connection when SSH port conflict happens
  * rootless: fix reexec to use /proc/self/exe
  * ExitWithError() - enforce required exit status &amp; stderr
  * ExitWithError() - a few that I missed
  * [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds
  * Revert "Temporarily disable rootless debian e2e testing"
  * CI tests: enforce TMPDIR on tmpfs
  * use new CI images with tmpfs /tmp
  * run e2e test on tmpfs
  * Update module github.com/crc-org/crc/v2 to v2.36.0
  * Address CVE-2024-3727
  * [CI:DOCS] Use checkout@v4 in GH Actions
  * ExitWithError() - rmi_test
  * ExitWithError() - more r files
  * ExitWithError() - s files
  * ExitWithError() - more run_xxx tests
  * Fix podman-remote support for `podman farm build`
  * [CI:DOCS] Trigger windows installer action properly
  * Revert "container stop: kill conmon"
  * Ensure that containers do not get stuck in stopping
  * [CI:DOCS] Improvements to make validatepr
  * ExitWithError() - rest of the p files
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1
  * Graceful shutdown during podman kube down
  * Remove duplicate  call
  * test/system: fix broken "podman volume globs" test
  * Quadlet/Container: Add GroupAdd option
  * Don't panic if a runtime was configured without paths
  * update c/{buildah,common,image,storage} to latest main
  * update golangci-lint to 1.58
  * machine: Add LibKrun provider detection
  * ExitWithError() - continue tightening
  * fix(deps): update module google.golang.org/protobuf to v1.34.1
  * test: improve test for powercap presence
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3
  * fix(deps): update module go.etcd.io/bbolt to v1.3.10
  * fix(deps): update module golang.org/x/tools to v0.21.0
  * [skip-ci] RPM: `bats` required only on Fedora
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842
  * gpdate and remove parameter settings in `.golangci.yml`
  * ExitWithError() - play_kube_test.go
  * Temporarily disable rootless debian e2e testing
  * fix(deps): update module golang.org/x/crypto to v0.23.0
  * CI Docs: Clarify passthrough_envars() comments
  * Skip machine tests if they don't need to be run
  * Update CI VMs to F40, F39, D13
  * ExitWithError() - v files
  * Update module golang.org/x/term to v0.20.0
  * machine: Add provider detection API
  * util: specify a not empty pause dir for root too
  * Add missing option 'healthy' to output of `podman run --help`
  * [CI:DOCS] Add info on the quay.io images to the README.md
  * Add a random suffix to healthcheck unit names
  * test/e2e: remove toolbox image
  * Also substitute $HOME in runlabel with user's homedir
  * Update module github.com/cyphar/filepath-securejoin to v0.2.5
  * Change tmpDir for macOS
  * ExitWithError() - pod_xxx tests
  * ExitWithError() -- run_test.go
  * Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
  * Update module github.com/shirou/gopsutil/v3 to v3.24.4
  * Update module github.com/docker/docker to v26.1.1+incompatible
  * GHA: Attempt fix exceeded a secondary rate limit
  * vendor ginkgo 2.17.2 into test/tools
  * Fix machine volumes with long path and paths with dashes
  * Update module google.golang.org/protobuf to v1.34.0
  * Update module github.com/crc-org/crc/v2 to v2.35.0
  * Update module github.com/onsi/gomega to v1.33.1
  * test/e2e: podman unshare image mount fix tmpdir leak
  * test/e2e: do not leak /tmp/private_file
  * test/e2e: "persistentVolumeClaim with source" do not leak file
  * e2e tests: use /var/tmp, not $TMPDIR, as workdirs
  * Update dependency pytest to v8.1.2
  * Remove unncessary lines at the end of specfile summary
  * Clean machine pull cache
  * Add krun support to podman machine
  * Use custom image for make validatepr
  * test/e2e: force systemd cgroup manager
  * e2e and bindings tests: fix $PATH setup
  * Makefile: remove useless HACK variable in e2e test
  * test/e2e: fix volumes and suid/dev/exec options
  * test/e2e: volumes and suid/dev/exec options works remote
  * test/e2e: fix limits test
  * Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0
  * Correct option name `ip` -&gt; `ip6`
  * Add the ability to automount images as volumes via play
  * Add support for image volume subpaths
  * Bump Buildah to latest main
  * Update Makefile to Go 1.22 for in-container
  * ExitWithError() - yet more low-hanging fruit
  * ExitWithError() - more low-hanging fruit
  * ExitWithError() - low-hanging fruit
  * chore: fix function names in comment
  * Remove redundant Prerequisite before build section
  * Remove PKG_CONFIG_PATH
  * Add installation instructions for openSUSE
  * Replace golang.org/x/exp/slices with slices from std
  * Update to go 1.21
  * fix(deps): update module github.com/docker/docker to v26.1.0+incompatible
  * [CI:DOCS] Fix artifact action
  * [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals
  * e2e tests: stop littering
  * [CI:DOCS] format podman-pull example as code
  * [CI:DOCS] Build &amp; upload release artifacts with GitHub Actions
  * libpod: getHealthCheckLog() remove unessesary check
  * add containers.conf healthcheck_events support
  * vendor latest c/common
  * libpod: make healthcheck events more efficient
  * libpod: wrap store setup error message
  * [skip-ci] Packit: enable CentOS 10 Stream build jobs
  * pkg/systemd: use fileutils.(Le|E)xists
  * pkg/bindings: use fileutils.(Le|E)xists
  * pkg/util: use fileutils.(Le|E)xists
  * pkg/trust: use fileutils.(Le|E)xists
  * pkg/specgen: use fileutils.(Le|E)xists
  * pkg/rootless: use fileutils.(Le|E)xists
  * pkg/machine: use fileutils.(Le|E)xists
  * pkg/domain: use fileutils.(Le|E)xists
  * pkg/api: use fileutils.(Le|E)xists
  * libpod: use fileutils.(Le|E)xists
  * cmd: use fileutils.(Le|E)xists
  * vendor: update containers/{buildah,common,image,storage}
  * fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security]
  * fix podman-pod-restart.1.md typo
  * [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next
  * fix(deps): update module github.com/onsi/gomega to v1.33.0
  * Add more annnotation information to podman kupe play man page
  * test/compose: remove compose v1 code
  * CI: remove compose v1 tests
  * fix: close resource file
  * [CI:DOCS] Fix windows installer action
  * fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2
  * add `list` as an alias to list networks
  * Add support for updating restart policy
  * Add Compat API for Update
  * Make `podman update` changes persistent
  * Emergency fix (well, skip) for failing bud tests
  * fix swagger doc for manifest create
  * [CI:DOCS] options/network: fix markdown lists
  * Makefile: do not hardcode `GOOS` in `podman-remote-static` target
  * chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  * chore(deps): update dependency setuptools to ~=69.5.0
  * Fix some comments
  * swagger fix infinitive recursion on some types
  * install swagger from source
  * Revert "Swap out javascript engine"
  * podman exec CID without command should exit 125
  * (minor) prefetch systemd image before use
  * Update go-swagger version
  * Swap out javascript engine
  * fix(deps): update module github.com/docker/docker to v26.0.1+incompatible
  * Add os, arch, and ismanifest to libpod image list
  * [CI:DOCS]Initial PR validation
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71
  * vendor ginkgo 2.17.1 into test/tools
  * fix "concurrent map writes" in network ls compat endpoint
  * chore(deps): update dependency pytest to v8
  * e2e: redefine ExitWithError() to require exit code
  * docs: fix missleading run/create --expose description
  * podman ps: show exposed ports under PORTS as well
  * rootless: drop function ReadMappingsProc
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3
  * New CI VMs, to give us pasta 2024-04-05
  * Add big warning to GHA workflow
  * GHA: Fix intermittent workflow error
  * fix(deps): update module golang.org/x/tools to v0.20.0
  * e2e tests: remove requirement for fuse-overlayfs
  * docs: update Quadlet volume Options desc
  * fix(deps): update module golang.org/x/sync to v0.7.0
  * Fix relabeling failures with Z/z volumes on Mac
  * fix(deps): update module golang.org/x/net to v0.24.0
  * Makefile: fix annoying errors in docs generation
  * chore: fix function names in comment
  * Bump tags.cncf.io/container-device-interface to v0.7.1
  * fix(deps): update module golang.org/x/crypto to v0.22.0
  * Detect unhandled reboots and require user intervention
  * podman --runroot: remove 50 char length restriction
  * update github.com/rootless-containers/rootlesskit to v2
  * Update module github.com/gorilla/schema to v1.3.0
  * Update dependency requests-mock to ~=1.12.1
  * Update module github.com/crc-org/crc/v2 to v2.34.1
  * rm --force work for more than one arg
  * [CI:DOCS] Update kube docs
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3
  * [CI:DOCS] Add GitHub action to update version on Podman.io
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2
  * Windows: clean up temporary perl install
  * pkg/util: FindDeviceNodes() ignore ENOENT errors
  * [CI:DOCS] build deps: make-validate needs docs
  * test/system: add rootless-netns test for setup errors
  * vendor latest c/common main
  * container: do not chown to dest target with U
  * [CI:DOCS] golangci-lint: update deprecated flags
  * systests: conditionalize slirp4netns tests
  * CI: systests: instrument flaky tests
  * s3fs docs
  * test: do not skip tests under rootless
  * Add note about host networking to Kube PublishPort option
  * Inject additional build tags from the environment
  * libpod: use original IDs if idmap is provided
  * Switch back to checking out the same branch the action script runs in
  * docs/podman-login: Give an example of writing the persistent path
  * CI: Bump VMs to 2024-03-28
  * [skip-ci] Update dawidd6/action-send-mail action to v3.12.0
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.7
  * Fix reference to deprecated types.Info
  * Use logformatter for podman_machine_windows_task
  * applehv: Print vfkit logs in --log-level debug
  * [CI:DOCS]Add Mario to reviewers list
  * [CI:DOCS] Document CI-maintenance job addition
  * Add golang 1.21 update warning
  * Add rootless network command to `podman info`
  * libpod: don't warn about cgroupsv1 on FreeBSD
  * hyperv: error if not admin
  * Properly parse stderr when updating container status
  * [skip-ci] Packit: specify fedora-latest in propose-downstream
  * Use built-in ssh impl for all non-pty operations
  * Add support for annotations
  * hyperv: fix machine rm -r
  * [skip-ci] Packit: Enable CentOS Stream 10 update job
  * 5.0 release note fix typo in cgroupv1 env var
  * fix remote build isolation on client side
  * chore: remove repetitive words
  * Dont save remote context in temp file but stream and extract
  * fix remote build isolation when server runs as root
  * util: use private propagation with bind
  * util: add some tests for ProcessOptions
  * util: refactor ProcessOptions into an internal function
  * util: rename files to snake case
  * Add LoongArch support for libpod
  * fix(deps): update github.com/containers/common digest to bc5f97c
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1
  * fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security]
  * fix(deps): update module github.com/onsi/gomega to v1.32.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0
  * Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4
  * Fix type-o
  * Use correct extension in suite
  * minikube: instrument tests, to allow debugging failures
  * libpod: restart always reconfigure the netns
  * use new c/common pasta2 setup logic to fix dns
  * utils: drop conversion float-&gt;string-&gt;float
  * utils: do not generate duplicate range
  * logformatter: handle Windows logs
  * utils: add test for the new function
  * utils: move rootless code to a new function
  * CVE-2024-1753 fix for main
  * xref-helpmsgs-manpages: cross-check Commands.rst
  * test/system: Add support for multipath routes in pasta networking tests
  * [skip-ci] rpm: use macro supported vendoring
  * Adjust to the standard location of gvforwarder used in new images
  * Makefile: add target `podman-remote-static`
  * Switch to 5.x WSL machine os stream using new automation
  * Cleanup build scratch dir if remote end disconnects while passing the context
  * bump main to 5.1.0-dev
  * Use faster gzip for compression for 3x speedup for sending large contexts to remote
  * pkg/machine: make checkExclusiveActiveVM race free
  * pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
  * pkg/machine: CheckExclusiveActiveVM should also check for starting
  * pkg/machine: refresh config after we hold lock
  * Update dependency setuptools to ~=69.2.0
  * [skip-ci] rpm: update containers-common dep on f40+
  * fix invalid HTTP header values when hijacking a connection
  * Add doc to build podman on windows without MSYS
  * Removing CRI-O related annotations
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * Pass the restart policy to the individual containers
  * kube play: always pull when both imagePullPolicy and tag are missing</changelog>
  <changelog author="danish.prakash@suse.com" date="1741003200">- Add patch for CVE-2025-27144 (bsc#1237641):
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
- Rebase patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1742299200">- Add patch for CVE-2025-22869 (bsc#1239330):
  * 0003-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Rebase patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch</changelog>
  <changelog author="dcermak@suse.com" date="1743076800">- Depend on runc unconditionally, not only on SLE 15 (bsc#1239088)</changelog>
  <changelog author="danish.prakash@suse.com" date="1747051200">- Add patch for bsc#1242132:
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Removed patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
  * 0003-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Drop iptables support in favor of nftables (required by netavark)
- Fix conditional Requires (remove deprecated sle_version macro)
- Update to version 5.4.2:
  * Bump to v5.4.2
  * Add release notes for v5.4.2
  * Fix a potential deadlock during `podman cp`
  * Improve the file format documentation of podman-import.
  * Revert "podman-import only supports gz and tar"
  * Bump buildah to v1.39.4
  * libpod: do not cover idmapped mountpoint
  * test: Fix runc error message
  * oci: report empty exec path as ENOENT
  * test: adapt tests new crun error messages
  * test: remove duplicate test
  * cirrus: test only on f41/rawhide
  * CI: use z1d instance for windows machine testing
  * New images 2025-03-24
  * test/e2e: use go net.Dial() ov nc
  * test: use ncat over nc
  * New images 2025-03-12
  * RPM: Add riscv64 to ExclusiveArch-es
  * Fix HealthCheck log destination, count, and size defaults
  * Win installer test: hardcode latest GH release ID
  * Packit: Fix action script for fetching upstream commit
  * Bump to v5.4.2-dev
  * Bump to v5.4.1
  * update gvproxy version to 0.8.4
  * Update Buildah to v1.39.2
  * Update release notes for v5.4.1
  * Fix reporting summed image size for compat endpoint
  * podman-import only supports gz and tar
  * quadlet kube: correctly mark unit as failed
  * pkg/domain/infra/abi/play.go: fix two nilness issues
  * kube play: don't print start errors twice
  * libpod: race in WaitForConditionWithInterval()
  * libpod: race in WaitForExit() with autoremove
  * Don't try to resolve host path if copying to container from stdin.
  * Use svg for pkginstaller banner
  * Create quota before _data dir for volumes
  * Packit: clarify secondary status in CI
  * Packit/RPM: Display upstream commit SHA in all rpm builds
  * podman run: fix --pids-limit -1 wrt runc
  * vendor: update github.com/go-jose/go-jose/v3 to v3.0.4
  * chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
  * wire up --retry-delay for artifact pull
  * Revert "silence false positve from golangci-lint"
  * update golangci-lint to v1.64.4
  * update golangci-lint to v1.64.2
  * silence false positve from golangci-lint
  * cmd/podman: refactor Context handling
  * fix new usetesting lint issue
  * Packit/Copr: Fix `podman version` in rpm
  * Remove persist directory when cleaning up Conmon files
  * Bump to v5.4.1-dev
  * Bump to v5.4.0
  * Update release notes for v5.4.0 final
  * In SQLite state, use defaults for empty-string checks
  * Bump FreeBSD version to 13.4
  * docs: add v5.4 to API reference
  * Update rpm/podman.spec
  * RPM: set buildOrigin in LDFLAG
  * RPM: cleanup macro defs
  * Makefile: escape BUILD_ORIGIN properly
  * rootless: fix hang on s390x
  * Set Cirrus DEST_BRANCH appropriately to fix CI
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc3
  * Update release notes for v5.4.0-rc3
  * Add BuildOrigin field to podman info
  * artifact: only allow single manifest
  * test/e2e: improve write/removeConf()
  * Add --noheading to artifact ls
  * Add --no-trunc to artifact ls
  * Add type and annotations to artifact add
  * pkg/api: honor cdi devices from the hostconfig
  * util: replace Walk with WalkDir
  * fix(pkg/rootless): avoid memleak during init() contructor.
  * Add `machine init --playbook`
  * RPM: include empty check to silence rpmlint
  * RPM: adjust qemu dependencies
  * Force use of iptables on Windows WSL
  * rpm: add attr as dependency for podman-tests
  * update gvproxy version
  * [v5.4] Bump Buildah to v1.39.0
  * podman exec: correctly support detaching
  * libpod: remove unused ExecStartAndAttach()
  * [v5.4] Bump c/storage to v1.57.1, c/image v5.34.0, c/common v0.62.0
  * Move detection of libkrun and intel
  * Prevent two podman machines running on darwin
  * Remove unnecessary error handling
  * Remove usused Kind() function
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc2
  * Update release notes for v5.4.0-rc2
  * Safer use of `filepath.EvalSymlinks()` on Windows
  * error with libkrun on intel-based machines
  * chore(deps): update dependency pytest to v8.3.4
  * test/buildah-bud: skip two new problematic tests on remote
  * Fix podman-restart.service when there are no containers
  * Avoid upgrading from v5.3.1 on Windows
  * Clean up after unexpectedly terminated build
  * system-tests: switch ls with getfattr for selinux tests
  * vendor latest c/{buildah,common,image,storage}
  * Makefile: Add validatepr description for 'make help' output
  * docs: Enhance podman build --secret documentation and add examples
  * docs: mount.md - idmapped mounts only work for root user
  * Define, and use, PodmanExitCleanlyWithOptions
  * Eliminate PodmanSystemdScope
  * Fix image ID query
  * Revert "Use the config digest to compare images loaded/pulled using different methods"
  * Update c/image after https://github.com/containers/image/pull/2613
  * Update expected errors when pulling encrypted images
  * Eliminate PodmanExtraFiles
  * Introduce PodmanTestIntegration.PodmanWithOptions
  * Restructure use of options
  * Inline PodmanBase into callers
  * Pass all of PodmanExecOptions to various [mM]akeOptions functions
  * Turn PodmanAsUserBase into PodmanExecBaseWithOptions
  * Avoid indirect links through quadlet(5)
  * do not set the CreateCommand for API users
  * Add podman manifest rm --ignore
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc1
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.2
  * podman artifact
  * vendor latest c/{common,image,storage}
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.2
  * cirrus: bump macos machine test timeout
  * pkg/machine/e2e: improve podman.exe match
  * pkg/machine/e2e: improve "list machine from all providers"
  * Remove JSON tag from UseImageHosts in ContainerConfig
  * Set network ID if available during container inspect
  * Stop creating a patch for v5.3.1 upgrades on windows
  * compose docs: fix typo
  * Document kube-play CDI support
  * docs: Add quadlet debug method systemd-analyze
  * Replace instances of PodmanExitCleanly in play_kube_test.go
  * docs: add 'initialized' state to status filters
  * fix(deps): update module google.golang.org/protobuf to v1.36.3
  * Switch all calls of assert.Nil to assert.NoError
  * Add --no-hostname option
  * Fix unescaping octal escape sequence in values of Quadlet unit files
  * Remove `.exe` suffix if any
  * Add kube play support for CDI resource allocation
  * add support to `;` for comments in unit files as per systemd documentation
  * Use PodmanExitCleanly in attach_test.go
  * Introduce PodmanTestIntegration.PodmanExitCleanly
  * chore(deps): update dependency setuptools to ~=75.8.0
  * Add newer c/i to support artifacts
  * fix(deps): update module golang.org/x/tools to v0.29.0
  * fix(deps): update module golang.org/x/net to v0.34.0
  * specgenutil: Fix parsing of mount option ptmxmode
  * namespaces: allow configuring keep-id userns size
  * Update description for completion
  * Quadlet - make sure the /etc/containers/systemd/users is traversed in rootless
  * Document .build for Image .container option
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.9.1
  * New VM Images
  * update golangci/golangci-lint to v1.63.4
  * fix(deps): update module google.golang.org/protobuf to v1.36.2
  * chore(deps): update dependency setuptools to ~=75.7.0
  * Fixing ~/.ssh/identity handling
  * vendor latest c/common from main
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.12
  * fix(deps): update module github.com/opencontainers/runc to v1.2.4
  * specgen: fix comment
  * Add hint to restart Podman machine to really accept new certificates
  * fix(deps): update module github.com/onsi/gomega to v1.36.2
  * fix(deps): update module github.com/moby/term to v0.5.2
  * Pass container hostname to netavark
  * Fix slirp4netns typo in podman-network.1.md
  * Add support to ShmSize in Pods with Quadlet
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.1
  * chore(deps): update module golang.org/x/crypto to v0.31.0 [security]
  * fix(deps): update module golang.org/x/net to v0.33.0 [security]
  * Kube volumes can not container _
  * fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
  * test/system: fix "podman play --build private registry" error
  * test/system: CopyDirectory() do not chown files
  * test/system: remove system dial-stdio test
  * shell completion: respect CONTAINERS_REGISTRIES_CONF
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.6
  * When generating host volumes for k8s, force to lowercase
  * test: enable newly added test
  * vfkit: Use 0.6.0 binary
  * gvproxy: Use 0.8.1 binary
  * systemd: simplify parser and fix infinite loop
  * Revert "win-installer test: revert to v5.3.0"
  * Avoid rebooting twice when installing WSL
  * Avoid rebooting on Windows when upgrading and WSL isn't installed
  * Add win installer patch
  * Bump WiX toolset version to 5.0.2
  * test/e2e: SkipOnOSVersion() add reason field
  * test/e2e: remove outdated SkipOnOSVersion() calls
  * Update VM images
  * fix(deps): update module golang.org/x/crypto to v0.31.0 [security]
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.45.0
  * fix(deps): update module github.com/opencontainers/runc to v1.2.3
  * quadlet: fix inter-dependency of containers in `Network=`
  * Add man pages to Mac installer
  * fix(deps): update module github.com/onsi/gomega to v1.36.1
  * fix(deps): update module github.com/docker/docker to v27.4.0+incompatible
  * Fix device limitations in podman-remote update on remote systems
  * Use latest version of VS BuildTools
  * bin/docker: fix broken escaping and variable substitution
  * manifest annotate: connect IndexAnnotations
  * Fix panic in `manifest annotate --index`
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.5
  * fix(deps): update module golang.org/x/net to v0.32.0
  * fix(deps): update module golang.org/x/tools to v0.28.0
  * fix(deps): update module golang.org/x/crypto to v0.30.0
  * fix(deps): update module golang.org/x/sys to v0.28.0
  * Fix overwriting of LinuxResources structure in the database
  * api: replace inspectID with name
  * fix(deps): update github.com/opencontainers/runtime-tools digest to f7e3563
  * Replace ExclusiveArch with ifarch
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.1
  * Improve platform specific URL handling in `podman compose` for machines
  * Fix `podman info` with multiple imagestores
  * Switch to fixed common
  * refact: use uptime.minutes instead of uptime.seconds
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.11
  * fix(deps): update golang.org/x/exp digest to 2d47ceb
  * fix(deps): update github.com/godbus/dbus/v5 digest to c266b19
  * Cover Unix socket in inpect test on Windows platform
  * Add a test for forcing compression and v2s2 format
  * fix(deps): update module github.com/crc-org/vfkit to v0.6.0
  * Package podman-machine on supported architectures only.
  * Fixes missing binary in systemd.
  * stats: ignore errors from containers without cgroups
  * api: Error checking before NULL dereference
  * [skip-ci] Packit/copr: switch to fedora-all
  * make remotesystem: fail early if serial tests fail
  * spec: clamp rlimits without CAP_SYS_RESOURCE
  * Clarify the reason for skip_if_remote
  * Sanity-check that the test is really using partial pulls
  * Fix apparent typos in zstd:chunked tests
  * Fix compilation issues in QEMU machine files (Windows platform)
  * Mount volumes before copying into a container
  * Revert "libpod: remove shutdown.Unregister()"
  * docs: improve documentation for internal networks
  * docs: document bridge mode option
  * [skip-ci] Packit: remove epel and re-enable c9s
  * chore(deps): update dependency golangci/golangci-lint to v1.62.2
  * vendor: update containers/common
  * OWNERS: remove edsantiago
  * fix(deps): update module github.com/onsi/gomega to v1.36.0
  * fix(deps): update github.com/containers/common digest to ceceb40
  * refact: EventerType and improve consistency
  * Add --hosts-file flag to container and pod commands
  * Add nohosts option to /build and /libpod/build
  * fix(deps): update module github.com/stretchr/testify to v1.10.0
  * Quadlet - Use = sign when setting the pull arg for build
  * win-installer test: revert to v5.3.0
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.44.0
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.0
  * chore(deps): update dependency setuptools to ~=75.6.0
  * Update windows installer tests
  * Windows: don't install WSL/HyperV on update
  * Switch to non-installing WSL by default
  * fix(deps): update github.com/containers/buildah digest to 52437ef
  * Configure HealthCheck with `podman update`
  * CI: --image-volume test: robustify
  * docs: add 5.3 as Reference version
  * Bump CI VMs
  * libpod: pass down NoPivotRoot to Buildah
  * vendor: bump containers/buildah
  * fix(deps): update module github.com/opencontainers/runc to v1.2.2
  * Overlay mounts supersede image volumes &amp; volumes-from
  * libpod: addHosts() prevent nil deref
  * only read ssh_config for non machine connections
  * ssh_config: allow IdentityFile file with tilde
  * ssh_config: do not overwrite values from config file
  * connection: ignore errors when parsing ssh_config
  * Bump bundled krunkit to 0.1.4
  * fix(deps): update module google.golang.org/protobuf to v1.35.2
  * add support for driver-specific options during container creation
  * doc: fix words repetitions
  * Update release notes on main for v5.3.0
  * chore(deps): update dependency setuptools to ~=75.5.0
  * CI: system tests: parallelize 010
  * fix podman machine init --ignition-path
  * vendor: update containers/common
  * spec: clamp rlimits in a userns
  * Add subpath support to volumes in `--mount` option
  * refactor: simplify LinuxNS type definition and String method
  * test/e2e: remove FIPS test
  * vendor containers projects to tagged versions
  * fix(deps): update module github.com/moby/sys/capability to v0.4.0
  * chore(deps): update dependency setuptools to ~=75.4.0
  * system tests: safer install_kube_template()
  * Buildah treadmill tweaks
  * update golangci-lint to v1.62.0
  * fix(deps): update module golang.org/x/net to v0.31.0
  * fix(deps): update module golang.org/x/tools to v0.27.0
  * Revert "Reapply "CI: test nftables driver on fedora""
  * Yet another bump, f41 with fixed kernel
  * test: add zstd:chunked system tests
  * pkg/machine/e2e: remove dead code
  * fix(deps): update module golang.org/x/crypto to v0.29.0
  * kube SIGINT system test: fix race in timeout handling
  * New `system connection add` tests
  * Update codespell to v2.3.0
  * Avoid printing PR text to stdout in system test
  * Exclude symlink from pre-commit end-of-file-fixer
  * api: Add error check
  * [CI:ALL] Bump main to v5.4.0-dev
  * test/buildah-bud: build new inet helper
  * test/system: add regression test for TZDIR local issue
  * vendor latest c/{buildah,common,image,storage}
  * Reapply "CI: test nftables driver on fedora"
  * Revert "cirrus: test only on f40/rawhide"
  * test f41 VMs
  * AdditionalSupport for SubPath volume mounts
  * wsl-e2e: Add a test to ensure port 2222 is free with usermode networking
  * winmake.ps1: Fix the syntax of the function call Win-SSHProxy
  * volume ls: fix race that caused it to fail
  * gvproxy: Disable port-forwarding on WSL
  * build: update gvisor-tap-vsock to 0.8.0
  * podman: update roadmap
  * Log network creation and removal events in Podman
  * libpod: journald do not lock thread
  * Add key to control if a container can get started by its pod
  * Honor users requests in quadlet files
  * CI: systests: workaround for parallel podman-stop flake
  * Fix inconsistent line ending in win-installer project
  * fix(deps): update module github.com/opencontainers/runc to v1.2.1
  * Quadlet - support image file based mount in container file
  * API: container logs flush status code
  * rework event code to improve API errors
  * events: remove memory eventer
  * libpod: log file use Wait() over event API
  * Makefile: vendor target should always remove toolchain
  * cirrus: check consitent vendoring in test/tools
  * test/tools/go.mod: remove toolchain
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10
  * fix(deps): update module github.com/onsi/gomega to v1.35.1
  * doc: explain --interactive in more detail
  * fix(deps): update golang.org/x/exp digest to f66d83c
  * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
  * fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c
  * add default polling interval to Container.Wait
  * Instrument cleanup tracer to log weird volume removal flake
  * make podman-clean-transient.service work as user
  * Add default remote socket path if empty
  * Use current user if no user specified
  * Add support for ssh_config for connection
  * libpod: use pasta Setup() over Setup2()
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0
  * fix(deps): update module github.com/onsi/gomega to v1.35.0
  * logformatter: add cleanup tracer log link
  * docs: fix broken example
  * docs: add missing swagger links for the stable branches
  * readthedocs: build extra formats
  * pkg/machine/e2e: remove debug
  * fix(docs): Integrate pasta in rootless tutorial
  * chore(deps): update dependency setuptools to ~=75.3.0
  * libpod: report cgroups deleted during Stat() call
  * chore: fix some function names in comment
  * CI: parallelize 450-interactive system tests
  * CI: parallelize 520-checkpoint tests
  * CI: make 070-build.bats use safe image names
  * test/system: add podman network reload test to distro gating
  * System tests: clean up unit file leaks
  * healthcheck: do not leak service on failed stop
  * healthcheck: do not leak statup service
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0
  * Add Startup HealthCheck configuration to the podman inspect
  * buildah version display: use progress()
  * new showrun() for displaying and running shell commands
  * Buildah treadmill: redo the .cirrus.yml tweaks
  * Buildah treadmill: more allow-empty options
  * Buildah treadmill: improve test-failure instructions
  * Buildah treadmill: improve wording in test-fail instructions
  * doc: Remove whitespace before comma
  * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0
  * ps: fix display of exposed ports
  * ps: do not loop over port protocol
  * readme: Add reference to pasta in the readme
  * test/system: Fix spurious "duplicate tests" failures in pasta tests
  * Improve "podman load - from URL"
  * Try to repair c/storage after removing an additional image store
  * Use the config digest to compare images loaded/pulled using different methods
  * Simplify the additional store test
  * Fix the store choice in "podman pull image with additional store"
  * Bump to v5.3.0-dev
  * Bump to v5.3.0-rc1
  * Set quota on volume root directory, not _data
  * fix(deps): update module github.com/opencontainers/runc to v1.2.0
  * test: set soft ulimit
  * Vagrantfile: Delete
  * Enable pod restore with crun
  * vendor: update c/{buildah,common,image,storage}
  * Fix 330-corrupt-images.bats in composefs test runs
  * quadlet: add default network dependencies to all units
  * quadlet: ensure user units wait for the network
  * add new podman-user-wait-network-online.service
  * contrib/systemd: switch user symlink for file symlinks
  * Makefile: remove some duplication from install.systemd
  * contrib/systemd: move podman-auto-update units
  * quadlet: do not reject RemapUsers=keep-id as root
  * test/e2e: test quadlet with and without --user
  * CI: e2e: fix checkpoint flake
  * APIv2 test fix: image history
  * pasta udp tests: new bytecheck helper
  * Document packaging process
  * [skip-ci] RPM: remove dup Provides
  * Update dependency setuptools to ~=75.2.0
  * System tests: safer pause-image creation
  * Update module github.com/opencontainers/selinux to v1.11.1
  * Added escaping to invoked powershell command for hyperv stubber.
  * use slices.Clone instead of assignment
  * libpod API: only return exit code without conditions
  * Housekeeping: remove duplicates from success_task
  * Thorough overhaul of CONTRIBUTING doc.
  * api: Replace close function in condition body
  * test/e2e: fix default signal exit code test
  * Test new VM build
  * CI: fix changing-rootFsSize flake
  * scp: add option types
  * Unlock mutex before returning from function
  * Note in the README that we are moving to timed releases
  * cirrus: let tar extract figure out the compression
  * Make error messages more descriptive
  * Mention containers.conf settings for podman machine commands
  * [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks"
  * cmd: use logrus to print error
  * podman: do not set rlimits to the default value
  * spec: always specify default rlimits
  * vendor: update containers/common
  * Note in the README that we are moving to timed releases
  * Revert "CI: test nftables driver on fedora"
  * cirrus: use zstd over bzip2 for repo archive
  * cirrus: use shared repo_prep/repo_artifacts scripts
  * cirrus: speed up postbuild
  * cirrus: change alt arch task to only compile binaries
  * cirrus: run make with parallel jobs where useful
  * Makefile: allow man-page-check to be run in parallel
  * cirrus: use fastvm for builds
  * test/e2e: skip some Containerized checkpoint tests
  * test: update timezone checks
  * cirrus: update CI images
  * test/e2e: try debug potential pasta issue
  * CI: quadlet system tests: use airgapped testimage
  * Allow removing implicit quadlet systemd dependencies
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
  * libpod API: make wait endpoint better against rm races
  * podman-remote run: improve how we get the exit code
  * [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
  * 055-rm test: clean up a test, and document
  * CI: remove skips for libkrun
  * Bump bundled krunkit to 0.1.3
  * fix(deps): update module google.golang.org/protobuf to v1.35.0
  * fix(deps): update module golang.org/x/net to v0.30.0
  * server: fix url parsing in info
  * fix(deps): update module golang.org/x/tools to v0.26.0
  * Makefile: fix ginkgo FOCUS option
  * fix(deps): update module golang.org/x/crypto to v0.28.0
  * podman-systemd.unit.5: adjust example options
  * docs: prefer --network to --net
  * fix(deps): update module golang.org/x/term to v0.25.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24
  * fix(deps): update module golang.org/x/sys to v0.26.0
  * OWNERS file audit and update
  * Exposed ports are only included when not --net=host
  * libpod: hasCurrentUserMapped checks for gid too
  * [CI:DOCS] Document TESTFLAGS in test README file
  * Validate the bind-propagation option to `--mount`
  * Fix typo in secret inspect examples
  * Mention `no_hosts` and `base_hosts_file` configs in CLI option docs
  * Fixes for vendoring Buildah
  * vendor: update buildah to latest
  * Makefile - silence skipped tests when focusing on a file
  * vendor: update to latest c/common
  * Quadlet - prefer "param val" over "param=val" to allow env expansion
  * System tests: sdnotify: wait for socket file creation
  * Switch to moby/sys/capability
  * platformInspectContainerHostConfig: rm dead code
  * CI: require and test CI_DESIRED_NETWORK on RHEL
  * Add ExposedPorts to Inspect's ContainerConfig
  * fix(deps): update golang.org/x/exp digest to 701f63a
  * quadlet: allow variables in PublishPort
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9
  * fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c
  * Document that zstd:chunked is downgraded to zstd when encrypting
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
  * chore(deps): update dependency ubuntu to v24
  * rpm: do not load iptables modules on f41+
  * adding docs for network-cmd-path
  * Include exposed ports in inspect output when net=host
  * feat(libpod): support kube play tar content-type (#24015)
  * podman mount: some better error wrapping
  * podman mount: ignore ErrLayerUnknown
  * Quadlet - make sure the order of the UnitsDir is deterministic
  * packit: disable Centos Stream/fedora ELN teasks
  * libpod: remove shutdown.Unregister()
  * libpod: rework shutdown handler flow
  * libpod: ensure we are not killed during netns creation
  * Update module github.com/moby/sys/capability to v0.3.0
  * Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options
  * Update documentation of `--add-host` CLI option
  * System tests: set a default XDG_RUNTIME_DIR
  * Modify machine "Remove machine" test
  * CORS system test: clean up
  * Add --health-max-log-count, --health-max-log-size, --health-log-destination flags
  * troubleshooting: adjust home path in tip 44
  * test/system: For pasta port forwarding tests don't bind socat server
  * Update connection on removal
  * Simplify `RemoveConnections`
  * Move `DefaultMachineName` to `pkg/machine/define`
  * vendor: update containers/image
  * vendor: update containers/storage
  * CI: skip the flaking quadlet test
  * CI: make systemd tests parallel-safe (*)
  * CI: run and collect cleanup tracer logs
  * add epbf program to trace podman cleanup errors
  * CI: parallelize logs test as much as possible
  * CI: format test: use local registry if available
  * CI: make 700-play parallel-safe
  * docs: Fix missing negation
  * bin/docker support warning message suppression from user config dir
  * Update module github.com/docker/docker to v27.3.1+incompatible
  * Quadlet - add full support for Symlinks
  * libpod: setupNetNS() correctly mount netns
  * vendor latest c/common
  * docs: remove usage of deprecated `--storage`
  * Update module github.com/docker/docker to v27.3.0+incompatible
  * CI: Quadlet rootfs test: use container image as rootfs
  * CI: system test registry: use --net=host
  * CI: rm system test: bump grace period
  * CI: system tests: minor documentation on parallel
  * fix typo in error message Fixes: containers/podman#24001
  * CI: system tests: always create pause image
  * CI: quadlet system test: be more forgiving
  * vendor latest c/common
  * CI: make 200-pod parallel-safe
  * allow exposed sctp ports
  * test/e2e: add netns leak check
  * test/system: netns leak check for rootless as well
  * test/system: Improve TODO comments on IPv6 pasta custom DNS forward test
  * test/system: Clarify "Local forwarder" pasta tests
  * test/system: Simplify testing for nameserver connectivity
  * test/system: Consolidate "External resolver" pasta tests
  * test/system: Move test for default forwarder into its own case
  * CI: make 090-events parallel-safe
  * Misc minor test fixes
  * Add network namespace leak check
  * Add workaround for buildah parallel bug
  * registry: lock start attempts
  * Update system test template and README
  * bats log: differentiate parallel tests from sequential
  * ci: bump system tests to fastvm
  * clean_setup: create pause image
  * CI: make 012-manifest parallel-safe
  * podman-manifest-remove: update docs and help output
  * test/system: remove wait workaround
  * wait: fix handling of multiple conditions with exited
  * Match output of Compat Top API to Docker
  * system test parallelization: enable two-pass approach
  * New VMs: test crun 1.17
  * libpod: hides env secrets from container inspect
  * CI: e2e: workaround for events out-of-sequence flake
  * update golangci-lint to 1.61.0
  * libpod: convert owner IDs only with :idmap
  * Podman CLI --add-host with multiple host for a single IP
  * Quadlet - Split getUnitDirs to small functions
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5
  * chore(deps): update dependency setuptools to ~=75.1.0
  * Fxi typo in cache-ttl.md
  * Get WSL disk as an OCI artifact
  * CI: make 260-sdnotify parallel-safe
  * quadlet: do not log ENOENT errors
  * pkg/specgen: allow pasta when running inside userns
  * troubleshooting: add tip about the user containers
  * chore(deps): update dependency setuptools to v75
  * Convert windows paths in volume arg of the build command
  * Improve error when starting multiple machines
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
  * Minor typo noticed when reading podman man page
  * Remove `RemoveFilesAndConnections`
  * Add `GetAllMachinesAndRootfulness`
  * rewrite typo osascript
  * typo
  * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
  * Add radio buttons to select WSL or Hyper-V in windows setup.exe
  * [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
  * [skip-ci] Packit: Enable sidetags for bodhi updates
  * vendor: update c/common
  * CI: make 710-kube parallel-safe
  * CI: mark 320-system-df *NOT* parallel safe
  * Add kube play support for image volume source
  * refactor: add sshClient function
  * fix(deps): update module golang.org/x/tools to v0.25.0
  * CI: make 505-pasta parallel safe
  * CI: make 020-tag parallel-safe
  * CI: make 410-selinux parallel-safe
  * Bump VMs. ShellCheck is now built-in
  * troubleshooting: add tip about auto, keep-id, nomap
  * libpod: make use of new pasta option from c/common
  * vendor latest c/common
  * podman images: sort repository with tags
  * Remove containers/common/pkg/config from pkg/util
  * fix(deps): update module golang.org/x/net to v0.29.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23
  * fix(deps): update module golang.org/x/crypto to v0.27.0
  * Fix CI
  * Detect and fix typos using codespell
  * Fix typo: replace buildin with built-in
  * Add codespell config, pre-commit definition, and move options from Makefile
  * prune: support clearing build cache using CleanCacheMount
  * test/e2e: fix network prune flake
  * Add support for Job to kube generate &amp; play
  * Add podman-rootless.7 man page
  * Add DNS, DNSOption and DNSSearch to quadlet pod
  * podman.1.md: improve policy.json section
  * e2e: flake fix: SIGPIPE in hook test
  * libpod: fix rootless cgroup path with --cgroup-parent
  * vendor: update c/storage
  * CI: make 055-rm parallel-safe
  * CI: make 130-kill parallel-safe
  * CI: make 125-import parallel-safe
  * CI: make 110-history parallel-safe
  * CI: system tests: parallelize low-hanging fruit
  * Add disclaimer to `podman machine info` manpage.
  * man pages: refactor two more options
  * update github.com/opencontainers/runc to v1.2.0-rc.3
  * update go.etcd.io/bbolt to v1.3.11
  * update github.com/onsi/{ginkgo,gomega}
  * Update module github.com/shirou/gopsutil to v4
  * packit: update fedora and epel targets
  * bump go to 1.22
  * cirrus: test only on f40/rawhide
  * cirrus: remove CI_DESIRED_NETWORK reference
  * cirrus: prebuild use f40 for extra tests
  * chore(deps): update dependency setuptools to ~=74.1.0
  * libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD
  * fix(deps): update golang.org/x/exp digest to 9b4947d
  * Implement publishing API UNIX socket on Windows platforms
  * Vendor c/common:8483ef6022b4
  * quadlet: support container network reusing
  * docs: update read the docs changes
  * CI: parallel-safe network system test
  * Quadlet - Support multiple image tags in .build files
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3
  * cirrus: remove _bail_if_test_can_be_skipped
  * cirrus: move renovate check into validate
  * cirrus: remove 3rd party connectivity check
  * cirrus: remove cross jobs for aarch64 and x86_64
  * cirrus: do not upload alt arch cross artifacts
  * cirrus: remove ginkgo-e2e.json artifact
  * cirrus: fix default timeouts
  * github: remove fcos-podman-next-build-prepush
  * Clarify podman machine volume mounting behavior under WSL
  * machine: Add -all-providers flag to machine list
  * Create a podman-troubleshooting man page
  * chore(deps): update dependency setuptools to v74
  * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
  * Fix an improperly ignored error in SQLite
  * CI: flake workaround: ignore socat waitpid warnings
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1
  * Stop skipping machine volume test on Hyper-V
  * cleanup: add new --stopped-only option
  * fix races in the HTTP attach API
  * cirrus: skip windows/macos machine task on RHEL branches
  * Update module github.com/containers/gvisor-tap-vsock to v0.7.5
  * run: fix detach passthrough and --rmi
  * podman run: ignore image rm error
  * Add support for AddHost in quadlet .pod and .container
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
  * update github.com/vishvananda/netlink to v1.3.0
  * build: Update gvisor-tap-vsock to 0.7.5
  * Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page:
  * fix typo in podman-network-create.1.md
  * Use HTTP path prefix of TCP connections to match Docker context behavior
  * Makefile: remotesystem: use real podman server, no --url
  * Update module github.com/openshift/imagebuilder to v1.2.15
  * CI: parallel-safe userns test
  * Update module github.com/onsi/ginkgo/v2 to v2.20.1
  * Add support for IP in quadlet .pod files
  * Specify format to use for referencing fixed bugs.
  * CI: parallel-safe run system test
  * Revert "test/e2e: work around for pasta issue"
  * CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked
  * quadlet: support user mapping in pod unit
  * Update Release Process
  * Test new VM build
  * command is not optional to podman exec
  * CI: parallel-safe namespaces system test
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
  * quadlet: add key CgroupsMode
  * Fix `podman stop` and `podman run --rmi`
  * quadlet: set infra name to %s-infra
  * chore(deps): update dependency setuptools to v73
  * [skip-ci] Packit: update targets for propose-downstream
  * Do not segfault on hard stop
  * Fix description of :Z to talk about pods
  * CI: disable ginkgo flake retries
  * vendor: update go-criu to latest
  * golangci-lint: make darwin linting happy
  * golangci-lint: make windows linting happy
  * test/e2e: remove kernel version check
  * golangci-lint: remove most skip dirs
  * set !remote build tags where needed
  * update golangci-lint to 1.60.1
  * test/e2e: rm systemd start test
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1
  * podman wait: allow waiting for removal of containers
  * libpod: remove UpdateContainerStatus()
  * podman mount: fix storage/libpod ctr race
  * CI: quadlet tests: make parallel-safe
  * CI: system tests: make random_free_port() parallel-safe
  * remove trailing comma in example
  * CI: format test: make parallel-safe
  * Fix podman-docker.sh under -eu shells (fixes #23628)
  * docs: update podman-wait man page
  * libpod: remove duplicated HasVolume() check
  * podman volume rm --force: fix ABBA deadlock
  * test/system: fix network cleanup restart test
  * libpod: do not stop pod on init ctr exit
  * libpod: simplify WaitForExit()
  * CI: remove build-time quay check
  * Fix known_hosts file clogging and remote host id
  * Update docker.io/library/golang Docker tag to v1.23
  * Update dependency setuptools to ~=72.2.0
  * Update module github.com/docker/docker to v27.1.2+incompatible
  * healthcheck system check: reduce raciness
  * CI: healthcheck system test: make parallel-safe
  * Validate renovate config in every PR
  * pkg/machine: Read stderr from ssh-keygen correctly
  * Fix renovate config syntax error
  * CI: 080-pause.bats: make parallel-safe
  * CI: 050-stop.bats: make parallel-safe
  * Additional potential race condition on os.Readdir
  * pkg/bindings/containers: handle ignore for stop
  * remote: fix invalid --cidfile + --ignore
  * Update/simplify renovate config header comment
  * Migrate renovate config to latest schema
  * Fix race condition when listing /dev
  * docs/podman-systemd: Try to clarify `Exec=` more
  * libpod: reset state error on init
  * test/system: pasta_test_do add explicit port check
  * test/e2e: work around new push warning
  * vendor: update c/common to latest
  * stopIfOnlyInfraRemains: log all errors
  * libpod: do not save expected stop errors in ctr state
  * libpod: fix broken saveContainerError()
  * Quadlet: fix filters failure when the search paths are symlinks
  * readme: replace GPG with PGP
  * Drop APIv2 CNI configuration
  * De-duplicate docker-py testing
  * chore(podmansnoop): explain why crun comm is 3
  * libpod: cleanupNetwork() return error
  * fix(deps): update module golang.org/x/sys to v0.24.0
  * Reduce python APIv2 test net dependency
  * Fix not testing registry.conf updates
  * test/e2e: improve command timeout handling
  * Update module github.com/onsi/ginkgo/v2 to v2.20.0
  * Update module github.com/moby/sys/user to v0.3.0
  * Add passwd validate and generate steps
  * podman container cleanup: ignore common errors
  * Quadlet - Allow the user to override the default service name
  * CI: e2e: serialize root containerPort tests
  * Should not force conversion of manifest type to DockerV2ListMediaType
  * fix(deps): update module golang.org/x/tools to v0.24.0
  * fix(deps): update github.com/containers/common digest to 05b2e1f
  * CI: mount system test: parallelize
  * Update module golang.org/x/net to v0.28.0
  * Ignore ERROR_SHARING_VIOLATION error on windows
  * CI: manifest system tests: make parallel-safe
  * Create volume path before state initialization
  * vendor: update c/storage
  * CI: fix broken libkrun test
  * test/e2e: work around for pasta issue
  * test/e2e: fix missing exit code checks
  * Test new CI images
  * Remove another race condition when mounting containers or images
  * fix(deps): update github.com/containers/common digest to c0cc6b7
  * Change Windows installer MajorUpgrade Schedule
  * Ignore missing containers when calling GetExternalContainerLists
  * Remove runc edit to lock to specific version
  * fix(deps): update module golang.org/x/sys to v0.23.0
  * CI: podman-machine: do not use cache registry
  * CI: completion system test: use safename
  * Temporarly disable failing Windows Installer CI test
  * libpod: fix volume copyup with idmap
  * libpod: avoid hang on errors
  * Temp. disable PM basic Volume ops test
  * Add libkrun Mac task
  * Never skip checkout step in release workflow
  * System tests: leak_test: readable output
  * fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431
  * vendor: bump c/common
  * Version: bump to v5.3.0-dev
  * libpod: inhibit SIGTERM during cleanup()
  * Tweak versions in register_images.go
  * fix network cleanup flake in play kube
  * WIP: Fixes for vendoring Buildah
  * Add --compat-volumes option to build and farm build
  * Bump to Buildah v1.37.0
  * Quadlet test - Split between success, warning and error cases
  * libpod: bind ports before network setup
  * Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false
  * Use new syntax for selinux options in quadlet
  * fix(deps): update module github.com/onsi/gomega to v1.34.1
  * CI: kube test: fix broken external-storage test
  * Update dependency setuptools to v72
  * Convert additional build context paths on Windows
  * pkg/api: do not leak config pointers into specgen
  * Quadlet - Allow the user to set the service name for .pod files
  * Quadlet tests - allow overriding the expected service name
  * fix(deps): update module github.com/moby/sys/user to v0.2.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5
  * CI: enable root user namespaces
  * libpod: force rootfs for OCI path with idmap
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
  * Add test steps for automount with multi images
  * CI: cp tests: use safename
  * [skip-ci] RPM: podman-iptables.conf only on Fedora
  * CI: 700-play: fix a leaked non-safename
  * test: check that kube generate/play restores the userns
  * test: disable artifacts cache with composefs
  * test: fix podman pull tests
  * vendor: bump c/storage
  * Update module github.com/cyphar/filepath-securejoin to v0.3.1
  * Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs
  * build: Update gvisor-tap-vsock to 0.7.4
  * test/system: fix borken pasta interface name checks
  * test/system: fix bridge host.containers.internal test
  * api: honor the userns for the infra container
  * play: handle 'private' as 'auto'
  * kube: record infra user namespace
  * infra: user ns annotation higher precedence
  * specgenutil: record the pod userns in the annotations
  * kube: invert branches
  * CI: system log test: use safe names
  * Update encryption tests to avoid a warning if zstd:chunked is the default
  * Fix "podman pull and decrypt"/"from local registry"
  * Use unique image names for the encrypted test images
  * CI: system tests: instrument to allow failure analysis
  * Fix outdated comment for the build step win-gvproxy
  * Add utility to convert VMFile to URL for UNIX sockets
  * Run codespell on source
  * fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
  * chore(deps): update dependency setuptools to ~=71.1.0
  * logformatter: tweaks to pass html tidy
  * More information for podman --remote build and running out of space.
  * Fix windows installer deleting machine provider config file
  * Use uploaded .zip for Windows action
  * pr-should-include-tests: no more CI:DOCS override</changelog>
  <changelog author="danish.prakash@suse.com" date="1755086400">- Add patch for CVE-2025-6032 (bsc#1245320):
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1759492800">- Add patch for CVE-2025-9566 (bsc#1249154):
  * 0004-CVE-2025-9566-kube-play-don-t-follow-volume-symlinks.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1762344000">- Add patch for CVE-2025-31133,CVE-2025-52565,CVE-2025-52881 (bsc#1252376):
  * 0005-CVE-2025-52881-backport-subset-of-patch-from-runc.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch
  * 0004-CVE-2025-9566-kube-play-don-t-follow-volume-symlinks.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1766404800">- Add patch for CVE-2025-47914 (bsc#1253993), CVE-2025-47913 (bsc#1253542):
  * 0006-CVE-2025-47913-CVE-2025-47914-ssh-agent-fixes.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch
  * 0004-CVE-2025-9566-kube-play-don-t-follow-volume-symlinks.patch
  * 0005-CVE-2025-52881-backport-subset-of-patch-from-runc.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1769688000">- Add symlink to catatonit in /usr/libexec/podman (bsc#1248988)</changelog>
</package>
<package pkgid="138660898354d75cc442b52162c083ec28430a383ec9c7e96acfbc28c508dfd5b9f1ab22aab0b406c7a2ae0b5a5a4542d5e9a89b2b4bc7a181544e20403e0c2a" name="podman-docker" arch="noarch">
  <version epoch="0" ver="5.4.2" rel="160000.4.1"/>
  <changelog author="danish.prakash@suse.com" date="1739793600">- Add patch for CVE-2024-11218 (bsc#1236270):
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
- Removed patches (merged upstream):
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Add missing podman-clean-transient unit
- Update to version 5.2.5:
  * Bump to v5.2.5 (bsc#1236507)
  * Update release notes for 5.2.5
  * Bump c/storage to v1.55.1 and Buildah to v1.37.5
  * RPM: remove dup Provides
  * Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
  * Bump to v5.2.5-dev
  * Bump to v5.2.4
  * Update release notes for v5.2.4
  * Validate the bind-propagation option to `--mount`
  * Bump Buildah to v1.37.4
  * vendor: update c/common to v0.60.4
  * Bump to v5.2.4-dev
  * Bump to v5.2.3
  * Update release notes for v5.2.3
  * [v5.2] Bump Buildah to v1.37.3
  * pkg/specgen: allow pasta when running inside userns
  * libpod: convert owner IDs only with :idmap
  * docs: update read the docs changes
  * allow exposed sctp ports
  * libpod: setupNetNS() correctly mount netns
  * vendor: update c/common to v0.60.3
  * [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
  * [skip-ci] Packit: Enable sidetags for bodhi updates
  * build: Update gvisor-tap-vsock to 0.7.5
  * CI: podman-machine: do not use cache registry
  * [CI:DOCS] Add v5.2.2 lib updates to RELEASE_NOTES.md
  * Bump to v5.2.3-dev
  * Bump to v5.2.2
  * Update RELEASE_NOTES for v5.2.2
  * [v5.2] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2
  * [v5.2] golangci-lint: make darwin linting happy
  * [v5.2] golangci-lint: make windows linting happy
  * [v5.2] test/e2e: remove kernel version check
  * [v5.2] golangci-lint: remove most skip dirs
  * [v5.2] set !remote build tags where needed
  * [v5.2] update golangci-lint to 1.60.1
  * Packit: update targets for propose-downstream
  * Create volume path before state initialization
  * Update Cirrus DEST_BRANCH
  * Bump to v5.2.2-dev
  * Bump to v5.2.1
  * Update release notes for v5.2.1
  * [v5.2] Add zstd:chunked test fix
  * [v5.2] Bump Buildah to v1.37.1, c/common v0.60.1, c/image v5.32.1
  * libpod: reset state error on init
  * libpod: do not save expected stop errors in ctr state
  * libpod: fix broken saveContainerError()
  * Bump to v5.2.1-dev
  * Bump to v5.2.0
  * Never skip checkout step in release workflow
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc3
  * Update release notes for v5.2.0-rc3
  * Tweak versions in register_images.go
  * fix network cleanup flake in play kube
  * WIP: Fixes for vendoring Buildah
  * Add --compat-volumes option to build and farm build
  * Bump Buildah, c/storage, c/image, c/common
  * libpod: bind ports before network setup
  * pkg/api: do not leak config pointers into specgen
  * build: Update gvisor-tap-vsock to 0.7.4
  * test/system: fix borken pasta interface name checks
  * test/system: fix bridge host.containers.internal test
  * CI: system tests: instrument to allow failure analysis
  * Use uploaded .zip for Windows action
  * RPM: podman-iptables.conf only on Fedora
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc2
  * Update release notes for v5.2.0-rc2
  * test/e2e: fix ncat tests
  * libpod: add hidden env to set sqlite timeout
  * Add support for StopSignal in quadlet .container files
  * podman pod stats: fix race when ctr process exits
  * Update module github.com/vbauerster/mpb/v8 to v8.7.4
  * libpod: correctly capture healthcheck output
  * Bump bundled krunkit to 0.1.2
  * podman stats: fix race when ctr process exists
  * nc -p considered harmful
  * podman pod stats: fix pod rm race
  * podman ps: fix racy pod name query
  * system connection remove: use Args function to validate
  * pkg/machine/compression: skip decompress bar for empty file
  * nc -p considered harmful
  * podman system df: fix fix ErrNoSuchCtr/Volume race
  * podman auto-update: fix ErrNoSuchCtr race
  * Fix name for builder in farm connection
  * 700-play.bats: use unique pod/container/image/volume names
  * safename: consistent within same test, and, dashes
  * 700-kube.bats: refactor $PODMAN_TMPDIR/test.yaml
  * 700-play.bats: eliminate $testYaml
  * 700-play.bats: refactor clumsy yamlfile creation
  * 700-play.bats: move _write_test_yaml up near top
  * chore(deps): update dependency setuptools to v71
  * Expand drop-in search paths * top-level (pod.d) * truncated (unit-.container.d)
  * Remove references and checks for --gpus
  * Do not crash on invalid filters
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.2.0
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc1
  * Keep the volume-driver flag deprecated
  * Vendor in latest containers(common, storage,image, buildah)
  * System tests: safe container/image/volume/etc names
  * Implement disable default mounts via command line
  * test: drop unmount for overlay
  * test: gracefully terminate server
  * libpod: shutdown Stop waits for handlers completion
  * libpod: cleanup store at shutdown
  * Add NetworkAlias= support to quadlet
  * cmd: call shutdown handler stop function
  * fix race conditions in start/attach logic
  * swagger: exlude new docker network types
  * vendor: bump c/storage
  * update to docker 27
  * contrib: use a distinct --pull-option= for each flag
  * Update warning message when using external compose provider
  * Update module github.com/cyphar/filepath-securejoin to v0.3.0
  * Ignore result of EvalSymlinks on ENOENT
  * test/upgrade: fix tests when netavark uses nftables
  * test/system: fix network reload test with nftables
  * test/e2e: rework some --expose tests
  * test: remove publish tests from e2e
  * CI: test nftables driver on fedora
  * CI: use local registry, part 3 of 3: for developers
  * CI: use local registry, part 2 of 3: fix tests
  * CI: use local registry, part 1 of 3: setup
  * CI: test composefs on rawhide
  * chore(deps): update module google.golang.org/grpc to v1.64.1 [security]
  * chore(deps): update dependency setuptools to ~=70.3.0
  * Improve container filenname ambiguity.
  * containers/attach: Note bug around goroutine leak
  * Drop minikube CI test
  * add libkrun test docs
  * fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0
  * cirrus: check for header files in source code check
  * pkg/machine/e2e: run debug command only for macos
  * create runtime's worker queue before queuing any job
  * test/system: fix pasta host.containers.internal test
  * Visual Studio BuildTools as a MinGW alternative
  * SetupRootless(): only reexec when needed
  * pkg/rootless: simplify reexec for container code
  * cirrus: add missing test/tools to danger files
  * fix(deps): update module golang.org/x/tools to v0.23.0
  * Windows Installer: switch to wix5
  * fix(deps): update module golang.org/x/net to v0.27.0
  * pkg/machine/e2e: print tests timings at the end
  * pkg/machine/e2e: run debug commands after init
  * pkg/machine/e2e: improve timeout handling
  * libpod: first delete container then cidfile
  * fix(deps): update module golang.org/x/term to v0.22.0
  * System test fixes
  * cirrus.yml: automatic skips based on source
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.0
  * podman events: fix error race
  * chore(deps): update dependency setuptools to ~=70.2.0
  * fix(deps): update module github.com/gorilla/schema to v1.4.1 [security]
  * Update CI VM images
  * pkg/machine/e2e: fix broken cleanup
  * pkg/machine/e2e: use tmp file for connections
  * test/system: fix podman --image-volume to allow tmpfs storage
  * CI: mount tmpfs for container storage
  * docs: --network remove missing leading sentence
  * specgen: parse devices even with privileged set
  * vendor: update c/storage
  * Remove the unused machine volume-driver
  * feat(quadlet): log option handling
  * Error when machine memory exceeds system memory
  * machine: Always use --log-file with gvproxy
  * CI: Build-Each-Commit test: run only on PRs
  * Small fixes for testing libkrun
  * Podman machine resets all providers
  * Clearly indicate names w/ URLencoded duplicates
  * [skip-ci] Packit: split rhel and centos-stream jobs
  * apple virtiofs: fix racy mount setup
  * cirrus: fix broken macos artifacts URL
  * libpod/container_top_linux.c: fix missing header
  * refactor(build): improve err when file specified by -f does not exist
  * Minor: Remove unhelpful comment
  * Update module github.com/openshift/imagebuilder to v1.2.11
  * Minor: Rename the OSX Cross task
  * [skip-ci] Remove conditionals from changelog
  * podman top: join the container userns
  * Run linting in parallel with building
  * Fix missing Makefile target dependency
  * build API: accept platform comma separated
  * [skip-ci] RPM: create podman-machine subpackage
  * ExitWithError() - more upgrades from Exit()
  * test/e2e: remove podman system service tests
  * cirrus: reduce int tests timeout
  * cirrus: remove redundant skip logic
  * pkg/machine/apple: machine stop timeout
  * CI: logformatter: link to correct PR base
  * Update module github.com/crc-org/crc/v2 to v2.38.0
  * ExitWithError(): continued
  * test/system: Add test steps for journald log check in quadlet
  * restore: fix missing network setup
  * podman run use pod userns even with --pod-id-file
  * macos-installer: bundle krunkit
  * remote API: fix pod top error reporting
  * libpod API: return proper error status code for pod start
  * fix #22233
  * added check for `registry.IsRemote()`. and correct error message.
  * fix #20686
  * pkg/machine/e2e: Remove unnecessary copy of machine image.
  * libpod: intermediate mount if UID not mapped into the userns
  * libpod: avoid chowning the rundir to root in the userns
  * libpod: do not chmod bind mounts
  * libpod: unlock the thread if possible
  * CI Cleanup: Remove cgroups v1 support
  * ExitWithError() - more upgrades from Exit()
  * remote: fix incorrect CONTAINER_CONNECTION parsing
  * container: pass KillSignal and StopTimeout to the systemd scope
  * libpod: fix comment
  * e2e: test container restore in pod by name
  * docs: Adds all PushImage supported paramters to openapi docs.
  * systests: kube: bump up a timeout
  * cirrus.yml: add CI:ALL mode to force all tests
  * cirrus.yml: implement skips based on source changes
  * CI VMs: bump
  * restore: fix container restore into pod
  * sqlite_state: Fix RewriteVolumeConfig
  * chore(deps): update dependency setuptools to ~=70.1.0
  * Quadlet - use specifier for unescaped values for templated container name
  * cirrus: check for system test leaks in nightly
  * test/system: check for leaks in teardown suite
  * test/system: speed up basic_{setup,teardown}()
  * test/system: fix up many tests that do not cleanup
  * test/system: fix podman --authfile=nonexistent-path
  * Update module github.com/containernetworking/plugins to v1.5.1
  * Update module github.com/checkpoint-restore/checkpointctl to v1.2.1
  * Update module github.com/spf13/cobra to v1.8.1
  * Update module github.com/gorilla/schema to v1.4.0
  * pkg/machine/wsl: force terminate wsl instance
  * pkg/machine/wsl: wrap command errors
  * [CI:DOCS] Quadlet - add note about relative path resolution
  * CI: do not install python packages at runtime
  * Release workflow: Include candidate descriptor
  * Minor: Fix indentation in GHA release workflow
  * GHA: Send release notification mail
  * GHA: Validate release version number
  * Remove references to --pull=true and --pull=false
  * ExitWithError, continued
  * podman: add new hidden flag --pull-option
  * [CI:DOCS] Fix typos in podman-build
  * infra: mark storageSet when imagestore is changed
  * [CI:DOCS] Add jnovy as reviewer and approver
  * fix(deps): update module google.golang.org/protobuf to v1.34.2
  * refactor(machine,wsl): improve operations of Windows API
  * --squash --layers=false should be allowed
  * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0
  * update golangci-lint to v1.59.1
  * Rename master to main in CONTRIBUTING.md
  * podman 5, pasta and inter-container networking
  * libpod: do not resuse networking on start
  * machine/linux: Switch to virtiofs by default
  * machine/linux: Support virtiofs mounts (retain 9p default)
  * machine/linux: Use memory-backend-memfd by default
  * ExitWithError() - continued
  * Enable libkrun provider to open a debug console
  * Add new targets on Windows makefile (winmake.ps1)
  * fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1
  * fix(deps): update module golang.org/x/tools to v0.22.0
  * fix(deps): update module golang.org/x/net to v0.26.0
  * libpod: fix 'podman kube generate' on FreeBSD
  * fix(deps): update module golang.org/x/sys to v0.21.0
  * libpod: do not leak systemd hc startup unit timer
  * vendor latest c/common
  * pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly
  * run bats -T, to profile timing hogs
  * test/system: speed up podman ps --external
  * test/system: speed up podman network connect/disconnect
  * test/system: speed up podman network reload
  * test/system: speed up quadlet - pod simple
  * test/system: speed up podman parallel build should not race
  * test/system: speed up podman cp dir from host to container
  * test/system: speed up podman build - workdir, cmd, env, label
  * test/system: speed up podman --log-level recognizes log levels
  * test/system: remove obsolete debug in net connect/disconnect test
  * test/system: speed up quadlet - basic
  * test/system: speed up user namespace preserved root ownership
  * System tests: add `podman system check` tests
  * Add `podman system check` for checking storage consistency
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0
  * fix(libpod): add newline character to the end of container's hostname file
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
  * fix(deps): update github.com/containers/image/v5 digest to aa93504
  * Fix 5.1 release note re: runlabel
  * test/e2e: use local skopeo not image
  * fix(deps): update golang.org/x/exp digest to fd00a4e
  * [CI:DOCS] Add contrib/podmanimage/stable path back in repo
  * chore(deps): update dependency requests to ~=2.32.3
  * fix(deps): update github.com/containers/image/v5 digest to 2343e81
  * libpod: do not move podman with --cgroups=disabled
  * Update release notes on Main to v5.1.0
  * test: look at the file base name
  * tests: simplify expected output
  * Sigh, new VMs again
  * Fail earlier when no containers exist in stats
  * Add Hyper-V option in windows installer
  * libpod: cleanup default cache on system reset
  * vendor: update c/image
  * test/system: speed up kube generate tmpfs on /tmp
  * test/system: speed up podman kube play tests
  * test/system: speed up podman shell completion test
  * test/system: simplify test signal handling in containers
  * test/system: speed up podman container rm ...
  * test/system: speed up podman ps - basic tests
  * test/system: speed up read-only from containers.conf
  * test/system: speed up podman logs - multi ...
  * test/system: speed up podman run --name
  * Debian: switch to crun
  * test/system: speed up podman generate systemd - envar
  * test/system: speed up podman-kube@.service template
  * test/system: speed up kube play healthcheck initialDelaySeconds
  * test/system: speed up exit-code propagation test
  * test/system: speed up "podman run --timeout"
  * test/system: fix slow kube play --wait with siginterrupt
  * undo auto-formatting
  * test/system: speed up podman events tests
  * Quadlet: Add support for .build files
  * test/system: speed up "podman auto-update using systemd"
  * test/system: remove podman wait test
  * tests: disable tests affected by a race condition
  * update golangci-lint to v1.59.0
  * kubernetes_support.md: Mark volumeMounts.subPath as supported
  * working name of pod on start and stop
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
  * Bump Buildah to v1.36.0
  * fix(deps): update module github.com/burntsushi/toml to v1.4.0
  * fix typo in Tutorials.rst
  * Mac PM test: Require pre-installed rosetta
  * test/e2e: fix new error message
  * Add configuration for podmansh
  * Update containers/common to latest main
  * Only stop chowning volumes once they're not empty
  * podman: fix --sdnotify=healthy with --rm
  * libpod: wait another interval for healthcheck
  * quadlet: Add a network requirement on .image units
  * test, pasta: Ignore deprecated addresses in tests
  * [CI:DOCS] performance: update network docs
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
  * CI: disable minikube task
  * [CI:DOCS] Fix windows action trigger
  * chore(deps): update dependency setuptools to v70
  * Check AppleHypervisor before accessing it
  * fix(deps): update module github.com/containernetworking/plugins to v1.5.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2
  * add podman-clean-transient.service service to rootless
  * [CI:DOCS] Update podman network docs
  * fix incorrect host.containers.internal entry for rootless bridge mode
  * vendor latest c/common main
  * Add Rosetta support for Apple Silicon mac
  * bump main to 5.2.0-dev
  * Use a defined constant instead of a hard-coded magic value
  * cirrus: use faster VM's for integration tests
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c
  * [CI:DOCS] Fix Mac pkg link
  * test: remove test_podman* scripts
  * test/system: fix documentation
  * Return StatusNotFound when multiple volumes matching occurs
  * container_api: do not wait for healtchecks if stopped
  * libpod: wait for healthy on main thread
  * `podman events`: check for an error after we finish reading events
  * remote API: restore v4 payload in container inspect
  * Fix updating connection when SSH port conflict happens
  * rootless: fix reexec to use /proc/self/exe
  * ExitWithError() - enforce required exit status &amp; stderr
  * ExitWithError() - a few that I missed
  * [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds
  * Revert "Temporarily disable rootless debian e2e testing"
  * CI tests: enforce TMPDIR on tmpfs
  * use new CI images with tmpfs /tmp
  * run e2e test on tmpfs
  * Update module github.com/crc-org/crc/v2 to v2.36.0
  * Address CVE-2024-3727
  * [CI:DOCS] Use checkout@v4 in GH Actions
  * ExitWithError() - rmi_test
  * ExitWithError() - more r files
  * ExitWithError() - s files
  * ExitWithError() - more run_xxx tests
  * Fix podman-remote support for `podman farm build`
  * [CI:DOCS] Trigger windows installer action properly
  * Revert "container stop: kill conmon"
  * Ensure that containers do not get stuck in stopping
  * [CI:DOCS] Improvements to make validatepr
  * ExitWithError() - rest of the p files
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1
  * Graceful shutdown during podman kube down
  * Remove duplicate  call
  * test/system: fix broken "podman volume globs" test
  * Quadlet/Container: Add GroupAdd option
  * Don't panic if a runtime was configured without paths
  * update c/{buildah,common,image,storage} to latest main
  * update golangci-lint to 1.58
  * machine: Add LibKrun provider detection
  * ExitWithError() - continue tightening
  * fix(deps): update module google.golang.org/protobuf to v1.34.1
  * test: improve test for powercap presence
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3
  * fix(deps): update module go.etcd.io/bbolt to v1.3.10
  * fix(deps): update module golang.org/x/tools to v0.21.0
  * [skip-ci] RPM: `bats` required only on Fedora
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842
  * gpdate and remove parameter settings in `.golangci.yml`
  * ExitWithError() - play_kube_test.go
  * Temporarily disable rootless debian e2e testing
  * fix(deps): update module golang.org/x/crypto to v0.23.0
  * CI Docs: Clarify passthrough_envars() comments
  * Skip machine tests if they don't need to be run
  * Update CI VMs to F40, F39, D13
  * ExitWithError() - v files
  * Update module golang.org/x/term to v0.20.0
  * machine: Add provider detection API
  * util: specify a not empty pause dir for root too
  * Add missing option 'healthy' to output of `podman run --help`
  * [CI:DOCS] Add info on the quay.io images to the README.md
  * Add a random suffix to healthcheck unit names
  * test/e2e: remove toolbox image
  * Also substitute $HOME in runlabel with user's homedir
  * Update module github.com/cyphar/filepath-securejoin to v0.2.5
  * Change tmpDir for macOS
  * ExitWithError() - pod_xxx tests
  * ExitWithError() -- run_test.go
  * Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
  * Update module github.com/shirou/gopsutil/v3 to v3.24.4
  * Update module github.com/docker/docker to v26.1.1+incompatible
  * GHA: Attempt fix exceeded a secondary rate limit
  * vendor ginkgo 2.17.2 into test/tools
  * Fix machine volumes with long path and paths with dashes
  * Update module google.golang.org/protobuf to v1.34.0
  * Update module github.com/crc-org/crc/v2 to v2.35.0
  * Update module github.com/onsi/gomega to v1.33.1
  * test/e2e: podman unshare image mount fix tmpdir leak
  * test/e2e: do not leak /tmp/private_file
  * test/e2e: "persistentVolumeClaim with source" do not leak file
  * e2e tests: use /var/tmp, not $TMPDIR, as workdirs
  * Update dependency pytest to v8.1.2
  * Remove unncessary lines at the end of specfile summary
  * Clean machine pull cache
  * Add krun support to podman machine
  * Use custom image for make validatepr
  * test/e2e: force systemd cgroup manager
  * e2e and bindings tests: fix $PATH setup
  * Makefile: remove useless HACK variable in e2e test
  * test/e2e: fix volumes and suid/dev/exec options
  * test/e2e: volumes and suid/dev/exec options works remote
  * test/e2e: fix limits test
  * Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0
  * Correct option name `ip` -&gt; `ip6`
  * Add the ability to automount images as volumes via play
  * Add support for image volume subpaths
  * Bump Buildah to latest main
  * Update Makefile to Go 1.22 for in-container
  * ExitWithError() - yet more low-hanging fruit
  * ExitWithError() - more low-hanging fruit
  * ExitWithError() - low-hanging fruit
  * chore: fix function names in comment
  * Remove redundant Prerequisite before build section
  * Remove PKG_CONFIG_PATH
  * Add installation instructions for openSUSE
  * Replace golang.org/x/exp/slices with slices from std
  * Update to go 1.21
  * fix(deps): update module github.com/docker/docker to v26.1.0+incompatible
  * [CI:DOCS] Fix artifact action
  * [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals
  * e2e tests: stop littering
  * [CI:DOCS] format podman-pull example as code
  * [CI:DOCS] Build &amp; upload release artifacts with GitHub Actions
  * libpod: getHealthCheckLog() remove unessesary check
  * add containers.conf healthcheck_events support
  * vendor latest c/common
  * libpod: make healthcheck events more efficient
  * libpod: wrap store setup error message
  * [skip-ci] Packit: enable CentOS 10 Stream build jobs
  * pkg/systemd: use fileutils.(Le|E)xists
  * pkg/bindings: use fileutils.(Le|E)xists
  * pkg/util: use fileutils.(Le|E)xists
  * pkg/trust: use fileutils.(Le|E)xists
  * pkg/specgen: use fileutils.(Le|E)xists
  * pkg/rootless: use fileutils.(Le|E)xists
  * pkg/machine: use fileutils.(Le|E)xists
  * pkg/domain: use fileutils.(Le|E)xists
  * pkg/api: use fileutils.(Le|E)xists
  * libpod: use fileutils.(Le|E)xists
  * cmd: use fileutils.(Le|E)xists
  * vendor: update containers/{buildah,common,image,storage}
  * fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security]
  * fix podman-pod-restart.1.md typo
  * [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next
  * fix(deps): update module github.com/onsi/gomega to v1.33.0
  * Add more annnotation information to podman kupe play man page
  * test/compose: remove compose v1 code
  * CI: remove compose v1 tests
  * fix: close resource file
  * [CI:DOCS] Fix windows installer action
  * fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2
  * add `list` as an alias to list networks
  * Add support for updating restart policy
  * Add Compat API for Update
  * Make `podman update` changes persistent
  * Emergency fix (well, skip) for failing bud tests
  * fix swagger doc for manifest create
  * [CI:DOCS] options/network: fix markdown lists
  * Makefile: do not hardcode `GOOS` in `podman-remote-static` target
  * chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  * chore(deps): update dependency setuptools to ~=69.5.0
  * Fix some comments
  * swagger fix infinitive recursion on some types
  * install swagger from source
  * Revert "Swap out javascript engine"
  * podman exec CID without command should exit 125
  * (minor) prefetch systemd image before use
  * Update go-swagger version
  * Swap out javascript engine
  * fix(deps): update module github.com/docker/docker to v26.0.1+incompatible
  * Add os, arch, and ismanifest to libpod image list
  * [CI:DOCS]Initial PR validation
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71
  * vendor ginkgo 2.17.1 into test/tools
  * fix "concurrent map writes" in network ls compat endpoint
  * chore(deps): update dependency pytest to v8
  * e2e: redefine ExitWithError() to require exit code
  * docs: fix missleading run/create --expose description
  * podman ps: show exposed ports under PORTS as well
  * rootless: drop function ReadMappingsProc
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3
  * New CI VMs, to give us pasta 2024-04-05
  * Add big warning to GHA workflow
  * GHA: Fix intermittent workflow error
  * fix(deps): update module golang.org/x/tools to v0.20.0
  * e2e tests: remove requirement for fuse-overlayfs
  * docs: update Quadlet volume Options desc
  * fix(deps): update module golang.org/x/sync to v0.7.0
  * Fix relabeling failures with Z/z volumes on Mac
  * fix(deps): update module golang.org/x/net to v0.24.0
  * Makefile: fix annoying errors in docs generation
  * chore: fix function names in comment
  * Bump tags.cncf.io/container-device-interface to v0.7.1
  * fix(deps): update module golang.org/x/crypto to v0.22.0
  * Detect unhandled reboots and require user intervention
  * podman --runroot: remove 50 char length restriction
  * update github.com/rootless-containers/rootlesskit to v2
  * Update module github.com/gorilla/schema to v1.3.0
  * Update dependency requests-mock to ~=1.12.1
  * Update module github.com/crc-org/crc/v2 to v2.34.1
  * rm --force work for more than one arg
  * [CI:DOCS] Update kube docs
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3
  * [CI:DOCS] Add GitHub action to update version on Podman.io
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2
  * Windows: clean up temporary perl install
  * pkg/util: FindDeviceNodes() ignore ENOENT errors
  * [CI:DOCS] build deps: make-validate needs docs
  * test/system: add rootless-netns test for setup errors
  * vendor latest c/common main
  * container: do not chown to dest target with U
  * [CI:DOCS] golangci-lint: update deprecated flags
  * systests: conditionalize slirp4netns tests
  * CI: systests: instrument flaky tests
  * s3fs docs
  * test: do not skip tests under rootless
  * Add note about host networking to Kube PublishPort option
  * Inject additional build tags from the environment
  * libpod: use original IDs if idmap is provided
  * Switch back to checking out the same branch the action script runs in
  * docs/podman-login: Give an example of writing the persistent path
  * CI: Bump VMs to 2024-03-28
  * [skip-ci] Update dawidd6/action-send-mail action to v3.12.0
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.7
  * Fix reference to deprecated types.Info
  * Use logformatter for podman_machine_windows_task
  * applehv: Print vfkit logs in --log-level debug
  * [CI:DOCS]Add Mario to reviewers list
  * [CI:DOCS] Document CI-maintenance job addition
  * Add golang 1.21 update warning
  * Add rootless network command to `podman info`
  * libpod: don't warn about cgroupsv1 on FreeBSD
  * hyperv: error if not admin
  * Properly parse stderr when updating container status
  * [skip-ci] Packit: specify fedora-latest in propose-downstream
  * Use built-in ssh impl for all non-pty operations
  * Add support for annotations
  * hyperv: fix machine rm -r
  * [skip-ci] Packit: Enable CentOS Stream 10 update job
  * 5.0 release note fix typo in cgroupv1 env var
  * fix remote build isolation on client side
  * chore: remove repetitive words
  * Dont save remote context in temp file but stream and extract
  * fix remote build isolation when server runs as root
  * util: use private propagation with bind
  * util: add some tests for ProcessOptions
  * util: refactor ProcessOptions into an internal function
  * util: rename files to snake case
  * Add LoongArch support for libpod
  * fix(deps): update github.com/containers/common digest to bc5f97c
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1
  * fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security]
  * fix(deps): update module github.com/onsi/gomega to v1.32.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0
  * Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4
  * Fix type-o
  * Use correct extension in suite
  * minikube: instrument tests, to allow debugging failures
  * libpod: restart always reconfigure the netns
  * use new c/common pasta2 setup logic to fix dns
  * utils: drop conversion float-&gt;string-&gt;float
  * utils: do not generate duplicate range
  * logformatter: handle Windows logs
  * utils: add test for the new function
  * utils: move rootless code to a new function
  * CVE-2024-1753 fix for main
  * xref-helpmsgs-manpages: cross-check Commands.rst
  * test/system: Add support for multipath routes in pasta networking tests
  * [skip-ci] rpm: use macro supported vendoring
  * Adjust to the standard location of gvforwarder used in new images
  * Makefile: add target `podman-remote-static`
  * Switch to 5.x WSL machine os stream using new automation
  * Cleanup build scratch dir if remote end disconnects while passing the context
  * bump main to 5.1.0-dev
  * Use faster gzip for compression for 3x speedup for sending large contexts to remote
  * pkg/machine: make checkExclusiveActiveVM race free
  * pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
  * pkg/machine: CheckExclusiveActiveVM should also check for starting
  * pkg/machine: refresh config after we hold lock
  * Update dependency setuptools to ~=69.2.0
  * [skip-ci] rpm: update containers-common dep on f40+
  * fix invalid HTTP header values when hijacking a connection
  * Add doc to build podman on windows without MSYS
  * Removing CRI-O related annotations
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * Pass the restart policy to the individual containers
  * kube play: always pull when both imagePullPolicy and tag are missing</changelog>
  <changelog author="danish.prakash@suse.com" date="1741003200">- Add patch for CVE-2025-27144 (bsc#1237641):
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
- Rebase patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1742299200">- Add patch for CVE-2025-22869 (bsc#1239330):
  * 0003-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Rebase patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch</changelog>
  <changelog author="dcermak@suse.com" date="1743076800">- Depend on runc unconditionally, not only on SLE 15 (bsc#1239088)</changelog>
  <changelog author="danish.prakash@suse.com" date="1747051200">- Add patch for bsc#1242132:
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Removed patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
  * 0003-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Drop iptables support in favor of nftables (required by netavark)
- Fix conditional Requires (remove deprecated sle_version macro)
- Update to version 5.4.2:
  * Bump to v5.4.2
  * Add release notes for v5.4.2
  * Fix a potential deadlock during `podman cp`
  * Improve the file format documentation of podman-import.
  * Revert "podman-import only supports gz and tar"
  * Bump buildah to v1.39.4
  * libpod: do not cover idmapped mountpoint
  * test: Fix runc error message
  * oci: report empty exec path as ENOENT
  * test: adapt tests new crun error messages
  * test: remove duplicate test
  * cirrus: test only on f41/rawhide
  * CI: use z1d instance for windows machine testing
  * New images 2025-03-24
  * test/e2e: use go net.Dial() ov nc
  * test: use ncat over nc
  * New images 2025-03-12
  * RPM: Add riscv64 to ExclusiveArch-es
  * Fix HealthCheck log destination, count, and size defaults
  * Win installer test: hardcode latest GH release ID
  * Packit: Fix action script for fetching upstream commit
  * Bump to v5.4.2-dev
  * Bump to v5.4.1
  * update gvproxy version to 0.8.4
  * Update Buildah to v1.39.2
  * Update release notes for v5.4.1
  * Fix reporting summed image size for compat endpoint
  * podman-import only supports gz and tar
  * quadlet kube: correctly mark unit as failed
  * pkg/domain/infra/abi/play.go: fix two nilness issues
  * kube play: don't print start errors twice
  * libpod: race in WaitForConditionWithInterval()
  * libpod: race in WaitForExit() with autoremove
  * Don't try to resolve host path if copying to container from stdin.
  * Use svg for pkginstaller banner
  * Create quota before _data dir for volumes
  * Packit: clarify secondary status in CI
  * Packit/RPM: Display upstream commit SHA in all rpm builds
  * podman run: fix --pids-limit -1 wrt runc
  * vendor: update github.com/go-jose/go-jose/v3 to v3.0.4
  * chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
  * wire up --retry-delay for artifact pull
  * Revert "silence false positve from golangci-lint"
  * update golangci-lint to v1.64.4
  * update golangci-lint to v1.64.2
  * silence false positve from golangci-lint
  * cmd/podman: refactor Context handling
  * fix new usetesting lint issue
  * Packit/Copr: Fix `podman version` in rpm
  * Remove persist directory when cleaning up Conmon files
  * Bump to v5.4.1-dev
  * Bump to v5.4.0
  * Update release notes for v5.4.0 final
  * In SQLite state, use defaults for empty-string checks
  * Bump FreeBSD version to 13.4
  * docs: add v5.4 to API reference
  * Update rpm/podman.spec
  * RPM: set buildOrigin in LDFLAG
  * RPM: cleanup macro defs
  * Makefile: escape BUILD_ORIGIN properly
  * rootless: fix hang on s390x
  * Set Cirrus DEST_BRANCH appropriately to fix CI
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc3
  * Update release notes for v5.4.0-rc3
  * Add BuildOrigin field to podman info
  * artifact: only allow single manifest
  * test/e2e: improve write/removeConf()
  * Add --noheading to artifact ls
  * Add --no-trunc to artifact ls
  * Add type and annotations to artifact add
  * pkg/api: honor cdi devices from the hostconfig
  * util: replace Walk with WalkDir
  * fix(pkg/rootless): avoid memleak during init() contructor.
  * Add `machine init --playbook`
  * RPM: include empty check to silence rpmlint
  * RPM: adjust qemu dependencies
  * Force use of iptables on Windows WSL
  * rpm: add attr as dependency for podman-tests
  * update gvproxy version
  * [v5.4] Bump Buildah to v1.39.0
  * podman exec: correctly support detaching
  * libpod: remove unused ExecStartAndAttach()
  * [v5.4] Bump c/storage to v1.57.1, c/image v5.34.0, c/common v0.62.0
  * Move detection of libkrun and intel
  * Prevent two podman machines running on darwin
  * Remove unnecessary error handling
  * Remove usused Kind() function
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc2
  * Update release notes for v5.4.0-rc2
  * Safer use of `filepath.EvalSymlinks()` on Windows
  * error with libkrun on intel-based machines
  * chore(deps): update dependency pytest to v8.3.4
  * test/buildah-bud: skip two new problematic tests on remote
  * Fix podman-restart.service when there are no containers
  * Avoid upgrading from v5.3.1 on Windows
  * Clean up after unexpectedly terminated build
  * system-tests: switch ls with getfattr for selinux tests
  * vendor latest c/{buildah,common,image,storage}
  * Makefile: Add validatepr description for 'make help' output
  * docs: Enhance podman build --secret documentation and add examples
  * docs: mount.md - idmapped mounts only work for root user
  * Define, and use, PodmanExitCleanlyWithOptions
  * Eliminate PodmanSystemdScope
  * Fix image ID query
  * Revert "Use the config digest to compare images loaded/pulled using different methods"
  * Update c/image after https://github.com/containers/image/pull/2613
  * Update expected errors when pulling encrypted images
  * Eliminate PodmanExtraFiles
  * Introduce PodmanTestIntegration.PodmanWithOptions
  * Restructure use of options
  * Inline PodmanBase into callers
  * Pass all of PodmanExecOptions to various [mM]akeOptions functions
  * Turn PodmanAsUserBase into PodmanExecBaseWithOptions
  * Avoid indirect links through quadlet(5)
  * do not set the CreateCommand for API users
  * Add podman manifest rm --ignore
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc1
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.2
  * podman artifact
  * vendor latest c/{common,image,storage}
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.2
  * cirrus: bump macos machine test timeout
  * pkg/machine/e2e: improve podman.exe match
  * pkg/machine/e2e: improve "list machine from all providers"
  * Remove JSON tag from UseImageHosts in ContainerConfig
  * Set network ID if available during container inspect
  * Stop creating a patch for v5.3.1 upgrades on windows
  * compose docs: fix typo
  * Document kube-play CDI support
  * docs: Add quadlet debug method systemd-analyze
  * Replace instances of PodmanExitCleanly in play_kube_test.go
  * docs: add 'initialized' state to status filters
  * fix(deps): update module google.golang.org/protobuf to v1.36.3
  * Switch all calls of assert.Nil to assert.NoError
  * Add --no-hostname option
  * Fix unescaping octal escape sequence in values of Quadlet unit files
  * Remove `.exe` suffix if any
  * Add kube play support for CDI resource allocation
  * add support to `;` for comments in unit files as per systemd documentation
  * Use PodmanExitCleanly in attach_test.go
  * Introduce PodmanTestIntegration.PodmanExitCleanly
  * chore(deps): update dependency setuptools to ~=75.8.0
  * Add newer c/i to support artifacts
  * fix(deps): update module golang.org/x/tools to v0.29.0
  * fix(deps): update module golang.org/x/net to v0.34.0
  * specgenutil: Fix parsing of mount option ptmxmode
  * namespaces: allow configuring keep-id userns size
  * Update description for completion
  * Quadlet - make sure the /etc/containers/systemd/users is traversed in rootless
  * Document .build for Image .container option
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.9.1
  * New VM Images
  * update golangci/golangci-lint to v1.63.4
  * fix(deps): update module google.golang.org/protobuf to v1.36.2
  * chore(deps): update dependency setuptools to ~=75.7.0
  * Fixing ~/.ssh/identity handling
  * vendor latest c/common from main
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.12
  * fix(deps): update module github.com/opencontainers/runc to v1.2.4
  * specgen: fix comment
  * Add hint to restart Podman machine to really accept new certificates
  * fix(deps): update module github.com/onsi/gomega to v1.36.2
  * fix(deps): update module github.com/moby/term to v0.5.2
  * Pass container hostname to netavark
  * Fix slirp4netns typo in podman-network.1.md
  * Add support to ShmSize in Pods with Quadlet
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.1
  * chore(deps): update module golang.org/x/crypto to v0.31.0 [security]
  * fix(deps): update module golang.org/x/net to v0.33.0 [security]
  * Kube volumes can not container _
  * fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
  * test/system: fix "podman play --build private registry" error
  * test/system: CopyDirectory() do not chown files
  * test/system: remove system dial-stdio test
  * shell completion: respect CONTAINERS_REGISTRIES_CONF
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.6
  * When generating host volumes for k8s, force to lowercase
  * test: enable newly added test
  * vfkit: Use 0.6.0 binary
  * gvproxy: Use 0.8.1 binary
  * systemd: simplify parser and fix infinite loop
  * Revert "win-installer test: revert to v5.3.0"
  * Avoid rebooting twice when installing WSL
  * Avoid rebooting on Windows when upgrading and WSL isn't installed
  * Add win installer patch
  * Bump WiX toolset version to 5.0.2
  * test/e2e: SkipOnOSVersion() add reason field
  * test/e2e: remove outdated SkipOnOSVersion() calls
  * Update VM images
  * fix(deps): update module golang.org/x/crypto to v0.31.0 [security]
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.45.0
  * fix(deps): update module github.com/opencontainers/runc to v1.2.3
  * quadlet: fix inter-dependency of containers in `Network=`
  * Add man pages to Mac installer
  * fix(deps): update module github.com/onsi/gomega to v1.36.1
  * fix(deps): update module github.com/docker/docker to v27.4.0+incompatible
  * Fix device limitations in podman-remote update on remote systems
  * Use latest version of VS BuildTools
  * bin/docker: fix broken escaping and variable substitution
  * manifest annotate: connect IndexAnnotations
  * Fix panic in `manifest annotate --index`
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.5
  * fix(deps): update module golang.org/x/net to v0.32.0
  * fix(deps): update module golang.org/x/tools to v0.28.0
  * fix(deps): update module golang.org/x/crypto to v0.30.0
  * fix(deps): update module golang.org/x/sys to v0.28.0
  * Fix overwriting of LinuxResources structure in the database
  * api: replace inspectID with name
  * fix(deps): update github.com/opencontainers/runtime-tools digest to f7e3563
  * Replace ExclusiveArch with ifarch
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.1
  * Improve platform specific URL handling in `podman compose` for machines
  * Fix `podman info` with multiple imagestores
  * Switch to fixed common
  * refact: use uptime.minutes instead of uptime.seconds
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.11
  * fix(deps): update golang.org/x/exp digest to 2d47ceb
  * fix(deps): update github.com/godbus/dbus/v5 digest to c266b19
  * Cover Unix socket in inpect test on Windows platform
  * Add a test for forcing compression and v2s2 format
  * fix(deps): update module github.com/crc-org/vfkit to v0.6.0
  * Package podman-machine on supported architectures only.
  * Fixes missing binary in systemd.
  * stats: ignore errors from containers without cgroups
  * api: Error checking before NULL dereference
  * [skip-ci] Packit/copr: switch to fedora-all
  * make remotesystem: fail early if serial tests fail
  * spec: clamp rlimits without CAP_SYS_RESOURCE
  * Clarify the reason for skip_if_remote
  * Sanity-check that the test is really using partial pulls
  * Fix apparent typos in zstd:chunked tests
  * Fix compilation issues in QEMU machine files (Windows platform)
  * Mount volumes before copying into a container
  * Revert "libpod: remove shutdown.Unregister()"
  * docs: improve documentation for internal networks
  * docs: document bridge mode option
  * [skip-ci] Packit: remove epel and re-enable c9s
  * chore(deps): update dependency golangci/golangci-lint to v1.62.2
  * vendor: update containers/common
  * OWNERS: remove edsantiago
  * fix(deps): update module github.com/onsi/gomega to v1.36.0
  * fix(deps): update github.com/containers/common digest to ceceb40
  * refact: EventerType and improve consistency
  * Add --hosts-file flag to container and pod commands
  * Add nohosts option to /build and /libpod/build
  * fix(deps): update module github.com/stretchr/testify to v1.10.0
  * Quadlet - Use = sign when setting the pull arg for build
  * win-installer test: revert to v5.3.0
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.44.0
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.0
  * chore(deps): update dependency setuptools to ~=75.6.0
  * Update windows installer tests
  * Windows: don't install WSL/HyperV on update
  * Switch to non-installing WSL by default
  * fix(deps): update github.com/containers/buildah digest to 52437ef
  * Configure HealthCheck with `podman update`
  * CI: --image-volume test: robustify
  * docs: add 5.3 as Reference version
  * Bump CI VMs
  * libpod: pass down NoPivotRoot to Buildah
  * vendor: bump containers/buildah
  * fix(deps): update module github.com/opencontainers/runc to v1.2.2
  * Overlay mounts supersede image volumes &amp; volumes-from
  * libpod: addHosts() prevent nil deref
  * only read ssh_config for non machine connections
  * ssh_config: allow IdentityFile file with tilde
  * ssh_config: do not overwrite values from config file
  * connection: ignore errors when parsing ssh_config
  * Bump bundled krunkit to 0.1.4
  * fix(deps): update module google.golang.org/protobuf to v1.35.2
  * add support for driver-specific options during container creation
  * doc: fix words repetitions
  * Update release notes on main for v5.3.0
  * chore(deps): update dependency setuptools to ~=75.5.0
  * CI: system tests: parallelize 010
  * fix podman machine init --ignition-path
  * vendor: update containers/common
  * spec: clamp rlimits in a userns
  * Add subpath support to volumes in `--mount` option
  * refactor: simplify LinuxNS type definition and String method
  * test/e2e: remove FIPS test
  * vendor containers projects to tagged versions
  * fix(deps): update module github.com/moby/sys/capability to v0.4.0
  * chore(deps): update dependency setuptools to ~=75.4.0
  * system tests: safer install_kube_template()
  * Buildah treadmill tweaks
  * update golangci-lint to v1.62.0
  * fix(deps): update module golang.org/x/net to v0.31.0
  * fix(deps): update module golang.org/x/tools to v0.27.0
  * Revert "Reapply "CI: test nftables driver on fedora""
  * Yet another bump, f41 with fixed kernel
  * test: add zstd:chunked system tests
  * pkg/machine/e2e: remove dead code
  * fix(deps): update module golang.org/x/crypto to v0.29.0
  * kube SIGINT system test: fix race in timeout handling
  * New `system connection add` tests
  * Update codespell to v2.3.0
  * Avoid printing PR text to stdout in system test
  * Exclude symlink from pre-commit end-of-file-fixer
  * api: Add error check
  * [CI:ALL] Bump main to v5.4.0-dev
  * test/buildah-bud: build new inet helper
  * test/system: add regression test for TZDIR local issue
  * vendor latest c/{buildah,common,image,storage}
  * Reapply "CI: test nftables driver on fedora"
  * Revert "cirrus: test only on f40/rawhide"
  * test f41 VMs
  * AdditionalSupport for SubPath volume mounts
  * wsl-e2e: Add a test to ensure port 2222 is free with usermode networking
  * winmake.ps1: Fix the syntax of the function call Win-SSHProxy
  * volume ls: fix race that caused it to fail
  * gvproxy: Disable port-forwarding on WSL
  * build: update gvisor-tap-vsock to 0.8.0
  * podman: update roadmap
  * Log network creation and removal events in Podman
  * libpod: journald do not lock thread
  * Add key to control if a container can get started by its pod
  * Honor users requests in quadlet files
  * CI: systests: workaround for parallel podman-stop flake
  * Fix inconsistent line ending in win-installer project
  * fix(deps): update module github.com/opencontainers/runc to v1.2.1
  * Quadlet - support image file based mount in container file
  * API: container logs flush status code
  * rework event code to improve API errors
  * events: remove memory eventer
  * libpod: log file use Wait() over event API
  * Makefile: vendor target should always remove toolchain
  * cirrus: check consitent vendoring in test/tools
  * test/tools/go.mod: remove toolchain
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10
  * fix(deps): update module github.com/onsi/gomega to v1.35.1
  * doc: explain --interactive in more detail
  * fix(deps): update golang.org/x/exp digest to f66d83c
  * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
  * fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c
  * add default polling interval to Container.Wait
  * Instrument cleanup tracer to log weird volume removal flake
  * make podman-clean-transient.service work as user
  * Add default remote socket path if empty
  * Use current user if no user specified
  * Add support for ssh_config for connection
  * libpod: use pasta Setup() over Setup2()
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0
  * fix(deps): update module github.com/onsi/gomega to v1.35.0
  * logformatter: add cleanup tracer log link
  * docs: fix broken example
  * docs: add missing swagger links for the stable branches
  * readthedocs: build extra formats
  * pkg/machine/e2e: remove debug
  * fix(docs): Integrate pasta in rootless tutorial
  * chore(deps): update dependency setuptools to ~=75.3.0
  * libpod: report cgroups deleted during Stat() call
  * chore: fix some function names in comment
  * CI: parallelize 450-interactive system tests
  * CI: parallelize 520-checkpoint tests
  * CI: make 070-build.bats use safe image names
  * test/system: add podman network reload test to distro gating
  * System tests: clean up unit file leaks
  * healthcheck: do not leak service on failed stop
  * healthcheck: do not leak statup service
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0
  * Add Startup HealthCheck configuration to the podman inspect
  * buildah version display: use progress()
  * new showrun() for displaying and running shell commands
  * Buildah treadmill: redo the .cirrus.yml tweaks
  * Buildah treadmill: more allow-empty options
  * Buildah treadmill: improve test-failure instructions
  * Buildah treadmill: improve wording in test-fail instructions
  * doc: Remove whitespace before comma
  * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0
  * ps: fix display of exposed ports
  * ps: do not loop over port protocol
  * readme: Add reference to pasta in the readme
  * test/system: Fix spurious "duplicate tests" failures in pasta tests
  * Improve "podman load - from URL"
  * Try to repair c/storage after removing an additional image store
  * Use the config digest to compare images loaded/pulled using different methods
  * Simplify the additional store test
  * Fix the store choice in "podman pull image with additional store"
  * Bump to v5.3.0-dev
  * Bump to v5.3.0-rc1
  * Set quota on volume root directory, not _data
  * fix(deps): update module github.com/opencontainers/runc to v1.2.0
  * test: set soft ulimit
  * Vagrantfile: Delete
  * Enable pod restore with crun
  * vendor: update c/{buildah,common,image,storage}
  * Fix 330-corrupt-images.bats in composefs test runs
  * quadlet: add default network dependencies to all units
  * quadlet: ensure user units wait for the network
  * add new podman-user-wait-network-online.service
  * contrib/systemd: switch user symlink for file symlinks
  * Makefile: remove some duplication from install.systemd
  * contrib/systemd: move podman-auto-update units
  * quadlet: do not reject RemapUsers=keep-id as root
  * test/e2e: test quadlet with and without --user
  * CI: e2e: fix checkpoint flake
  * APIv2 test fix: image history
  * pasta udp tests: new bytecheck helper
  * Document packaging process
  * [skip-ci] RPM: remove dup Provides
  * Update dependency setuptools to ~=75.2.0
  * System tests: safer pause-image creation
  * Update module github.com/opencontainers/selinux to v1.11.1
  * Added escaping to invoked powershell command for hyperv stubber.
  * use slices.Clone instead of assignment
  * libpod API: only return exit code without conditions
  * Housekeeping: remove duplicates from success_task
  * Thorough overhaul of CONTRIBUTING doc.
  * api: Replace close function in condition body
  * test/e2e: fix default signal exit code test
  * Test new VM build
  * CI: fix changing-rootFsSize flake
  * scp: add option types
  * Unlock mutex before returning from function
  * Note in the README that we are moving to timed releases
  * cirrus: let tar extract figure out the compression
  * Make error messages more descriptive
  * Mention containers.conf settings for podman machine commands
  * [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks"
  * cmd: use logrus to print error
  * podman: do not set rlimits to the default value
  * spec: always specify default rlimits
  * vendor: update containers/common
  * Note in the README that we are moving to timed releases
  * Revert "CI: test nftables driver on fedora"
  * cirrus: use zstd over bzip2 for repo archive
  * cirrus: use shared repo_prep/repo_artifacts scripts
  * cirrus: speed up postbuild
  * cirrus: change alt arch task to only compile binaries
  * cirrus: run make with parallel jobs where useful
  * Makefile: allow man-page-check to be run in parallel
  * cirrus: use fastvm for builds
  * test/e2e: skip some Containerized checkpoint tests
  * test: update timezone checks
  * cirrus: update CI images
  * test/e2e: try debug potential pasta issue
  * CI: quadlet system tests: use airgapped testimage
  * Allow removing implicit quadlet systemd dependencies
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
  * libpod API: make wait endpoint better against rm races
  * podman-remote run: improve how we get the exit code
  * [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
  * 055-rm test: clean up a test, and document
  * CI: remove skips for libkrun
  * Bump bundled krunkit to 0.1.3
  * fix(deps): update module google.golang.org/protobuf to v1.35.0
  * fix(deps): update module golang.org/x/net to v0.30.0
  * server: fix url parsing in info
  * fix(deps): update module golang.org/x/tools to v0.26.0
  * Makefile: fix ginkgo FOCUS option
  * fix(deps): update module golang.org/x/crypto to v0.28.0
  * podman-systemd.unit.5: adjust example options
  * docs: prefer --network to --net
  * fix(deps): update module golang.org/x/term to v0.25.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24
  * fix(deps): update module golang.org/x/sys to v0.26.0
  * OWNERS file audit and update
  * Exposed ports are only included when not --net=host
  * libpod: hasCurrentUserMapped checks for gid too
  * [CI:DOCS] Document TESTFLAGS in test README file
  * Validate the bind-propagation option to `--mount`
  * Fix typo in secret inspect examples
  * Mention `no_hosts` and `base_hosts_file` configs in CLI option docs
  * Fixes for vendoring Buildah
  * vendor: update buildah to latest
  * Makefile - silence skipped tests when focusing on a file
  * vendor: update to latest c/common
  * Quadlet - prefer "param val" over "param=val" to allow env expansion
  * System tests: sdnotify: wait for socket file creation
  * Switch to moby/sys/capability
  * platformInspectContainerHostConfig: rm dead code
  * CI: require and test CI_DESIRED_NETWORK on RHEL
  * Add ExposedPorts to Inspect's ContainerConfig
  * fix(deps): update golang.org/x/exp digest to 701f63a
  * quadlet: allow variables in PublishPort
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9
  * fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c
  * Document that zstd:chunked is downgraded to zstd when encrypting
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
  * chore(deps): update dependency ubuntu to v24
  * rpm: do not load iptables modules on f41+
  * adding docs for network-cmd-path
  * Include exposed ports in inspect output when net=host
  * feat(libpod): support kube play tar content-type (#24015)
  * podman mount: some better error wrapping
  * podman mount: ignore ErrLayerUnknown
  * Quadlet - make sure the order of the UnitsDir is deterministic
  * packit: disable Centos Stream/fedora ELN teasks
  * libpod: remove shutdown.Unregister()
  * libpod: rework shutdown handler flow
  * libpod: ensure we are not killed during netns creation
  * Update module github.com/moby/sys/capability to v0.3.0
  * Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options
  * Update documentation of `--add-host` CLI option
  * System tests: set a default XDG_RUNTIME_DIR
  * Modify machine "Remove machine" test
  * CORS system test: clean up
  * Add --health-max-log-count, --health-max-log-size, --health-log-destination flags
  * troubleshooting: adjust home path in tip 44
  * test/system: For pasta port forwarding tests don't bind socat server
  * Update connection on removal
  * Simplify `RemoveConnections`
  * Move `DefaultMachineName` to `pkg/machine/define`
  * vendor: update containers/image
  * vendor: update containers/storage
  * CI: skip the flaking quadlet test
  * CI: make systemd tests parallel-safe (*)
  * CI: run and collect cleanup tracer logs
  * add epbf program to trace podman cleanup errors
  * CI: parallelize logs test as much as possible
  * CI: format test: use local registry if available
  * CI: make 700-play parallel-safe
  * docs: Fix missing negation
  * bin/docker support warning message suppression from user config dir
  * Update module github.com/docker/docker to v27.3.1+incompatible
  * Quadlet - add full support for Symlinks
  * libpod: setupNetNS() correctly mount netns
  * vendor latest c/common
  * docs: remove usage of deprecated `--storage`
  * Update module github.com/docker/docker to v27.3.0+incompatible
  * CI: Quadlet rootfs test: use container image as rootfs
  * CI: system test registry: use --net=host
  * CI: rm system test: bump grace period
  * CI: system tests: minor documentation on parallel
  * fix typo in error message Fixes: containers/podman#24001
  * CI: system tests: always create pause image
  * CI: quadlet system test: be more forgiving
  * vendor latest c/common
  * CI: make 200-pod parallel-safe
  * allow exposed sctp ports
  * test/e2e: add netns leak check
  * test/system: netns leak check for rootless as well
  * test/system: Improve TODO comments on IPv6 pasta custom DNS forward test
  * test/system: Clarify "Local forwarder" pasta tests
  * test/system: Simplify testing for nameserver connectivity
  * test/system: Consolidate "External resolver" pasta tests
  * test/system: Move test for default forwarder into its own case
  * CI: make 090-events parallel-safe
  * Misc minor test fixes
  * Add network namespace leak check
  * Add workaround for buildah parallel bug
  * registry: lock start attempts
  * Update system test template and README
  * bats log: differentiate parallel tests from sequential
  * ci: bump system tests to fastvm
  * clean_setup: create pause image
  * CI: make 012-manifest parallel-safe
  * podman-manifest-remove: update docs and help output
  * test/system: remove wait workaround
  * wait: fix handling of multiple conditions with exited
  * Match output of Compat Top API to Docker
  * system test parallelization: enable two-pass approach
  * New VMs: test crun 1.17
  * libpod: hides env secrets from container inspect
  * CI: e2e: workaround for events out-of-sequence flake
  * update golangci-lint to 1.61.0
  * libpod: convert owner IDs only with :idmap
  * Podman CLI --add-host with multiple host for a single IP
  * Quadlet - Split getUnitDirs to small functions
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5
  * chore(deps): update dependency setuptools to ~=75.1.0
  * Fxi typo in cache-ttl.md
  * Get WSL disk as an OCI artifact
  * CI: make 260-sdnotify parallel-safe
  * quadlet: do not log ENOENT errors
  * pkg/specgen: allow pasta when running inside userns
  * troubleshooting: add tip about the user containers
  * chore(deps): update dependency setuptools to v75
  * Convert windows paths in volume arg of the build command
  * Improve error when starting multiple machines
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
  * Minor typo noticed when reading podman man page
  * Remove `RemoveFilesAndConnections`
  * Add `GetAllMachinesAndRootfulness`
  * rewrite typo osascript
  * typo
  * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
  * Add radio buttons to select WSL or Hyper-V in windows setup.exe
  * [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
  * [skip-ci] Packit: Enable sidetags for bodhi updates
  * vendor: update c/common
  * CI: make 710-kube parallel-safe
  * CI: mark 320-system-df *NOT* parallel safe
  * Add kube play support for image volume source
  * refactor: add sshClient function
  * fix(deps): update module golang.org/x/tools to v0.25.0
  * CI: make 505-pasta parallel safe
  * CI: make 020-tag parallel-safe
  * CI: make 410-selinux parallel-safe
  * Bump VMs. ShellCheck is now built-in
  * troubleshooting: add tip about auto, keep-id, nomap
  * libpod: make use of new pasta option from c/common
  * vendor latest c/common
  * podman images: sort repository with tags
  * Remove containers/common/pkg/config from pkg/util
  * fix(deps): update module golang.org/x/net to v0.29.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23
  * fix(deps): update module golang.org/x/crypto to v0.27.0
  * Fix CI
  * Detect and fix typos using codespell
  * Fix typo: replace buildin with built-in
  * Add codespell config, pre-commit definition, and move options from Makefile
  * prune: support clearing build cache using CleanCacheMount
  * test/e2e: fix network prune flake
  * Add support for Job to kube generate &amp; play
  * Add podman-rootless.7 man page
  * Add DNS, DNSOption and DNSSearch to quadlet pod
  * podman.1.md: improve policy.json section
  * e2e: flake fix: SIGPIPE in hook test
  * libpod: fix rootless cgroup path with --cgroup-parent
  * vendor: update c/storage
  * CI: make 055-rm parallel-safe
  * CI: make 130-kill parallel-safe
  * CI: make 125-import parallel-safe
  * CI: make 110-history parallel-safe
  * CI: system tests: parallelize low-hanging fruit
  * Add disclaimer to `podman machine info` manpage.
  * man pages: refactor two more options
  * update github.com/opencontainers/runc to v1.2.0-rc.3
  * update go.etcd.io/bbolt to v1.3.11
  * update github.com/onsi/{ginkgo,gomega}
  * Update module github.com/shirou/gopsutil to v4
  * packit: update fedora and epel targets
  * bump go to 1.22
  * cirrus: test only on f40/rawhide
  * cirrus: remove CI_DESIRED_NETWORK reference
  * cirrus: prebuild use f40 for extra tests
  * chore(deps): update dependency setuptools to ~=74.1.0
  * libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD
  * fix(deps): update golang.org/x/exp digest to 9b4947d
  * Implement publishing API UNIX socket on Windows platforms
  * Vendor c/common:8483ef6022b4
  * quadlet: support container network reusing
  * docs: update read the docs changes
  * CI: parallel-safe network system test
  * Quadlet - Support multiple image tags in .build files
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3
  * cirrus: remove _bail_if_test_can_be_skipped
  * cirrus: move renovate check into validate
  * cirrus: remove 3rd party connectivity check
  * cirrus: remove cross jobs for aarch64 and x86_64
  * cirrus: do not upload alt arch cross artifacts
  * cirrus: remove ginkgo-e2e.json artifact
  * cirrus: fix default timeouts
  * github: remove fcos-podman-next-build-prepush
  * Clarify podman machine volume mounting behavior under WSL
  * machine: Add -all-providers flag to machine list
  * Create a podman-troubleshooting man page
  * chore(deps): update dependency setuptools to v74
  * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
  * Fix an improperly ignored error in SQLite
  * CI: flake workaround: ignore socat waitpid warnings
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1
  * Stop skipping machine volume test on Hyper-V
  * cleanup: add new --stopped-only option
  * fix races in the HTTP attach API
  * cirrus: skip windows/macos machine task on RHEL branches
  * Update module github.com/containers/gvisor-tap-vsock to v0.7.5
  * run: fix detach passthrough and --rmi
  * podman run: ignore image rm error
  * Add support for AddHost in quadlet .pod and .container
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
  * update github.com/vishvananda/netlink to v1.3.0
  * build: Update gvisor-tap-vsock to 0.7.5
  * Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page:
  * fix typo in podman-network-create.1.md
  * Use HTTP path prefix of TCP connections to match Docker context behavior
  * Makefile: remotesystem: use real podman server, no --url
  * Update module github.com/openshift/imagebuilder to v1.2.15
  * CI: parallel-safe userns test
  * Update module github.com/onsi/ginkgo/v2 to v2.20.1
  * Add support for IP in quadlet .pod files
  * Specify format to use for referencing fixed bugs.
  * CI: parallel-safe run system test
  * Revert "test/e2e: work around for pasta issue"
  * CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked
  * quadlet: support user mapping in pod unit
  * Update Release Process
  * Test new VM build
  * command is not optional to podman exec
  * CI: parallel-safe namespaces system test
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
  * quadlet: add key CgroupsMode
  * Fix `podman stop` and `podman run --rmi`
  * quadlet: set infra name to %s-infra
  * chore(deps): update dependency setuptools to v73
  * [skip-ci] Packit: update targets for propose-downstream
  * Do not segfault on hard stop
  * Fix description of :Z to talk about pods
  * CI: disable ginkgo flake retries
  * vendor: update go-criu to latest
  * golangci-lint: make darwin linting happy
  * golangci-lint: make windows linting happy
  * test/e2e: remove kernel version check
  * golangci-lint: remove most skip dirs
  * set !remote build tags where needed
  * update golangci-lint to 1.60.1
  * test/e2e: rm systemd start test
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1
  * podman wait: allow waiting for removal of containers
  * libpod: remove UpdateContainerStatus()
  * podman mount: fix storage/libpod ctr race
  * CI: quadlet tests: make parallel-safe
  * CI: system tests: make random_free_port() parallel-safe
  * remove trailing comma in example
  * CI: format test: make parallel-safe
  * Fix podman-docker.sh under -eu shells (fixes #23628)
  * docs: update podman-wait man page
  * libpod: remove duplicated HasVolume() check
  * podman volume rm --force: fix ABBA deadlock
  * test/system: fix network cleanup restart test
  * libpod: do not stop pod on init ctr exit
  * libpod: simplify WaitForExit()
  * CI: remove build-time quay check
  * Fix known_hosts file clogging and remote host id
  * Update docker.io/library/golang Docker tag to v1.23
  * Update dependency setuptools to ~=72.2.0
  * Update module github.com/docker/docker to v27.1.2+incompatible
  * healthcheck system check: reduce raciness
  * CI: healthcheck system test: make parallel-safe
  * Validate renovate config in every PR
  * pkg/machine: Read stderr from ssh-keygen correctly
  * Fix renovate config syntax error
  * CI: 080-pause.bats: make parallel-safe
  * CI: 050-stop.bats: make parallel-safe
  * Additional potential race condition on os.Readdir
  * pkg/bindings/containers: handle ignore for stop
  * remote: fix invalid --cidfile + --ignore
  * Update/simplify renovate config header comment
  * Migrate renovate config to latest schema
  * Fix race condition when listing /dev
  * docs/podman-systemd: Try to clarify `Exec=` more
  * libpod: reset state error on init
  * test/system: pasta_test_do add explicit port check
  * test/e2e: work around new push warning
  * vendor: update c/common to latest
  * stopIfOnlyInfraRemains: log all errors
  * libpod: do not save expected stop errors in ctr state
  * libpod: fix broken saveContainerError()
  * Quadlet: fix filters failure when the search paths are symlinks
  * readme: replace GPG with PGP
  * Drop APIv2 CNI configuration
  * De-duplicate docker-py testing
  * chore(podmansnoop): explain why crun comm is 3
  * libpod: cleanupNetwork() return error
  * fix(deps): update module golang.org/x/sys to v0.24.0
  * Reduce python APIv2 test net dependency
  * Fix not testing registry.conf updates
  * test/e2e: improve command timeout handling
  * Update module github.com/onsi/ginkgo/v2 to v2.20.0
  * Update module github.com/moby/sys/user to v0.3.0
  * Add passwd validate and generate steps
  * podman container cleanup: ignore common errors
  * Quadlet - Allow the user to override the default service name
  * CI: e2e: serialize root containerPort tests
  * Should not force conversion of manifest type to DockerV2ListMediaType
  * fix(deps): update module golang.org/x/tools to v0.24.0
  * fix(deps): update github.com/containers/common digest to 05b2e1f
  * CI: mount system test: parallelize
  * Update module golang.org/x/net to v0.28.0
  * Ignore ERROR_SHARING_VIOLATION error on windows
  * CI: manifest system tests: make parallel-safe
  * Create volume path before state initialization
  * vendor: update c/storage
  * CI: fix broken libkrun test
  * test/e2e: work around for pasta issue
  * test/e2e: fix missing exit code checks
  * Test new CI images
  * Remove another race condition when mounting containers or images
  * fix(deps): update github.com/containers/common digest to c0cc6b7
  * Change Windows installer MajorUpgrade Schedule
  * Ignore missing containers when calling GetExternalContainerLists
  * Remove runc edit to lock to specific version
  * fix(deps): update module golang.org/x/sys to v0.23.0
  * CI: podman-machine: do not use cache registry
  * CI: completion system test: use safename
  * Temporarly disable failing Windows Installer CI test
  * libpod: fix volume copyup with idmap
  * libpod: avoid hang on errors
  * Temp. disable PM basic Volume ops test
  * Add libkrun Mac task
  * Never skip checkout step in release workflow
  * System tests: leak_test: readable output
  * fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431
  * vendor: bump c/common
  * Version: bump to v5.3.0-dev
  * libpod: inhibit SIGTERM during cleanup()
  * Tweak versions in register_images.go
  * fix network cleanup flake in play kube
  * WIP: Fixes for vendoring Buildah
  * Add --compat-volumes option to build and farm build
  * Bump to Buildah v1.37.0
  * Quadlet test - Split between success, warning and error cases
  * libpod: bind ports before network setup
  * Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false
  * Use new syntax for selinux options in quadlet
  * fix(deps): update module github.com/onsi/gomega to v1.34.1
  * CI: kube test: fix broken external-storage test
  * Update dependency setuptools to v72
  * Convert additional build context paths on Windows
  * pkg/api: do not leak config pointers into specgen
  * Quadlet - Allow the user to set the service name for .pod files
  * Quadlet tests - allow overriding the expected service name
  * fix(deps): update module github.com/moby/sys/user to v0.2.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5
  * CI: enable root user namespaces
  * libpod: force rootfs for OCI path with idmap
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
  * Add test steps for automount with multi images
  * CI: cp tests: use safename
  * [skip-ci] RPM: podman-iptables.conf only on Fedora
  * CI: 700-play: fix a leaked non-safename
  * test: check that kube generate/play restores the userns
  * test: disable artifacts cache with composefs
  * test: fix podman pull tests
  * vendor: bump c/storage
  * Update module github.com/cyphar/filepath-securejoin to v0.3.1
  * Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs
  * build: Update gvisor-tap-vsock to 0.7.4
  * test/system: fix borken pasta interface name checks
  * test/system: fix bridge host.containers.internal test
  * api: honor the userns for the infra container
  * play: handle 'private' as 'auto'
  * kube: record infra user namespace
  * infra: user ns annotation higher precedence
  * specgenutil: record the pod userns in the annotations
  * kube: invert branches
  * CI: system log test: use safe names
  * Update encryption tests to avoid a warning if zstd:chunked is the default
  * Fix "podman pull and decrypt"/"from local registry"
  * Use unique image names for the encrypted test images
  * CI: system tests: instrument to allow failure analysis
  * Fix outdated comment for the build step win-gvproxy
  * Add utility to convert VMFile to URL for UNIX sockets
  * Run codespell on source
  * fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
  * chore(deps): update dependency setuptools to ~=71.1.0
  * logformatter: tweaks to pass html tidy
  * More information for podman --remote build and running out of space.
  * Fix windows installer deleting machine provider config file
  * Use uploaded .zip for Windows action
  * pr-should-include-tests: no more CI:DOCS override</changelog>
  <changelog author="danish.prakash@suse.com" date="1755086400">- Add patch for CVE-2025-6032 (bsc#1245320):
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1759492800">- Add patch for CVE-2025-9566 (bsc#1249154):
  * 0004-CVE-2025-9566-kube-play-don-t-follow-volume-symlinks.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1762344000">- Add patch for CVE-2025-31133,CVE-2025-52565,CVE-2025-52881 (bsc#1252376):
  * 0005-CVE-2025-52881-backport-subset-of-patch-from-runc.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch
  * 0004-CVE-2025-9566-kube-play-don-t-follow-volume-symlinks.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1766404800">- Add patch for CVE-2025-47914 (bsc#1253993), CVE-2025-47913 (bsc#1253542):
  * 0006-CVE-2025-47913-CVE-2025-47914-ssh-agent-fixes.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch
  * 0004-CVE-2025-9566-kube-play-don-t-follow-volume-symlinks.patch
  * 0005-CVE-2025-52881-backport-subset-of-patch-from-runc.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1769688000">- Add symlink to catatonit in /usr/libexec/podman (bsc#1248988)</changelog>
</package>
<package pkgid="3e9c0944ecd30964c3f621a3a28bcdb24f7178835e198588649f855c0154808068c230ab021305e6dacff69308d133e474dbb5ecbd127213939297bfc879733e" name="podman-remote" arch="x86_64">
  <version epoch="0" ver="5.4.2" rel="160000.4.1"/>
  <changelog author="danish.prakash@suse.com" date="1739793600">- Add patch for CVE-2024-11218 (bsc#1236270):
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
- Removed patches (merged upstream):
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Add missing podman-clean-transient unit
- Update to version 5.2.5:
  * Bump to v5.2.5 (bsc#1236507)
  * Update release notes for 5.2.5
  * Bump c/storage to v1.55.1 and Buildah to v1.37.5
  * RPM: remove dup Provides
  * Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
  * Bump to v5.2.5-dev
  * Bump to v5.2.4
  * Update release notes for v5.2.4
  * Validate the bind-propagation option to `--mount`
  * Bump Buildah to v1.37.4
  * vendor: update c/common to v0.60.4
  * Bump to v5.2.4-dev
  * Bump to v5.2.3
  * Update release notes for v5.2.3
  * [v5.2] Bump Buildah to v1.37.3
  * pkg/specgen: allow pasta when running inside userns
  * libpod: convert owner IDs only with :idmap
  * docs: update read the docs changes
  * allow exposed sctp ports
  * libpod: setupNetNS() correctly mount netns
  * vendor: update c/common to v0.60.3
  * [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
  * [skip-ci] Packit: Enable sidetags for bodhi updates
  * build: Update gvisor-tap-vsock to 0.7.5
  * CI: podman-machine: do not use cache registry
  * [CI:DOCS] Add v5.2.2 lib updates to RELEASE_NOTES.md
  * Bump to v5.2.3-dev
  * Bump to v5.2.2
  * Update RELEASE_NOTES for v5.2.2
  * [v5.2] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2
  * [v5.2] golangci-lint: make darwin linting happy
  * [v5.2] golangci-lint: make windows linting happy
  * [v5.2] test/e2e: remove kernel version check
  * [v5.2] golangci-lint: remove most skip dirs
  * [v5.2] set !remote build tags where needed
  * [v5.2] update golangci-lint to 1.60.1
  * Packit: update targets for propose-downstream
  * Create volume path before state initialization
  * Update Cirrus DEST_BRANCH
  * Bump to v5.2.2-dev
  * Bump to v5.2.1
  * Update release notes for v5.2.1
  * [v5.2] Add zstd:chunked test fix
  * [v5.2] Bump Buildah to v1.37.1, c/common v0.60.1, c/image v5.32.1
  * libpod: reset state error on init
  * libpod: do not save expected stop errors in ctr state
  * libpod: fix broken saveContainerError()
  * Bump to v5.2.1-dev
  * Bump to v5.2.0
  * Never skip checkout step in release workflow
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc3
  * Update release notes for v5.2.0-rc3
  * Tweak versions in register_images.go
  * fix network cleanup flake in play kube
  * WIP: Fixes for vendoring Buildah
  * Add --compat-volumes option to build and farm build
  * Bump Buildah, c/storage, c/image, c/common
  * libpod: bind ports before network setup
  * pkg/api: do not leak config pointers into specgen
  * build: Update gvisor-tap-vsock to 0.7.4
  * test/system: fix borken pasta interface name checks
  * test/system: fix bridge host.containers.internal test
  * CI: system tests: instrument to allow failure analysis
  * Use uploaded .zip for Windows action
  * RPM: podman-iptables.conf only on Fedora
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc2
  * Update release notes for v5.2.0-rc2
  * test/e2e: fix ncat tests
  * libpod: add hidden env to set sqlite timeout
  * Add support for StopSignal in quadlet .container files
  * podman pod stats: fix race when ctr process exits
  * Update module github.com/vbauerster/mpb/v8 to v8.7.4
  * libpod: correctly capture healthcheck output
  * Bump bundled krunkit to 0.1.2
  * podman stats: fix race when ctr process exists
  * nc -p considered harmful
  * podman pod stats: fix pod rm race
  * podman ps: fix racy pod name query
  * system connection remove: use Args function to validate
  * pkg/machine/compression: skip decompress bar for empty file
  * nc -p considered harmful
  * podman system df: fix fix ErrNoSuchCtr/Volume race
  * podman auto-update: fix ErrNoSuchCtr race
  * Fix name for builder in farm connection
  * 700-play.bats: use unique pod/container/image/volume names
  * safename: consistent within same test, and, dashes
  * 700-kube.bats: refactor $PODMAN_TMPDIR/test.yaml
  * 700-play.bats: eliminate $testYaml
  * 700-play.bats: refactor clumsy yamlfile creation
  * 700-play.bats: move _write_test_yaml up near top
  * chore(deps): update dependency setuptools to v71
  * Expand drop-in search paths * top-level (pod.d) * truncated (unit-.container.d)
  * Remove references and checks for --gpus
  * Do not crash on invalid filters
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.2.0
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc1
  * Keep the volume-driver flag deprecated
  * Vendor in latest containers(common, storage,image, buildah)
  * System tests: safe container/image/volume/etc names
  * Implement disable default mounts via command line
  * test: drop unmount for overlay
  * test: gracefully terminate server
  * libpod: shutdown Stop waits for handlers completion
  * libpod: cleanup store at shutdown
  * Add NetworkAlias= support to quadlet
  * cmd: call shutdown handler stop function
  * fix race conditions in start/attach logic
  * swagger: exlude new docker network types
  * vendor: bump c/storage
  * update to docker 27
  * contrib: use a distinct --pull-option= for each flag
  * Update warning message when using external compose provider
  * Update module github.com/cyphar/filepath-securejoin to v0.3.0
  * Ignore result of EvalSymlinks on ENOENT
  * test/upgrade: fix tests when netavark uses nftables
  * test/system: fix network reload test with nftables
  * test/e2e: rework some --expose tests
  * test: remove publish tests from e2e
  * CI: test nftables driver on fedora
  * CI: use local registry, part 3 of 3: for developers
  * CI: use local registry, part 2 of 3: fix tests
  * CI: use local registry, part 1 of 3: setup
  * CI: test composefs on rawhide
  * chore(deps): update module google.golang.org/grpc to v1.64.1 [security]
  * chore(deps): update dependency setuptools to ~=70.3.0
  * Improve container filenname ambiguity.
  * containers/attach: Note bug around goroutine leak
  * Drop minikube CI test
  * add libkrun test docs
  * fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0
  * cirrus: check for header files in source code check
  * pkg/machine/e2e: run debug command only for macos
  * create runtime's worker queue before queuing any job
  * test/system: fix pasta host.containers.internal test
  * Visual Studio BuildTools as a MinGW alternative
  * SetupRootless(): only reexec when needed
  * pkg/rootless: simplify reexec for container code
  * cirrus: add missing test/tools to danger files
  * fix(deps): update module golang.org/x/tools to v0.23.0
  * Windows Installer: switch to wix5
  * fix(deps): update module golang.org/x/net to v0.27.0
  * pkg/machine/e2e: print tests timings at the end
  * pkg/machine/e2e: run debug commands after init
  * pkg/machine/e2e: improve timeout handling
  * libpod: first delete container then cidfile
  * fix(deps): update module golang.org/x/term to v0.22.0
  * System test fixes
  * cirrus.yml: automatic skips based on source
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.0
  * podman events: fix error race
  * chore(deps): update dependency setuptools to ~=70.2.0
  * fix(deps): update module github.com/gorilla/schema to v1.4.1 [security]
  * Update CI VM images
  * pkg/machine/e2e: fix broken cleanup
  * pkg/machine/e2e: use tmp file for connections
  * test/system: fix podman --image-volume to allow tmpfs storage
  * CI: mount tmpfs for container storage
  * docs: --network remove missing leading sentence
  * specgen: parse devices even with privileged set
  * vendor: update c/storage
  * Remove the unused machine volume-driver
  * feat(quadlet): log option handling
  * Error when machine memory exceeds system memory
  * machine: Always use --log-file with gvproxy
  * CI: Build-Each-Commit test: run only on PRs
  * Small fixes for testing libkrun
  * Podman machine resets all providers
  * Clearly indicate names w/ URLencoded duplicates
  * [skip-ci] Packit: split rhel and centos-stream jobs
  * apple virtiofs: fix racy mount setup
  * cirrus: fix broken macos artifacts URL
  * libpod/container_top_linux.c: fix missing header
  * refactor(build): improve err when file specified by -f does not exist
  * Minor: Remove unhelpful comment
  * Update module github.com/openshift/imagebuilder to v1.2.11
  * Minor: Rename the OSX Cross task
  * [skip-ci] Remove conditionals from changelog
  * podman top: join the container userns
  * Run linting in parallel with building
  * Fix missing Makefile target dependency
  * build API: accept platform comma separated
  * [skip-ci] RPM: create podman-machine subpackage
  * ExitWithError() - more upgrades from Exit()
  * test/e2e: remove podman system service tests
  * cirrus: reduce int tests timeout
  * cirrus: remove redundant skip logic
  * pkg/machine/apple: machine stop timeout
  * CI: logformatter: link to correct PR base
  * Update module github.com/crc-org/crc/v2 to v2.38.0
  * ExitWithError(): continued
  * test/system: Add test steps for journald log check in quadlet
  * restore: fix missing network setup
  * podman run use pod userns even with --pod-id-file
  * macos-installer: bundle krunkit
  * remote API: fix pod top error reporting
  * libpod API: return proper error status code for pod start
  * fix #22233
  * added check for `registry.IsRemote()`. and correct error message.
  * fix #20686
  * pkg/machine/e2e: Remove unnecessary copy of machine image.
  * libpod: intermediate mount if UID not mapped into the userns
  * libpod: avoid chowning the rundir to root in the userns
  * libpod: do not chmod bind mounts
  * libpod: unlock the thread if possible
  * CI Cleanup: Remove cgroups v1 support
  * ExitWithError() - more upgrades from Exit()
  * remote: fix incorrect CONTAINER_CONNECTION parsing
  * container: pass KillSignal and StopTimeout to the systemd scope
  * libpod: fix comment
  * e2e: test container restore in pod by name
  * docs: Adds all PushImage supported paramters to openapi docs.
  * systests: kube: bump up a timeout
  * cirrus.yml: add CI:ALL mode to force all tests
  * cirrus.yml: implement skips based on source changes
  * CI VMs: bump
  * restore: fix container restore into pod
  * sqlite_state: Fix RewriteVolumeConfig
  * chore(deps): update dependency setuptools to ~=70.1.0
  * Quadlet - use specifier for unescaped values for templated container name
  * cirrus: check for system test leaks in nightly
  * test/system: check for leaks in teardown suite
  * test/system: speed up basic_{setup,teardown}()
  * test/system: fix up many tests that do not cleanup
  * test/system: fix podman --authfile=nonexistent-path
  * Update module github.com/containernetworking/plugins to v1.5.1
  * Update module github.com/checkpoint-restore/checkpointctl to v1.2.1
  * Update module github.com/spf13/cobra to v1.8.1
  * Update module github.com/gorilla/schema to v1.4.0
  * pkg/machine/wsl: force terminate wsl instance
  * pkg/machine/wsl: wrap command errors
  * [CI:DOCS] Quadlet - add note about relative path resolution
  * CI: do not install python packages at runtime
  * Release workflow: Include candidate descriptor
  * Minor: Fix indentation in GHA release workflow
  * GHA: Send release notification mail
  * GHA: Validate release version number
  * Remove references to --pull=true and --pull=false
  * ExitWithError, continued
  * podman: add new hidden flag --pull-option
  * [CI:DOCS] Fix typos in podman-build
  * infra: mark storageSet when imagestore is changed
  * [CI:DOCS] Add jnovy as reviewer and approver
  * fix(deps): update module google.golang.org/protobuf to v1.34.2
  * refactor(machine,wsl): improve operations of Windows API
  * --squash --layers=false should be allowed
  * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0
  * update golangci-lint to v1.59.1
  * Rename master to main in CONTRIBUTING.md
  * podman 5, pasta and inter-container networking
  * libpod: do not resuse networking on start
  * machine/linux: Switch to virtiofs by default
  * machine/linux: Support virtiofs mounts (retain 9p default)
  * machine/linux: Use memory-backend-memfd by default
  * ExitWithError() - continued
  * Enable libkrun provider to open a debug console
  * Add new targets on Windows makefile (winmake.ps1)
  * fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1
  * fix(deps): update module golang.org/x/tools to v0.22.0
  * fix(deps): update module golang.org/x/net to v0.26.0
  * libpod: fix 'podman kube generate' on FreeBSD
  * fix(deps): update module golang.org/x/sys to v0.21.0
  * libpod: do not leak systemd hc startup unit timer
  * vendor latest c/common
  * pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly
  * run bats -T, to profile timing hogs
  * test/system: speed up podman ps --external
  * test/system: speed up podman network connect/disconnect
  * test/system: speed up podman network reload
  * test/system: speed up quadlet - pod simple
  * test/system: speed up podman parallel build should not race
  * test/system: speed up podman cp dir from host to container
  * test/system: speed up podman build - workdir, cmd, env, label
  * test/system: speed up podman --log-level recognizes log levels
  * test/system: remove obsolete debug in net connect/disconnect test
  * test/system: speed up quadlet - basic
  * test/system: speed up user namespace preserved root ownership
  * System tests: add `podman system check` tests
  * Add `podman system check` for checking storage consistency
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0
  * fix(libpod): add newline character to the end of container's hostname file
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
  * fix(deps): update github.com/containers/image/v5 digest to aa93504
  * Fix 5.1 release note re: runlabel
  * test/e2e: use local skopeo not image
  * fix(deps): update golang.org/x/exp digest to fd00a4e
  * [CI:DOCS] Add contrib/podmanimage/stable path back in repo
  * chore(deps): update dependency requests to ~=2.32.3
  * fix(deps): update github.com/containers/image/v5 digest to 2343e81
  * libpod: do not move podman with --cgroups=disabled
  * Update release notes on Main to v5.1.0
  * test: look at the file base name
  * tests: simplify expected output
  * Sigh, new VMs again
  * Fail earlier when no containers exist in stats
  * Add Hyper-V option in windows installer
  * libpod: cleanup default cache on system reset
  * vendor: update c/image
  * test/system: speed up kube generate tmpfs on /tmp
  * test/system: speed up podman kube play tests
  * test/system: speed up podman shell completion test
  * test/system: simplify test signal handling in containers
  * test/system: speed up podman container rm ...
  * test/system: speed up podman ps - basic tests
  * test/system: speed up read-only from containers.conf
  * test/system: speed up podman logs - multi ...
  * test/system: speed up podman run --name
  * Debian: switch to crun
  * test/system: speed up podman generate systemd - envar
  * test/system: speed up podman-kube@.service template
  * test/system: speed up kube play healthcheck initialDelaySeconds
  * test/system: speed up exit-code propagation test
  * test/system: speed up "podman run --timeout"
  * test/system: fix slow kube play --wait with siginterrupt
  * undo auto-formatting
  * test/system: speed up podman events tests
  * Quadlet: Add support for .build files
  * test/system: speed up "podman auto-update using systemd"
  * test/system: remove podman wait test
  * tests: disable tests affected by a race condition
  * update golangci-lint to v1.59.0
  * kubernetes_support.md: Mark volumeMounts.subPath as supported
  * working name of pod on start and stop
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
  * Bump Buildah to v1.36.0
  * fix(deps): update module github.com/burntsushi/toml to v1.4.0
  * fix typo in Tutorials.rst
  * Mac PM test: Require pre-installed rosetta
  * test/e2e: fix new error message
  * Add configuration for podmansh
  * Update containers/common to latest main
  * Only stop chowning volumes once they're not empty
  * podman: fix --sdnotify=healthy with --rm
  * libpod: wait another interval for healthcheck
  * quadlet: Add a network requirement on .image units
  * test, pasta: Ignore deprecated addresses in tests
  * [CI:DOCS] performance: update network docs
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
  * CI: disable minikube task
  * [CI:DOCS] Fix windows action trigger
  * chore(deps): update dependency setuptools to v70
  * Check AppleHypervisor before accessing it
  * fix(deps): update module github.com/containernetworking/plugins to v1.5.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2
  * add podman-clean-transient.service service to rootless
  * [CI:DOCS] Update podman network docs
  * fix incorrect host.containers.internal entry for rootless bridge mode
  * vendor latest c/common main
  * Add Rosetta support for Apple Silicon mac
  * bump main to 5.2.0-dev
  * Use a defined constant instead of a hard-coded magic value
  * cirrus: use faster VM's for integration tests
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c
  * [CI:DOCS] Fix Mac pkg link
  * test: remove test_podman* scripts
  * test/system: fix documentation
  * Return StatusNotFound when multiple volumes matching occurs
  * container_api: do not wait for healtchecks if stopped
  * libpod: wait for healthy on main thread
  * `podman events`: check for an error after we finish reading events
  * remote API: restore v4 payload in container inspect
  * Fix updating connection when SSH port conflict happens
  * rootless: fix reexec to use /proc/self/exe
  * ExitWithError() - enforce required exit status &amp; stderr
  * ExitWithError() - a few that I missed
  * [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds
  * Revert "Temporarily disable rootless debian e2e testing"
  * CI tests: enforce TMPDIR on tmpfs
  * use new CI images with tmpfs /tmp
  * run e2e test on tmpfs
  * Update module github.com/crc-org/crc/v2 to v2.36.0
  * Address CVE-2024-3727
  * [CI:DOCS] Use checkout@v4 in GH Actions
  * ExitWithError() - rmi_test
  * ExitWithError() - more r files
  * ExitWithError() - s files
  * ExitWithError() - more run_xxx tests
  * Fix podman-remote support for `podman farm build`
  * [CI:DOCS] Trigger windows installer action properly
  * Revert "container stop: kill conmon"
  * Ensure that containers do not get stuck in stopping
  * [CI:DOCS] Improvements to make validatepr
  * ExitWithError() - rest of the p files
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1
  * Graceful shutdown during podman kube down
  * Remove duplicate  call
  * test/system: fix broken "podman volume globs" test
  * Quadlet/Container: Add GroupAdd option
  * Don't panic if a runtime was configured without paths
  * update c/{buildah,common,image,storage} to latest main
  * update golangci-lint to 1.58
  * machine: Add LibKrun provider detection
  * ExitWithError() - continue tightening
  * fix(deps): update module google.golang.org/protobuf to v1.34.1
  * test: improve test for powercap presence
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3
  * fix(deps): update module go.etcd.io/bbolt to v1.3.10
  * fix(deps): update module golang.org/x/tools to v0.21.0
  * [skip-ci] RPM: `bats` required only on Fedora
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842
  * gpdate and remove parameter settings in `.golangci.yml`
  * ExitWithError() - play_kube_test.go
  * Temporarily disable rootless debian e2e testing
  * fix(deps): update module golang.org/x/crypto to v0.23.0
  * CI Docs: Clarify passthrough_envars() comments
  * Skip machine tests if they don't need to be run
  * Update CI VMs to F40, F39, D13
  * ExitWithError() - v files
  * Update module golang.org/x/term to v0.20.0
  * machine: Add provider detection API
  * util: specify a not empty pause dir for root too
  * Add missing option 'healthy' to output of `podman run --help`
  * [CI:DOCS] Add info on the quay.io images to the README.md
  * Add a random suffix to healthcheck unit names
  * test/e2e: remove toolbox image
  * Also substitute $HOME in runlabel with user's homedir
  * Update module github.com/cyphar/filepath-securejoin to v0.2.5
  * Change tmpDir for macOS
  * ExitWithError() - pod_xxx tests
  * ExitWithError() -- run_test.go
  * Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
  * Update module github.com/shirou/gopsutil/v3 to v3.24.4
  * Update module github.com/docker/docker to v26.1.1+incompatible
  * GHA: Attempt fix exceeded a secondary rate limit
  * vendor ginkgo 2.17.2 into test/tools
  * Fix machine volumes with long path and paths with dashes
  * Update module google.golang.org/protobuf to v1.34.0
  * Update module github.com/crc-org/crc/v2 to v2.35.0
  * Update module github.com/onsi/gomega to v1.33.1
  * test/e2e: podman unshare image mount fix tmpdir leak
  * test/e2e: do not leak /tmp/private_file
  * test/e2e: "persistentVolumeClaim with source" do not leak file
  * e2e tests: use /var/tmp, not $TMPDIR, as workdirs
  * Update dependency pytest to v8.1.2
  * Remove unncessary lines at the end of specfile summary
  * Clean machine pull cache
  * Add krun support to podman machine
  * Use custom image for make validatepr
  * test/e2e: force systemd cgroup manager
  * e2e and bindings tests: fix $PATH setup
  * Makefile: remove useless HACK variable in e2e test
  * test/e2e: fix volumes and suid/dev/exec options
  * test/e2e: volumes and suid/dev/exec options works remote
  * test/e2e: fix limits test
  * Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0
  * Correct option name `ip` -&gt; `ip6`
  * Add the ability to automount images as volumes via play
  * Add support for image volume subpaths
  * Bump Buildah to latest main
  * Update Makefile to Go 1.22 for in-container
  * ExitWithError() - yet more low-hanging fruit
  * ExitWithError() - more low-hanging fruit
  * ExitWithError() - low-hanging fruit
  * chore: fix function names in comment
  * Remove redundant Prerequisite before build section
  * Remove PKG_CONFIG_PATH
  * Add installation instructions for openSUSE
  * Replace golang.org/x/exp/slices with slices from std
  * Update to go 1.21
  * fix(deps): update module github.com/docker/docker to v26.1.0+incompatible
  * [CI:DOCS] Fix artifact action
  * [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals
  * e2e tests: stop littering
  * [CI:DOCS] format podman-pull example as code
  * [CI:DOCS] Build &amp; upload release artifacts with GitHub Actions
  * libpod: getHealthCheckLog() remove unessesary check
  * add containers.conf healthcheck_events support
  * vendor latest c/common
  * libpod: make healthcheck events more efficient
  * libpod: wrap store setup error message
  * [skip-ci] Packit: enable CentOS 10 Stream build jobs
  * pkg/systemd: use fileutils.(Le|E)xists
  * pkg/bindings: use fileutils.(Le|E)xists
  * pkg/util: use fileutils.(Le|E)xists
  * pkg/trust: use fileutils.(Le|E)xists
  * pkg/specgen: use fileutils.(Le|E)xists
  * pkg/rootless: use fileutils.(Le|E)xists
  * pkg/machine: use fileutils.(Le|E)xists
  * pkg/domain: use fileutils.(Le|E)xists
  * pkg/api: use fileutils.(Le|E)xists
  * libpod: use fileutils.(Le|E)xists
  * cmd: use fileutils.(Le|E)xists
  * vendor: update containers/{buildah,common,image,storage}
  * fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security]
  * fix podman-pod-restart.1.md typo
  * [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next
  * fix(deps): update module github.com/onsi/gomega to v1.33.0
  * Add more annnotation information to podman kupe play man page
  * test/compose: remove compose v1 code
  * CI: remove compose v1 tests
  * fix: close resource file
  * [CI:DOCS] Fix windows installer action
  * fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2
  * add `list` as an alias to list networks
  * Add support for updating restart policy
  * Add Compat API for Update
  * Make `podman update` changes persistent
  * Emergency fix (well, skip) for failing bud tests
  * fix swagger doc for manifest create
  * [CI:DOCS] options/network: fix markdown lists
  * Makefile: do not hardcode `GOOS` in `podman-remote-static` target
  * chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  * chore(deps): update dependency setuptools to ~=69.5.0
  * Fix some comments
  * swagger fix infinitive recursion on some types
  * install swagger from source
  * Revert "Swap out javascript engine"
  * podman exec CID without command should exit 125
  * (minor) prefetch systemd image before use
  * Update go-swagger version
  * Swap out javascript engine
  * fix(deps): update module github.com/docker/docker to v26.0.1+incompatible
  * Add os, arch, and ismanifest to libpod image list
  * [CI:DOCS]Initial PR validation
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71
  * vendor ginkgo 2.17.1 into test/tools
  * fix "concurrent map writes" in network ls compat endpoint
  * chore(deps): update dependency pytest to v8
  * e2e: redefine ExitWithError() to require exit code
  * docs: fix missleading run/create --expose description
  * podman ps: show exposed ports under PORTS as well
  * rootless: drop function ReadMappingsProc
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3
  * New CI VMs, to give us pasta 2024-04-05
  * Add big warning to GHA workflow
  * GHA: Fix intermittent workflow error
  * fix(deps): update module golang.org/x/tools to v0.20.0
  * e2e tests: remove requirement for fuse-overlayfs
  * docs: update Quadlet volume Options desc
  * fix(deps): update module golang.org/x/sync to v0.7.0
  * Fix relabeling failures with Z/z volumes on Mac
  * fix(deps): update module golang.org/x/net to v0.24.0
  * Makefile: fix annoying errors in docs generation
  * chore: fix function names in comment
  * Bump tags.cncf.io/container-device-interface to v0.7.1
  * fix(deps): update module golang.org/x/crypto to v0.22.0
  * Detect unhandled reboots and require user intervention
  * podman --runroot: remove 50 char length restriction
  * update github.com/rootless-containers/rootlesskit to v2
  * Update module github.com/gorilla/schema to v1.3.0
  * Update dependency requests-mock to ~=1.12.1
  * Update module github.com/crc-org/crc/v2 to v2.34.1
  * rm --force work for more than one arg
  * [CI:DOCS] Update kube docs
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3
  * [CI:DOCS] Add GitHub action to update version on Podman.io
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2
  * Windows: clean up temporary perl install
  * pkg/util: FindDeviceNodes() ignore ENOENT errors
  * [CI:DOCS] build deps: make-validate needs docs
  * test/system: add rootless-netns test for setup errors
  * vendor latest c/common main
  * container: do not chown to dest target with U
  * [CI:DOCS] golangci-lint: update deprecated flags
  * systests: conditionalize slirp4netns tests
  * CI: systests: instrument flaky tests
  * s3fs docs
  * test: do not skip tests under rootless
  * Add note about host networking to Kube PublishPort option
  * Inject additional build tags from the environment
  * libpod: use original IDs if idmap is provided
  * Switch back to checking out the same branch the action script runs in
  * docs/podman-login: Give an example of writing the persistent path
  * CI: Bump VMs to 2024-03-28
  * [skip-ci] Update dawidd6/action-send-mail action to v3.12.0
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.7
  * Fix reference to deprecated types.Info
  * Use logformatter for podman_machine_windows_task
  * applehv: Print vfkit logs in --log-level debug
  * [CI:DOCS]Add Mario to reviewers list
  * [CI:DOCS] Document CI-maintenance job addition
  * Add golang 1.21 update warning
  * Add rootless network command to `podman info`
  * libpod: don't warn about cgroupsv1 on FreeBSD
  * hyperv: error if not admin
  * Properly parse stderr when updating container status
  * [skip-ci] Packit: specify fedora-latest in propose-downstream
  * Use built-in ssh impl for all non-pty operations
  * Add support for annotations
  * hyperv: fix machine rm -r
  * [skip-ci] Packit: Enable CentOS Stream 10 update job
  * 5.0 release note fix typo in cgroupv1 env var
  * fix remote build isolation on client side
  * chore: remove repetitive words
  * Dont save remote context in temp file but stream and extract
  * fix remote build isolation when server runs as root
  * util: use private propagation with bind
  * util: add some tests for ProcessOptions
  * util: refactor ProcessOptions into an internal function
  * util: rename files to snake case
  * Add LoongArch support for libpod
  * fix(deps): update github.com/containers/common digest to bc5f97c
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1
  * fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security]
  * fix(deps): update module github.com/onsi/gomega to v1.32.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0
  * Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4
  * Fix type-o
  * Use correct extension in suite
  * minikube: instrument tests, to allow debugging failures
  * libpod: restart always reconfigure the netns
  * use new c/common pasta2 setup logic to fix dns
  * utils: drop conversion float-&gt;string-&gt;float
  * utils: do not generate duplicate range
  * logformatter: handle Windows logs
  * utils: add test for the new function
  * utils: move rootless code to a new function
  * CVE-2024-1753 fix for main
  * xref-helpmsgs-manpages: cross-check Commands.rst
  * test/system: Add support for multipath routes in pasta networking tests
  * [skip-ci] rpm: use macro supported vendoring
  * Adjust to the standard location of gvforwarder used in new images
  * Makefile: add target `podman-remote-static`
  * Switch to 5.x WSL machine os stream using new automation
  * Cleanup build scratch dir if remote end disconnects while passing the context
  * bump main to 5.1.0-dev
  * Use faster gzip for compression for 3x speedup for sending large contexts to remote
  * pkg/machine: make checkExclusiveActiveVM race free
  * pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
  * pkg/machine: CheckExclusiveActiveVM should also check for starting
  * pkg/machine: refresh config after we hold lock
  * Update dependency setuptools to ~=69.2.0
  * [skip-ci] rpm: update containers-common dep on f40+
  * fix invalid HTTP header values when hijacking a connection
  * Add doc to build podman on windows without MSYS
  * Removing CRI-O related annotations
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * Pass the restart policy to the individual containers
  * kube play: always pull when both imagePullPolicy and tag are missing</changelog>
  <changelog author="danish.prakash@suse.com" date="1741003200">- Add patch for CVE-2025-27144 (bsc#1237641):
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
- Rebase patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1742299200">- Add patch for CVE-2025-22869 (bsc#1239330):
  * 0003-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Rebase patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch</changelog>
  <changelog author="dcermak@suse.com" date="1743076800">- Depend on runc unconditionally, not only on SLE 15 (bsc#1239088)</changelog>
  <changelog author="danish.prakash@suse.com" date="1747051200">- Add patch for bsc#1242132:
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Removed patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
  * 0003-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Drop iptables support in favor of nftables (required by netavark)
- Fix conditional Requires (remove deprecated sle_version macro)
- Update to version 5.4.2:
  * Bump to v5.4.2
  * Add release notes for v5.4.2
  * Fix a potential deadlock during `podman cp`
  * Improve the file format documentation of podman-import.
  * Revert "podman-import only supports gz and tar"
  * Bump buildah to v1.39.4
  * libpod: do not cover idmapped mountpoint
  * test: Fix runc error message
  * oci: report empty exec path as ENOENT
  * test: adapt tests new crun error messages
  * test: remove duplicate test
  * cirrus: test only on f41/rawhide
  * CI: use z1d instance for windows machine testing
  * New images 2025-03-24
  * test/e2e: use go net.Dial() ov nc
  * test: use ncat over nc
  * New images 2025-03-12
  * RPM: Add riscv64 to ExclusiveArch-es
  * Fix HealthCheck log destination, count, and size defaults
  * Win installer test: hardcode latest GH release ID
  * Packit: Fix action script for fetching upstream commit
  * Bump to v5.4.2-dev
  * Bump to v5.4.1
  * update gvproxy version to 0.8.4
  * Update Buildah to v1.39.2
  * Update release notes for v5.4.1
  * Fix reporting summed image size for compat endpoint
  * podman-import only supports gz and tar
  * quadlet kube: correctly mark unit as failed
  * pkg/domain/infra/abi/play.go: fix two nilness issues
  * kube play: don't print start errors twice
  * libpod: race in WaitForConditionWithInterval()
  * libpod: race in WaitForExit() with autoremove
  * Don't try to resolve host path if copying to container from stdin.
  * Use svg for pkginstaller banner
  * Create quota before _data dir for volumes
  * Packit: clarify secondary status in CI
  * Packit/RPM: Display upstream commit SHA in all rpm builds
  * podman run: fix --pids-limit -1 wrt runc
  * vendor: update github.com/go-jose/go-jose/v3 to v3.0.4
  * chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
  * wire up --retry-delay for artifact pull
  * Revert "silence false positve from golangci-lint"
  * update golangci-lint to v1.64.4
  * update golangci-lint to v1.64.2
  * silence false positve from golangci-lint
  * cmd/podman: refactor Context handling
  * fix new usetesting lint issue
  * Packit/Copr: Fix `podman version` in rpm
  * Remove persist directory when cleaning up Conmon files
  * Bump to v5.4.1-dev
  * Bump to v5.4.0
  * Update release notes for v5.4.0 final
  * In SQLite state, use defaults for empty-string checks
  * Bump FreeBSD version to 13.4
  * docs: add v5.4 to API reference
  * Update rpm/podman.spec
  * RPM: set buildOrigin in LDFLAG
  * RPM: cleanup macro defs
  * Makefile: escape BUILD_ORIGIN properly
  * rootless: fix hang on s390x
  * Set Cirrus DEST_BRANCH appropriately to fix CI
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc3
  * Update release notes for v5.4.0-rc3
  * Add BuildOrigin field to podman info
  * artifact: only allow single manifest
  * test/e2e: improve write/removeConf()
  * Add --noheading to artifact ls
  * Add --no-trunc to artifact ls
  * Add type and annotations to artifact add
  * pkg/api: honor cdi devices from the hostconfig
  * util: replace Walk with WalkDir
  * fix(pkg/rootless): avoid memleak during init() contructor.
  * Add `machine init --playbook`
  * RPM: include empty check to silence rpmlint
  * RPM: adjust qemu dependencies
  * Force use of iptables on Windows WSL
  * rpm: add attr as dependency for podman-tests
  * update gvproxy version
  * [v5.4] Bump Buildah to v1.39.0
  * podman exec: correctly support detaching
  * libpod: remove unused ExecStartAndAttach()
  * [v5.4] Bump c/storage to v1.57.1, c/image v5.34.0, c/common v0.62.0
  * Move detection of libkrun and intel
  * Prevent two podman machines running on darwin
  * Remove unnecessary error handling
  * Remove usused Kind() function
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc2
  * Update release notes for v5.4.0-rc2
  * Safer use of `filepath.EvalSymlinks()` on Windows
  * error with libkrun on intel-based machines
  * chore(deps): update dependency pytest to v8.3.4
  * test/buildah-bud: skip two new problematic tests on remote
  * Fix podman-restart.service when there are no containers
  * Avoid upgrading from v5.3.1 on Windows
  * Clean up after unexpectedly terminated build
  * system-tests: switch ls with getfattr for selinux tests
  * vendor latest c/{buildah,common,image,storage}
  * Makefile: Add validatepr description for 'make help' output
  * docs: Enhance podman build --secret documentation and add examples
  * docs: mount.md - idmapped mounts only work for root user
  * Define, and use, PodmanExitCleanlyWithOptions
  * Eliminate PodmanSystemdScope
  * Fix image ID query
  * Revert "Use the config digest to compare images loaded/pulled using different methods"
  * Update c/image after https://github.com/containers/image/pull/2613
  * Update expected errors when pulling encrypted images
  * Eliminate PodmanExtraFiles
  * Introduce PodmanTestIntegration.PodmanWithOptions
  * Restructure use of options
  * Inline PodmanBase into callers
  * Pass all of PodmanExecOptions to various [mM]akeOptions functions
  * Turn PodmanAsUserBase into PodmanExecBaseWithOptions
  * Avoid indirect links through quadlet(5)
  * do not set the CreateCommand for API users
  * Add podman manifest rm --ignore
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc1
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.2
  * podman artifact
  * vendor latest c/{common,image,storage}
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.2
  * cirrus: bump macos machine test timeout
  * pkg/machine/e2e: improve podman.exe match
  * pkg/machine/e2e: improve "list machine from all providers"
  * Remove JSON tag from UseImageHosts in ContainerConfig
  * Set network ID if available during container inspect
  * Stop creating a patch for v5.3.1 upgrades on windows
  * compose docs: fix typo
  * Document kube-play CDI support
  * docs: Add quadlet debug method systemd-analyze
  * Replace instances of PodmanExitCleanly in play_kube_test.go
  * docs: add 'initialized' state to status filters
  * fix(deps): update module google.golang.org/protobuf to v1.36.3
  * Switch all calls of assert.Nil to assert.NoError
  * Add --no-hostname option
  * Fix unescaping octal escape sequence in values of Quadlet unit files
  * Remove `.exe` suffix if any
  * Add kube play support for CDI resource allocation
  * add support to `;` for comments in unit files as per systemd documentation
  * Use PodmanExitCleanly in attach_test.go
  * Introduce PodmanTestIntegration.PodmanExitCleanly
  * chore(deps): update dependency setuptools to ~=75.8.0
  * Add newer c/i to support artifacts
  * fix(deps): update module golang.org/x/tools to v0.29.0
  * fix(deps): update module golang.org/x/net to v0.34.0
  * specgenutil: Fix parsing of mount option ptmxmode
  * namespaces: allow configuring keep-id userns size
  * Update description for completion
  * Quadlet - make sure the /etc/containers/systemd/users is traversed in rootless
  * Document .build for Image .container option
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.9.1
  * New VM Images
  * update golangci/golangci-lint to v1.63.4
  * fix(deps): update module google.golang.org/protobuf to v1.36.2
  * chore(deps): update dependency setuptools to ~=75.7.0
  * Fixing ~/.ssh/identity handling
  * vendor latest c/common from main
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.12
  * fix(deps): update module github.com/opencontainers/runc to v1.2.4
  * specgen: fix comment
  * Add hint to restart Podman machine to really accept new certificates
  * fix(deps): update module github.com/onsi/gomega to v1.36.2
  * fix(deps): update module github.com/moby/term to v0.5.2
  * Pass container hostname to netavark
  * Fix slirp4netns typo in podman-network.1.md
  * Add support to ShmSize in Pods with Quadlet
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.1
  * chore(deps): update module golang.org/x/crypto to v0.31.0 [security]
  * fix(deps): update module golang.org/x/net to v0.33.0 [security]
  * Kube volumes can not container _
  * fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
  * test/system: fix "podman play --build private registry" error
  * test/system: CopyDirectory() do not chown files
  * test/system: remove system dial-stdio test
  * shell completion: respect CONTAINERS_REGISTRIES_CONF
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.6
  * When generating host volumes for k8s, force to lowercase
  * test: enable newly added test
  * vfkit: Use 0.6.0 binary
  * gvproxy: Use 0.8.1 binary
  * systemd: simplify parser and fix infinite loop
  * Revert "win-installer test: revert to v5.3.0"
  * Avoid rebooting twice when installing WSL
  * Avoid rebooting on Windows when upgrading and WSL isn't installed
  * Add win installer patch
  * Bump WiX toolset version to 5.0.2
  * test/e2e: SkipOnOSVersion() add reason field
  * test/e2e: remove outdated SkipOnOSVersion() calls
  * Update VM images
  * fix(deps): update module golang.org/x/crypto to v0.31.0 [security]
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.45.0
  * fix(deps): update module github.com/opencontainers/runc to v1.2.3
  * quadlet: fix inter-dependency of containers in `Network=`
  * Add man pages to Mac installer
  * fix(deps): update module github.com/onsi/gomega to v1.36.1
  * fix(deps): update module github.com/docker/docker to v27.4.0+incompatible
  * Fix device limitations in podman-remote update on remote systems
  * Use latest version of VS BuildTools
  * bin/docker: fix broken escaping and variable substitution
  * manifest annotate: connect IndexAnnotations
  * Fix panic in `manifest annotate --index`
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.5
  * fix(deps): update module golang.org/x/net to v0.32.0
  * fix(deps): update module golang.org/x/tools to v0.28.0
  * fix(deps): update module golang.org/x/crypto to v0.30.0
  * fix(deps): update module golang.org/x/sys to v0.28.0
  * Fix overwriting of LinuxResources structure in the database
  * api: replace inspectID with name
  * fix(deps): update github.com/opencontainers/runtime-tools digest to f7e3563
  * Replace ExclusiveArch with ifarch
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.1
  * Improve platform specific URL handling in `podman compose` for machines
  * Fix `podman info` with multiple imagestores
  * Switch to fixed common
  * refact: use uptime.minutes instead of uptime.seconds
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.11
  * fix(deps): update golang.org/x/exp digest to 2d47ceb
  * fix(deps): update github.com/godbus/dbus/v5 digest to c266b19
  * Cover Unix socket in inpect test on Windows platform
  * Add a test for forcing compression and v2s2 format
  * fix(deps): update module github.com/crc-org/vfkit to v0.6.0
  * Package podman-machine on supported architectures only.
  * Fixes missing binary in systemd.
  * stats: ignore errors from containers without cgroups
  * api: Error checking before NULL dereference
  * [skip-ci] Packit/copr: switch to fedora-all
  * make remotesystem: fail early if serial tests fail
  * spec: clamp rlimits without CAP_SYS_RESOURCE
  * Clarify the reason for skip_if_remote
  * Sanity-check that the test is really using partial pulls
  * Fix apparent typos in zstd:chunked tests
  * Fix compilation issues in QEMU machine files (Windows platform)
  * Mount volumes before copying into a container
  * Revert "libpod: remove shutdown.Unregister()"
  * docs: improve documentation for internal networks
  * docs: document bridge mode option
  * [skip-ci] Packit: remove epel and re-enable c9s
  * chore(deps): update dependency golangci/golangci-lint to v1.62.2
  * vendor: update containers/common
  * OWNERS: remove edsantiago
  * fix(deps): update module github.com/onsi/gomega to v1.36.0
  * fix(deps): update github.com/containers/common digest to ceceb40
  * refact: EventerType and improve consistency
  * Add --hosts-file flag to container and pod commands
  * Add nohosts option to /build and /libpod/build
  * fix(deps): update module github.com/stretchr/testify to v1.10.0
  * Quadlet - Use = sign when setting the pull arg for build
  * win-installer test: revert to v5.3.0
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.44.0
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.0
  * chore(deps): update dependency setuptools to ~=75.6.0
  * Update windows installer tests
  * Windows: don't install WSL/HyperV on update
  * Switch to non-installing WSL by default
  * fix(deps): update github.com/containers/buildah digest to 52437ef
  * Configure HealthCheck with `podman update`
  * CI: --image-volume test: robustify
  * docs: add 5.3 as Reference version
  * Bump CI VMs
  * libpod: pass down NoPivotRoot to Buildah
  * vendor: bump containers/buildah
  * fix(deps): update module github.com/opencontainers/runc to v1.2.2
  * Overlay mounts supersede image volumes &amp; volumes-from
  * libpod: addHosts() prevent nil deref
  * only read ssh_config for non machine connections
  * ssh_config: allow IdentityFile file with tilde
  * ssh_config: do not overwrite values from config file
  * connection: ignore errors when parsing ssh_config
  * Bump bundled krunkit to 0.1.4
  * fix(deps): update module google.golang.org/protobuf to v1.35.2
  * add support for driver-specific options during container creation
  * doc: fix words repetitions
  * Update release notes on main for v5.3.0
  * chore(deps): update dependency setuptools to ~=75.5.0
  * CI: system tests: parallelize 010
  * fix podman machine init --ignition-path
  * vendor: update containers/common
  * spec: clamp rlimits in a userns
  * Add subpath support to volumes in `--mount` option
  * refactor: simplify LinuxNS type definition and String method
  * test/e2e: remove FIPS test
  * vendor containers projects to tagged versions
  * fix(deps): update module github.com/moby/sys/capability to v0.4.0
  * chore(deps): update dependency setuptools to ~=75.4.0
  * system tests: safer install_kube_template()
  * Buildah treadmill tweaks
  * update golangci-lint to v1.62.0
  * fix(deps): update module golang.org/x/net to v0.31.0
  * fix(deps): update module golang.org/x/tools to v0.27.0
  * Revert "Reapply "CI: test nftables driver on fedora""
  * Yet another bump, f41 with fixed kernel
  * test: add zstd:chunked system tests
  * pkg/machine/e2e: remove dead code
  * fix(deps): update module golang.org/x/crypto to v0.29.0
  * kube SIGINT system test: fix race in timeout handling
  * New `system connection add` tests
  * Update codespell to v2.3.0
  * Avoid printing PR text to stdout in system test
  * Exclude symlink from pre-commit end-of-file-fixer
  * api: Add error check
  * [CI:ALL] Bump main to v5.4.0-dev
  * test/buildah-bud: build new inet helper
  * test/system: add regression test for TZDIR local issue
  * vendor latest c/{buildah,common,image,storage}
  * Reapply "CI: test nftables driver on fedora"
  * Revert "cirrus: test only on f40/rawhide"
  * test f41 VMs
  * AdditionalSupport for SubPath volume mounts
  * wsl-e2e: Add a test to ensure port 2222 is free with usermode networking
  * winmake.ps1: Fix the syntax of the function call Win-SSHProxy
  * volume ls: fix race that caused it to fail
  * gvproxy: Disable port-forwarding on WSL
  * build: update gvisor-tap-vsock to 0.8.0
  * podman: update roadmap
  * Log network creation and removal events in Podman
  * libpod: journald do not lock thread
  * Add key to control if a container can get started by its pod
  * Honor users requests in quadlet files
  * CI: systests: workaround for parallel podman-stop flake
  * Fix inconsistent line ending in win-installer project
  * fix(deps): update module github.com/opencontainers/runc to v1.2.1
  * Quadlet - support image file based mount in container file
  * API: container logs flush status code
  * rework event code to improve API errors
  * events: remove memory eventer
  * libpod: log file use Wait() over event API
  * Makefile: vendor target should always remove toolchain
  * cirrus: check consitent vendoring in test/tools
  * test/tools/go.mod: remove toolchain
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10
  * fix(deps): update module github.com/onsi/gomega to v1.35.1
  * doc: explain --interactive in more detail
  * fix(deps): update golang.org/x/exp digest to f66d83c
  * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
  * fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c
  * add default polling interval to Container.Wait
  * Instrument cleanup tracer to log weird volume removal flake
  * make podman-clean-transient.service work as user
  * Add default remote socket path if empty
  * Use current user if no user specified
  * Add support for ssh_config for connection
  * libpod: use pasta Setup() over Setup2()
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0
  * fix(deps): update module github.com/onsi/gomega to v1.35.0
  * logformatter: add cleanup tracer log link
  * docs: fix broken example
  * docs: add missing swagger links for the stable branches
  * readthedocs: build extra formats
  * pkg/machine/e2e: remove debug
  * fix(docs): Integrate pasta in rootless tutorial
  * chore(deps): update dependency setuptools to ~=75.3.0
  * libpod: report cgroups deleted during Stat() call
  * chore: fix some function names in comment
  * CI: parallelize 450-interactive system tests
  * CI: parallelize 520-checkpoint tests
  * CI: make 070-build.bats use safe image names
  * test/system: add podman network reload test to distro gating
  * System tests: clean up unit file leaks
  * healthcheck: do not leak service on failed stop
  * healthcheck: do not leak statup service
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0
  * Add Startup HealthCheck configuration to the podman inspect
  * buildah version display: use progress()
  * new showrun() for displaying and running shell commands
  * Buildah treadmill: redo the .cirrus.yml tweaks
  * Buildah treadmill: more allow-empty options
  * Buildah treadmill: improve test-failure instructions
  * Buildah treadmill: improve wording in test-fail instructions
  * doc: Remove whitespace before comma
  * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0
  * ps: fix display of exposed ports
  * ps: do not loop over port protocol
  * readme: Add reference to pasta in the readme
  * test/system: Fix spurious "duplicate tests" failures in pasta tests
  * Improve "podman load - from URL"
  * Try to repair c/storage after removing an additional image store
  * Use the config digest to compare images loaded/pulled using different methods
  * Simplify the additional store test
  * Fix the store choice in "podman pull image with additional store"
  * Bump to v5.3.0-dev
  * Bump to v5.3.0-rc1
  * Set quota on volume root directory, not _data
  * fix(deps): update module github.com/opencontainers/runc to v1.2.0
  * test: set soft ulimit
  * Vagrantfile: Delete
  * Enable pod restore with crun
  * vendor: update c/{buildah,common,image,storage}
  * Fix 330-corrupt-images.bats in composefs test runs
  * quadlet: add default network dependencies to all units
  * quadlet: ensure user units wait for the network
  * add new podman-user-wait-network-online.service
  * contrib/systemd: switch user symlink for file symlinks
  * Makefile: remove some duplication from install.systemd
  * contrib/systemd: move podman-auto-update units
  * quadlet: do not reject RemapUsers=keep-id as root
  * test/e2e: test quadlet with and without --user
  * CI: e2e: fix checkpoint flake
  * APIv2 test fix: image history
  * pasta udp tests: new bytecheck helper
  * Document packaging process
  * [skip-ci] RPM: remove dup Provides
  * Update dependency setuptools to ~=75.2.0
  * System tests: safer pause-image creation
  * Update module github.com/opencontainers/selinux to v1.11.1
  * Added escaping to invoked powershell command for hyperv stubber.
  * use slices.Clone instead of assignment
  * libpod API: only return exit code without conditions
  * Housekeeping: remove duplicates from success_task
  * Thorough overhaul of CONTRIBUTING doc.
  * api: Replace close function in condition body
  * test/e2e: fix default signal exit code test
  * Test new VM build
  * CI: fix changing-rootFsSize flake
  * scp: add option types
  * Unlock mutex before returning from function
  * Note in the README that we are moving to timed releases
  * cirrus: let tar extract figure out the compression
  * Make error messages more descriptive
  * Mention containers.conf settings for podman machine commands
  * [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks"
  * cmd: use logrus to print error
  * podman: do not set rlimits to the default value
  * spec: always specify default rlimits
  * vendor: update containers/common
  * Note in the README that we are moving to timed releases
  * Revert "CI: test nftables driver on fedora"
  * cirrus: use zstd over bzip2 for repo archive
  * cirrus: use shared repo_prep/repo_artifacts scripts
  * cirrus: speed up postbuild
  * cirrus: change alt arch task to only compile binaries
  * cirrus: run make with parallel jobs where useful
  * Makefile: allow man-page-check to be run in parallel
  * cirrus: use fastvm for builds
  * test/e2e: skip some Containerized checkpoint tests
  * test: update timezone checks
  * cirrus: update CI images
  * test/e2e: try debug potential pasta issue
  * CI: quadlet system tests: use airgapped testimage
  * Allow removing implicit quadlet systemd dependencies
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
  * libpod API: make wait endpoint better against rm races
  * podman-remote run: improve how we get the exit code
  * [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
  * 055-rm test: clean up a test, and document
  * CI: remove skips for libkrun
  * Bump bundled krunkit to 0.1.3
  * fix(deps): update module google.golang.org/protobuf to v1.35.0
  * fix(deps): update module golang.org/x/net to v0.30.0
  * server: fix url parsing in info
  * fix(deps): update module golang.org/x/tools to v0.26.0
  * Makefile: fix ginkgo FOCUS option
  * fix(deps): update module golang.org/x/crypto to v0.28.0
  * podman-systemd.unit.5: adjust example options
  * docs: prefer --network to --net
  * fix(deps): update module golang.org/x/term to v0.25.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24
  * fix(deps): update module golang.org/x/sys to v0.26.0
  * OWNERS file audit and update
  * Exposed ports are only included when not --net=host
  * libpod: hasCurrentUserMapped checks for gid too
  * [CI:DOCS] Document TESTFLAGS in test README file
  * Validate the bind-propagation option to `--mount`
  * Fix typo in secret inspect examples
  * Mention `no_hosts` and `base_hosts_file` configs in CLI option docs
  * Fixes for vendoring Buildah
  * vendor: update buildah to latest
  * Makefile - silence skipped tests when focusing on a file
  * vendor: update to latest c/common
  * Quadlet - prefer "param val" over "param=val" to allow env expansion
  * System tests: sdnotify: wait for socket file creation
  * Switch to moby/sys/capability
  * platformInspectContainerHostConfig: rm dead code
  * CI: require and test CI_DESIRED_NETWORK on RHEL
  * Add ExposedPorts to Inspect's ContainerConfig
  * fix(deps): update golang.org/x/exp digest to 701f63a
  * quadlet: allow variables in PublishPort
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9
  * fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c
  * Document that zstd:chunked is downgraded to zstd when encrypting
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
  * chore(deps): update dependency ubuntu to v24
  * rpm: do not load iptables modules on f41+
  * adding docs for network-cmd-path
  * Include exposed ports in inspect output when net=host
  * feat(libpod): support kube play tar content-type (#24015)
  * podman mount: some better error wrapping
  * podman mount: ignore ErrLayerUnknown
  * Quadlet - make sure the order of the UnitsDir is deterministic
  * packit: disable Centos Stream/fedora ELN teasks
  * libpod: remove shutdown.Unregister()
  * libpod: rework shutdown handler flow
  * libpod: ensure we are not killed during netns creation
  * Update module github.com/moby/sys/capability to v0.3.0
  * Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options
  * Update documentation of `--add-host` CLI option
  * System tests: set a default XDG_RUNTIME_DIR
  * Modify machine "Remove machine" test
  * CORS system test: clean up
  * Add --health-max-log-count, --health-max-log-size, --health-log-destination flags
  * troubleshooting: adjust home path in tip 44
  * test/system: For pasta port forwarding tests don't bind socat server
  * Update connection on removal
  * Simplify `RemoveConnections`
  * Move `DefaultMachineName` to `pkg/machine/define`
  * vendor: update containers/image
  * vendor: update containers/storage
  * CI: skip the flaking quadlet test
  * CI: make systemd tests parallel-safe (*)
  * CI: run and collect cleanup tracer logs
  * add epbf program to trace podman cleanup errors
  * CI: parallelize logs test as much as possible
  * CI: format test: use local registry if available
  * CI: make 700-play parallel-safe
  * docs: Fix missing negation
  * bin/docker support warning message suppression from user config dir
  * Update module github.com/docker/docker to v27.3.1+incompatible
  * Quadlet - add full support for Symlinks
  * libpod: setupNetNS() correctly mount netns
  * vendor latest c/common
  * docs: remove usage of deprecated `--storage`
  * Update module github.com/docker/docker to v27.3.0+incompatible
  * CI: Quadlet rootfs test: use container image as rootfs
  * CI: system test registry: use --net=host
  * CI: rm system test: bump grace period
  * CI: system tests: minor documentation on parallel
  * fix typo in error message Fixes: containers/podman#24001
  * CI: system tests: always create pause image
  * CI: quadlet system test: be more forgiving
  * vendor latest c/common
  * CI: make 200-pod parallel-safe
  * allow exposed sctp ports
  * test/e2e: add netns leak check
  * test/system: netns leak check for rootless as well
  * test/system: Improve TODO comments on IPv6 pasta custom DNS forward test
  * test/system: Clarify "Local forwarder" pasta tests
  * test/system: Simplify testing for nameserver connectivity
  * test/system: Consolidate "External resolver" pasta tests
  * test/system: Move test for default forwarder into its own case
  * CI: make 090-events parallel-safe
  * Misc minor test fixes
  * Add network namespace leak check
  * Add workaround for buildah parallel bug
  * registry: lock start attempts
  * Update system test template and README
  * bats log: differentiate parallel tests from sequential
  * ci: bump system tests to fastvm
  * clean_setup: create pause image
  * CI: make 012-manifest parallel-safe
  * podman-manifest-remove: update docs and help output
  * test/system: remove wait workaround
  * wait: fix handling of multiple conditions with exited
  * Match output of Compat Top API to Docker
  * system test parallelization: enable two-pass approach
  * New VMs: test crun 1.17
  * libpod: hides env secrets from container inspect
  * CI: e2e: workaround for events out-of-sequence flake
  * update golangci-lint to 1.61.0
  * libpod: convert owner IDs only with :idmap
  * Podman CLI --add-host with multiple host for a single IP
  * Quadlet - Split getUnitDirs to small functions
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5
  * chore(deps): update dependency setuptools to ~=75.1.0
  * Fxi typo in cache-ttl.md
  * Get WSL disk as an OCI artifact
  * CI: make 260-sdnotify parallel-safe
  * quadlet: do not log ENOENT errors
  * pkg/specgen: allow pasta when running inside userns
  * troubleshooting: add tip about the user containers
  * chore(deps): update dependency setuptools to v75
  * Convert windows paths in volume arg of the build command
  * Improve error when starting multiple machines
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
  * Minor typo noticed when reading podman man page
  * Remove `RemoveFilesAndConnections`
  * Add `GetAllMachinesAndRootfulness`
  * rewrite typo osascript
  * typo
  * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
  * Add radio buttons to select WSL or Hyper-V in windows setup.exe
  * [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
  * [skip-ci] Packit: Enable sidetags for bodhi updates
  * vendor: update c/common
  * CI: make 710-kube parallel-safe
  * CI: mark 320-system-df *NOT* parallel safe
  * Add kube play support for image volume source
  * refactor: add sshClient function
  * fix(deps): update module golang.org/x/tools to v0.25.0
  * CI: make 505-pasta parallel safe
  * CI: make 020-tag parallel-safe
  * CI: make 410-selinux parallel-safe
  * Bump VMs. ShellCheck is now built-in
  * troubleshooting: add tip about auto, keep-id, nomap
  * libpod: make use of new pasta option from c/common
  * vendor latest c/common
  * podman images: sort repository with tags
  * Remove containers/common/pkg/config from pkg/util
  * fix(deps): update module golang.org/x/net to v0.29.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23
  * fix(deps): update module golang.org/x/crypto to v0.27.0
  * Fix CI
  * Detect and fix typos using codespell
  * Fix typo: replace buildin with built-in
  * Add codespell config, pre-commit definition, and move options from Makefile
  * prune: support clearing build cache using CleanCacheMount
  * test/e2e: fix network prune flake
  * Add support for Job to kube generate &amp; play
  * Add podman-rootless.7 man page
  * Add DNS, DNSOption and DNSSearch to quadlet pod
  * podman.1.md: improve policy.json section
  * e2e: flake fix: SIGPIPE in hook test
  * libpod: fix rootless cgroup path with --cgroup-parent
  * vendor: update c/storage
  * CI: make 055-rm parallel-safe
  * CI: make 130-kill parallel-safe
  * CI: make 125-import parallel-safe
  * CI: make 110-history parallel-safe
  * CI: system tests: parallelize low-hanging fruit
  * Add disclaimer to `podman machine info` manpage.
  * man pages: refactor two more options
  * update github.com/opencontainers/runc to v1.2.0-rc.3
  * update go.etcd.io/bbolt to v1.3.11
  * update github.com/onsi/{ginkgo,gomega}
  * Update module github.com/shirou/gopsutil to v4
  * packit: update fedora and epel targets
  * bump go to 1.22
  * cirrus: test only on f40/rawhide
  * cirrus: remove CI_DESIRED_NETWORK reference
  * cirrus: prebuild use f40 for extra tests
  * chore(deps): update dependency setuptools to ~=74.1.0
  * libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD
  * fix(deps): update golang.org/x/exp digest to 9b4947d
  * Implement publishing API UNIX socket on Windows platforms
  * Vendor c/common:8483ef6022b4
  * quadlet: support container network reusing
  * docs: update read the docs changes
  * CI: parallel-safe network system test
  * Quadlet - Support multiple image tags in .build files
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3
  * cirrus: remove _bail_if_test_can_be_skipped
  * cirrus: move renovate check into validate
  * cirrus: remove 3rd party connectivity check
  * cirrus: remove cross jobs for aarch64 and x86_64
  * cirrus: do not upload alt arch cross artifacts
  * cirrus: remove ginkgo-e2e.json artifact
  * cirrus: fix default timeouts
  * github: remove fcos-podman-next-build-prepush
  * Clarify podman machine volume mounting behavior under WSL
  * machine: Add -all-providers flag to machine list
  * Create a podman-troubleshooting man page
  * chore(deps): update dependency setuptools to v74
  * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
  * Fix an improperly ignored error in SQLite
  * CI: flake workaround: ignore socat waitpid warnings
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1
  * Stop skipping machine volume test on Hyper-V
  * cleanup: add new --stopped-only option
  * fix races in the HTTP attach API
  * cirrus: skip windows/macos machine task on RHEL branches
  * Update module github.com/containers/gvisor-tap-vsock to v0.7.5
  * run: fix detach passthrough and --rmi
  * podman run: ignore image rm error
  * Add support for AddHost in quadlet .pod and .container
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
  * update github.com/vishvananda/netlink to v1.3.0
  * build: Update gvisor-tap-vsock to 0.7.5
  * Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page:
  * fix typo in podman-network-create.1.md
  * Use HTTP path prefix of TCP connections to match Docker context behavior
  * Makefile: remotesystem: use real podman server, no --url
  * Update module github.com/openshift/imagebuilder to v1.2.15
  * CI: parallel-safe userns test
  * Update module github.com/onsi/ginkgo/v2 to v2.20.1
  * Add support for IP in quadlet .pod files
  * Specify format to use for referencing fixed bugs.
  * CI: parallel-safe run system test
  * Revert "test/e2e: work around for pasta issue"
  * CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked
  * quadlet: support user mapping in pod unit
  * Update Release Process
  * Test new VM build
  * command is not optional to podman exec
  * CI: parallel-safe namespaces system test
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
  * quadlet: add key CgroupsMode
  * Fix `podman stop` and `podman run --rmi`
  * quadlet: set infra name to %s-infra
  * chore(deps): update dependency setuptools to v73
  * [skip-ci] Packit: update targets for propose-downstream
  * Do not segfault on hard stop
  * Fix description of :Z to talk about pods
  * CI: disable ginkgo flake retries
  * vendor: update go-criu to latest
  * golangci-lint: make darwin linting happy
  * golangci-lint: make windows linting happy
  * test/e2e: remove kernel version check
  * golangci-lint: remove most skip dirs
  * set !remote build tags where needed
  * update golangci-lint to 1.60.1
  * test/e2e: rm systemd start test
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1
  * podman wait: allow waiting for removal of containers
  * libpod: remove UpdateContainerStatus()
  * podman mount: fix storage/libpod ctr race
  * CI: quadlet tests: make parallel-safe
  * CI: system tests: make random_free_port() parallel-safe
  * remove trailing comma in example
  * CI: format test: make parallel-safe
  * Fix podman-docker.sh under -eu shells (fixes #23628)
  * docs: update podman-wait man page
  * libpod: remove duplicated HasVolume() check
  * podman volume rm --force: fix ABBA deadlock
  * test/system: fix network cleanup restart test
  * libpod: do not stop pod on init ctr exit
  * libpod: simplify WaitForExit()
  * CI: remove build-time quay check
  * Fix known_hosts file clogging and remote host id
  * Update docker.io/library/golang Docker tag to v1.23
  * Update dependency setuptools to ~=72.2.0
  * Update module github.com/docker/docker to v27.1.2+incompatible
  * healthcheck system check: reduce raciness
  * CI: healthcheck system test: make parallel-safe
  * Validate renovate config in every PR
  * pkg/machine: Read stderr from ssh-keygen correctly
  * Fix renovate config syntax error
  * CI: 080-pause.bats: make parallel-safe
  * CI: 050-stop.bats: make parallel-safe
  * Additional potential race condition on os.Readdir
  * pkg/bindings/containers: handle ignore for stop
  * remote: fix invalid --cidfile + --ignore
  * Update/simplify renovate config header comment
  * Migrate renovate config to latest schema
  * Fix race condition when listing /dev
  * docs/podman-systemd: Try to clarify `Exec=` more
  * libpod: reset state error on init
  * test/system: pasta_test_do add explicit port check
  * test/e2e: work around new push warning
  * vendor: update c/common to latest
  * stopIfOnlyInfraRemains: log all errors
  * libpod: do not save expected stop errors in ctr state
  * libpod: fix broken saveContainerError()
  * Quadlet: fix filters failure when the search paths are symlinks
  * readme: replace GPG with PGP
  * Drop APIv2 CNI configuration
  * De-duplicate docker-py testing
  * chore(podmansnoop): explain why crun comm is 3
  * libpod: cleanupNetwork() return error
  * fix(deps): update module golang.org/x/sys to v0.24.0
  * Reduce python APIv2 test net dependency
  * Fix not testing registry.conf updates
  * test/e2e: improve command timeout handling
  * Update module github.com/onsi/ginkgo/v2 to v2.20.0
  * Update module github.com/moby/sys/user to v0.3.0
  * Add passwd validate and generate steps
  * podman container cleanup: ignore common errors
  * Quadlet - Allow the user to override the default service name
  * CI: e2e: serialize root containerPort tests
  * Should not force conversion of manifest type to DockerV2ListMediaType
  * fix(deps): update module golang.org/x/tools to v0.24.0
  * fix(deps): update github.com/containers/common digest to 05b2e1f
  * CI: mount system test: parallelize
  * Update module golang.org/x/net to v0.28.0
  * Ignore ERROR_SHARING_VIOLATION error on windows
  * CI: manifest system tests: make parallel-safe
  * Create volume path before state initialization
  * vendor: update c/storage
  * CI: fix broken libkrun test
  * test/e2e: work around for pasta issue
  * test/e2e: fix missing exit code checks
  * Test new CI images
  * Remove another race condition when mounting containers or images
  * fix(deps): update github.com/containers/common digest to c0cc6b7
  * Change Windows installer MajorUpgrade Schedule
  * Ignore missing containers when calling GetExternalContainerLists
  * Remove runc edit to lock to specific version
  * fix(deps): update module golang.org/x/sys to v0.23.0
  * CI: podman-machine: do not use cache registry
  * CI: completion system test: use safename
  * Temporarly disable failing Windows Installer CI test
  * libpod: fix volume copyup with idmap
  * libpod: avoid hang on errors
  * Temp. disable PM basic Volume ops test
  * Add libkrun Mac task
  * Never skip checkout step in release workflow
  * System tests: leak_test: readable output
  * fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431
  * vendor: bump c/common
  * Version: bump to v5.3.0-dev
  * libpod: inhibit SIGTERM during cleanup()
  * Tweak versions in register_images.go
  * fix network cleanup flake in play kube
  * WIP: Fixes for vendoring Buildah
  * Add --compat-volumes option to build and farm build
  * Bump to Buildah v1.37.0
  * Quadlet test - Split between success, warning and error cases
  * libpod: bind ports before network setup
  * Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false
  * Use new syntax for selinux options in quadlet
  * fix(deps): update module github.com/onsi/gomega to v1.34.1
  * CI: kube test: fix broken external-storage test
  * Update dependency setuptools to v72
  * Convert additional build context paths on Windows
  * pkg/api: do not leak config pointers into specgen
  * Quadlet - Allow the user to set the service name for .pod files
  * Quadlet tests - allow overriding the expected service name
  * fix(deps): update module github.com/moby/sys/user to v0.2.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5
  * CI: enable root user namespaces
  * libpod: force rootfs for OCI path with idmap
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
  * Add test steps for automount with multi images
  * CI: cp tests: use safename
  * [skip-ci] RPM: podman-iptables.conf only on Fedora
  * CI: 700-play: fix a leaked non-safename
  * test: check that kube generate/play restores the userns
  * test: disable artifacts cache with composefs
  * test: fix podman pull tests
  * vendor: bump c/storage
  * Update module github.com/cyphar/filepath-securejoin to v0.3.1
  * Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs
  * build: Update gvisor-tap-vsock to 0.7.4
  * test/system: fix borken pasta interface name checks
  * test/system: fix bridge host.containers.internal test
  * api: honor the userns for the infra container
  * play: handle 'private' as 'auto'
  * kube: record infra user namespace
  * infra: user ns annotation higher precedence
  * specgenutil: record the pod userns in the annotations
  * kube: invert branches
  * CI: system log test: use safe names
  * Update encryption tests to avoid a warning if zstd:chunked is the default
  * Fix "podman pull and decrypt"/"from local registry"
  * Use unique image names for the encrypted test images
  * CI: system tests: instrument to allow failure analysis
  * Fix outdated comment for the build step win-gvproxy
  * Add utility to convert VMFile to URL for UNIX sockets
  * Run codespell on source
  * fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
  * chore(deps): update dependency setuptools to ~=71.1.0
  * logformatter: tweaks to pass html tidy
  * More information for podman --remote build and running out of space.
  * Fix windows installer deleting machine provider config file
  * Use uploaded .zip for Windows action
  * pr-should-include-tests: no more CI:DOCS override</changelog>
  <changelog author="danish.prakash@suse.com" date="1755086400">- Add patch for CVE-2025-6032 (bsc#1245320):
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1759492800">- Add patch for CVE-2025-9566 (bsc#1249154):
  * 0004-CVE-2025-9566-kube-play-don-t-follow-volume-symlinks.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1762344000">- Add patch for CVE-2025-31133,CVE-2025-52565,CVE-2025-52881 (bsc#1252376):
  * 0005-CVE-2025-52881-backport-subset-of-patch-from-runc.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch
  * 0004-CVE-2025-9566-kube-play-don-t-follow-volume-symlinks.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1766404800">- Add patch for CVE-2025-47914 (bsc#1253993), CVE-2025-47913 (bsc#1253542):
  * 0006-CVE-2025-47913-CVE-2025-47914-ssh-agent-fixes.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch
  * 0004-CVE-2025-9566-kube-play-don-t-follow-volume-symlinks.patch
  * 0005-CVE-2025-52881-backport-subset-of-patch-from-runc.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1769688000">- Add symlink to catatonit in /usr/libexec/podman (bsc#1248988)</changelog>
</package>
<package pkgid="0111e7d3f6e5829d91f5ecf87453ca5bf75ceb4722358188e5f334d754d39d1df0641069d79c99aced7509f8c96610ec029202b6aea2cb95e663e15535349d54" name="policycoreutils" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="cathy.hu@suse.com" date="1701691200">- Re-add "Obsoletes: policycoreutils-python &lt;= 2.6" to avoid file
  conflicts with /usr/share/bash-completion/completions/setsebool
  of older policycoreutils-python-2.6</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;
- Remove reproducible-build.patch since it is upstream now
- Fix issues in get_os_version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="cathy.hu@suse.com" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="cathy.hu@suse.com" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="dimstar@opensuse.org" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
</package>
<package pkgid="037ffbd962a0135b908b69b1971eb08148fd1df32ba49698ef316b2ba6f92aadf9ad1b55c8e0256c7a79e5591cb02edc838b999139a980f86f0cb84948c7b661" name="policycoreutils-devel" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="cathy.hu@suse.com" date="1701691200">- Re-add "Obsoletes: policycoreutils-python &lt;= 2.6" to avoid file
  conflicts with /usr/share/bash-completion/completions/setsebool
  of older policycoreutils-python-2.6</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;
- Remove reproducible-build.patch since it is upstream now
- Fix issues in get_os_version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="cathy.hu@suse.com" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="cathy.hu@suse.com" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="dimstar@opensuse.org" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
</package>
<package pkgid="e2a3065a4f36d131498ac1638509f97b7695e569d4d0e8464cf1e6bbcbac40f43807cbd0dcf963b3f7221ccf76ff63ceec46f7ac1ccbb4c56c8534ad5997b85b" name="policycoreutils-python-utils" arch="noarch">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="cathy.hu@suse.com" date="1701691200">- Re-add "Obsoletes: policycoreutils-python &lt;= 2.6" to avoid file
  conflicts with /usr/share/bash-completion/completions/setsebool
  of older policycoreutils-python-2.6</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;
- Remove reproducible-build.patch since it is upstream now
- Fix issues in get_os_version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="cathy.hu@suse.com" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="cathy.hu@suse.com" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="dimstar@opensuse.org" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
</package>
<package pkgid="e87353aa3a0206feb34af7b1d37fda82d95dfae148c6ef876a03426a2970d11bfcfa9a0d89f07d19d077c2fe8ce16a91d74fb79a09a1cd23cb3dec27999ed3df" name="polkit" arch="x86_64">
  <version epoch="0" ver="123" rel="160000.2.2"/>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="aschnell@suse.com" date="1667995200">- read actions also from /etc/polkit-1/actions (jsc#PED-1405)
  added polkit-actions-in-etc.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
  <changelog author="lnussel@suse.com" date="1695124800">- change /usr/share/polkit-1/rules.d to 555,root:root. /usr content
  isn't secret anyway so this avoids non-root owned files in /usr
  (boo#1215482)
- update 50-default.rules to allow adding more admin rules
  (jsc#PED-260, drop polkit-no-wheel-group.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 123:
  + Highlights:
  - better safety with deeper restriction of the configuration
    files
  - better safety with restricting the daemon's owner under
    systemd
  - better safety with the systemd unit sandboxing
  - less thread races during upload of the configuration
- Changes from version 122:
  + Highlights:
  - new Georgian translation
  - port to mozjs-102
  - daemon-less build (support for e.g. flatpak deps)
  - re-enable of (API) documentation build
- See more detailed changes in the included NEWS.md file.
- Change URL and Source to new home, and drop polkit.keyring and
  tar.gz.sign tarball signature, no longer available.
- Drop polkit-fix-pam-prefix.patch: Fixed upstream.
- Add /usr/bin/dbus-daemon BuildRequires, needed for tests. Replace
  the dbus-1 with /usr/bin/dbus-daemon Requires.</changelog>
  <changelog author="tobias.klausmann@freenet.de" date="1702036800">- Add 'dbus-service' as Requires instead of /usr/bin/dbus-daemon
  This allow to use other dbus implementations such as dbus-broker with this
  package again. (bsc#1217863)</changelog>
  <changelog author="mjambor@suse.com" date="1720785600">- Add -Wno-error=implicit-function-declaration to %optflags to
  work-around an issue in mocklibc (which has been meanwhile removed
  by upstream) with exactly this kind of issue.</changelog>
  <changelog author="dimstar@opensuse.org" date="1723636800">- BuildRequire gettext-devel instead of gettext: Allows OBS to
  shortcut throught gettext-runtime-mini.</changelog>
  <changelog author="meissner@suse.com" date="1752580800">- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
  added 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch</changelog>
</package>
<package pkgid="96be756dd66301fe316548bb6d2d9add8cdeaee7fb438350cc750528f9a2c2702520588ad57d41481ea1037af614efa0fe61231b450f11dfc8648470bfe78c88" name="ppp" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="160000.2.2"/>
  <changelog author="rpm@fthiessen.de" date="1653307200">- Update to version 2.4.9
  * Support for new EAP (Extensible Authentication Protocol) methods
  * Support for EAP-TLS
  * Support for EAP-MSCHAPv2
  * New pppd options:
  * chap-timeout
  * chapms-strip-domain
  * replacedefaultroute
  * noreplacedefaultroute
  * ipv6cp-accept-remote
  * lcp-echo-adaptive
  * ip-up-script
  * ip-down-script
  * ca
  * capath
  * cert
  * key
  * crl-dir
  * crl
  * max-tls-version
  * need-peer-eap
  * Fixes for CVE-2020-8597 and CVE-2015-3310.
  * The rp-pppoe plugin has been renamed to pppoe, to distinguish it
    from the upstream rp-pppoe code.  Its options have changed names,
    but the old names are kept as aliases.
  * Many bug fixes and cleanups.
- Drop upstream fixed patches
  * ppp-2.4.3-winbind-setuidfix.patch
  * fix-header-conflict.patch
  * ppp-CVE-2015-3310.patch
  * ppp-CVE-2020-8597.patch
  * ppp-cifdefroute.patch
  * ppp-higher-speeds.patch
  * ppp-2.4.3-strip.diff
  * ppp-filter.patch
  * ppp-__P.patch
- Drop upstream resolved ppp-make.patch use `--cflags` configure
  switch instead</changelog>
  <changelog author="mliska@suse.cz" date="1653566400">- Add ppp-compiling-with-clang-encounters-an-error-in-eap-tls..patch
  that fixed the following rpmlint error:
  executable-stack (Badness: 10000) /usr/sbin/pppd</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="max@suse.com" date="1682078400">- Update to version 2.5.0. This release is a major release of pppd
  which contains breaking changes for third-party plugins, a
  complete revamp of the build-system and that allows for
  flexibility of configuring features as needed.
  * CVE-2022-4603, bsc#1218251: improper validation of array index
    of the component pppdump
  * Support for PEAP authentication
  * Support for loading PKCS12 certificate envelopes
  * Adoption of GNU Autoconf / Automake build environment
  * Support for pkgconfig
  * Bunch of fixes and cleanup to PPPoE and IPv6 support
  * Major revision to PPPD's Plugin API
  * Lots of internal fixes and cleanups for Radius and PPPoE
  * Dropped IPX support, as Linux has dropped it in version 5.15
  * Pppd is no longer installed setuid-root
  * New pppd options:
  - ipv6cp-noremote, ipv6cp-nosend, ipv6cp-use-remotenumber,
    ipv6-up-script, ipv6-down-script
  - -v, show-options
  - usepeerwins, ipcp-no-address, ipcp-no-addresses, nosendip
  * On Linux, any baud rate can be set on a serial port provided
    the kernel serial driver supports that.
- Obsoleted patches:
  * ppp-lib64.patch
  * ppp-compiling-with-clang-encounters-an-error-in-eap-tls..patch
  * ppp-pie.patch
- Source file pppoe-discovery.8.gz is now part of the tarball.
- Enable support for systemd notification.</changelog>
  <changelog author="max@suse.com" date="1703764800">- Reflect the rp-pppoe -&gt; pppoe name change also in pppoe-peers.</changelog>
  <changelog author="max@suse.com" date="1704974400">- Backport ppp-pidfiles.patch and ppp-mkdir-run.patch from the
  upcoming 2.5.1 release and make sure that pppd's pid, resolv
  and database files are created under /run/ppp (bsc#1218370).</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="jbohac@suse.com" date="1718798400">- drop support for PPPoATM and the dependency on linux-atm-devel</changelog>
  <changelog author="max@suse.com" date="1729166400">- Update to version 2.5.1:
  * Pppd can now measure and log the round-trip time (RTT) of LCP
    echo-requests and record them in a binary file structured as a
    circular buffer.  Other programs or scripts can examine the
    file and provide real-time statistics on link latency.
    This is enabled by a new "lcp-rtt-file" option.
  * New scripts net-init, net-pre-up and net-down are executed in
    the process of bringing the network interface up and down.
    They provide additional, more deterministic ways for pppd to
    interact with the rest of the networking configuration.
  * New options have been added to allow the system administrator
    to set the location of various scripts and secrets files.
  * A new "noresolvconf" option tells pppd not to write the
    /etc/ppp/resolv.conf file; DNS server addresses, if obtained
    from the peer, are still passed to scripts in the environment.
  * Pppd will now create the directory for the TDB connection
    database if it doesn't already exist.
- Obsoleted patches:
  * ppp-mkdir-run.patch
  * ppp-pidfiles.patch
- Drop the ppp_ prefix from /run/ppp_resolv.conf* and put it under
  /run/ppp like the other generated files.</changelog>
  <changelog author="max@suse.com" date="1739966400">- Update to version 2.5.2:
  * Some old and probably unused code has been removed, notably
    the pppgetpass program and the passprompt plugin, and some of
    the files in the sample and scripts directories.
  * If a remote number has been set, it is available to scripts in
    the REMOTENUMBER environment variable.
  * Various other bug fixes and minor enhancements.
- Obsoleted patches:
  * ppp-fix-bashisms.patch</changelog>
</package>
<package pkgid="2955a55bdc4427f0b01de5f5a3e9c234cd789f223c46de739d25a2f0e0d99e873e93637e45c3ced233ce7a59e54fd1a3de23bb9619404fb050c39cd2b0d4e860" name="procps" arch="x86_64">
  <version epoch="0" ver="4.0.5" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="kukuk@suse.com" date="1698667200">- procps-ng-3.3.17-logind.patch: Fix crash of "w -s -h"</changelog>
  <changelog author="kukuk@suse.com" date="1702555200">- procps-3.3.17-ignore-sysctl_conf.patch: ignore dangling symlink
  to missing /etc/sysctl.conf file [bsc#1217990]</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722340800">- Switch to procps 4 branch, absorbing the former procps4 package:
  + Add provides/obsoletes procps4: make zypper replace procps4
    with the main package for users that manually switched.
- Aligning to the existing procps4 package, drop/add/modify
  patches:
  A    79042e07.patch
  A    procps-ng-4.0.0-integer-overflow.patch
  A    procps-ng-4.0.4-ignore-sysctl_conf.patch
  A    procps-ng-4.0.4-pmapX-not-twice-anymore.patch
  A    procps-ng-4.0.0-floats.dif
  D    CVE-2023-4016.patch
  D    bsc1195468-23da4f40.patch
  D    procps-3.3.17-bsc1181976.patch
  D    procps-3.3.17-ignore-sysctl_conf.patch
  D    procps-3.3.17-library-bsc1181475.patch
  D    procps-3.3.17-top-bsc1181475.patch
  D    procps-ng-3.3.10-integer-overflow.patch
  D    procps-ng-3.3.10-large_pcpu.patch
  D    procps-ng-3.3.17-logind.patch
  D    procps-ng-3.3.8-bnc634840.patch
  D    procps-ng-3.3.9-watch.patch
  D    procps-ng-3.3.8-accuracy.dif
  D    procps-ng-3.3.10-bnc634071_procstat2.diff
  D    procps-ng-3.3.10-fdleak.dif
  M    procps-ng-3.3.10-errno.patch
  M    procps-ng-3.3.10-slab.patch
  M    procps-ng-3.3.11-pmap4suse.patch
  M    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
  M    procps-ng-3.3.8-petabytes.patch
  M    procps-ng-3.3.8-readeof.patch
  M    procps-v3.3.3-pwdx.patch</changelog>
  <changelog author="schwab@suse.de" date="1725451200">- procps-ng-4.0.4-idletime-no-tty.patch: don't print idle time without tty
- procps-ng-4.0.4-w-array-bounds.patch: fix array bounds violation</changelog>
  <changelog author="werner@suse.de" date="1734609600">- Update to procps-ng-4.0.5
  * library
    increment current, revision and age to 0: 1:0:0
    internal: days/users when value is 0                   issue #303
    internal: dont print 60s but increment minute          issue #302
    internal: stat api fixed remaining cpu distortions     issue #321
    internal: only count user sessions
    internal: Recover from meminfo seek using LXC          Debian #1072831
    internal: stat api no longer counts guest tics twice   issue #339
    external: zswap &amp; zswapped added to meminfo api
    external: schedule class added to pids api
    external: disk sleep added to pids api, sleep revised  issue #265
    external: docker containers added to pids api
    external: procps_users new exported function
    external: procps_uptime_snprint uses given upseconds
    external: procps_container_uptime
    external: meminfo api adds SecPageTables, Unaccepted
    external: pids api now provides open file descriptors
    external: 'info' parm removed from all 'VAL' macros    issue #332
    external: Add procps_sigmask_names
    external: Add procps_capability_names
    external: Add PIDS_CAP__PRM Permitted Capabilities
  * build-sys: Added --disable-pidwait and fixed logic     issue #352
  * kill: Correctly parse negative pids                    issue #354
  * pgrep: select process by environment variable          issue #167
  * pgrep: Rework pidfile reading to include stdin         issue #318
  * pmap: Don't escape correct UTF-8 characters
  * ps: Add environ field
  * ps: Add htprv and htshr fields for HugeTables
  * ps: restore lost tasks for options --sort with -H      issue #304
  * ps: add 'docker' containers field, similar to 'lxc'
  * ps: Restore AIX free-format                            issue #323
  * ps: can display open file descriptors for each task
  * ps: Fix signames scanning                              issue #341
  * ps: Add -o pcap,pcaps to show permitted capabilities
  * ps: Zombies show &lt;defunct&gt; in the commandname          issue #355
  * ps: Use quick mode if possible                         merge #239
  * slabtop: Add --human option for slab size
  * snice: Minor fix for help screen                       Debian #1086441
  * sysctl: Add glob excludes                              merge #206
  * sysctl: --all skips stat_refresh                       Debian #978688
  * top: added a 'CLS' scheduling class field, like ps
  * top: exploit library addition of 'disk sleep'          issue #265
  * top: add 'docker' containers field, similar to 'lxc'
  * top: provides additional control over colors
  * top: can display open file descriptors for each task
  * top: corrected cpu % for hosts with qemu processes     issue #339
  * top: remains functional if /proc mounted subset=pid
  * top: can display a task's permitted capabilities (^A)
  * uptime: Add container uptime option                    issue #300
  * vmstat: Add page allocation to --stats
  * vmstat.8: si/so are changed by --unit                  Debian #1061944
  * w: Don't segfault with -s option                       issue #301
  * w: Cache pids list                                     issue #305
  * w: Add container uptime option
  * w.1: Note utmp is for non-systemd                      Debian #1080333
  * watch: use clock_gettime                               issue #295
  * watch.1: --chgexit only works for visible changes      Debian #729569
  * hugetop: a new utility to show huge page information   merge #214
- Remove patches now upstream or fixed
  * 79042e07.patch
  * procps-ng-4.0.4-idletime-no-tty.patch
  * procps-ng-4.0.4-w-array-bounds.patch
- Port patches
  * procps-ng-3.3.10-errno.patch
  * procps-ng-3.3.10-slab.patch
  * procps-ng-3.3.10-xen.dif
  * procps-ng-3.3.11-pmap4suse.patch
  * procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-readeof.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.8-vmstat-terabyte.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-4.0.0-floats.dif
  * procps-ng-4.0.0-integer-overflow.patch
  * procps-ng-4.0.4-ignore-sysctl_conf.patch
  * procps-v3.3.3-columns.dif
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch procps-ng-4.0.5-bsc1246330.patch
  * Do not Fail in year 2038 (bsc#1246330)</changelog>
</package>
<package pkgid="414ba797a513dd6287641ad6ace5ef05beb5478567ec7c31de9edc8cf24593b67bc489f434fcd58c1b23a07344ec6e441a1f49d4334ab3adfaa1d365cb2c1b6e" name="psmisc" arch="x86_64">
  <version epoch="0" ver="23.7" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1670932800">- Update to 23.6:
  * buildsys: Fix DEJAGNU work-around Debian #1015089
  * killall: Use kill if pidfd_send_signal fails Debian #1015228
  * fuser: Do not mention nonexistent - reset option #42
  * fuser: Use modern statn where possible
  * pstree: Better AppArmor support !30
  * killall: Check truncated names !28
  * killall: Use openat and pidfd_send_signal #37
  * killall: Don't check paths of sockets #35
  * pstree: Check for process with show_parents #38
  * pstree: Don't disable compaction with show pgids #34
  * pstree: Fix storage leak !29
- Enable new apparmor support
- Remove patch now upstream
  0002-Use-new-statx-2-system-call-to-avoid-hangs-on-NFS.patch
- Port patch psmisc-22.21-pstree.patch
- Port patch psmisc-v23.4.dif which now becomes psmisc-v23.6.dif
- Merge patch socket-fix.patch with ported patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="lnussel@suse.de" date="1676548800">- allow to switch off Apparmor support via bcond</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="werner@suse.de" date="1716811200">- Update to 23.7
  * build-sys: Make disable-statx work
  * fuser: Fallback to stat() if no statx() Debian 1030747 #48
  * fuser: silently ignore EACCES when scanning proc directories
  * killall: small formatting fixes Debian #1037231
  * pstree: Do not assume root PID #49
  * pslog: include config.h #51 !36
  * misc: Update gettext to 0.21
- Add patch from upstream 0001-killall,pstree-use-clock_gettime-not-uptime.patch
- Port the patches
  * 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * psmisc-22.21-pstree.patch
- Port patch psmisc-v23.6.dif and rename it to psmisc-v23.7.dif</changelog>
  <changelog author="adrian@suse.de" date="1733400000">- add loongarch64 as peekfd supported arch</changelog>
  <changelog author="werner@suse.de" date="1739880000">- Looks like Factory and TW includes glibc-gconv-modules-extra at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1741867200">- fix build with gcc15
- added patches
  + psmisc-gcc15.patch</changelog>
  <changelog author="werner@suse.de" date="1752580800">- Add patch 0001-fuser-Fix-expandpath.patch
  * Is an upstream commit which fixes https://gitlab.com/psmisc/psmisc/-/issues/57
    as well as bug boo#1242093</changelog>
</package>
<package pkgid="9335e255edd71b39202f2e2c6e21673fe5af3618d352c9203d67fd217ab7b11da1744395083259e1cc00d3f061956ab2725f79293be2750e44514a878ef013e1" name="pv" arch="x86_64">
  <version epoch="0" ver="1.8.12" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1689595200">- Update to release 1.7.0
  * The "--size" option now accepts "@filename" to use the size
    of another file.
  * New "--bits" option to show bit count instead of byte count.
  * New "--average-rate-window" option, to set the window over
    which the average rate is calculated, also used for ETA.
  * The "--watchfd" option will now show relative filenames, if
    they are under the current directory.
  * Add burst rate limit to transfer, so rate limits are not
    broken by bursty traffic.
  * Corrected elapsed time display to show as D:HH:MM:SS after 1
    day, like the ETA does.</changelog>
  <changelog author="jengelh@inai.de" date="1690545600">- Update to release 1.7.18
  * New "--sync" option to flush cache to disk after every write
  * New "--direct-io" option to bypass cache</changelog>
  <changelog author="jengelh@inai.de" date="1690718400">- Update to release 1.7.24
  * correct terminal size detection (was broken by 1.7.17)</changelog>
  <changelog author="pgajdos@suse.com" date="1695729600">- add _constraints [bsc#1215338]</changelog>
  <changelog author="pgajdos@suse.com" date="1700049600">- increase required memory in _constraints [bsc#1217165]
  (tests still fails in ETA related tests)</changelog>
  <changelog author="pgajdos@suse.com" date="1701345600">- disable testsuite for s390x [bsc#1215338]
- remove _constraints again as it didn't help
- deleted sources
  - _constraints (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 1.8.5
  * Corrected percentage formatting so it does not jump from 2 to 3
    characters wide at 100%.
  * Replaced `--remote` mechanism to use a temporary file instead
    of SysV IPC, so it can work reliably even when there are
    multiple pv instances.
  * feature: new `--discard` option to discard input as if writing
    to /dev/null.
  * feature: new `--error-skip-block` option to make `--skip-
    errors` skip whole blocks.
  * feature: use `posix_fadvise()` like cat(1) does, to improve
    efficiency.
  * security: with `--pidfile`, write to a temporary file and
    rename it into place, to improve security.
  * security: ignore _TMP_ / _TMPDIR_ environment variables when
    using a terminal lock file.
  * Only report errors about missing files when starting to
    transfer from them, not while calculating size, and behave more
    like cat(1) by skipping them and moving on.
  * Auto-calculate total line count with `--line-mode` when all
    inputs are regular files.
  * Cope with machine suspend/resume and botched timestamps.
  * If `--width` or `--height` were provided, do not change them
    when the window size changes.
  * When a file descriptor position in `--watchfd` moves backwards,
    show the rate using the correct prefix.
  * Rewrite terminal state save/restore so state is not
    intermittently garbled on exit when using `--cursor`.
  * Licensing change from Artistic 2.0 to GPLv3+.</changelog>
  <changelog author="smolsheep@opensuse.org" date="1713873600">- version update to 1.8.9
  * feature: new "--si" option to display and interpret size
    suffixes in multiples of 1000 rather than 1024
  * fix: continue producing progress output when the output is
    blocking writes
  * fix: honour the TMPDIR / TMP environment variables again,
    rather than hard-coding "/tmp", when using a terminal lock file
  * i18n: corrections and missing strings added to French
    translations</changelog>
  <changelog author="dmueller@suse.com" date="1719748800">- update to 1.8.10:
  * feature: new "`--output`" option to write to a file instead
    of standard output (pull request #90) supplied by xmort</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1722427200">- update to 1.8.12:
  * fix detection of output block device size
  * do not treat a zero/interrupted write as an end of file</changelog>
</package>
<package pkgid="3d93d7baa7a9aa87b25b102fec349e44cd73b7771efce4f78bd63a0486fced1f5197e051e75f3808b1e7c70e4e0aca3427ce7cde96cb24fb42ec9a8df498e662" name="python-azuremetadata" arch="noarch">
  <version epoch="0" ver="5.1.6" rel="160000.2.2"/>
  <changelog author="ikapelyukhin@suse.com" date="1587470400">- Version 5.0.1
- Use lsblk for root device detection (bsc#1169921)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587988800">- Version 5.1.0
- Produce well-formed JSON and XML output when multiple filters
  are specified (bsc#1170598, bsc#1170599)</changelog>
  <changelog author="rjschwei@suse.com" date="1596456000">- Update to version 5.1.2 (bsc#1173357, bsc#1174847)
  + Detect when the VM is running in ASM (Azure Classic) and handle the
    condition to generate the data we are interested in without requiring
    access to the full IMDS available only in ARM instances.
- From version 5.1.1 (bsc#1173238, bsc#1173240)
  + Add --listapis and --api latest support</changelog>
  <changelog author="rjschwei@suse.com" date="1598011200">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="rjschwei@suse.com" date="1598011201">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="jesusbv@suse.com" date="1619006400">- Version 5.1.4 (bsc#1184720, bsc#1172581)
  + Use versions endpoint to list the available versions
  + Add bypass proxy
  + Update way to check classic vms</changelog>
  <changelog author="rjschwei@suse.com" date="1642075200">- Version 5.1.5 (bsc#1194663)
  + Handle lsblk output format change. The json data now contains
    "mountpoints" instead of "mountpoint"</changelog>
  <changelog author="mcepl@cepl.eu" date="1717070400">- Replace python3-azuremetadata with universal packaging
  (https://trello.com/c/fupyiTVo/168-python3-packages-in-factory).
- Rename to python-azuremetadata.</changelog>
  <changelog author="rjschwei@suse.com" date="1743768000">- Version 5.1.6
  + Handle queries of attributes that return an empty list properly
  + Switch the package build to a specific Python interpreter set
    by the project configuration in the Build Service</changelog>
  <changelog author="rjschwei@suse.com" date="1744891200">- Update build setup
  + Switch source tarball name to be consistent with other tools of
    similar nature
  + Set the modules directory properly</changelog>
</package>
<package pkgid="9a61a4fa490df73646c2845378298d1a8815ee162086facd26060a35a985d86c27437dcb356591463900562c8f6a72ab2191436bce6d2f935181cb47dffc2f87" name="python-ec2metadata" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="160000.2.2"/>
  <changelog author="rjschwei@suse.com" date="1427803200">- Bump to version 1.5.3 (bnc#924626)
  + Properly write metadata to file if no query argument is provided
  + Properly generate XML for 'public-keys' query option
  + Document the 'api' option in the help message
  + Alpha sort the options displayed with the help message</changelog>
  <changelog author="jgleissner@suse.com" date="1471435200">- Bump to version 1.5.4 (bsc#994138 bsc#994139)
  + ec2metadata: do not use proxy</changelog>
  <changelog author="rjschwei@suse.com" date="1505908800">- Update to version 2.0.0
  + Port to Python 3</changelog>
  <changelog author="rjschwei@suse.com" date="1575460800">- Update to version 3.0.2 (bsc#1157901, bsc#1157902)
  + Add man page
  + Support accessing IMDS with a token (API change) to support
    disabling unauthenticated acces of IMDS</changelog>
  <changelog author="rjschwei@suse.com" date="1596456000">- Update to version 3.0.3 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1665403200">- Update to version 4.0.0 (bsc#1204066)
  + Disambiguate cli options for duplicate endpoints. This is an
    incompatible change for some API versions of IMDS. When a duplicate
    endpoint is detected the cli option for both endpoints is expanded to a
    unique name.</changelog>
  <changelog author="rjschwei@suse.com" date="1692792000">- Update to version 5.0.0 (bsc#1214215)
  + Remove the --use-token command line option. Aws is deprecating access
    to instance metadata without authentication token. Ability to access
    metadat without token has been removed
  + Support access to the metadata server over IPv6. If the customer
    enables the IPv6 endpoint for an instance it will be preferred over the
    IPv4 endpoint</changelog>
  <changelog author="mcepl@cepl.eu" date="1717070400">- Replace python3-ec2metadata with universal packaging
  (https://trello.com/c/fupyiTVo/168-python3-packages-in-factory).
- Rename to python-ec2metadata.</changelog>
  <changelog author="rjschwei@suse.com" date="1721649600">- Obsolete the Python 3.6 build</changelog>
  <changelog author="rjschwei@suse.com" date="1744027200">- Switch the build to s apecific Python interpreter. This avoids
  chasing Python binary names in our image build setup.</changelog>
</package>
<package pkgid="16a1566d853d21709e7ffc2911eb7b23698b1f9610d30889af0862bc95a07c27bf8b67eeb01e33d4a64f0c29eb97e6ba10125677af1aeda8495051ca2963a060" name="python-gcemetadata" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="160000.1.1"/>
  <changelog author="rjschwei@suse.com" date="1529409600">- Update to version 1.0.1 (bsc#1097505)
  + Support instances with multiple Nics</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Use noun phrase in summary.</changelog>
  <changelog author="rjschwei@suse.com" date="1559736000">- Update to version 1.0.3 (bsc#1134510)
  + Handle the condition where the identity data of the instance may
    not be accessible from the metadata server and provide proper
    error messaging
- From 1.0.2
  + Avoid traceback when not running in GCE, by testing access to the
    metdata server first before performing othre operations</changelog>
  <changelog author="rjschwei@suse.com" date="1591358400">- Include in SLE 12 (jsc#PM-1900)</changelog>
  <changelog author="rjschwei@suse.com" date="1592827200">- Update to version 1.0.4 (bsc#1173136)
  + Fix typo, missing "=" for "identity" option in processed command
    line options causes mis-identification of instance as missing identity
    data access</changelog>
  <changelog author="mcepl@cepl.eu" date="1717070400">- Replace python3-gcemetadata with universal packaging
  (https://trello.com/c/fupyiTVo/168-python3-packages-in-factory).
- Rename to python-gcemetadata.</changelog>
  <changelog author="rjschwei@suse.com" date="1721649600">- Obsolete the Python 3.6 build</changelog>
  <changelog author="rjschwei@suse.com" date="1744027200">- Switch to a defined Python interpreter. Use the primary interpreter
  in SLE 16 and later distributions and Python 3.11 for SLE 15 SP4 and
  later.</changelog>
  <changelog author="rjschwei@suse.com" date="1744113600">- Switch the SLE 15 build setup to also use a macro instead of referencing
  the Python 3.11 interpreter directly.</changelog>
  <changelog author="sean.marlow@suse.com" date="1769601600">- Update to version 1.1.0 (jsc#PCT-590, jsc#PED-8945)
  + Add licenses option in identity command.</changelog>
</package>
<package pkgid="8b0d5c324062c4eaf39adbb28d8cd7b8c38b533587d1aeb01ea71a6313697e8d740ebe8549730f18cad1da6202059c72b90632d37bea6090f4b0cbc8a4c7f0c6" name="python3-audit" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Move rules-related files into new subpackage `audit-rules':
  * Files moved:
  - /sbin/auditctl, /sbin/augenrules,
  /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules}
  - manpages for auditctl, augenrules, and audit.rules
  - /etc/audit is now owned by `audit-rules' as well
  * Add new file /usr/lib/systemd/system/audit-rules.service
  * Remove in-house create-augenrules-service.patch that generated
    augenrules.service systemd unit service
  * Remove ownership of /usr/share/audit
  * Create /usr/share/audit-rules directory on %install
  * Remove audit-userspace-517-compat.patch (fixed upstream)
  * Remove libev-werror.patch (fixed upstream)
  * Remove audit-allow-manual-stop.patch (fixed upstream)
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Remove autrace and auvirt references (upstream)
  * Replace README with README.md
- Drop `--enable-systemd' from %configure as SysV-style scripts
  aren't supported in upstream since
  113ae191758c ("Drop support for SysVinit")</changelog>
  <changelog author="ematsumiya@suse.com" date="1727352000">- Update audit-secondary.spec:
  * Add "Requires: audit-rules" for audit package
  * Remove preun/postun handling of audit-rules.service</changelog>
  <changelog author="ematsumiya@suse.com" date="1727784000">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1727870400">- Readd audit-allow-manual-stop.patch (removed by mistake)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec (bsc#1231236):
  * add requirement for 'awk' package
  * move some %post logic from audit to audit-rules</changelog>
</package>
<package pkgid="969ea21ecb23a879bc5e4faa678e825e4f26b82adbd907400db3cc8bdc2f1e2b3cbc956cdfe6346a41c512fe17d385bb2ab028abcc18fd918838b291ce44d89f" name="python3-firewall" arch="noarch">
  <version epoch="0" ver="2.1.2" rel="160000.2.2"/>
  <changelog author="steven.kowalik@suse.com" date="1695643200">- python3-dbus isn't correct either, it's python3-dbus-python.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to 2.0.1:
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
- removed following patch:
  [- fix_list_all_zones_output.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1701259200">- update to 2.0.2:
  * fix(policy): runtime dispatch update if *-zone=ANY (e8b9637)
  * fix(nm): release NM client after a timeout (d534f07)</changelog>
  <changelog author="mohd.saquib@suse.com" date="1704715200">- update to 2.1.0:
  * eat(service): add DNS over QUIC (DoQ) Service (5130430)
  * feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types (dd88bbf)
  * feat(fw): add ReloadPolicy option in firewalld.conf (0019371)
  * feat(service): add submission service (tcp 587) (d6a9561)
  * feat(service): Add alvr (3a92358)
  * feat(service): add vrrp (d62fc8d)
  [* Renamed patch 0002-Disable-FlushAllOnReload-option.patch to
    0001-Disable-FlushAllOnReload-option.patch
  [* Renamed patch firewalld-runstatedir.patch to 0002-firewalld-runstatedir.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1706529600">- update to 2.1.1:
  * fix(offline-cmd): use family when creating ipset (64f78a9)
  * fix(firewall-config): allow rich rule forwarded ports to be logged (d46ea62)
  * fix(ipXtables): log forwarded ports only (07dc202)
  * fix(nftables): log forwarded ports (5c26b73)
  * fix(io.ipset): raise exception if entries exceed limit (a2da5fb)
  * fix(policy): ipXtables: multiple policies using same zone (b6f2f09)
  * fix(policy): dispatch update for active policies (7f6f0e2)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- update to 2.1.2:
  * fix(policy): allow forward ports w/ to-addr for egress-
    zone=HOST
  * fix(rich): fix range check for large rule limit
  * fix(tests): fix skip detection in fw-in-container environment</changelog>
  <changelog author="dimstar@opensuse.org" date="1716552000">- Keep English 'translations' (en_US, en_GB) in the main package:
  do not force the lang package on plain English systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1718366400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="alarrosa@suse.com" date="1744718400">- Require python3-PyQt6 in firewall-applet, since that's preferred
  over PyQt5.</changelog>
</package>
<package pkgid="15680051bee07d07e254979957cd0efb303db01b5e9689fadb16dda9a4da509fa6996ac4babad84e22683a001c7a5d6f9db58cdcb6e701345cdc6f2120a966e1" name="python3-openvswitch" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="160000.3.1"/>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1707998400">- Fix CVE-2023-3966 [bsc#1219465] openvswitch3: Invalid memory access in Geneve with HW offload
- Added patch,
    +openvswitch-CVE-2023-3966.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mjambor@suse.com" date="1717502400">- GCC 14 started to advertise c_atomic extension, older versions
  didn't do that.  Add check for __clang__, so GCC doesn't include
  headers designed for Clang
  (openvswitch-2.17.8-gcc14-build-fix.patch) [boo#1225906]</changelog>
  <changelog author="pgajdos@suse.com" date="1722340800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1724846400">- Update openvswitch to 3.3.1. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v3.3.1/NEWS
- Update OVN to 24.03.3. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v24.03.3/NEWS
- Drop upstream fixed patches,
  * CVE-2023-1668.patch
  * CVE-2023-3152.patch
  * CVE-2023-5366.patch
  * openvswitch-2.17.8-gcc14-build-fix.patch
  * openvswitch-CVE-2023-3966.patch
- Updated the patch for version v3.3.1
  * install-ovsdb-tools.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1734350400">- Add proper dependency on /usr/sbin/ipsec on openvswitch-ipsec:
  without the binary present, the service crashes on startup
  (boo#1234617).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1737979200">- Update openvswitch to 3.3.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v3.3.2/NEWS
- Update OVN to 24.03.5. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v24.03.5/NEWS
  - This update fix CVE-2025-0650 ovn: egress ACLs may be bypassed
    via specially crafted UDP packet (bsc#1236353)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1742558400">- Update OVN to 25.03.0 for a list of changes, check
  https://github.com/ovn-org/ovn/blob/v25.03.0/NEWS (jsc#PED-11228)
- Update openvswitch to 3.5.0 for a list of changes, check
  https://www.openvswitch.org/releases/NEWS-3.5.0.txt (jsc#PED-11228)
- Rename "python3-ovs" to "python3-openvswitch" for distro consistency
- Update patch file 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1764158400">- Update OVN to 25.03.1
  * Bug fixes
- Update Openvswitch to 3.5.2
  * Bug fixes</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767960000">- Update OVN to 25.03.2
  - Bug fixes
  - Dynamic Routing:
  * Add the option "dynamic-routing-redistribute-local-only" to Logical
    Routers and Logical Router Ports which refines the way in which
    chassis-specific Advertised_Routes (e.g., for NAT and LB IPs) are
    advertised.
  * Add the option "dynamic-routing-vrf-id" to Logical Routers which allows
    CMS to specify the Linux routing table id for a given vrf.
  - Add ovn-nbctl lsp-add-router-port which will create router port on
    specified LS.
  - Add ovn-nbctl lsp-add-localnet-port which will create localnet port on
    specified LS.</changelog>
</package>
<package pkgid="467e24ead1719871b5cc8e9590972bb94c69ac27d460e7f1128f0ea2d10d165f79eff3bbc187fdb6761d2667a307176e3b4e87138bde56ab0bf75d9c592ab659" name="python3-pvirsh" arch="noarch">
  <version epoch="0" ver="2.2" rel="160000.2.2"/>
  <changelog author="aginies@suse.com" date="1665748800">- first package release</changelog>
  <changelog author="aginies@suse.com" date="1667476800">- version 2.1:
  * various lint fixes
  * improve help usage
  * add select_vm to choose VM on connected hypervisor
  * improve prompt
  * add some more xml files
  * remove unwanted import sys</changelog>
  <changelog author="aginies@suse.com" date="1677844800">- version 2.2:
  * again some lint fixes
  * remove unwanted shebang
  * various typo fixes
  * bug fixes
  * add requires on python3-curses</changelog>
</package>
<package pkgid="fb512b74239d741ef79e50f48bb03bf03e8f68e17afe9d556e27ec5d897449feb59b97af8e54f15609dc596953e5d6e6afd107a02066faa6911d6d49e3319ab3" name="python313" arch="x86_64">
  <version epoch="0" ver="3.13.13" rel="160000.1.1"/>
  <changelog author="mcepl@cepl.eu" date="1770379200">- Update to 3.13.12: Python 3.13.12 final Release date:
  2026-02-03
  - Tools/Demos
  - gh-142095: Make gdb ‘py-bt’ command use frame from thread
    local state when available. Patch by Sam Gross and Victor
    Stinner.
  - Tests
  - gh-144415: The Android testbed now distinguishes between
    stdout/stderr messages which were triggered by a newline,
    and those triggered by a manual call to flush. This fixes
    logging of progress indicators and similar content.
  - gh-65784: Add support for parametrized resource wantobjects
    in regrtests, which allows to run Tkinter tests with the
    specified value of tkinter.wantobjects, for example -u
    wantobjects=0.
  - gh-143553: Add support for parametrized resources, such as
  - u xpickle=2.7.
  - gh-142836: Accommodated Solaris in
    test_pdb.test_script_target_anonymous_pipe.
  - gh-129401: Fix a flaky test in test_repr_rlock that checks
    the representation of multiprocessing.RLock.
  - bpo-31391: Forward-port test_xpickle from Python 2 to
    Python 3 and add the resource back to test’s command line.
  - Security
  - gh-144125: BytesGenerator will now refuse to serialize
    (write) headers that are unsafely folded or delimited; see
    verify_generated_headers. (Contributed by Bas Bloemsaat and
    Petr Viktorin in gh-121650) (bsc#1257181, CVE-2026-1299).
  - gh-143935: Fixed a bug in the folding of comments when
    flattening an email message using a modern email policy.
    Comments consisting of a very long sequence of non-foldable
    characters could trigger a forced line wrap that omitted
    the required leading space on the continuation line,
    causing the remainder of the comment to be interpreted as
    a new header field. This enabled header injection with
    carefully crafted inputs (bsc#1257029, CVE-2025-11468).
  - gh-143925: Reject control characters in data: URL media
    types (bsc#1257046, CVE-2025-15282).
  - gh-143919: Reject control characters in http.cookies.Morsel
    fields and values (bsc#1257031, CVE-2026-0672).
  - gh-143916: Reject C0 control characters within
    wsgiref.headers.Headers fields, values, and parameters
    (bsc#1257042, CVE-2026-0865).
  - Library
  - gh-144380: Improve performance of io.BufferedReader line
    iteration by ~49%.
  - gh-144169: Fix three crashes when non-string keyword
    arguments are supplied to objects in the ast module.
  - gh-144100: Fixed a crash in ctypes when using a deprecated
    POINTER(str) type in argtypes. Instead of aborting, ctypes
    now raises a proper Python exception when the pointer
    target type is unresolved.
  - gh-144050: Fix stat.filemode() in the pure-Python
    implementation to avoid misclassifying invalid mode values
    as block devices.
  - gh-144023: Fixed validation of file descriptor 0 in posix
    functions when used with follow_symlinks parameter.
  - gh-143999: Fix an issue where inspect.getgeneratorstate()
    and inspect.getcoroutinestate() could fail for generators
    wrapped by types.coroutine() in the suspended state.
  - gh-143706: Fix multiprocessing forkserver so that sys.argv
    is correctly set before __main__ is preloaded. Previously,
    sys.argv was empty during main module import in forkserver
    child processes. This fixes a regression introduced in
    3.13.8 and 3.14.1. Root caused by Aaron Wieczorek, test
    provided by Thomas Watson, thanks!
  - gh-143638: Forbid reentrant calls of the pickle.Pickler and
    pickle.Unpickler methods for the C implementation.
    Previously, this could cause crash or data corruption, now
    concurrent calls of methods of the same object raise
    RuntimeError.
  - gh-78724: Raise RuntimeError’s when user attempts to call
    methods on half-initialized Struct objects, For example,
    created by Struct.__new__(Struct). Patch by Sergey
    B Kirpichev.
  - gh-143602: Fix a inconsistency issue in write() that leads
    to unexpected buffer overwrite by deduplicating the buffer
    exports.
  - gh-143547: Fix sys.unraisablehook() when the hook raises an
    exception and changes sys.unraisablehook(): hold a strong
    reference to the old hook. Patch by Victor Stinner.
  - gh-143378: Fix use-after-free crashes when a BytesIO object
    is concurrently mutated during write() or writelines().
  - gh-143346: Fix incorrect wrapping of the Base64 data in
    plistlib._PlistWriter when the indent contains a mix of
    tabs and spaces.
  - gh-143310: tkinter: fix a crash when a Python list is
    mutated during the conversion to a Tcl object (e.g., when
    setting a Tcl variable). Patch by Bénédikt Tran.
  - gh-143309: Fix a crash in os.execve() on non-Windows
    platforms when given a custom environment mapping which is
    then mutated during parsing. Patch by Bénédikt Tran.
  - gh-143308: pickle: fix use-after-free crashes when
    a PickleBuffer is concurrently mutated by a custom buffer
    callback during pickling. Patch by Bénédikt Tran and Aaron
    Wieczorek.
  - gh-143237: Fix support of named pipes in the rotating
    logging handlers.
  - gh-143249: Fix possible buffer leaks in Windows overlapped
    I/O on error handling.
  - gh-143241: zoneinfo: fix infinite loop in
    ZoneInfo.from_file when parsing a malformed TZif file.
    Patch by Fatih Celik.
  - gh-142830: sqlite3: fix use-after-free crashes when the
    connection’s callbacks are mutated during a callback
    execution. Patch by Bénédikt Tran.
  - gh-143200: xml.etree.ElementTree: fix use-after-free
    crashes in __getitem__() and __setitem__() methods of
    Element when the element is concurrently mutated. Patch by
    Bénédikt Tran.
  - gh-142195: Updated timeout evaluation logic in subprocess
    to be compatible with deterministic environments like
    Shadow where time moves exactly as requested.
  - gh-143145: Fixed a possible reference leak in ctypes when
    constructing results with multiple output parameters on
    error.
  - gh-122431: Corrected the error message in
    readline.append_history_file() to state that nelements must
    be non-negative instead of positive.
  - gh-143004: Fix a potential use-after-free in
    collections.Counter.update() when user code mutates the
    Counter during an update.
  - gh-143046: The asyncio REPL no longer prints copyright and
    version messages in the quiet mode (-q). Patch by Bartosz
    Sławecki.
  - gh-140648: The asyncio REPL now respects the -I flag
    (isolated mode). Previously, it would load and execute
    PYTHONSTARTUP even if the flag was set. Contributed by
    Bartosz Sławecki.
  - gh-142991: Fixed socket operations such as recvfrom() and
    sendto() for FreeBSD divert(4) socket.
  - gh-143010: Fixed a bug in mailbox where the precise timing
    of an external event could result in the library opening an
    existing file instead of a file it expected to create.
  - gh-142881: Fix concurrent and reentrant call of
    atexit.unregister().
  - gh-112127: Fix possible use-after-free in
    atexit.unregister() when the callback is unregistered
    during comparison.
  - gh-142783: Fix zoneinfo use-after-free with descriptor
    _weak_cache. a descriptor as _weak_cache could cause
    crashes during object creation. The fix ensures proper
    reference counting for descriptor-provided objects.
  - gh-142754: Add the ownerDocument attribute to
    xml.dom.minidom elements and attributes created by directly
    instantiating the Element or Attr class. Note that this way
    of creating nodes is not supported; creator functions like
    xml.dom.Document.documentElement() should be used instead.
  - gh-142784: The asyncio REPL now properly closes the loop
    upon the end of interactive session. Previously, it could
    cause surprising warnings. Contributed by Bartosz Sławecki.
  - gh-142555: array: fix a crash in a[i] = v when converting
    i to an index via i.__index__ or i.__float__ mutates the
    array.
  - gh-142594: Fix crash in TextIOWrapper.close() when the
    underlying buffer’s closed property calls detach().
  - gh-142451: hmac: Ensure that the HMAC.block_size attribute
    is correctly copied by HMAC.copy. Patch by Bénédikt Tran.
  - gh-142495: collections.defaultdict now prioritizes
    __setitem__() when inserting default values from
    default_factory. This prevents race conditions where
    a default value would overwrite a value set before
    default_factory returns.
  - gh-142651: unittest.mock: fix a thread safety issue where
    Mock.call_count may return inaccurate values when the mock
    is called concurrently from multiple threads.
  - gh-142595: Added type check during initialization of the
    decimal module to prevent a crash in case of broken stdlib.
    Patch by Sergey B Kirpichev.
  - gh-142517: The non-compat32 email policies now correctly
    handle refolding encoded words that contain bytes that can
    not be decoded in their specified character set. Previously
    this resulted in an encoding exception during folding.
  - gh-112527: The help text for required options in argparse
    no longer extended with “ (default: None)”.
  - gh-142315: Pdb can now run scripts from anonymous pipes
    used in process substitution. Patch by Bartosz Sławecki.
  - gh-142282: Fix winreg.QueryValueEx() to not accidentally
    read garbage buffer under race condition.
  - gh-75949: Fix argparse to preserve | separators in mutually
    exclusive groups when the usage line wraps due to length.
  - gh-68552: MisplacedEnvelopeHeaderDefect and Missing header
    name defects are now correctly passed to the handle_defect
    method of policy in FeedParser.
  - gh-142006: Fix a bug in the email.policy.default folding
    algorithm which incorrectly resulted in a doubled newline
    when a line ending at exactly max_line_length was followed
    by an unfoldable token.
  - gh-105836: Fix asyncio.run_coroutine_threadsafe() leaving
    underlying cancelled asyncio task running.
  - gh-139971: pydoc: Ensure that the link to the online
    documentation of a stdlib module is correct.
  - gh-139262: Some keystrokes can be swallowed in the new
    PyREPL on Windows, especially when used together with the
    ALT key. Fix by Chris Eibl.
  - gh-138897: Improved license/copyright/credits display in
    the REPL: now uses a pager.
  - gh-79986: Add parsing for References and In-Reply-To
    headers to the email library that parses the header content
    as lists of message id tokens. This prevents them from
    being folded incorrectly.
  - gh-109263: Starting a process from spawn context in
    multiprocessing no longer sets the start method globally.
  - gh-90871: Fixed an off by one error concerning the backlog
    parameter in create_unix_server(). Contributed by Christian
    Harries.
  - gh-133253: Fix thread-safety issues in linecache.
  - gh-132715: Skip writing objects during marshalling once
    a failure has occurred.
  - gh-127529: Correct behavior of
    asyncio.selector_events.BaseSelectorEventLoop._accept_connection()
    in handling ConnectionAbortedError in a loop. This improves
    performance on OpenBSD.
  - IDLE
  - gh-143774: Better explain the operation of Format / Format
    Paragraph.
  - Documentation
  - gh-140806: Add documentation for enum.bin().
  - Core and Builtins
  - gh-144307: Prevent a reference leak in module teardown at
    interpreter finalization.
  - gh-144194: Fix error handling in perf jitdump
    initialization on memory allocation failure.
  - gh-141805: Fix crash in set when objects with the same hash
    are concurrently added to the set after removing an element
    with the same hash while the set still contains elements
    with the same hash.
  - gh-143670: Fixes a crash in ga_repr_items_list function.
  - gh-143377: Fix a crash in _interpreters.capture_exception()
    when the exception is incorrectly formatted. Patch by
    Bénédikt Tran.
  - gh-143189: Fix crash when inserting a non-str key into
    a split table dictionary when the key matches an existing
    key in the split table but has no corresponding value in
    the dict.
  - gh-143228: Fix use-after-free in perf trampoline when
    toggling profiling while threads are running or during
    interpreter finalization with daemon threads active. The
    fix uses reference counting to ensure trampolines are not
    freed while any code object could still reference them.
    Pach by Pablo Galindo
  - gh-142664: Fix a use-after-free crash in
    memoryview.__hash__ when the __hash__ method of the
    referenced object mutates that object or the view. Patch by
    Bénédikt Tran.
  - gh-142557: Fix a use-after-free crash in bytearray.__mod__
    when the bytearray is mutated while formatting the %-style
    arguments. Patch by Bénédikt Tran.
  - gh-143195: Fix use-after-free crashes in bytearray.hex()
    and memoryview.hex() when the separator’s __len__() mutates
    the original object. Patch by Bénédikt Tran.
  - gh-143135: Set sys.flags.inspect to 1 when PYTHONINSPECT is
    0. Previously, it was set to 0 in this case.
  - gh-143003: Fix an overflow of the shared empty buffer in
    bytearray.extend() when __length_hint__() returns 0 for
    non-empty iterator.
  - gh-143006: Fix a possible assertion error when comparing
    negative non-integer float and int with the same number of
    bits in the integer part.
  - gh-142776: Fix a file descriptor leak in import.c
  - gh-142829: Fix a use-after-free crash in
    contextvars.Context comparison when a custom __eq__ method
    modifies the context via set().
  - gh-142766: Clear the frame of a generator when
    generator.close() is called.
  - gh-142737: Tracebacks will be displayed in fallback mode
    even if io.open() is lost. Previously, this would crash the
    interpreter. Patch by Bartosz Sławecki.
  - gh-142554: Fix a crash in divmod() when
    _pylong.int_divmod() does not return a tuple of length two
    exactly. Patch by Bénédikt Tran.
  - gh-142560: Fix use-after-free in bytearray search-like
    methods (find(), count(), index(), rindex(), and rfind())
    by marking the storage as exported which causes
    reallocation attempts to raise BufferError. For contains(),
    split(), and rsplit() the buffer protocol is used for this.
  - gh-142343: Fix SIGILL crash on m68k due to incorrect
    assembly constraint.
  - gh-141732: Ensure the __repr__() for ExceptionGroup and
    BaseExceptionGroup does not change when the exception
    sequence that was original passed in to its constructor is
    subsequently mutated.
  - gh-100964: Fix reference cycle in exhausted generator
    frames. Patch by Savannah Ostrowski.
  - gh-140373: Correctly emit PY_UNWIND event when generator
    object is closed. Patch by Mikhail Efimov.
  - gh-138568: Adjusted the built-in help() function so that
    empty inputs are ignored in interactive mode.
  - gh-127773: Do not use the type attribute cache for types
    with incompatible MRO.
  - C API
  - gh-142571: PyUnstable_CopyPerfMapFile() now checks that
    opening the file succeeded before flushing.
  - Build
  - gh-142454: When calculating the digest of the JIT stencils
    input, sort the hashed files by filenames before adding
    their content to the hasher. This ensures deterministic
    hash input and hence deterministic hash, independent on
    filesystem order.
  - gh-141808: When running make clean-retain-profile, keep the
    generated JIT stencils. That way, the stencils are not
    generated twice when Profile-guided optimization (PGO) is
    used. It also allows distributors to supply their own
    pre-built JIT stencils.
  - gh-138061: Ensure reproducible builds by making JIT stencil
    header generation deterministic.
- Remove upstreamed patches:
  - CVE-2024-6923-follow-up-EOL-email-headers.patch
  - gh138131-exclude-pycache-from-digest.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1773403200">- Add CVE-2026-2297-SourcelessFileLoader-io_open_code.patch
  ensuring that `SourcelessFileLoader` uses `io.open_code` when
  opening `.pyc` files (bsc#1259240, CVE-2026-2297).</changelog>
  <changelog author="mmachova@suse.com" date="1773748800">- Adapt %suse_version checks to support new %suse_version design for
  16.1 and following (jsc#PED-15850)</changelog>
  <changelog author="mcepl@cepl.eu" date="1773835200">- Fix changelog</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267200">- Add CVE-2026-3644-cookies-Morsel-update-II.patch to reject
  control characters in http.cookies.Morsel.update() and
  http.cookies.BaseCookie.js_output (bsc#1259734, CVE-2026-3644).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267201">- Add CVE-2026-4224-expat-unbound-C-recursion.patch avoiding
  unbound C recursion in conv_content_model in pyexpat.c
  (bsc#1259735, CVE-2026-4224).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774440000">- Add CVE-2025-13462-tarinfo-header-parse.patch which skips
  TarInfo DIRTYPE normalization during GNU long name handling
  (bsc#1259611, CVE-2025-13462).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774612800">- Add CVE-2026-4519-webbrowser-open-dashes.patch to reject
  leading dashes in webbrowser URLs (bsc#1260026, CVE-2026-4519,
  gh#python/cpython#143930).</changelog>
  <changelog author="mcepl@cepl.eu" date="1775131200">- Add CVE-2026-3479-pkgutil_get_data.patch pkgutil.get_data() has
  the same security model as open(). The documented limitations
  ensure compatibility with non-filesystem loaders; Python
  doesn't check that. (bsc#1259989, CVE-2026-3479,
  gh#python/cpython#146121).</changelog>
  <changelog author="mcepl@cepl.eu" date="1775649600">- Update to 3.13.13
  - Security
  - gh-145986: xml.parsers.expat: Fixed a crash caused by
    unbounded C recursion when converting deeply nested XML
    content models with ElementDeclHandler(). This addresses
    CVE 2026-4224 (bsc#1259735, CVE-2026-4224).
  - gh-145599: Reject control characters in http.cookies.Morsel
    update() and js_output(). This addresses CVE 2026-3644
    (bsc#1259734, CVE-2026-3644).
  - gh-145506: Fixes CVE 2026-2297 by ensuring that
    SourcelessFileLoader uses io.open_code() when opening .pyc
    files (bsc#1259240, CVE-2026-2297).
  - gh-144370: Disallow usage of control characters in status
    in wsgiref.handlers to prevent HTTP header injections.
    Patch by Benedikt Johannes.
  - gh-143930: Reject leading dashes in URLs passed to
    webbrowser.open() (bsc#1260026, CVE-2026-4519).
  - Library
  - gh-144503: Fix a regression introduced in 3.14.3 and
    3.13.12 where the multiprocessing forkserver start method
    would fail with BrokenPipeError when the parent process had
    a very large sys.argv. The argv is now passed to the
    forkserver as separate command-line arguments rather than
    being embedded in the -c command string, avoiding the
    operating system’s per-argument length limit.
  - gh-146613: itertools: Fix a crash in itertools.groupby()
    when the grouper iterator is concurrently mutated.
  - gh-146080: ssl: fix a crash when an SNI callback tries to
    use an SSL object that has already been garbage-collected.
    Patch by Bénédikt Tran.
  - gh-146090: sqlite3: fix a crash when
    sqlite3.Connection.create_collation() fails with
    SQLITE_BUSY. Patch by Bénédikt Tran.
  - gh-146090: sqlite3: properly raise MemoryError instead of
    SystemError when a context callback fails to be allocated.
    Patch by Bénédikt Tran.
  - gh-145633: Fix struct.pack('f', float): use PyFloat_Pack4()
    to raise OverflowError. Patch by Sergey B Kirpichev and
    Victor Stinner.
  - gh-146310: The ensurepip module no longer looks for
    pip-*.whl wheel packages in the current directory.
  - gh-146083: Update bundled libexpat to version 2.7.5.
  - gh-146076: zoneinfo: fix crashes when deleting _weak_cache
    from a zoneinfo.ZoneInfo subclass.
  - gh-146054: Limit the size of encodings.search_function()
    cache. Found by OSS Fuzz in #493449985.
  - gh-145883: zoneinfo: Fix heap buffer overflow reads from
    malformed TZif data. Found by OSS Fuzz, issues #492245058
    and #492230068.
  - gh-145750: Avoid undefined behaviour from signed integer
    overflow when parsing format strings in the struct module.
    Found by OSS Fuzz in #488466741.
  - gh-145492: Fix infinite recursion in
    collections.defaultdict __repr__ when a defaultdict
    contains itself. Based on analysis by KowalskiThomas in
    gh-145492.
  - gh-145623: Fix crash in struct when calling repr() or
    __sizeof__() on an uninitialized struct.Struct object
    created via Struct.__new__() without calling __init__().
  - gh-145616: Detect Android sysconfig ABI correctly on 32-bit
    ARM Android on 64-bit ARM kernel
  - gh-145376: Fix null pointer dereference in unusual error
    scenario in hashlib.
  - gh-145551: Fix InvalidStateError when cancelling process
    created by asyncio.create_subprocess_exec() or
    asyncio.create_subprocess_shell(). Patch by Daan De Meyer.
  - gh-145417: venv: Prevent incorrect preservation of SELinux
    context when copying the Activate.ps1 script. The script
    inherited the SELinux security context of the system
    template directory, rather than the destination project
    directory.
  - gh-145301: hashlib: fix a crash when the initialization of
    the underlying C extension module fails.
  - gh-145264: Base64 decoder (see binascii.a2b_base64(),
    base64.b64decode(), etc) no longer ignores excess data
    after the first padded quad in non-strict (default) mode.
    Instead, in conformance with RFC 4648, section 3.3, it now
    ignores the pad character, “=”, if it is present before the
    end of the encoded data.
  - gh-145158: Avoid undefined behaviour from signed integer
    overflow when parsing format strings in the struct module.
  - gh-144984: Fix crash in
    xml.parsers.expat.xmlparser.ExternalEntityParserCreate()
    when an allocation fails. The error paths could dereference
    NULL handlers and double-decrement the parent parser’s
    reference count.
  - gh-88091: Fix unicodedata.decomposition() for Hangul
    characters.
  - gh-144835: Added missing explanations for some parameters
    in glob.glob() and glob.iglob().
  - gh-144833: Fixed a use-after-free in ssl when SSL_new()
    returns NULL in newPySSLSocket(). The error was reported
    via a dangling pointer after the object had already been
    freed.
  - gh-144259: Fix inconsistent display of long multiline
    pasted content in the REPL.
  - gh-144156: Fix the folding of headers by the email library
    when RFC 2047 encoded words are used. Now whitespace is
    correctly preserved and also correctly added between
    adjacent encoded words. The latter property was broken by
    the fix for gh-92081, which mostly fixed previous failures
    to preserve whitespace.
  - gh-66305: Fixed a hang on Windows in the tempfile module
    when trying to create a temporary file or subdirectory in
    a non-writable directory.
  - gh-140814: multiprocessing.freeze_support() no longer sets
    the default start method as a side effect, which previously
    caused a subsequent multiprocessing.set_start_method() call
    to raise RuntimeError.
  - gh-144475: Calling repr() on functools.partial() is now
    safer when the partial object’s internal attributes are
    replaced while the string representation is being
    generated.
  - gh-144538: Bump the version of pip bundled in ensurepip to
    version 26.0.1
  - gh-144363: Update bundled libexpat to 2.7.4
  - gh-143637: Fixed a crash in socket.sendmsg() that could
    occur if ancillary data is mutated re-entrantly during
    argument parsing.
  - gh-143880: Fix data race in functools.partial() in the free
    threading build.
  - gh-143543: Fix a crash in itertools.groupby that could
    occur when a user-defined __eq__() method re-enters the
    iterator during key comparison.
  - gh-140652: Fix a crash in _interpchannels.list_all() after
    closing a channel.
  - gh-143698: Allow scheduler and setpgroup arguments to be
    explicitly None when calling os.posix_spawn() or
    os.posix_spawnp(). Patch by Bénédikt Tran.
  - gh-143698: Raise TypeError instead of SystemError when the
    scheduler in os.posix_spawn() or os.posix_spawnp() is not
    a tuple. Patch by Bénédikt Tran.
  - gh-143304: Fix ctypes.CDLL to honor the handle parameter on
    POSIX systems.
  - gh-142781: zoneinfo: fix a crash when instantiating
    ZoneInfo objects for which the internal class-level cache
    is inconsistent.
  - gh-142763: Fix a race condition between zoneinfo.ZoneInfo
    creation and zoneinfo.ZoneInfo.clear_cache() that could
    raise KeyError.
  - gh-142787: Fix assertion failure in sqlite3 blob subscript
    when slicing with indices that result in an empty slice.
  - gh-142352: Fix asyncio.StreamWriter.start_tls() to transfer
    buffered data from StreamReader to the SSL layer,
    preventing data loss when upgrading a connection to TLS
    mid-stream (e.g., when implementing PROXY protocol
    support).
  - gh-141707: Don’t change tarfile.TarInfo type from AREGTYPE
    to DIRTYPE when parsing GNU long name or link headers
    (bsc#1259611, CVE-2025-13462).
  - gh-139933: Improve AttributeError suggestions for classes
    with a custom __dir__() method returning a list of
    unsortable values. Patch by Bénédikt Tran.
  - gh-138891: Fix SyntaxError when inspect.get_annotations(f,
    eval_str=True) is called on a function annotated with a PEP
    646 star_expression
  - gh-137335: Get rid of any possibility of a name conflict
    for named pipes in multiprocessing and asyncio on Windows,
    no matter how small.
  - gh-80667: Support lookup for Tangut Ideographs in
    unicodedata.
  - bpo-40243: Fix unicodedata.ucd_3_2_0.numeric() for
    non-decimal values.
  - Documentation
  - gh-126676: Expand argparse documentation for type=bool with
    a demonstration of the surprising behavior and pointers to
    common alternatives.
  - gh-145450: Document missing public wave.Wave_write getter
    methods.
  - Core and Builtins
  - gh-148157: Fix an unlikely crash when parsing an invalid
    type comments for function parameters. Found by OSS Fuzz in
    [#492782951].
  - gh-146615: Fix a crash in __get__() for METH_METHOD
    descriptors when an invalid (non-type) object is passed as
    the second argument. Patch by Steven Sun.
  - gh-146128: Fix a bug which could cause constant values to
    be partially corrupted in AArch64 JIT code. This issue is
    theoretical, and hasn’t actually been observed in
    unmodified Python interpreters.
  - gh-146250: Fixed a memory leak in SyntaxError when
    re-initializing it.
  - gh-146245: Fixed reference leaks in socket when audit hooks
    raise exceptions in socket.getaddrinfo() and
    socket.sendto().
  - gh-146227: Fix wrong type in _Py_atomic_load_uint16 in the
    C11 atomics backend (pyatomic_std.h), which used a 32-bit
    atomic load instead of 16-bit. Found by Mohammed Zuhaib.
  - gh-146056: Fix repr() for lists containing NULLs.
  - gh-145990: python --help-env sections are now sorted by
    environment variable name.
  - gh-145376: Fix GC tracking in structseq.__replace__().
  - gh-142183: Avoid a pathological case where repeated calls
    at a specific stack depth could be significantly slower.
  - gh-145783: Fix an unlikely crash in the parser when certain
    errors were erroneously not propagated. Found by OSS Fuzz
    in #491369109.
  - gh-145701: Fix SystemError when __classdict__ or
    __conditional_annotations__ is in a class-scope inlined
    comprehension. Found by OSS Fuzz in #491105000.
  - gh-145335: Fix a crash in os.pathconf() when called with -1
    as the path argument.
  - gh-145234: Fixed a SystemError in the parser when an
    encoding cookie (for example, UTF-7) decodes to carriage
    returns (\r). Newlines are now normalized after decoding in
    the string tokenizer.
  - Patch by Pablo Galindo.
  - gh-130555: Fix use-after-free in dict.clear() when the
    dictionary values are embedded in an object and
    a destructor causes re-entrant mutation of the dictionary.
  - gh-145008: Fix a bug when calling certain methods at the
    recursion limit which manifested as a corruption of
    Python’s operand stack. Patch by Ken Jin.
  - gh-144872: Fix heap buffer overflow in the parser found by
    OSS-Fuzz.
  - gh-144766: Fix a crash in fork child process when perf
    support is enabled.
  - gh-144759: Fix undefined behavior in the lexer when start
    and multi_line_start pointers are NULL in
    _PyLexer_remember_fstring_buffers() and
    _PyLexer_restore_fstring_buffers(). The NULL pointer
    arithmetic (NULL - valid_pointer) is now guarded with
    explicit NULL checks.
  - gh-144601: Fix crash when importing a module whose PyInit
    function raises an exception from a subinterpreter.
  - gh-143636: Fix a crash when calling
    SimpleNamespace.__replace__() on non-namespace instances.
    Patch by Bénédikt Tran.
  - gh-143650: Fix race condition in importlib where a thread
    could receive a stale module reference when another
    thread’s import fails.
  - gh-140594: Fix an out of bounds read when a single NUL
    character is read from the standard input. Patch by Shamil
    Abdulaev.
  - gh-91636: While performing garbage collection, clear
    weakrefs to unreachable objects that are created during
    running of finalizers. If those weakrefs were are not
    cleared, they could reveal unreachable objects.
  - gh-130327: Fix erroneous clearing of an object’s __dict__
    if overwritten at runtime.
  - gh-80667: Literals using the \N{name} escape syntax can now
    construct CJK ideographs and Hangul syllables using
    case-insensitive names.
  - Build
  - gh-146541: The Android testbed can now be built for 32-bit
    ARM and x86 targets.
  - gh-146450: The Android build script was modified to improve
    parity with other platform build scripts.
  - gh-145801: When Python build is optimized with GCC using
    PGO, use -fprofile-update=atomic option to use atomic
    operations when updating profile information. This option
    reduces the risk of gcov Data Files (.gcda) corruption
    which can cause random GCC crashes. Patch by Victor
    Stinner.
  - gh-129259: Fix AIX build failures caused by incorrect
    struct alignment in _Py_CODEUNIT and _Py_BackoffCounter by
    adding AIX-specific #pragma pack directives.
  - Tests
  - gh-144418: The Android testbed’s emulator RAM has been
    increased from 2 GB to 4 GB.
  - gh-146202: Fix a race condition in regrtest: make sure that
    the temporary directory is created in the worker process.
    Previously, temp_cwd() could fail on Windows if the “build”
    directory was not created. Patch by Victor Stinner.
  - gh-144739: When Python was compiled with system expat older
    then 2.7.2 but tests run with newer expat, still skip
    test.test_pyexpat.MemoryProtectionTest.
- Removed upstreamed patches:
  - CVE-2025-13462-tarinfo-header-parse.patch
  - CVE-2026-2297-SourcelessFileLoader-io_open_code.patch
  - CVE-2026-3479-pkgutil_get_data.patch
  - CVE-2026-3644-cookies-Morsel-update-II.patch
  - CVE-2026-4224-expat-unbound-C-recursion.patch
  - CVE-2026-4519-webbrowser-open-dashes.patch</changelog>
</package>
<package pkgid="700771a0325f6777b836c3121038ea85609771eaec90210660d0684ee69eb838554da6721ba18b17d962459f108b4d7cfd9d7df99355ddd41574170e750880d5" name="python313-Jinja2" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="160000.2.2"/>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1705060800">- update to 3.1.3 (bsc#1218722, CVE-2024-22195):
  * Fix compiler error when checking if required blocks in parent
    templates are xmlattr filter does not allow keys with spaces.
  * Make error messages stemming from invalid nesting of {% trans
    %} blocks more helpful. :pr:`1916`</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706529600">- Disable broken test with latest version of MarkupSafe (2.1.4)
  (gh#pallets/jinja#1930, gh#pallets/markupsafe#417)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- update to 3.1.4 (bsc#1223980, CVE-2024-34064):
  * The xmlattr filter does not allow keys with / solidus, &gt;
    greater-than sign, or = equals sign, in addition to disallowing
    spaces. Regardless of any validation done by Jinja, user input
    should never be used as keys to this filter, or must be separately
    validated first.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1722340800">- Cherry-pick patch from Fedora to fix FTBFS with Python 3.13
  * fix-ftbfs-with-python313.patch
- Add new build dependency python-trio to BuildRequires</changelog>
  <changelog author="ecsos@opensuse.org" date="1727179200">- Fix build error under Leap.</changelog>
  <changelog author="nico.krapp@suse.com" date="1735300800">- Update to 3.1.5:
  * The sandboxed environment handles indirect calls to str.format,
    such as by passing a stored reference to a filter that calls
    its argument. GHSA-q2x7-8rv6-6q7h
  * Escape template name before formatting it into error messages,
    to avoid issues with names that contain f-string syntax. #1792,
    GHSA-gmj6-6f8f-6699
  * Sandbox does not allow clear and pop on known mutable sequence
    types. #2032
  * Calling sync render for an async template uses asyncio.run. #1952
  * Avoid unclosed auto_aiter warnings. #1960
  * Return an aclose-able AsyncGenerator from
    Template.generate_async. #1960
  * Avoid leaving root_render_func() unclosed in
    Template.generate_async. #1960
  * Avoid leaving async generators unclosed in blocks, includes and
    extends. #1960
  * The runtime uses the correct concat function for the current
    environment when calling block references. #1701
  * Make |unique async-aware, allowing it to be used after another
    async-aware filter. #1781
  * |int filter handles OverflowError from scientific notation. #1921
  * Make compiling deterministic for tuple unpacking in a {% set ... %}
    call. #2021
  * Fix dunder protocol (copy/pickle/etc) interaction with Undefined
    objects. #2025
  * Fix copy/pickle support for the internal missing object. #2027
  * Environment.overlay(enable_async) is applied correctly. #2061
  * The error message from FileSystemLoader includes the paths that
    were searched. #1661
  * PackageLoader shows a clearer error message when the package does
    not contain the templates directory. #1705
  * Improve annotations for methods returning copies. #1880
  * urlize does not add mailto: to values like @a@b. #1870
  * Tests decorated with @pass_context can be used with the
    |select filter. #1624
  * Using set for multiple assignment (a, b = 1, 2) does not fail when
    the target is a namespace attribute. #1413
  * Using set in all branches of {% if %}{% elif %}{% else %} blocks does
    not cause the variable to be considered initially undefined. #1253
- drop fix-ftbfs-with-python313.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1741608000">- Update to 3.1.6
  * The ``|attr`` filter does not bypass the environment's attribute lookup,
    allowing the sandbox to apply its checks.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1742212800">- Skip test_elif_deep on s390x arch</changelog>
</package>
<package pkgid="fd0a6e807793420255996bd3cb76849e858d628dd1c62ece70a12965ebc084823fe133db2fcfab7ab3cef0891faa47b3f01d1a0e0bdce8a712f29252551901ee" name="python313-M2Crypto" arch="x86_64">
  <version epoch="0" ver="0.45.1" rel="160000.2.2"/>
  <changelog author="daniel.garcia@suse.com" date="1712145600">- Build for modern python stack on SLE/Leap</changelog>
  <changelog author="mcepl@cepl.eu" date="1723291200">- Update 0.42.0:
  - allow ASN1_{Integer,String} be initialized directly
  - minimal infrastructure for type hints for a C extension and
    some type hints for some basic modules
  - time_t on 32bit Linux is 32bit (integer) not 64bit (long)
  - EOS for CentOS 7
  - correct checking for OpenSSL version number on Windows
  - make compatible with Python 3.13 (replace PyEval_CallObject
    with PyObject_CallObject)
  - fix typo in extern function signature (and proper type of
    engine_ctrl_cmd_string())
  - move the package to Sorucehut
  - setup CI to use Sourcehut CI
  - setup CI on GitLab for Windows as well (remove Appveyor)
  - initial draft of documentation for migration to
    pyca/cryptography
  - fix Read the Docs configuration (contributed kindly by Facundo
    Tuesca)
- Remove upstreamed 32bit_ASN1_Time.patch
- Remove python-M2Crypto.keyring, because PyPI broke GPG support</changelog>
  <changelog author="mcepl@cepl.eu" date="1730289600">- Update to 0.43.0:
  - feat[m2]: add m2.time_t_bits to checking for 32bitness.
  - fix[tests]: Use only X509_VERSION_1 (0) as version for CSR.
  - fix[EC]: raise ValueError when load_key_bio() cannot read the
    file (bsc#1231589).
  - ci: use -mpip wheel instead of -mbuild
  - fix: use PyMem_Malloc() instead of malloc()
  - fix[hints]: more work on conversion of type hints to the py3k ones
  - fix: make the package build even on Python 3.6
  - ci[local]: skip freezing local tests
  - fix[hints]: remove AnyStr type
  - test: add suggested test for RSA.{get,set}_ex_data
  - fix: implement interfaces for RSA_{get,set}_ex_new_{data,index}
  - fix: generate src/SWIG/x509_v_flag.h to overcome weaknesses of
    swig
  - fix: replace literal enumeration of all VERIFY_ constants by a
    cycle
  - test: unify various test cases in test_ssl related to ftpslib
  - fix: replace deprecated url keyword in setup.cfg with complete
    project_urls map</changelog>
  <changelog author="mcepl@cepl.eu" date="1739361600">- The real license is BSD 2-Clause, not MIT.</changelog>
  <changelog author="mcepl@cepl.eu" date="1739793600">- Update to 0.44.0:
  - fix(rsa): introduce internal cache for rsa.check_key()
    (bsc#1236664, srht#mcepl/m2crypto#369)
  - fix[authcookie]: modernize the module
  - fix(_lib): add missing #include for windows
  - ci: relax fedora crypto policy to legacy.
  - enhance setup.py for macos compatibility
  - prefer packaging.version over distutils.version
  - fix segfault with openssl 3.4.0
  - fix[ec]: raise ioerror instead when load_key_bio() cannot read
    the file.
  - doc: update installation instructions for windows.
  - fix setting x509.verify_* variables
  - fix building against openssl in non-standard location
  - test_x509: use only x509_version_1 (0) as version for csr.</changelog>
  <changelog author="mcepl@cepl.eu" date="1739880000">- Fix spelling of BSD-2-Clause license.
- Add rpmlintrc … overflow of ignorable rpmlint warnings caused
  me not to see the previous problem.</changelog>
  <changelog author="mcepl@suse.com" date="1739966400">- Change macro to %{?sle15allpythons} so we build both Python 3.6
  and Python 3.11 on SLE-15.</changelog>
  <changelog author="mcepl@cepl.eu" date="1743595200">- Allow for ambiguity in first letter of directories in
  %{python_sitearch}.</changelog>
  <changelog author="mcepl@cepl.eu" date="1744891200">- Update to 0.45.0:
  - chore: preparing 0.45.0 release
  - fix(lib,ssl): rewrite ssl_accept, ssl_{read,write}_nbio for better error handling
  - fix: replace m2_PyBuffer_Release with native PyBuffer_Release
  - chore: build Windows builds with Python 3.13 as well
  - fix: remove support for Engine
  - chore: use actual license of the project
  - ci(Debian): make M2Crypto buildable on Debian (bsc#1240965)
  - swig: Workaround for reading sys/select.h ending with wrong types.
  - ci: bump required setuptools version because of change in naming strategy
  - fix: add fix for build with older GCC
  - fix: remove AnyStr and Any types</changelog>
  <changelog author="mcepl@cepl.eu" date="1745409600">- Update to 0.45.1:
  - ci: switch from using sha1 to sha256.
  - ci(keys): regenerate rsa*.pem keys as well
  - fix: make the package compatible with OpenSSL &gt;= 3.4 (don’t
    rely on LEGACY crypto-policies)
  - chore: package also system_shadowing directory to make builds more reliable</changelog>
</package>
<package pkgid="e44833301dbe3ac6baf0b4a16224fc4475d560820e85426f700e35e123f37873def54ef2781f12b95135304ebccfa2f79503453e4a0caabd9d7fbe5687b11a3b" name="python313-MarkupSafe" arch="x86_64">
  <version epoch="0" ver="3.0.2" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1687176000">- update to 2.1.3:
  * Implement ``format_map``, ``casefold``, ``removeprefix``,
    and ``removesuffix`` methods.
  * Fix static typing for basic ``str`` methods on ``Markup``.
  * Use ``Self`` for annotating return types. :pr:`379`</changelog>
  <changelog author="dmueller@suse.com" date="1706270400">- update to 2.1.4:
  * Don't use regular expressions for striptags, avoiding a
    performance issue. :pr:`413`</changelog>
  <changelog author="dmueller@suse.com" date="1707048000">- update to 2.1.5:
  * Fix striptags not collapsing spaces. :issue:`417`</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- add buildignores to break buildcycle over
  p11-kit/dbus-1/systemd:mini/python-MarkupSafe</changelog>
  <changelog author="mcepl@cepl.eu" date="1733313600">- The test suite survives without
  ca-certificates-mozilla-prebuilt now, so we can remove BR (and
  avoid deadly cycles).</changelog>
  <changelog author="dmueller@suse.com" date="1740052800">- split test dependencies into a multibuild to break cycle
  with pytest</changelog>
  <changelog author="steven.kowalik@suse.com" date="1742904000">- Lowercase metadata directory name.</changelog>
  <changelog author="mmachova@suse.com" date="1743508800">- Make the dist-info name case-insensitive</changelog>
  <changelog author="nico.krapp@suse.com" date="1746014400">- Update to 3.0.2
  * Fix compatibility when __str__ returns a str subclass. #472
  * Build requires setuptools &gt;= 70.1. #475
- Update to 3.0.1
  * Address compiler warnings that became errors in GCC 14. #466
  * Fix compatibility with proxy objects. #467
- Update to 3.0.0
  * Support Python 3.13 and its experimental free-threaded build. #461
  * Drop support for Python 3.7 and 3.8.
  * Use modern packaging metadata with pyproject.toml instead
    of setup.cfg. #348
  * Change distutils imports to setuptools. #399
  * Use deferred evaluation of annotations. #400
  * Update signatures for Markup methods to match str signatures.
    Use positional-only arguments. #400
  * Some str methods on Markup no longer escape their argument: strip,
    lstrip, rstrip, removeprefix, removesuffix, partition, and
    rpartition; replace only escapes its new argument. These methods
    are conceptually linked to search methods such as in, find, and
    index, which already do not escape their argument. #401
  * The __version__ attribute is deprecated. Use feature detection,
    or importlib.metadata.version("markupsafe"), instead. #402
  * Speed up escaping plain strings by 40%. #434
  * Simplify speedups implementation. #437</changelog>
</package>
<package pkgid="bd75bd47c5aa547d65a33b1ef37d3d53a7569ea591797eecb9c24bb14f90cb06235e39756eccc1bcfc738abc88668c47f16bc7f7d01002f2fd0e49c39c5b08d6" name="python313-PyJWT" arch="noarch">
  <version epoch="0" ver="2.12.1" rel="160000.1.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1722859200">- Update to version 2.9.0
  * Drop support for Python 3.7 (EOL) by @hugovk in #910
  * Allow JWT issuer claim validation to accept a list of
    strings too by @mattpollak in #913
  * Fix unnecessary string concatenation by @sirosen in #904
  * Fix docs for ``jwt.decode_complete`` to include ``strict_aud``
    option by @woodruffw in #923
  * Fix docs step by @jpadilla in #950
  * Fix: Remove an unused variable from example code block
    by @kenkoooo in #958
  * Add support for Python 3.12 by @hugovk in #910
  * Improve performance of ``is_ssh_key`` + add unit test by @bdraco in #940
  * Allow ``jwt.decode()`` to accept a PyJWK object by @luhn in #886
  * Make ``algorithm_name`` attribute available on PyJWK by @luhn in #886
  * Raise ``InvalidKeyError`` on invalid PEM keys to be compatible
    with cryptography 42.x.x by @CollinEMac in #952
  * Raise an exception when required cryptography dependency
    is missing by @tobloef in #963</changelog>
  <changelog author="daniel.garcia@suse.com" date="1723550400">- Skip failing test gh#jpadilla/pyjwt#802</changelog>
  <changelog author="code@bnavigator.de" date="1728302400">- Fix requirements</changelog>
  <changelog author="adrian@suse.de" date="1732104000">- Update to version 2.10.0
  * chore: use sequence for typing rather than list
  * Add support for Python 3.13
  * [pre-commit.ci] pre-commit autoupdate
  * Add an RTD config file to resolve RTD build failures
  * docs: Update iat exception docs
  * Remove algorithm requirement for JWT API
  * [pre-commit.ci] pre-commit autoupdate
  * Create SECURITY.md
  * docs fix: decode_complete scope and algorithms
  * fix doctest for docs/usage.rst
  * fix test_utils.py not to xfail
  * Correct jwt.decode audience param doc expression
  * Add PS256 encoding and decoding usage
  * Add API docs for PyJWK
  * Refactor project configuration files from setup.cfg to pyproject.toml PEP-518
  * Add JWK support to JWT encode
  * Update pre-commit hooks to lint pyproject.toml
  * Add EdDSA algorithm encoding/decoding usage
  * Ruff linter and formatter changes
  * Validate sub and jti claims for the token
  * Add ES256 usage
  * Encode EC keys with a fixed bit length
  * [pre-commit.ci] pre-commit autoupdate
  * Drop support for Python 3.8
  * Prepare 2.10.0 release
  * Bump codecov/codecov-action from 4 to 5
  * [pre-commit.ci] pre-commit autoupdate</changelog>
  <changelog author="daniel.garcia@suse.com" date="1733227200">- Update to version 2.10.1 (bsc#1234038, CVE-2024-53861):
  * Prevent partial matching of iss claim. Thanks @fabianbadoi!
    (See: GHSA-75c5-xw7c-p5pm)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1742904000">- Lowercase metadata directory name.</changelog>
  <changelog author="mmachova@suse.com" date="1743508800">- Wrap the metadata directory name in a distro-based conditional</changelog>
  <changelog author="mrueckert@suse.de" date="1743681600">- Just use a wildcard for the dist-info metadata to make it
  properly work on all setuptools versions.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1761566400">- Remove not needed update-alternatives requirement.</changelog>
  <changelog author="mcepl@cepl.eu" date="1773835200">- Skip failing tests (gh#jpadilla/pyjwt#1153)
- Update to 2.12.1:
  - Add missing typing_extensions dependency for Python &lt; 3.11 in
    [#1150]
- Update to 2.12.0:
  - Fixed
  - Annotate PyJWKSet.keys for pyright by @tamird in #1134
  - Close HTTPError response to prevent ResourceWarning on
    Python 3.14 by @veeceey in #1133
  - Do not keep algorithms dict in PyJWK instances by @akx in
    [#1143]
  - Validate the crit (Critical) Header Parameter defined in
    RFC 7515 §4.1.11. by @dmbs335 in GHSA-752w-5fwx-jx9f
    (bsc#1259616, CVE-2026-32597).
  - Use PyJWK algorithm when encoding without explicit
    algorithm in #1148
  - Added
  - Docs: Add PyJWKClient API reference and document the
    two-tier caching system (JWK Set cache and signing key LRU
    cache). v2.11.0
  - Fixed
  - Enforce ECDSA curve validation per RFC 7518 Section 3.4.
  - Fix build system warnings by @kurtmckee in #1105
  - Validate key against allowed types for Algorithm family in
    [#964]
  - Add iterator for JWKSet in #1041
  - Validate iss claim is a string during encoding and decoding
    by @pachewise in #1040
  - Improve typing/logic for options in decode, decode_complete
    by @pachewise in #1045
  - Declare float supported type for lifespan and timeout by
    @nikitagashkov in #1068
  - Fix SyntaxWarnings/DeprecationWarnings caused by invalid
    escape sequences by @kurtmckee in #1103
  - Development: Build a shared wheel once to speed up test
    suite setup times by @kurtmckee in #1114
  - Development: Test type annotations across all supported
    Python versions, increase the strictness of the type
    checking, and remove the mypy pre-commit hook by @kurtmckee
    in #1112
  - Added
  - Support Python 3.14, and test against PyPy 3.10 and 3.11 by
    @kurtmckee in #1104
  - Development: Migrate to build to test package building in
    CI by @kurtmckee in #1108
  - Development: Improve coverage config and eliminate unused
    test suite code by @kurtmckee in #1115
  - Docs: Standardize CHANGELOG links to PRs by @kurtmckee in
    [#1110]
  - Docs: Fix Read the Docs builds by @kurtmckee in #1111
  - Docs: Add example of using leeway with nbf by @djw8605 in
    [#1034]
  - Docs: Refactored docs with autodoc; added PyJWS and
    jwt.algorithms docs by @pachewise in #1045
  - Docs: Documentation improvements for "sub" and "jti" claims
    by @cleder in #1088
  - Development: Add pyupgrade as a pre-commit hook by
    @kurtmckee in #1109
  - Add minimum key length validation for HMAC and RSA keys
    (CWE-326). Warns by default via InsecureKeyLengthWarning
    when keys are below minimum recommended lengths per RFC
    7518 Section 3.2 (HMAC) and NIST SP 800-131A (RSA). Pass
    enforce_minimum_key_length=True in options to PyJWT or
    PyJWS to raise InvalidKeyError instead.
  - Refactor PyJWT to own an internal PyJWS instance instead of
    calling global api_jws functions.</changelog>
</package>
<package pkgid="a98187925f59d26e79419a57a944ec550b576ee779c7c0d757acd85f88664d820b53780340a09808da61aead27a37cfb2471edf7a788f606c1b65c6146802799" name="python313-PyYAML" arch="x86_64">
  <version epoch="0" ver="6.0.2" rel="160000.2.2"/>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1691928000">- update to 6.0.1:
  * pin Cython to &lt; 3.0</changelog>
  <changelog author="dmueller@suse.com" date="1695124800">- cleanup</changelog>
  <changelog author="steven.kowalik@suse.com" date="1708948800">- Switch to pyproject and autosetup macros.
- Drop patch setuptools.patch, we can now cope.</changelog>
  <changelog author="dmueller@suse.com" date="1719835200">- add build-with-cython3.patch from 6.0.2rc1 to build with
  cython3 (needed for python 3.13+)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727870400">- Update to 6.0.2
  * Support for Cython 3.x and Python 3.13
- Adjust invocation path for testsuite
- Adjust upstream source name in spec file
- Drop build-with-cython3.patch, merged upstream</changelog>
  <changelog author="steven.kowalik@suse.com" date="1742904000">- Lowercase metadata directory name.</changelog>
  <changelog author="mmachova@suse.com" date="1743508800">- Wrap the metadata directory name in a distro-based conditional</changelog>
  <changelog author="mrueckert@suse.de" date="1744891200">- dont use suse version for the dist info handling as people can
  build with newer setuptools on older distros</changelog>
</package>
<package pkgid="bdff47464eabf840a8bf9ece0148a2a236edf8551522df34aa950ab253926b1c6437976e0dba6e4476a82e7e3de47b4e7a0f710ab7315ab29e2c318f78e2f572" name="python313-Pygments" arch="noarch">
  <version epoch="0" ver="2.19.1" rel="160000.2.2"/>
  <changelog author="benoit.monin@gmx.fr" date="1691409600">- update to version 2.16.1:
  * Fix native style missing from style list (#2484)
- additional changes from version 2.16.0:
  * New lexers:
    + ASN.1 (#2462)
    + Blueprint (#2434)
    + BQN (#2472)
    + DNS zone files (#2464)
    + GraphQL (#2428)
    + Linux desktop files (following the specification of the
    Freedesktop group, formerly known as XDG) (#2470)
    + NVIDIA PTX (#2432)
    + OpenSCAD (#2449)
    + systemd (#2470)
    + TLS presentation language (#2455)
    + Verifpal (#2430)
    + YARA (#2453)
  * Updated lexers:
    + ASC: Add application/pem-certificate-chain mimetype (#2471)
    + C/C++: Refine keyword lists (#2421, #2422)
    + Carbon: Fix long processing times on invalid input, fix
    number lexing (#2454, #2456)
    + Elpi: Handle quotations (#2419)
    + Go: Support additional built-ins (#2481)
    + HTTP: Support empty headers (#2461), support more general
    methods (#2460), also recognize responses in analyse_text
    implementation (#2460), and highlight URL encoded data
    (#2465, #1620)
    + Igor Pro: Update to Igor Pro 9 (#2482)
    + lean: Recognize expressions nested within attributes (#1817)
    + Macaulay2: Update builtins (#2457)
    + Markdown: Allow extra characters after language name in code
    blocks (#2437)
    + NestedText: Update to version 3 (#2459)
    + scdoc: Improve language guessing implementation (#2402)
    + Spice: Update to latest version (#2476)
    + Transact SQL: Add Pre-sorted Group keyword (#2417)
    + Uxntal: Update for current runes (#2424)
    + Wikitext: Fix templates in wiki links; fix a language
    converter false positive; add bold italic markup (#2447)
  * Add Generic.EmphStrong token for bold italic markup (#2444)
  * Add Lightbulb style (#2474)
  * Improve contrast in Monokai style (#2448)
  * Add documentation how to create terminal code highlighting
    commands (#2131, #2425)
  * Add support for loading TrueType fonts to the ImageFormatter
    (#1960)</changelog>
  <changelog author="mcepl@cepl.eu" date="1699185600">- Add skip-wcag-contrast-ratio.patch to make
  python-wcag-contrast-ratio just optional dependency
  (gh#pygments/pygments!2564).</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 2.17.2:
  * Fix a packaging issue on macOS
  * Updated lexers:
  * TOML: Fix bug making lexing of single-quoted strings too
    eager
  * Cypher: fix comment matching, add missing keywords
  * Fortran: add ``elseif`` keyword
  * Lean: make it available as ``lean3``, in preparation for
  * a possible switch to ``lean`` highlighting as Lean 4
  * JSON: add MIME types and file extensions for several line-
    delimited JSON formats
  * Nix: many improvements
  * OCaml: Add ``and`` keyword, remove ``value`` from keywords
  * Python: add ``starlark`` and ``bazel`` aliases
  * Snowball: Treat ``len`` like ``size``
  * Spice: add ``panic`` keyword and ``-&gt;`` operator
  * squid.conf: fix catastrophic backtracking
  * TOML: rewritten, with many fixes
  * Turtle: support blank nodes
  * Wikitext: fix erroneous highlighting of LanguageConverter
    markup
  * CMake: support ``[=[ bracketed arguments ]=]```
  * Fix ctags support and tests
  * Include ``Lexer.add_filter`` in the documentation
  * Add a ``Lean3Lexer`` alias
  * The ``pygments.styles`` module contains a new ``STYLES``
    variable with a dictionary of built-in styles.  The old
    ``STYLE_MAP`` variable, which uses a different format,
    is kept for backwards compatibility.
  * On Windows, add a new installation extra (``windows-
    terminal``) which pulls in dependencies for colored
    console output. See :doc:`cmdline` for more details.
  * Support more file types in ``autopygmentize`` script
  * Change color of numbers in ``rrt`` style
  * Fix error when trying to look up plugin formatters by file
    extension of the output format
  * Use Hatchling as a build backend instead of setuptools.
  * This change is transparent to most users. Distribution
    packagers who build without build isolation need to add
    hatchling as a build dependency and remove setuptools.
    People downloading source distributions and wheels from PyPI
    directly should note that they now have ``pygments`` in their
    file names instead of ``Pygments``.
  * Improve the test framework to also check for lost tokens when
    processing the snippets and example files
  * Improve the *Dracula* style definition to make it easier to
    maintain</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1714996800">- update to version 2.18.0:
  * New lexers:
    + Janet (#2557)
    + Lean 4 (#2618, #2626)
    + Luau (#2605)
    + Mojo (#2691, #2515)
    + org-mode (#2628, #2636)
    + Promela (#2620)
    + Soong / ``Android.bp`` (#2659)
    + Tact (#2571)
    + Typst (#2596)
  * Updated lexers:
    + Awk: recognize ternary operator (#2687)
    + Bash: add ``openrc`` alias (#2599, #2371)
    + Coq: add keywords, lex more vernacular command arguments,
    produce fewer tokens on heading comments (#2678)
    + DNS zone files: Fix comment parsing (#2595)
    + Hy: Support unicode literals (#1126)
    + Inform6: Update to Inform 6.42 (#2644)
    + lean: Fix name handling (#2614)
    + Logtalk: add ``uninstantiation`` keyword and recognize escape
    sequences (#2619)
    + Macaulay2: Update to 1.23 (#2655)
    + Python: fix highlighting of soft keywords before ``None``/
    ``True``/``False``
    + reStructuredText: use ``Token.Comment`` for comments instead
    of ``Comment.Preproc`` (#2598)
    + Rust: highlight ``:``, ``::`` and ``-&gt;`` as ``Punctuation``
    and whitespace as ``Whitespace``, instead of ``Text`` in both
    cases (#2631)
    + Spice: Add keywords (#2621)
    + SQL Explain: allow negative numbers (#2610)
    + Swift: Support multiline strings (#2681)
    + ThingsDB: add constants and new functions; support template
    strings (#2624)
    + UL4: support nested ``&lt;?doc?&gt;`` and ``&lt;?note?&gt;`` tags (#2597)
    + VHDL: support multi-line comments of VHDL-2008 (#2622)
    + Wikitext: Remove ``kk-*`` in ``variant_langs`` (#2647)
    + Xtend: Add ``val`` and ``var`` (#2602)
  * New styles:
    + Coffee (#2609)
  * Make background colors in the image formatter work with Pillow
    10.0 (#2623)
  * Require Python 3.8. As a result, the ``importlib-metadata``
    package is no longer needed for fast plugin discovery on Python
    3.7. The ``plugins`` extra (used as, e.g., ``pip install
    pygments[plugins]``) is kept for backwards compatibility but
    now has no effect. (#2601)
  * Require the ``url`` attribute for lexers inside Pygments, add
    it to many lexers (#2588)
  * Replace Pyflakes linter with Ruff (#2592)
  * Add macOS CI (#2594)
  * Built-in lexers now declare the version of Pygments in which
    they were added in a required ``version_added`` lexer attribute
    instead of a ``.. versionadded::`` directive in the docstring
    (#2589, #2634)
  * The ``url`` attribute is now required for built-in lexers and
    has been added to all existing lexers (#2588)
  * The RTF formatter supports line number and line highlighting
    now (#1217, #2654)
  * Add ``\sa0`` keyword in the RTF formatter (#1111, #2607)
  * Register ``pycon`` as an alias for the Python console lexer
    (#2697)
  * Add MIME-Type for ``DesktopLexer`` (#2613)
  * Fix native style to meet WCAG AA guidelines (#2600)
  * Fix typo in documentation (#2672)
  * Use format strings consistently (#2661)
  * Add ``__class_getitem__`` to ``Formatter`` to improve typing
    support (#2665)
- set the base python version to 3.8
- drop the requirement of importlib-metadata:
  already included in python 3.8 and above
- remove unneeded executable bit from some python files</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- add buildignores to avoid bootstrap buildcycle
  p11-kit/gtk-doc/python-Pygments which comes via
  pip/ca-certificates</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1722686400">- fix build by forcing pip to use the prebuilt CA bundle</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1736164800">- update to version 2.19.1:
  * Ini: Fix quoted string regression introduced in 2.19.0
  * Lua: Fix a regression introduced in 2.19.0
- additional changes from version 2.19.0:
  * New lexers:
    + CodeQL (#2819)
    + Debian Sources (#2788, #2747)
    + Gleam (#2662)
    + GoogleSQL (#2820, #2814)
    + JSON5 (#2734, #1880)
    + Maple (#2763, #2548)
    + NumbaIR (#2433)
    + PDDL (#2799, #2616)
    + Rego (#2794)
    + TableGen (#2751)
    + Vue.js (#2832)
  * Updated lexers:
    + BQN: Various improvements (#2789)
    + C#: Fix number highlighting (#986, #2727), add ``file``
    keyword (#2726, #2805, #2806), add various other keywords
    (#2745, #2770)
    + CSS: Add ``revert`` (#2766, #2775)
    + Debian control: Add ``Change-By`` field (#2757)
    + Elip: Improve punctuation handling (#2651)
    + Igor: Add ``int`` (#2801)
    + Ini: Fix quoted strings with embedded comment characters
    (#2767, #2720)
    + Java: Support functions returning types containing a question
    mark (#2737)
    + JavaScript: Support private identiiers (#2729, #2671)
    + LLVM: Add ``splat``, improve floating-point number parsing
    (#2755)
    + Lua: Improve variable detection, add built-in functions
    (#2829)
    + Macaulay2: Update to 1.24.11 (#2800)
    + PostgreSQL: Add more ``EXPLAIN`` keywords (#2785),
    handle ``/`` (#2774)
    + S-Lexer: Fix keywords (#2082, #2750)
    + TransactSQL: Fix single-line comments (#2717)
    + Turtle: Fix triple quoted strings (#2744, #2758)
    + Typst: Various improvements (#2724)
    + Various: Add ``^`` as an operator to Matlab, Octave and
    Scilab (#2798)
    + Vyper: Add ``staticcall`` and ``extcall`` (#2719)
  * Mark file extensions for ``HTML/XML+Evoque`` as aliases (#2743)
  * Add a color for ``Operator.Word`` to the ``rrt`` style (#2709)
  * Fix broken link in the documentation (#2803, #2804)
  * Drop executable bit where not needed (#2781)
  * Reduce Mojo priority relative to Python in ``analyze_text´`
    (#2771, #2772)
  * Fix documentation builds (#2712)
  * Match example file names to the lexer's name (#2713, #2715)
  * Ensure lexer metadata is present (#2714)
  * Search more directories on macOS for fonts (#2809)
  * Improve test robustness (#2812)</changelog>
  <changelog author="mmachova@suse.com" date="1737633600">- Drop dependency on ca-certificates-mozilla-prebuilt to really
  avoid buildcycles</changelog>
  <changelog author="gyee@suse.com" date="1741608000">- Remove files from testsamples that licensedigger flagged as high risks.
  Also created an issue upstream for potential licensing issues. See
  https://github.com/pygments/pygments/issues/2872
- Disable tests which depended on those files</changelog>
  <changelog author="daniel.garcia@suse.com" date="1747224000">- Redownload source file to have the same version released in pypi.</changelog>
</package>
<package pkgid="d39424e4e253f3406181879c09b86b560b939209f49473cde94a99634d3b8a4faf142c968803861afda179b41b06283d17a91d747cd9323a62ecf5e7fc621a83" name="python313-anyio" arch="noarch">
  <version epoch="0" ver="4.8.0" rel="160000.2.2"/>
  <changelog author="jslaby@suse.cz" date="1698926400">- add tests-test_fileio.py-don-t-follow-symlinks-in-dev.patch (kernel
  6.6 fix)</changelog>
  <changelog author="dmueller@suse.com" date="1700136000">- update to 3.7.1:
  * Fixed sending large buffers via UNIX stream sockets on
    asyncio
  * Fixed several minor documentation issues (broken links to
    classes, missing classes or
  * attributes)
  * **3.7.0**
  * Dropped support for Python 3.6
  * Improved type annotations:
  * Several functions and methods that were previously annotated
    as accepting
  * ``Coroutine[Any, Any, Any]`` as the return type of the
    callable have been amended to
  * accept ``Awaitable[Any]`` instead, to allow a slightly
    broader set of coroutine-like
  * inputs, like ``async_generator_asend`` objects returned from
    the ``asend()`` method
  * of async generators, and to match the ``trio`` annotations:
  * ``anyio.run()``
  * ``anyio.from_thread.run()``
  * ``TaskGroup.start_soon()``
  * ``TaskGroup.start()``
  * ``BlockingPortal.call()``
  * ``BlockingPortal.start_task_soon()``
  * ``BlockingPortal.start_task()``
  * Note that this change involved only changing the type
    annotations; run-time
  * functionality was not altered.
  * The ``TaskStatus`` class is now a generic protocol, and
    should be parametrized to
  * indicate the type of the value passed to
    ``task_status.started()``
  * The ``Listener`` class is now covariant in its stream type
  * ``create_memory_object_stream()`` now allows passing only
    ``item_type``
  * Object receive streams are now covariant and object send
    streams are correspondingly
  * contravariant
  * Changed ``TLSAttribute.shared_ciphers`` to match the
    documented semantics of
  * ``SSLSocket.shared_ciphers`` of always returning ``None`` for
    client-side streams
  * Fixed ``CapacityLimiter`` on the asyncio backend to order
    waiting tasks in the FIFO
  * order (instead of LIFO) (PR by Conor Stevenson)
  * Fixed ``CancelScope.cancel()`` not working on asyncio if
    called before entering the
  * scope
  * Fixed ``open_signal_receiver()`` inconsistently yielding
    integers instead of
  * ``signal.Signals`` instances on the ``trio`` backend
  * Fixed ``to_thread.run_sync()`` hanging on asyncio if the
    target callable raises
  * ``StopIteration``
  * Fixed ``start_blocking_portal()`` raising an unwarranted
  * ``RuntimeError: This portal is not running`` if a task raises
    an exception that causes
  * the event loop to be closed
  * Fixed ``current_effective_deadline()`` not returning ``-inf``
    on asyncio when the
  * currently active cancel scope has been cancelled (PR by
    Ganden Schaffner)
  * Fixed the ``OP_IGNORE_UNEXPECTED_EOF`` flag in an SSL context
    created by default in
  * ``TLSStream.wrap()`` being inadvertently set on Python 3.11.3
    and 3.10.11
  * Fixed ``CancelScope`` to properly handle asyncio task
    uncancellation on Python 3.11
  * (PR by Nikolay Bryskin)
  * Fixed ``OSError`` when trying to use
    ``create_tcp_listener()`` to bind to a link-local
  * IPv6 address (and worked around related bugs in ``uvloop``)
  * Worked around a `PyPy bug
    &lt;https://foss.heptapod.net/pypy/pypy/-/issues/3938&gt;`_
  * when using ``anyio.getaddrinfo()`` with for IPv6 link-local
    addresses containing
  * interface names</changelog>
  <changelog author="dmueller@suse.com" date="1700136001">- update to 3.7.1:
  * Fixed sending large buffers via UNIX stream sockets on
    asyncio
  * Fixed several minor documentation issues (broken links to
    classes, missing classes or attributes)
  * Dropped support for Python 3.6
  * Improved type annotations:
  * Several functions and methods that were previously annotated
    as accepting ``Coroutine[Any, Any, Any]`` as the return type
    of the callable have been amended to accept ``Awaitable[Any]``
    instead, to allow a slightly broader set of coroutine-like
    inputs, like ``async_generator_asend`` objects returned from
    the ``asend()`` method of async generators, and to match
    the ``trio`` annotations:
  * ``anyio.run()``
  * ``anyio.from_thread.run()``
  * ``TaskGroup.start_soon()``
  * ``TaskGroup.start()``
  * ``BlockingPortal.call()``
  * ``BlockingPortal.start_task_soon()``
  * ``BlockingPortal.start_task()``
  * Changed ``TLSAttribute.shared_ciphers`` to match the
    documented semantics of ``SSLSocket.shared_ciphers``
    of always returning ``None`` for client-side streams
  * Fixed ``CapacityLimiter`` on the asyncio backend to order
    waiting tasks in the FIFO order (instead of LIFO)
  * Fixed ``CancelScope.cancel()`` not working on asyncio if
    called before entering the scope
  * Fixed ``open_signal_receiver()`` inconsistently yielding
    integers instead of ``signal.Signals`` instances on the
    ``trio`` backend
  * Fixed ``to_thread.run_sync()`` hanging on asyncio if the
    target callable raises ``StopIteration``
  * Fixed ``start_blocking_portal()`` raising an unwarranted
  * ``RuntimeError: This portal is not running`` if a task raises
    an exception that causes the event loop to be closed
  * Fixed ``current_effective_deadline()`` not returning ``-inf``
    on asyncio when the currently active cancel scope has been
    cancelled (PR by Ganden Schaffner)
  * Fixed the ``OP_IGNORE_UNEXPECTED_EOF`` flag in an SSL context
    created by default in ``TLSStream.wrap()`` being inadvertently
    set on Python 3.11.3 and 3.10.11
  * Fixed ``CancelScope`` to properly handle asyncio task
    uncancellation on Python 3.11
  * Fixed ``OSError`` when trying to use
    ``create_tcp_listener()`` to bind to a link-local
  * IPv6 address (and worked around related bugs in ``uvloop``)
  * Worked around a `PyPy bug
    &lt;https://foss.heptapod.net/pypy/pypy/-/issues/3938&gt;`_
    when using ``anyio.getaddrinfo()`` with for IPv6 link-local
    addresses containing interface names
- drop fix-failing-tls-tests.patch
  support-trio-0.22.patch: obsolete</changelog>
  <changelog author="dmueller@suse.com" date="1701432000">- update to 4.1.0:
  * Adapted to API changes made in Trio v0.23
  * Removed a checkpoint when exiting a task group
  * Renamed the ``cancellable`` argument in
    ``anyio.to_thread.run_sync()`` to
  * ``abandon_on_cancel`` (and deprecated the old parameter name)
  * Added support for voluntary thread cancellation via
  * ``anyio.from_thread.check_cancelled()``
  * Bumped minimum version of trio to v0.23
  * Exposed the ``ResourceGuard`` class in the public API
  * Fixed ``RuntimeError: Runner is closed`` when running higher-
    scoped async generator fixtures in some cases
  * Fixed discrepancy between ``asyncio`` and ``trio`` where
    reraising a cancellation exception in an ``except*`` block
    would incorrectly bubble out of its cancel scope
  * Any exceptions raising out of a task groups are now nested
    inside an ``ExceptionGroup`` (or ``BaseExceptionGroup`` if one
    or more ``BaseException`` were included)
  * Fixed task group not raising a cancellation exception on
    asyncio at exit if no child tasks were spawned and an outer
    cancellation scope had been cancelled before
  * Ensured that exiting a ``TaskGroup`` always hits a yield
    point, regardless of whether there are running child tasks to
    be waited on
  * On asyncio, cancel scopes will defer cancelling tasks that
    are scheduled to resume with a finished future
  * On asyncio and Python 3.9/3.10, cancel scopes now only
    suppress cancellation exceptions if the cancel message matches
    the scope
  * Task groups on all backends now raise a single cancellation
    exception when an outer cancel scope is cancelled, and no
    exceptions other than cancellation exceptions are raised in
    the group
  * **BACKWARDS INCOMPATIBLE** Changes the pytest plugin to run
    all tests and fixtures in the same task, allowing fixtures to
    set context variables for tests and other fixtures
    ``anyio.Path.relative_to()`` and
  * ``anyio.Path.is_relative_to()`` to only accept one argument,
    as passing multiple arguments is deprecated as of Python 3.12
  * **BACKWARDS INCOMPATIBLE** Dropped support for spawning tasks
    from old-style coroutine functions (``@asyncio.coroutine``)
  * **BACKWARDS INCOMPATIBLE** The ``policy`` option on the
    ``asyncio`` backend was changed to ``loop_factory`` to
    accommodate ``asyncio.Runner``
  * Dropped support for Python 3.7
  * Added support for Python 3.12
  * Fixed ``from_thread.run`` failing when used to call sniffio-
    dependent functions on asyncio from a thread running trio or curio
  * Fixed deadlock when using
    ``from_thread.start_blocking_portal(backend="asyncio")``
  * in a thread running trio or curio (PR by Ganden Schaffner)
  * Improved type annotations:
  * The ``item_type`` argument of ``create_memory_object_stream``
    was deprecated.
  * To indicate the item type handled by the stream, use
  * ``create_memory_object_stream[T_Item]()`` instead. Type
    checking should no longer fail when annotating memory object
- drop tests-test_fileio.py-don-t-follow-symlinks-in-dev.patch
  (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 4.2.0:
  * Add support for byte-based paths in connect_unix,
    create_unix_listeners, create_unix_datagram_socket, and
    create_connected_unix_datagram_socket. (PR by Lura Skye)
  * Enabled the Event and CapacityLimiter classes to be
    instantiated outside an event loop thread
  * Broadly improved/fixed the type annotations. Among other
    things, many functions and methods that take variadic
    positional arguments now make use of PEP 646 TypeVarTuple to
    allow the positional arguments to be validated by static type
    checkers. These changes affected numerous methods and
    functions, including: * anyio.run() * TaskGroup.start_soon()
  * anyio.from_thread.run() * anyio.from_thread.run_sync() *
    anyio.to_thread.run_sync() * anyio.to_process.run_sync() *
    BlockingPortal.call() * BlockingPortal.start_task_soon() *
    BlockingPortal.start_task() (also resolves #560)
  * Fixed various type annotations of anyio.Path to match
    Typeshed: * anyio.Path.__lt__() * anyio.Path.__le__() *
    anyio.Path.__gt__() * anyio.Path.__ge__() *
    anyio.Path.__truediv__() * anyio.Path.__rtruediv__() *
    anyio.Path.hardlink_to() * anyio.Path.samefile() *
    anyio.Path.symlink_to() * anyio.Path.with_segments() (PR by
    Ganden Schaffner)
  * Fixed adjusting the total number of tokens in a
    CapacityLimiter on asyncio failing to wake up tasks waiting
    to acquire the limiter in certain edge cases (fixed with help
    from Egor Blagov)
  * Fixed loop_factory and use_uvloop options not being used on
    the asyncio backend
  * Fixed cancellation propagating on asyncio from a task group
    to child tasks if the task hosting the task group is in a
    shielded cancel scope</changelog>
  <changelog author="steven.kowalik@suse.com" date="1710158400">- Update to 4.3.0:
  * Added support for the Python 3.12 ``walk_up`` keyword argument in
    ``anyio.Path.relative_to()``
  * Fixed passing ``total_tokens`` to ``anyio.CapacityLimiter()`` as a
    keyword argument not working on the ``trio`` backend
  * Fixed ``Process.aclose()`` not performing the minimum level of
    necessary cleanup when cancelled
  * Fixed ``Process.stdin.aclose()``, ``Process.stdout.aclose()``, and
    ``Process.stderr.aclose()``
- Add exceptiongroup to {Build,}Requires.</changelog>
  <changelog author="dmueller@suse.com" date="1718193600">- update to 4.4.0:
  * Added the BlockingPortalProvider class to aid with
    constructing synchronous counterparts to asynchronous
    interfaces that would otherwise require multiple blocking
    portals
  * Added __slots__ to AsyncResource so that child classes can
    use __slots__
  * Added the TaskInfo.has_pending_cancellation() method
  * Fixed erroneous RuntimeError: called 'started' twice on the
    same task status when cancelling a task in a TaskGroup
    created with the start() method before the first checkpoint
    is reached after calling task_status.started()
  * Fixed two bugs with TaskGroup.start() on asyncio: Fixed
    erroneous RuntimeError: called 'started' twice on the same
    task status when cancelling a task in a TaskGroup created
    with the start() method before the first checkpoint is
    reached after calling task_status.started() (#706; PR by
    Dominik Schwabe) Fixed the entire task group being cancelled
    if a TaskGroup.start() call gets cancelled (#685, #710)
  * Fixed erroneous RuntimeError: called 'started' twice on the
    same task status when cancelling a task in a TaskGroup
    created with the start() method before the first checkpoint
    is reached after calling task_status.started()
  * Fixed the entire task group being cancelled if a
    TaskGroup.start() call gets cancelled
  * Fixed a race condition that caused crashes when multiple
    event loops of the same backend were running in separate
    threads and simultaneously attempted to use AnyIO for their
    first time
  * Fixed cancellation delivery on asyncio incrementing the wrong
    cancel scope's cancellation counter when cascading a cancel
    operation to a child scope, thus failing to uncancel the host
    task
  * Fixed erroneous TypedAttributeLookupError if a typed
    attribute getter raises KeyError
  * Fixed the asyncio backend not respecting the
    PYTHONASYNCIODEBUG environment variable when setting the
    debug flag in anyio.run()
  * Fixed SocketStream.receive() not detecting EOF on asyncio if
    there is also data in the read buffer
  * Fixed MemoryObjectStream dropping an item if the item is
    delivered to a recipient that is waiting to receive an item
    but has a cancellation pending
  * Emit a ResourceWarning for MemoryObjectReceiveStream and
    MemoryObjectSendStream that were garbage collected without
    being closed (PR by Andrey Kazantcev)
  * Fixed MemoryObjectSendStream.send() not raising
    BrokenResourceError when the last corresponding
    MemoryObjectReceiveStream is closed while waiting to send a
    falsey item</changelog>
  <changelog author="alarrosa@suse.com" date="1727870400">- update to 4.6.0:
  * Dropped support for Python 3.8 (as #698 cannot be resolved
    without cancel message support)
  * Fixed 100% CPU use on asyncio while waiting for an exiting task
    group to finish while said task group is within a cancelled
    cancel scope (#695)
  * Fixed cancel scopes on asyncio not propagating CancelledError
    on exit when the enclosing cancel scope has been effectively
    cancelled (#698)
  * Fixed asyncio task groups not yielding control to the event
    loop at exit if there were no child tasks to wait on
  * Fixed inconsistent task uncancellation with asyncio cancel
    scopes belonging to a task group when said task group has child
    tasks running
- update to 4.5.0:
  * Improved the performance of anyio.Lock and anyio.Semaphore on
    asyncio (even up to 50 %)
  * Added the fast_acquire parameter to anyio.Lock and
    anyio.Semaphore to further boost performance at the expense of
    safety (acquire() will not yield control back if there is no
    contention)
  * Added support for the from_uri(), full_match(), parser
    methods/properties in anyio.Path, newly added in Python 3.13
    (#737)
  * Added support for more keyword arguments for run_process() and
    open_process(): startupinfo, creationflags, pass_fds, user,
    group, extra_groups and umask (#742)
  * Improved the type annotations and support for PathLike in
    run_process() and open_process() to allow for path-like
    arguments, just like subprocess.Popen
  * Changed the ResourceWarning from an unclosed memory object
    stream to include its address for easier identification
  * Changed start_blocking_portal() to always use daemonic threads,
    to accommodate the "loitering event loop" use case
  * Bumped the minimum version of Trio to v0.26.1
  * Fixed __repr__() of MemoryObjectItemReceiver, when item is not
    defined (#767; PR by @Danipulok)
  * Fixed to_process.run_sync() failing to initialize if
    __main__.__file__ pointed to a file in a nonexistent directory
    (#696)
  * Fixed AssertionError: feed_data after feed_eof on asyncio when
    a subprocess is closed early, before its output has been read
    (#490)
  * Fixed TaskInfo.has_pending_cancellation() on asyncio not
    respecting shielded scopes (#771; PR by @gschaffner)
  * Fixed SocketStream.receive() returning bytearray instead of
    bytes when using asyncio with ProactorEventLoop (Windows)
    (#776)
  * Fixed quitting the debugger in a pytest test session while in
    an active task group failing the test instead of exiting the
    test session (because the exit exception arrives in an
    exception group)
  * Fixed support for Linux abstract namespaces in UNIX sockets
    that was broken in v4.2 (#781; PR by @tapetersen)
  * Fixed KeyboardInterrupt (ctrl+c) hanging the asyncio pytest
    runner</changelog>
  <changelog author="dmueller@suse.com" date="1729598400">- update to 4.6.2:
  * Fixed regression caused by (\#807) that prevented the use
    of parametrized async fixtures
- update to 4.6.1:
  * Fixed TaskGroup and CancelScope producing cyclic references
    in tracebacks when raising exceptions (\#806) (PR by
    @graingert)</changelog>
  <changelog author="nico.krapp@suse.com" date="1739188800">- Update to 4.8.0:
  * Added experimental support for running functions in
    subinterpreters on Python 3.13 and later
  * Added support for the copy(), copy_into(), move() and move_into()
    methods in anyio.Path, available in Python 3.14
  * Changed TaskGroup on asyncio to always spawn tasks non-eagerly,
    even if using a task factory created
    via asyncio.create_eager_task_factory(), to preserve expected
    Trio-like task scheduling semantics (PR by @agronholm and @graingert)
  * Configure SO_RCVBUF, SO_SNDBUF and TCP_NODELAY on the selector
    thread waker socket pair (this should improve the performance of
    wait_readable() and wait_writable() when using the ProactorEventLoop)
    (#836; PR by @graingert)
  * Fixed AssertionError when using nest-asyncio (#840)
  * Fixed return type annotation of various context managers'
    __exit__ method (#847; PR by @Enegg)
- from 4.7.0:
  * Updated TaskGroup to work with asyncio's eager task factories (#764)
  * Added the wait_readable() and wait_writable() functions which will
    accept an object with a .fileno() method or an integer handle, and
    deprecated their now obsolete versions (wait_socket_readable() and
    wait_socket_writable()) (PR by @davidbrochart)
  * Changed EventAdapter (an Event with no bound async backend) to allow
    set() to work even before an async backend is bound to it (#819)
  * Added support for wait_readable() and wait_writable() on
    ProactorEventLoop (used on asyncio + Windows by default)
  * Fixed a misleading ValueError in the context of DNS failures
    (#815; PR by @graingert)
  * Fixed the return type annotations of readinto() and readinto1()
    methods in the anyio.AsyncFile class (#825)
  * Fixed TaskInfo.has_pending_cancellation() on asyncio returning
    false positives in cleanup code on Python &gt;= 3.11
    (#832; PR by @gschaffner)
  * Fixed cancelled cancel scopes on asyncio calling
    asyncio.Task.uncancel when propagating a CancelledError on exit
    to a cancelled parent scope (#790; PR by @gschaffner)</changelog>
</package>
<package pkgid="68b79787220c30a5e479c7f58adee0a0b3ab482183f739b8e28e8a063c1f3c5a2e30821f3c6d5e942f08da04495bd156c1c2878a89c58f53ecd85235cc75fd5a" name="python313-argcomplete" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1706616000">- update to 3.2.2:
  * Expand tilde in zsh</changelog>
  <changelog author="daniel.garcia@suse.com" date="1713441600">- Update to 3.3.0 (bsc#1222880):
  * Preserve compatibility with argparse option tuples of length 4.
    This update is required to use argcomplete on Python 3.11.9+ or
    3.12.3+.
- update to 3.2.3:
  * Allow register-python-argcomplete output to be used as lazy-loaded
    zsh completion module (#475)
  - Move debug_stream initialization to helper method to allow fd 9
    behavior to be overridden in subclasses (#471)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1721044800">- Update to 3.4.0
  * No stdin for python calls from bash completion functions (#488)
  - Prevents usage of stdin by (python) executables that are called
    during completion generation. This prevents the completion locking up
    the entire shell when the python script is broken i.e. it enters an
    interactive mode (REPL) instead of generating the completions, as
    expected.
  * Localize shell variable REPLY to avoid overwriting users’ value (#489)
  - The variable REPLY is used by default by the ``read`` shell builtin
    to store the return value, and like all bash/zsh variables, is scoped
    globally. This change allows this variable to be used for other needs
    by appropriately scoping its internal use by an argcomplete utility
    function that uses ``read``.
- Drop patches for issued fixed upstream
  * bash-repl.patch</changelog>
  <changelog author="dmueller@suse.com" date="1723550400">- require ca-certificates-mozilla for the pip &gt;= 24.2</changelog>
  <changelog author="mcepl@cepl.eu" date="1728129600">- Add skip-failing-tests-3_12_7.patch as a temporary workaround,
  skip failing tests (gh#kislyuk/argcomplete#507).</changelog>
  <changelog author="mcepl@cepl.eu" date="1728216000">- Add argparse-3_12_7.patch which should actually fix
  gh#kislyuk/argcomplete#507.
- Remove skip-failing-tests-3_12_7.patch, which is now
  unnecessary.</changelog>
  <changelog author="mcepl@cepl.eu" date="1730203200">- Update to the version 3.5.1:
  - Restore compatibility with argparse in Python 3.12.7+
  - Use project.scripts instead of setuptools scripts
  - Test infrastructure improvements
- Remove upstreamed patches:
  - argparse-3_12_7.patch
- Add _multibuild (to make testing against fully installed package)</changelog>
  <changelog author="mmachova@suse.com" date="1733832000">- Update to version 3.5.2
  * Fix _parse_known_args monkeypatching. This fix is required to restore
    compatibility with Python 3.12.8 and 3.13.1.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1749297600">- Update to version 3.5.3
  * Use interactive shells and bind to make environment variable
    name completions work in older Bash versions (#506)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1749643200">- Remove executable bit on files installed outside of the path. (bsc#1244435)</changelog>
</package>
<package pkgid="548019682dd1e62d5540d1bf5914682895044a3f2def574ae74356867f68c75faf7272b4b6f3bd283e168c637eb93189a2d2ead1827c058e80503a2ccdd4b3e3" name="python313-attrs" arch="noarch">
  <version epoch="0" ver="24.3.0" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1663675200">- python-six is not required for build</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 22.2.0:
  * Python 3.5 is not supported anymore.
  * Python 3.6 is now deprecated and support will be removed in the next
    release.
  * `attrs.field()` now supports an *alias* option for explicit `__init__`
    argument names.
  * `attrs.NOTHING` is now an enum value, making it possible to use with
    e.g. `typing.Literal`.
  * Added missing re-import of `attr.AttrsInstance` to the `attrs`
    namespace.
  * Fix slight performance regression in classes with custom `__setattr__`
    and speedup even more.
  * Class-creation performance improvements by switching performance-
    sensitive templating operations to f-strings.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683547200">- Update to 23.1.0:
  [#] Backwards-incompatible Changes
  * Python 3.6 has been dropped and packaging switched to static
    package data using Hatch. #993
  [#] Deprecations
  * The support for zope-interface via the attrs.validators.provides
    validator is now deprecated and will be removed in, or after,
    April 2024.
  * The presence of a C-based package in our developement dependencies
    has caused headaches and we're not under the impression it's used
    a lot.
  * Let us know if you're using it and we might publish it as a
    separate package. #1120
  [#] Changes
  * attrs.filters.exclude() and attrs.filters.include() now support
    the passing of attribute names as strings. #1068
  * attrs.has() and attrs.fields() now handle generic classes
    correctly. #1079
  * Fix frozen exception classes when raised within e.g.
    contextlib.contextmanager, which mutates their __traceback__
    attributes. #1081
  * @frozen now works with type checkers that implement PEP-681 (ex.
    pyright). #1084
  * Restored ability to unpickle instances pickled before 22.2.0.
    [#1085]
  * attrs.asdict()'s and attrs.astuple()'s type stubs now accept the
    attrs.AttrsInstance protocol. #1090
  * Fix slots class cellvar updating closure in CPython 3.8+ even when
    __code__ introspection is unavailable. #1092
  * attrs.resolve_types() can now pass include_extras to
    typing.get_type_hints() on Python 3.9+, and does so by default.
    [#1099]
  * Added instructions for pull request workflow to CONTRIBUTING.md.
    [#1105]
  * Added type parameter to attrs.field() function for use with
    attrs.make_class().
  * Please note that type checkers ignore type metadata passed into
    make_class(), but it can be useful if you're wrapping attrs. #1107
  * It is now possible for attrs.evolve() (and attr.evolve()) to
    change fields named inst if the instance is passed as a positional
    argument.
  * Passing the instance using the inst keyword argument is now
    deprecated and will be removed in, or after, April 2024. #1117
  * attrs.validators.optional() now also accepts a tuple of validators
    (in addition to lists of validators). #1122</changelog>
  <changelog author="dmueller@suse.com" date="1687435200">- remove outdated constructs, we no longer support &lt; 3.8</changelog>
  <changelog author="dmueller@suse.com" date="1704715200">- update to 23.2.0:
  * The type annotation for `attrs.resolve_types()` is now
    correct.
  * Type stubs now use `typing.dataclass_transform` to decorate
    dataclass-like decorators, instead of the non-standard
    `__dataclass_transform__` special form, which is only
    supported by Pyright.
  * Fixed serialization of namedtuple fields using
    `attrs.asdict/astuple()` with `retain_collection_types=True`.
  * `attrs.AttrsInstance` is now a `typing.Protocol` in both type
    hints and code.
  * This allows you to subclass it along with another `Protocol`.
  * If *attrs* detects that `__attrs_pre_init__` accepts more
    than just `self`, it will call it with the same arguments as
    `__init__` was called.
  * This allows you to, for example, pass arguments to
    `super().__init__()`.
  * Slotted classes now transform `functools.cached_property`
    decorated methods to support equivalent semantics.
  * Added *class_body* argument to `attrs.make_class()` to
    provide additional attributes for newly created classes.
  * It is, for example, now possible to attach methods.</changelog>
  <changelog author="mmachova@suse.com" date="1715947200">- Add patch pytest8.patch to adapt the tests to the new pytest</changelog>
  <changelog author="mcepl@cepl.eu" date="1730808000">- Upgrade to 24.2.0:
  - Big releases always carry the risk of regressions, but never
    did I expect to break Python 3.14’s CI! On the plus side,
    attrs runs on 3.14 now.
- Upgrade to 24.1.0:
  - The most notable is probably the possibility to receive self
    and field definitions in your converters by wrapping them
    into a attrs.Converter.
  - The other big thing is our own replacement
    for __init_subclass__ called (you guessed it)
    __attrs_init_subclass__. Check out the docs, if you're not
    sure what this is good for.
  - Finally, we've made more important steps to promote our "new"
    APIs (can you believe they're 4 years old!?) in the docs. If
    we missed anything, please let us know.
- Remove upstreamed patch:
  - pytest8.patch</changelog>
  <changelog author="dmueller@suse.com" date="1735819200">- update to 24.3.0:
  * Python 3.7 has been dropped.
  * Introduce `attrs.NothingType`, for annotating types
    consistent with `attrs.NOTHING`.
  * Allow mutating `__suppress_context__` and `__notes__` on
    frozen exceptions.
  * `attrs.converters.optional()` works again when taking
    `attrs.converters.pipe()` or another Converter as its
    argument.
  * *attrs* instances now support `copy.replace()`.
  * `attrs.validators.instance_of()`'s type hints now allow for
    union types.
  * For example: `instance_of(str | int)`</changelog>
</package>
<package pkgid="ee4b9bb7302b5b83cbcd3378f959201e27891cdbd73e4329cdd51a774b9b06af89ecfc15dbc0ec8cd9d258ba4f9ed18d72604176a01ff6b6be071c8618eb5d0b" name="python313-base" arch="x86_64">
  <version epoch="0" ver="3.13.13" rel="160000.1.1"/>
  <changelog author="mcepl@cepl.eu" date="1770379200">- Update to 3.13.12: Python 3.13.12 final Release date:
  2026-02-03
  - Tools/Demos
  - gh-142095: Make gdb ‘py-bt’ command use frame from thread
    local state when available. Patch by Sam Gross and Victor
    Stinner.
  - Tests
  - gh-144415: The Android testbed now distinguishes between
    stdout/stderr messages which were triggered by a newline,
    and those triggered by a manual call to flush. This fixes
    logging of progress indicators and similar content.
  - gh-65784: Add support for parametrized resource wantobjects
    in regrtests, which allows to run Tkinter tests with the
    specified value of tkinter.wantobjects, for example -u
    wantobjects=0.
  - gh-143553: Add support for parametrized resources, such as
  - u xpickle=2.7.
  - gh-142836: Accommodated Solaris in
    test_pdb.test_script_target_anonymous_pipe.
  - gh-129401: Fix a flaky test in test_repr_rlock that checks
    the representation of multiprocessing.RLock.
  - bpo-31391: Forward-port test_xpickle from Python 2 to
    Python 3 and add the resource back to test’s command line.
  - Security
  - gh-144125: BytesGenerator will now refuse to serialize
    (write) headers that are unsafely folded or delimited; see
    verify_generated_headers. (Contributed by Bas Bloemsaat and
    Petr Viktorin in gh-121650) (bsc#1257181, CVE-2026-1299).
  - gh-143935: Fixed a bug in the folding of comments when
    flattening an email message using a modern email policy.
    Comments consisting of a very long sequence of non-foldable
    characters could trigger a forced line wrap that omitted
    the required leading space on the continuation line,
    causing the remainder of the comment to be interpreted as
    a new header field. This enabled header injection with
    carefully crafted inputs (bsc#1257029, CVE-2025-11468).
  - gh-143925: Reject control characters in data: URL media
    types (bsc#1257046, CVE-2025-15282).
  - gh-143919: Reject control characters in http.cookies.Morsel
    fields and values (bsc#1257031, CVE-2026-0672).
  - gh-143916: Reject C0 control characters within
    wsgiref.headers.Headers fields, values, and parameters
    (bsc#1257042, CVE-2026-0865).
  - Library
  - gh-144380: Improve performance of io.BufferedReader line
    iteration by ~49%.
  - gh-144169: Fix three crashes when non-string keyword
    arguments are supplied to objects in the ast module.
  - gh-144100: Fixed a crash in ctypes when using a deprecated
    POINTER(str) type in argtypes. Instead of aborting, ctypes
    now raises a proper Python exception when the pointer
    target type is unresolved.
  - gh-144050: Fix stat.filemode() in the pure-Python
    implementation to avoid misclassifying invalid mode values
    as block devices.
  - gh-144023: Fixed validation of file descriptor 0 in posix
    functions when used with follow_symlinks parameter.
  - gh-143999: Fix an issue where inspect.getgeneratorstate()
    and inspect.getcoroutinestate() could fail for generators
    wrapped by types.coroutine() in the suspended state.
  - gh-143706: Fix multiprocessing forkserver so that sys.argv
    is correctly set before __main__ is preloaded. Previously,
    sys.argv was empty during main module import in forkserver
    child processes. This fixes a regression introduced in
    3.13.8 and 3.14.1. Root caused by Aaron Wieczorek, test
    provided by Thomas Watson, thanks!
  - gh-143638: Forbid reentrant calls of the pickle.Pickler and
    pickle.Unpickler methods for the C implementation.
    Previously, this could cause crash or data corruption, now
    concurrent calls of methods of the same object raise
    RuntimeError.
  - gh-78724: Raise RuntimeError’s when user attempts to call
    methods on half-initialized Struct objects, For example,
    created by Struct.__new__(Struct). Patch by Sergey
    B Kirpichev.
  - gh-143602: Fix a inconsistency issue in write() that leads
    to unexpected buffer overwrite by deduplicating the buffer
    exports.
  - gh-143547: Fix sys.unraisablehook() when the hook raises an
    exception and changes sys.unraisablehook(): hold a strong
    reference to the old hook. Patch by Victor Stinner.
  - gh-143378: Fix use-after-free crashes when a BytesIO object
    is concurrently mutated during write() or writelines().
  - gh-143346: Fix incorrect wrapping of the Base64 data in
    plistlib._PlistWriter when the indent contains a mix of
    tabs and spaces.
  - gh-143310: tkinter: fix a crash when a Python list is
    mutated during the conversion to a Tcl object (e.g., when
    setting a Tcl variable). Patch by Bénédikt Tran.
  - gh-143309: Fix a crash in os.execve() on non-Windows
    platforms when given a custom environment mapping which is
    then mutated during parsing. Patch by Bénédikt Tran.
  - gh-143308: pickle: fix use-after-free crashes when
    a PickleBuffer is concurrently mutated by a custom buffer
    callback during pickling. Patch by Bénédikt Tran and Aaron
    Wieczorek.
  - gh-143237: Fix support of named pipes in the rotating
    logging handlers.
  - gh-143249: Fix possible buffer leaks in Windows overlapped
    I/O on error handling.
  - gh-143241: zoneinfo: fix infinite loop in
    ZoneInfo.from_file when parsing a malformed TZif file.
    Patch by Fatih Celik.
  - gh-142830: sqlite3: fix use-after-free crashes when the
    connection’s callbacks are mutated during a callback
    execution. Patch by Bénédikt Tran.
  - gh-143200: xml.etree.ElementTree: fix use-after-free
    crashes in __getitem__() and __setitem__() methods of
    Element when the element is concurrently mutated. Patch by
    Bénédikt Tran.
  - gh-142195: Updated timeout evaluation logic in subprocess
    to be compatible with deterministic environments like
    Shadow where time moves exactly as requested.
  - gh-143145: Fixed a possible reference leak in ctypes when
    constructing results with multiple output parameters on
    error.
  - gh-122431: Corrected the error message in
    readline.append_history_file() to state that nelements must
    be non-negative instead of positive.
  - gh-143004: Fix a potential use-after-free in
    collections.Counter.update() when user code mutates the
    Counter during an update.
  - gh-143046: The asyncio REPL no longer prints copyright and
    version messages in the quiet mode (-q). Patch by Bartosz
    Sławecki.
  - gh-140648: The asyncio REPL now respects the -I flag
    (isolated mode). Previously, it would load and execute
    PYTHONSTARTUP even if the flag was set. Contributed by
    Bartosz Sławecki.
  - gh-142991: Fixed socket operations such as recvfrom() and
    sendto() for FreeBSD divert(4) socket.
  - gh-143010: Fixed a bug in mailbox where the precise timing
    of an external event could result in the library opening an
    existing file instead of a file it expected to create.
  - gh-142881: Fix concurrent and reentrant call of
    atexit.unregister().
  - gh-112127: Fix possible use-after-free in
    atexit.unregister() when the callback is unregistered
    during comparison.
  - gh-142783: Fix zoneinfo use-after-free with descriptor
    _weak_cache. a descriptor as _weak_cache could cause
    crashes during object creation. The fix ensures proper
    reference counting for descriptor-provided objects.
  - gh-142754: Add the ownerDocument attribute to
    xml.dom.minidom elements and attributes created by directly
    instantiating the Element or Attr class. Note that this way
    of creating nodes is not supported; creator functions like
    xml.dom.Document.documentElement() should be used instead.
  - gh-142784: The asyncio REPL now properly closes the loop
    upon the end of interactive session. Previously, it could
    cause surprising warnings. Contributed by Bartosz Sławecki.
  - gh-142555: array: fix a crash in a[i] = v when converting
    i to an index via i.__index__ or i.__float__ mutates the
    array.
  - gh-142594: Fix crash in TextIOWrapper.close() when the
    underlying buffer’s closed property calls detach().
  - gh-142451: hmac: Ensure that the HMAC.block_size attribute
    is correctly copied by HMAC.copy. Patch by Bénédikt Tran.
  - gh-142495: collections.defaultdict now prioritizes
    __setitem__() when inserting default values from
    default_factory. This prevents race conditions where
    a default value would overwrite a value set before
    default_factory returns.
  - gh-142651: unittest.mock: fix a thread safety issue where
    Mock.call_count may return inaccurate values when the mock
    is called concurrently from multiple threads.
  - gh-142595: Added type check during initialization of the
    decimal module to prevent a crash in case of broken stdlib.
    Patch by Sergey B Kirpichev.
  - gh-142517: The non-compat32 email policies now correctly
    handle refolding encoded words that contain bytes that can
    not be decoded in their specified character set. Previously
    this resulted in an encoding exception during folding.
  - gh-112527: The help text for required options in argparse
    no longer extended with “ (default: None)”.
  - gh-142315: Pdb can now run scripts from anonymous pipes
    used in process substitution. Patch by Bartosz Sławecki.
  - gh-142282: Fix winreg.QueryValueEx() to not accidentally
    read garbage buffer under race condition.
  - gh-75949: Fix argparse to preserve | separators in mutually
    exclusive groups when the usage line wraps due to length.
  - gh-68552: MisplacedEnvelopeHeaderDefect and Missing header
    name defects are now correctly passed to the handle_defect
    method of policy in FeedParser.
  - gh-142006: Fix a bug in the email.policy.default folding
    algorithm which incorrectly resulted in a doubled newline
    when a line ending at exactly max_line_length was followed
    by an unfoldable token.
  - gh-105836: Fix asyncio.run_coroutine_threadsafe() leaving
    underlying cancelled asyncio task running.
  - gh-139971: pydoc: Ensure that the link to the online
    documentation of a stdlib module is correct.
  - gh-139262: Some keystrokes can be swallowed in the new
    PyREPL on Windows, especially when used together with the
    ALT key. Fix by Chris Eibl.
  - gh-138897: Improved license/copyright/credits display in
    the REPL: now uses a pager.
  - gh-79986: Add parsing for References and In-Reply-To
    headers to the email library that parses the header content
    as lists of message id tokens. This prevents them from
    being folded incorrectly.
  - gh-109263: Starting a process from spawn context in
    multiprocessing no longer sets the start method globally.
  - gh-90871: Fixed an off by one error concerning the backlog
    parameter in create_unix_server(). Contributed by Christian
    Harries.
  - gh-133253: Fix thread-safety issues in linecache.
  - gh-132715: Skip writing objects during marshalling once
    a failure has occurred.
  - gh-127529: Correct behavior of
    asyncio.selector_events.BaseSelectorEventLoop._accept_connection()
    in handling ConnectionAbortedError in a loop. This improves
    performance on OpenBSD.
  - IDLE
  - gh-143774: Better explain the operation of Format / Format
    Paragraph.
  - Documentation
  - gh-140806: Add documentation for enum.bin().
  - Core and Builtins
  - gh-144307: Prevent a reference leak in module teardown at
    interpreter finalization.
  - gh-144194: Fix error handling in perf jitdump
    initialization on memory allocation failure.
  - gh-141805: Fix crash in set when objects with the same hash
    are concurrently added to the set after removing an element
    with the same hash while the set still contains elements
    with the same hash.
  - gh-143670: Fixes a crash in ga_repr_items_list function.
  - gh-143377: Fix a crash in _interpreters.capture_exception()
    when the exception is incorrectly formatted. Patch by
    Bénédikt Tran.
  - gh-143189: Fix crash when inserting a non-str key into
    a split table dictionary when the key matches an existing
    key in the split table but has no corresponding value in
    the dict.
  - gh-143228: Fix use-after-free in perf trampoline when
    toggling profiling while threads are running or during
    interpreter finalization with daemon threads active. The
    fix uses reference counting to ensure trampolines are not
    freed while any code object could still reference them.
    Pach by Pablo Galindo
  - gh-142664: Fix a use-after-free crash in
    memoryview.__hash__ when the __hash__ method of the
    referenced object mutates that object or the view. Patch by
    Bénédikt Tran.
  - gh-142557: Fix a use-after-free crash in bytearray.__mod__
    when the bytearray is mutated while formatting the %-style
    arguments. Patch by Bénédikt Tran.
  - gh-143195: Fix use-after-free crashes in bytearray.hex()
    and memoryview.hex() when the separator’s __len__() mutates
    the original object. Patch by Bénédikt Tran.
  - gh-143135: Set sys.flags.inspect to 1 when PYTHONINSPECT is
    0. Previously, it was set to 0 in this case.
  - gh-143003: Fix an overflow of the shared empty buffer in
    bytearray.extend() when __length_hint__() returns 0 for
    non-empty iterator.
  - gh-143006: Fix a possible assertion error when comparing
    negative non-integer float and int with the same number of
    bits in the integer part.
  - gh-142776: Fix a file descriptor leak in import.c
  - gh-142829: Fix a use-after-free crash in
    contextvars.Context comparison when a custom __eq__ method
    modifies the context via set().
  - gh-142766: Clear the frame of a generator when
    generator.close() is called.
  - gh-142737: Tracebacks will be displayed in fallback mode
    even if io.open() is lost. Previously, this would crash the
    interpreter. Patch by Bartosz Sławecki.
  - gh-142554: Fix a crash in divmod() when
    _pylong.int_divmod() does not return a tuple of length two
    exactly. Patch by Bénédikt Tran.
  - gh-142560: Fix use-after-free in bytearray search-like
    methods (find(), count(), index(), rindex(), and rfind())
    by marking the storage as exported which causes
    reallocation attempts to raise BufferError. For contains(),
    split(), and rsplit() the buffer protocol is used for this.
  - gh-142343: Fix SIGILL crash on m68k due to incorrect
    assembly constraint.
  - gh-141732: Ensure the __repr__() for ExceptionGroup and
    BaseExceptionGroup does not change when the exception
    sequence that was original passed in to its constructor is
    subsequently mutated.
  - gh-100964: Fix reference cycle in exhausted generator
    frames. Patch by Savannah Ostrowski.
  - gh-140373: Correctly emit PY_UNWIND event when generator
    object is closed. Patch by Mikhail Efimov.
  - gh-138568: Adjusted the built-in help() function so that
    empty inputs are ignored in interactive mode.
  - gh-127773: Do not use the type attribute cache for types
    with incompatible MRO.
  - C API
  - gh-142571: PyUnstable_CopyPerfMapFile() now checks that
    opening the file succeeded before flushing.
  - Build
  - gh-142454: When calculating the digest of the JIT stencils
    input, sort the hashed files by filenames before adding
    their content to the hasher. This ensures deterministic
    hash input and hence deterministic hash, independent on
    filesystem order.
  - gh-141808: When running make clean-retain-profile, keep the
    generated JIT stencils. That way, the stencils are not
    generated twice when Profile-guided optimization (PGO) is
    used. It also allows distributors to supply their own
    pre-built JIT stencils.
  - gh-138061: Ensure reproducible builds by making JIT stencil
    header generation deterministic.
- Remove upstreamed patches:
  - CVE-2024-6923-follow-up-EOL-email-headers.patch
  - gh138131-exclude-pycache-from-digest.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1773403200">- Add CVE-2026-2297-SourcelessFileLoader-io_open_code.patch
  ensuring that `SourcelessFileLoader` uses `io.open_code` when
  opening `.pyc` files (bsc#1259240, CVE-2026-2297).</changelog>
  <changelog author="mmachova@suse.com" date="1773748800">- Adapt %suse_version checks to support new %suse_version design for
  16.1 and following (jsc#PED-15850)</changelog>
  <changelog author="mcepl@cepl.eu" date="1773835200">- Fix changelog</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267200">- Add CVE-2026-3644-cookies-Morsel-update-II.patch to reject
  control characters in http.cookies.Morsel.update() and
  http.cookies.BaseCookie.js_output (bsc#1259734, CVE-2026-3644).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267201">- Add CVE-2026-4224-expat-unbound-C-recursion.patch avoiding
  unbound C recursion in conv_content_model in pyexpat.c
  (bsc#1259735, CVE-2026-4224).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774440000">- Add CVE-2025-13462-tarinfo-header-parse.patch which skips
  TarInfo DIRTYPE normalization during GNU long name handling
  (bsc#1259611, CVE-2025-13462).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774612800">- Add CVE-2026-4519-webbrowser-open-dashes.patch to reject
  leading dashes in webbrowser URLs (bsc#1260026, CVE-2026-4519,
  gh#python/cpython#143930).</changelog>
  <changelog author="mcepl@cepl.eu" date="1775131200">- Add CVE-2026-3479-pkgutil_get_data.patch pkgutil.get_data() has
  the same security model as open(). The documented limitations
  ensure compatibility with non-filesystem loaders; Python
  doesn't check that. (bsc#1259989, CVE-2026-3479,
  gh#python/cpython#146121).</changelog>
  <changelog author="mcepl@cepl.eu" date="1775649600">- Update to 3.13.13
  - Security
  - gh-145986: xml.parsers.expat: Fixed a crash caused by
    unbounded C recursion when converting deeply nested XML
    content models with ElementDeclHandler(). This addresses
    CVE 2026-4224 (bsc#1259735, CVE-2026-4224).
  - gh-145599: Reject control characters in http.cookies.Morsel
    update() and js_output(). This addresses CVE 2026-3644
    (bsc#1259734, CVE-2026-3644).
  - gh-145506: Fixes CVE 2026-2297 by ensuring that
    SourcelessFileLoader uses io.open_code() when opening .pyc
    files (bsc#1259240, CVE-2026-2297).
  - gh-144370: Disallow usage of control characters in status
    in wsgiref.handlers to prevent HTTP header injections.
    Patch by Benedikt Johannes.
  - gh-143930: Reject leading dashes in URLs passed to
    webbrowser.open() (bsc#1260026, CVE-2026-4519).
  - Library
  - gh-144503: Fix a regression introduced in 3.14.3 and
    3.13.12 where the multiprocessing forkserver start method
    would fail with BrokenPipeError when the parent process had
    a very large sys.argv. The argv is now passed to the
    forkserver as separate command-line arguments rather than
    being embedded in the -c command string, avoiding the
    operating system’s per-argument length limit.
  - gh-146613: itertools: Fix a crash in itertools.groupby()
    when the grouper iterator is concurrently mutated.
  - gh-146080: ssl: fix a crash when an SNI callback tries to
    use an SSL object that has already been garbage-collected.
    Patch by Bénédikt Tran.
  - gh-146090: sqlite3: fix a crash when
    sqlite3.Connection.create_collation() fails with
    SQLITE_BUSY. Patch by Bénédikt Tran.
  - gh-146090: sqlite3: properly raise MemoryError instead of
    SystemError when a context callback fails to be allocated.
    Patch by Bénédikt Tran.
  - gh-145633: Fix struct.pack('f', float): use PyFloat_Pack4()
    to raise OverflowError. Patch by Sergey B Kirpichev and
    Victor Stinner.
  - gh-146310: The ensurepip module no longer looks for
    pip-*.whl wheel packages in the current directory.
  - gh-146083: Update bundled libexpat to version 2.7.5.
  - gh-146076: zoneinfo: fix crashes when deleting _weak_cache
    from a zoneinfo.ZoneInfo subclass.
  - gh-146054: Limit the size of encodings.search_function()
    cache. Found by OSS Fuzz in #493449985.
  - gh-145883: zoneinfo: Fix heap buffer overflow reads from
    malformed TZif data. Found by OSS Fuzz, issues #492245058
    and #492230068.
  - gh-145750: Avoid undefined behaviour from signed integer
    overflow when parsing format strings in the struct module.
    Found by OSS Fuzz in #488466741.
  - gh-145492: Fix infinite recursion in
    collections.defaultdict __repr__ when a defaultdict
    contains itself. Based on analysis by KowalskiThomas in
    gh-145492.
  - gh-145623: Fix crash in struct when calling repr() or
    __sizeof__() on an uninitialized struct.Struct object
    created via Struct.__new__() without calling __init__().
  - gh-145616: Detect Android sysconfig ABI correctly on 32-bit
    ARM Android on 64-bit ARM kernel
  - gh-145376: Fix null pointer dereference in unusual error
    scenario in hashlib.
  - gh-145551: Fix InvalidStateError when cancelling process
    created by asyncio.create_subprocess_exec() or
    asyncio.create_subprocess_shell(). Patch by Daan De Meyer.
  - gh-145417: venv: Prevent incorrect preservation of SELinux
    context when copying the Activate.ps1 script. The script
    inherited the SELinux security context of the system
    template directory, rather than the destination project
    directory.
  - gh-145301: hashlib: fix a crash when the initialization of
    the underlying C extension module fails.
  - gh-145264: Base64 decoder (see binascii.a2b_base64(),
    base64.b64decode(), etc) no longer ignores excess data
    after the first padded quad in non-strict (default) mode.
    Instead, in conformance with RFC 4648, section 3.3, it now
    ignores the pad character, “=”, if it is present before the
    end of the encoded data.
  - gh-145158: Avoid undefined behaviour from signed integer
    overflow when parsing format strings in the struct module.
  - gh-144984: Fix crash in
    xml.parsers.expat.xmlparser.ExternalEntityParserCreate()
    when an allocation fails. The error paths could dereference
    NULL handlers and double-decrement the parent parser’s
    reference count.
  - gh-88091: Fix unicodedata.decomposition() for Hangul
    characters.
  - gh-144835: Added missing explanations for some parameters
    in glob.glob() and glob.iglob().
  - gh-144833: Fixed a use-after-free in ssl when SSL_new()
    returns NULL in newPySSLSocket(). The error was reported
    via a dangling pointer after the object had already been
    freed.
  - gh-144259: Fix inconsistent display of long multiline
    pasted content in the REPL.
  - gh-144156: Fix the folding of headers by the email library
    when RFC 2047 encoded words are used. Now whitespace is
    correctly preserved and also correctly added between
    adjacent encoded words. The latter property was broken by
    the fix for gh-92081, which mostly fixed previous failures
    to preserve whitespace.
  - gh-66305: Fixed a hang on Windows in the tempfile module
    when trying to create a temporary file or subdirectory in
    a non-writable directory.
  - gh-140814: multiprocessing.freeze_support() no longer sets
    the default start method as a side effect, which previously
    caused a subsequent multiprocessing.set_start_method() call
    to raise RuntimeError.
  - gh-144475: Calling repr() on functools.partial() is now
    safer when the partial object’s internal attributes are
    replaced while the string representation is being
    generated.
  - gh-144538: Bump the version of pip bundled in ensurepip to
    version 26.0.1
  - gh-144363: Update bundled libexpat to 2.7.4
  - gh-143637: Fixed a crash in socket.sendmsg() that could
    occur if ancillary data is mutated re-entrantly during
    argument parsing.
  - gh-143880: Fix data race in functools.partial() in the free
    threading build.
  - gh-143543: Fix a crash in itertools.groupby that could
    occur when a user-defined __eq__() method re-enters the
    iterator during key comparison.
  - gh-140652: Fix a crash in _interpchannels.list_all() after
    closing a channel.
  - gh-143698: Allow scheduler and setpgroup arguments to be
    explicitly None when calling os.posix_spawn() or
    os.posix_spawnp(). Patch by Bénédikt Tran.
  - gh-143698: Raise TypeError instead of SystemError when the
    scheduler in os.posix_spawn() or os.posix_spawnp() is not
    a tuple. Patch by Bénédikt Tran.
  - gh-143304: Fix ctypes.CDLL to honor the handle parameter on
    POSIX systems.
  - gh-142781: zoneinfo: fix a crash when instantiating
    ZoneInfo objects for which the internal class-level cache
    is inconsistent.
  - gh-142763: Fix a race condition between zoneinfo.ZoneInfo
    creation and zoneinfo.ZoneInfo.clear_cache() that could
    raise KeyError.
  - gh-142787: Fix assertion failure in sqlite3 blob subscript
    when slicing with indices that result in an empty slice.
  - gh-142352: Fix asyncio.StreamWriter.start_tls() to transfer
    buffered data from StreamReader to the SSL layer,
    preventing data loss when upgrading a connection to TLS
    mid-stream (e.g., when implementing PROXY protocol
    support).
  - gh-141707: Don’t change tarfile.TarInfo type from AREGTYPE
    to DIRTYPE when parsing GNU long name or link headers
    (bsc#1259611, CVE-2025-13462).
  - gh-139933: Improve AttributeError suggestions for classes
    with a custom __dir__() method returning a list of
    unsortable values. Patch by Bénédikt Tran.
  - gh-138891: Fix SyntaxError when inspect.get_annotations(f,
    eval_str=True) is called on a function annotated with a PEP
    646 star_expression
  - gh-137335: Get rid of any possibility of a name conflict
    for named pipes in multiprocessing and asyncio on Windows,
    no matter how small.
  - gh-80667: Support lookup for Tangut Ideographs in
    unicodedata.
  - bpo-40243: Fix unicodedata.ucd_3_2_0.numeric() for
    non-decimal values.
  - Documentation
  - gh-126676: Expand argparse documentation for type=bool with
    a demonstration of the surprising behavior and pointers to
    common alternatives.
  - gh-145450: Document missing public wave.Wave_write getter
    methods.
  - Core and Builtins
  - gh-148157: Fix an unlikely crash when parsing an invalid
    type comments for function parameters. Found by OSS Fuzz in
    [#492782951].
  - gh-146615: Fix a crash in __get__() for METH_METHOD
    descriptors when an invalid (non-type) object is passed as
    the second argument. Patch by Steven Sun.
  - gh-146128: Fix a bug which could cause constant values to
    be partially corrupted in AArch64 JIT code. This issue is
    theoretical, and hasn’t actually been observed in
    unmodified Python interpreters.
  - gh-146250: Fixed a memory leak in SyntaxError when
    re-initializing it.
  - gh-146245: Fixed reference leaks in socket when audit hooks
    raise exceptions in socket.getaddrinfo() and
    socket.sendto().
  - gh-146227: Fix wrong type in _Py_atomic_load_uint16 in the
    C11 atomics backend (pyatomic_std.h), which used a 32-bit
    atomic load instead of 16-bit. Found by Mohammed Zuhaib.
  - gh-146056: Fix repr() for lists containing NULLs.
  - gh-145990: python --help-env sections are now sorted by
    environment variable name.
  - gh-145376: Fix GC tracking in structseq.__replace__().
  - gh-142183: Avoid a pathological case where repeated calls
    at a specific stack depth could be significantly slower.
  - gh-145783: Fix an unlikely crash in the parser when certain
    errors were erroneously not propagated. Found by OSS Fuzz
    in #491369109.
  - gh-145701: Fix SystemError when __classdict__ or
    __conditional_annotations__ is in a class-scope inlined
    comprehension. Found by OSS Fuzz in #491105000.
  - gh-145335: Fix a crash in os.pathconf() when called with -1
    as the path argument.
  - gh-145234: Fixed a SystemError in the parser when an
    encoding cookie (for example, UTF-7) decodes to carriage
    returns (\r). Newlines are now normalized after decoding in
    the string tokenizer.
  - Patch by Pablo Galindo.
  - gh-130555: Fix use-after-free in dict.clear() when the
    dictionary values are embedded in an object and
    a destructor causes re-entrant mutation of the dictionary.
  - gh-145008: Fix a bug when calling certain methods at the
    recursion limit which manifested as a corruption of
    Python’s operand stack. Patch by Ken Jin.
  - gh-144872: Fix heap buffer overflow in the parser found by
    OSS-Fuzz.
  - gh-144766: Fix a crash in fork child process when perf
    support is enabled.
  - gh-144759: Fix undefined behavior in the lexer when start
    and multi_line_start pointers are NULL in
    _PyLexer_remember_fstring_buffers() and
    _PyLexer_restore_fstring_buffers(). The NULL pointer
    arithmetic (NULL - valid_pointer) is now guarded with
    explicit NULL checks.
  - gh-144601: Fix crash when importing a module whose PyInit
    function raises an exception from a subinterpreter.
  - gh-143636: Fix a crash when calling
    SimpleNamespace.__replace__() on non-namespace instances.
    Patch by Bénédikt Tran.
  - gh-143650: Fix race condition in importlib where a thread
    could receive a stale module reference when another
    thread’s import fails.
  - gh-140594: Fix an out of bounds read when a single NUL
    character is read from the standard input. Patch by Shamil
    Abdulaev.
  - gh-91636: While performing garbage collection, clear
    weakrefs to unreachable objects that are created during
    running of finalizers. If those weakrefs were are not
    cleared, they could reveal unreachable objects.
  - gh-130327: Fix erroneous clearing of an object’s __dict__
    if overwritten at runtime.
  - gh-80667: Literals using the \N{name} escape syntax can now
    construct CJK ideographs and Hangul syllables using
    case-insensitive names.
  - Build
  - gh-146541: The Android testbed can now be built for 32-bit
    ARM and x86 targets.
  - gh-146450: The Android build script was modified to improve
    parity with other platform build scripts.
  - gh-145801: When Python build is optimized with GCC using
    PGO, use -fprofile-update=atomic option to use atomic
    operations when updating profile information. This option
    reduces the risk of gcov Data Files (.gcda) corruption
    which can cause random GCC crashes. Patch by Victor
    Stinner.
  - gh-129259: Fix AIX build failures caused by incorrect
    struct alignment in _Py_CODEUNIT and _Py_BackoffCounter by
    adding AIX-specific #pragma pack directives.
  - Tests
  - gh-144418: The Android testbed’s emulator RAM has been
    increased from 2 GB to 4 GB.
  - gh-146202: Fix a race condition in regrtest: make sure that
    the temporary directory is created in the worker process.
    Previously, temp_cwd() could fail on Windows if the “build”
    directory was not created. Patch by Victor Stinner.
  - gh-144739: When Python was compiled with system expat older
    then 2.7.2 but tests run with newer expat, still skip
    test.test_pyexpat.MemoryProtectionTest.
- Removed upstreamed patches:
  - CVE-2025-13462-tarinfo-header-parse.patch
  - CVE-2026-2297-SourcelessFileLoader-io_open_code.patch
  - CVE-2026-3479-pkgutil_get_data.patch
  - CVE-2026-3644-cookies-Morsel-update-II.patch
  - CVE-2026-4224-expat-unbound-C-recursion.patch
  - CVE-2026-4519-webbrowser-open-dashes.patch</changelog>
</package>
<package pkgid="885437340deafd318958842a0564a373ad75ab0a262f725b1c08dbf70ce746a9ba4a0836570e0345079fd4b447962a6b73d6ee7cb5e66868ca410a33c87676e2" name="python313-bcrypt" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1651665600">- update to 3.2.2:
  * Fixed packaging of ``py.typed`` files in wheels so that ``mypy`` works.
  * Added support for compilation on z/OS
  * The next release of ``bcrypt`` with be 4.0 and it will require Rust at
    compile time, for users building from source. There will be no additional
    requirement for users who are installing from wheels. Users on most
    platforms will be able to obtain a wheel by making sure they have an up to
    date ``pip``. The minimum supported Rust version will be 1.56.0.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1667390400">- Remove not needed python-six dependency</changelog>
  <changelog author="daniel.garcia@suse.com" date="1667390401">- Update to 4.0.1:
  * We now build PyPy manylinux wheels.
  * Fixed a bug where passing an invalid salt to checkpw could result in a
    pyo3_runtime.PanicException. It now correctly raises a ValueError.
- 4.0.0:
  * bcrypt is now implemented in Rust. Users building from source will need to
    have a Rust compiler available. Nothing will change for users downloading
    wheels.
  * We no longer ship manylinux2010 wheels. Users should upgrade to the latest
    pip to ensure this doesn’t cause issues downloading wheels on their
    platform. We now ship manylinux_2_28 wheels for users on new enough
    platforms.
  * NUL bytes are now allowed in inputs.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1667476800">- Removed not needed C build dependencies
- Enable for all archs by default</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1715083200">- update to 4.1.3:
  * Bump Rust dependency versions
  * Fixed the type signature on the ``kdf`` method.
  * Fixed packaging bug on Windows.
  * Fixed incompatibility with passlib package detection assumptions.
  * Dropped support for Python 3.6.
  * Bumped MSRV to 1.64. (Note: Rust 1.63 can be used by setting the
    ``BCRYPT_ALLOW_RUST_163`` environment variable)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1721736000">- Update to 4.2.0
  * Bump version for 4.2.0 release (#843)
  * Import improvements from cryptography wheel building and release (#840)
  * Remove setup.py (#842)
  * Small cleanup (#841)
  * Added 3.13 to CI (#839)
  * Bump portable-atomic from 1.6.0 to 1.7.0 in /src/_bcrypt (#836)
  * Bump syn from 2.0.71 to 2.0.72 in /src/_bcrypt (#837)
  * Bump pyo3 from 0.22.1 to 0.22.2 in /src/_bcrypt (#834)
  * Bump syn from 2.0.70 to 2.0.71 in /src/_bcrypt (#833)
  * Bump actions/setup-python from 5.1.0 to 5.1.1 (#832)
  * Bump syn from 2.0.69 to 2.0.70 in /src/_bcrypt (#831)
  * Bump target-lexicon from 0.12.14 to 0.12.15 in /src/_bcrypt (#830)
  * Don't import things from prelude (#829)
  * Bump actions/upload-artifact from 4.3.3 to 4.3.4 (#824)
  * Bump actions/download-artifact from 4.1.7 to 4.1.8 (#825)
  * Bump syn from 2.0.68 to 2.0.69 in /src/_bcrypt (#827)
  * Bump pyo3 from 0.22.0 to 0.22.1 in /src/_bcrypt (#828)
  * Update for new ruff syntax (#826)
  * Switch to using the new pyo3 syntax for declarative modules (#823)
  * Bump pyo3 to 0.22 (#822)
  * Bump bitflags from 2.5.0 to 2.6.0 in /src/_bcrypt (#821)
  * Bump syn from 2.0.67 to 2.0.68 in /src/_bcrypt (#818)
  * Bump syn from 2.0.66 to 2.0.67 in /src/_bcrypt (#817)
  * Bump proc-macro2 from 1.0.85 to 1.0.86 in /src/_bcrypt (#816)
  * Bump subtle from 2.5.0 to 2.6.0 in /src/_bcrypt (#814)
  * Bump redox_syscall from 0.5.1 to 0.5.2 in /src/_bcrypt (#813)
  * Bump actions/checkout from 4.1.6 to 4.1.7 (#812)
  * Bump proc-macro2 from 1.0.84 to 1.0.85 in /src/_bcrypt (#811)
  * Bump proc-macro2 from 1.0.83 to 1.0.84 in /src/_bcrypt (#808)
  * Bump zeroize from 1.7.0 to 1.8.1 in /src/_bcrypt (#809)
  * Bump parking_lot from 0.12.2 to 0.12.3 in /src/_bcrypt (#810)
  * Bump syn from 2.0.65 to 2.0.66 in /src/_bcrypt (#806)
  * alpine is 3.12 now (#807)
  * Bump proc-macro2 from 1.0.82 to 1.0.83 in /src/_bcrypt (#804)
  * Bump syn from 2.0.64 to 2.0.65 in /src/_bcrypt (#803)
  * Bump libc from 0.2.154 to 0.2.155 in /src/_bcrypt (#802)
  * Bump actions/checkout from 4.1.5 to 4.1.6 (#800)
  * Apply the wacky staticnode workaround to this repo (#801)
  * Bump syn from 2.0.63 to 2.0.64 in /src/_bcrypt (#799)
  * Bump syn from 2.0.61 to 2.0.63 in /src/_bcrypt (#798)
  * Try upgrading ubuntu in CI (#797)
  * Bump proc-macro2 from 1.0.81 to 1.0.82 in /src/_bcrypt (#796)
  * Bump syn from 2.0.60 to 2.0.61 in /src/_bcrypt (#795)
  * Bump getrandom from 0.2.14 to 0.2.15 in /src/_bcrypt (#794)
  * Bump actions/checkout from 3.6.0 to 4.1.5 (#793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1733313600">- Update to 4.2.1
  * Bump version for 4.2.1 (#914)
  * Bump bcrypt from 0.15.1 to 0.16.0 in /src/_bcrypt (#912)
  * Fix warnings from pyo3 0.23 (#911)
  * Bump pyo3 from 0.22.6 to 0.23.1 in /src/_bcrypt (#909)
  * Bump libc from 0.2.162 to 0.2.164 in /src/_bcrypt (#910)
  * Bump cpufeatures from 0.2.14 to 0.2.15 in /src/_bcrypt (#908)
  * Bump libc from 0.2.161 to 0.2.162 in /src/_bcrypt (#907)
  * Bump pypa/gh-action-pypi-publish from 1.12.0 to 1.12.2 (#906)
  * Bump pyo3 from 0.22.5 to 0.22.6 in /src/_bcrypt (#905)
  * Bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.0 (#904)
  * Bump syn from 2.0.86 to 2.0.87 in /src/_bcrypt (#903)
  * Bump syn from 2.0.85 to 2.0.86 in /src/_bcrypt (#902)
  * Bump pypa/gh-action-pypi-publish from 1.10.3 to 1.11.0 (#901)
  * Bump actions/setup-python from 5.2.0 to 5.3.0 (#899)
  * Bump syn from 2.0.82 to 2.0.85 in /src/_bcrypt (#898)
  * Bump actions/checkout from 4.2.1 to 4.2.2 (#897)
  * Bump actions/cache from 4.1.1 to 4.1.2 (#896)
  * Bump proc-macro2 from 1.0.88 to 1.0.89 in /src/_bcrypt (#895)
  * Bump syn from 2.0.79 to 2.0.82 in /src/_bcrypt (#894)
  * Bump libc from 0.2.159 to 0.2.161 in /src/_bcrypt (#893)
  * Bump proc-macro2 from 1.0.87 to 1.0.88 in /src/_bcrypt (#892)
  * Bump pyo3 from 0.22.4 to 0.22.5 in /src/_bcrypt (#891)
  * Bump pyo3 from 0.22.3 to 0.22.4 in /src/_bcrypt (#890)
  * Update CI for 3.13 (#888)
  * Bump actions/upload-artifact from 4.4.2 to 4.4.3 (#889)
  * Bump actions/upload-artifact from 4.4.1 to 4.4.2 (#886)
  * Bump actions/cache from 4.1.0 to 4.1.1 (#887)
  * Bump proc-macro2 from 1.0.86 to 1.0.87 in /src/_bcrypt (#884)
  * Bump actions/upload-artifact from 4.4.0 to 4.4.1 (#883)
  * Bump actions/checkout from 4.2.0 to 4.2.1 (#882)
  * Bump actions/cache from 4.0.2 to 4.1.0 (#881)
  * Bump once_cell from 1.20.1 to 1.20.2 in /src/_bcrypt (#880)
  * Bump once_cell from 1.20.0 to 1.20.1 in /src/_bcrypt (#878)
  * Bump portable-atomic from 1.8.0 to 1.9.0 in /src/_bcrypt (#877)
  * Bump syn from 2.0.77 to 2.0.79 in /src/_bcrypt (#879)
  * Bump autocfg from 1.3.0 to 1.4.0 in /src/_bcrypt (#876)
  * Bump actions/checkout from 4.1.7 to 4.2.0 (#875)
  * Bump libc from 0.2.158 to 0.2.159 in /src/_bcrypt (#874)
  * Bump portable-atomic from 1.7.0 to 1.8.0 in /src/_bcrypt (#873)
  * Bump once_cell from 1.19.0 to 1.20.0 in /src/_bcrypt (#871)
  * Bump pyo3 from 0.22.2 to 0.22.3 in /src/_bcrypt (#872)
  * Bump unicode-ident from 1.0.12 to 1.0.13 in /src/_bcrypt (#870)
  * Bump cpufeatures from 0.2.13 to 0.2.14 in /src/_bcrypt (#869)
  * Bump actions/attest-build-provenance from 1.4.2 to 1.4.3 (#868)
  * Correctly use `console` language fence (#867)
  * Bump actions/upload-artifact from 4.3.6 to 4.4.0 (#866)
  * Bump syn from 2.0.76 to 2.0.77 in /src/_bcrypt (#865)
  * Bump actions/setup-python from 5.1.1 to 5.2.0 (#862)
  * Bump syn from 2.0.75 to 2.0.76 in /src/_bcrypt (#861)
  * Bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#859)
  * Bump quote from 1.0.36 to 1.0.37 in /src/_bcrypt (#858)
  * Bump libc from 0.2.157 to 0.2.158 in /src/_bcrypt (#857)
  * Bump syn from 2.0.74 to 2.0.75 in /src/_bcrypt (#855)
  * Bump libc from 0.2.156 to 0.2.157 in /src/_bcrypt (#856)
  * Bump libc from 0.2.155 to 0.2.156 in /src/_bcrypt (#854)
  * Bump cpufeatures from 0.2.12 to 0.2.13 in /src/_bcrypt (#853)
  * Bump syn from 2.0.72 to 2.0.74 in /src/_bcrypt (#851)
  * Bump actions/attest-build-provenance from 1.4.0 to 1.4.1 (#852)
  * Bump actions/upload-artifact from 4.3.5 to 4.3.6 (#850)
  * Bump actions/upload-artifact from 4.3.4 to 4.3.5 (#849)
  * Bump target-lexicon from 0.12.15 to 0.12.16 in /src/_bcrypt (#848)
  * Bump actions/attest-build-provenance from 1.3.3 to 1.4.0 (#847)
  * Bump version_check from 0.9.4 to 0.9.5 in /src/_bcrypt (#846)
  * Fix pypi-publish.yml for paths with spaces (#844)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1742558400">- Update 4.3.0
  * Bump proc-macro2 from 1.0.89 to 1.0.90 in /src/_bcrypt (#916)
  * Bump unicode-ident from 1.0.13 to 1.0.14 in /src/_bcrypt (#915)
  * fixes #917 -- correctly handle a salt that's too short (#918)
  * Bump cpufeatures from 0.2.15 to 0.2.16 in /src/_bcrypt (#919)
  * Bump proc-macro2 from 1.0.90 to 1.0.92 in /src/_bcrypt (#920)
  * Bump syn from 2.0.87 to 2.0.89 in /src/_bcrypt (#921)
  * Fix new ruff warning (#923)
  * Build manylinux 2.34 images (#922)
  * Bump portable-atomic from 1.9.0 to 1.10.0 in /src/_bcrypt (#924)
  * drop py37 (#926)
  * Bump pyo3 from 0.23.1 to 0.23.2 in /src/_bcrypt (#927)
  * Bump libc from 0.2.164 to 0.2.165 in /src/_bcrypt (#928)
  * Bump libc from 0.2.165 to 0.2.166 in /src/_bcrypt (#929)
  * Bump dawidd6/action-download-artifact from 6 to 7 (#932)
  * Bump syn from 2.0.89 to 2.0.90 in /src/_bcrypt (#931)
  * Bump libc from 0.2.166 to 0.2.167 in /src/_bcrypt (#930)
  * Bump pyo3 from 0.23.2 to 0.23.3 in /src/_bcrypt (#933)
  * Bump actions/cache from 4.1.2 to 4.2.0 (#934)
  * Bump libc from 0.2.167 to 0.2.168 in /src/_bcrypt (#935)
  * Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3 (#936)
  * Bump dtolnay/rust-toolchain (#937)
  * Bump actions/upload-artifact from 4.4.3 to 4.5.0 (#938)
  * Bump libc from 0.2.168 to 0.2.169 in /src/_bcrypt (#939)
  * Bump syn from 2.0.90 to 2.0.91 in /src/_bcrypt (#940)
  * Bump quote from 1.0.37 to 1.0.38 in /src/_bcrypt (#942)
  * Bump syn from 2.0.91 to 2.0.92 in /src/_bcrypt (#941)
  * Bump syn from 2.0.92 to 2.0.93 in /src/_bcrypt (#943)
  * Bump syn from 2.0.93 to 2.0.94 in /src/_bcrypt (#944)
  * Bump syn from 2.0.94 to 2.0.95 in /src/_bcrypt (#945)
  * Bump syn from 2.0.95 to 2.0.96 in /src/_bcrypt (#948)
  * Bump actions/upload-artifact from 4.5.0 to 4.6.0 (#947)
  * Bump proc-macro2 from 1.0.92 to 1.0.93 in /src/_bcrypt (#949)
  * Bump pyo3 from 0.23.3 to 0.23.4 in /src/_bcrypt (#950)
  * Support free-threaded Python 3.13 (#925)
  * Switch to nox (#954)
  * use github hosted arm runners in wheel builder (#952)
  * use github hosted arm runners in ci (#951)
  * Bump dawidd6/action-download-artifact from 7 to 8 (#956)
  * Bump pypa/gh-action-pypi-publish from 1.12.3 to 1.12.4 (#957)
  * Bump unicode-ident from 1.0.14 to 1.0.15 in /src/_bcrypt (#958)
  * include matrix.PYTHON.VERSION in CI cache keys (#964)
  * Bump cpufeatures from 0.2.16 to 0.2.17 in /src/_bcrypt (#960)
  * Bump unicode-ident from 1.0.15 to 1.0.16 in /src/_bcrypt (#962)
  * Bump actions/setup-python from 5.3.0 to 5.4.0 (#963)
  * Update getrandom and bcrypt (#966)
  * Bump syn from 2.0.96 to 2.0.98 in /src/_bcrypt (#967)
  * Bump quansight-labs/setup-python from 5.3.1 to 5.4.0 (#968)
  * add support for free-threaded wheels (#955)
  * Bump once_cell from 1.20.2 to 1.20.3 in /src/_bcrypt (#970)
  * Bump unicode-ident from 1.0.16 to 1.0.17 in /src/_bcrypt (#972)
  * Bump typenum from 1.17.0 to 1.18.0 in /src/_bcrypt (#973)
  * Bump actions/cache from 4.2.0 to 4.2.1 (#974)
  * Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#975)
  * Bump libc from 0.2.169 to 0.2.170 in /src/_bcrypt (#976)
  * Bump inout from 0.1.3 to 0.1.4 in /src/_bcrypt (#977)
  * Bump portable-atomic from 1.10.0 to 1.11.0 in /src/_bcrypt (#978)
  * Update PyO3 to 0.23.5 (#980)
  * Bump actions/download-artifact from 4.1.8 to 4.1.9 (#982)
  * Add PyPy 3.11 and armv7l to matrix runner (#983)
  * PyPy 3.11 and armv7l wheels (#984)</changelog>
</package>
<package pkgid="88dc9606dc999181b1f3b1004448bd709ca1f36040324978f813020bcc4d5ce39df8b7d7d82473046d1e6bdd4881903ec75c75cca3c4e2a3e30eab005a7bcb47" name="python313-blinker" arch="noarch">
  <version epoch="0" ver="1.9.0" rel="160000.2.2"/>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683633600">- Update to 1.6.2:
  * Type annotations are not evaluated at runtime. typing-extensions
    is not a runtime dependency. :pr:`94`
- 1.6.1:
  * Ensure that py.typed is present in the distributions (to enable
    other projects to use blinker's typing).
  * Require typing-extensions &gt; 4.2 to ensure it includes ParamSpec.
    :issue:`90`
- 1.6:
  * Add a muted context manager to temporarily turn off a signal.
    :pr:`84`
  * Allow int senders (alongside existing string senders). :pr:`83`
  * Add a send_async method to the Signal to allow signals to send to
    coroutine receivers. :pr:`76`
  * Update and modernise the project structure to match that used by
    the pallets projects. :pr:`77`
  * Add an intial set of type hints for the project.</changelog>
  <changelog author="mcepl@suse.com" date="1690372800">- Add no-stdpy-pyc.patch which makes Sphinx not to generate
  * .pyc files for the Python interpreter it uses for generating
  documentation.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1690804800">- Remove no-stdpy-pyc.patch
- Call directly to the sphinx module with the specific python
  interpreter to avoid the usage of default python, bsc#1213698.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1699963200">- update to version 1.7.0:
  * Fixed messages printed to standard error about unraisable
    exceptions during signal cleanup, typically during interpreter
    shutdown. #123
  * Allow the Signal set_class to be customised, to allow calling
    of receivers in registration order. #116.
  * Drop Python 3.7 and support Python 3.12. #126
- additional changes from 1.6.3:
  * Fix SyncWrapperType and AsyncWrapperType #108
  * Fixed issue where signal.connected_to would not disconnect the
    receiver if an instance of BaseException was raised. #114
- require python &gt;= 3.8: upstream dropped 3.7 support
- drop setuptools and wheel, add flit-core as BuildRequires:
  upstream switched build system</changelog>
  <changelog author="dmueller@suse.com" date="1729598400">- update to 1.8.2:
  * Simplify type for _async_wrapper and _sync_wrapper arguments.
    :pr:`156`
  * Restore identity handling for str and int senders. :pr:`148`
  * Fix deprecated blinker.base.WeakNamespace import. :pr:`149`
  * Fix deprecated blinker.base.receiver_connected import.
    :pr:`153`
  * Use types from collections.abc instead of typing. :pr:`150`
  * Fully specify exported types as reported by pyright.
    :pr:`152`
  * Deprecate the __version__ attribute. Use feature detection,
    or importlib.metadata.version("blinker"), instead.
    :issue:`128`
  * Specify that the deprecated temporarily_connected_to will be
    removed in the next version.
  * Show a deprecation warning for the deprecated global
    receiver_connected signal and specify that it will be removed
    in the next version.
  * Show a deprecation warning for the deprecated WeakNamespace
    and specify that it will be removed in the next version.
  * Greatly simplify how the library uses weakrefs. This is a
    significant change internally but should not affect any
    public API. :pr:`144`
  * Expose the namespace used by signal() as default_namespace.
    :pr:`145`
- add remove-sphinxextensions.patch to remove an optional
  sphinxextension</changelog>
  <changelog author="ecsos@opensuse.org" date="1730635200">- Add missing build require pallets_sphinx_themes
  to fix build error under Leap.</changelog>
  <changelog author="dmueller@suse.com" date="1732017600">- update to 1.9.0:
  * Drop support for Python 3.8. :pr:`175`
  * Remove previously deprecated __version__, receiver_connected,
    Signal.temporarily_connected_to and WeakNamespace. :pr:`172`
  * Skip weakref signal cleanup if the interpreter is shutting
    down. :issue:`173`</changelog>
</package>
<package pkgid="2c621fbe1bc20945874576af4e45d5b6c57b64dae06ba190ef5397b153074fa4f44b7e41d1fd476811ed328cb8bcb38678c9469c2bcb4f1e03cd94a475b1a9b1" name="python313-certifi" arch="noarch">
  <version epoch="0" ver="2025.1.31" rel="160000.2.2"/>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 2022.12.7 (bsc#1206212 CVE-2022-23491):
  * obsoletes removeTrustCor.patch in older dists
  Removed certs:
  * CN=Network Solutions Certificate Authority O=Network Solutions L.L.C.
  * CN=Staat der Nederlanden EV Root CA O=Staat der Nederlanden
  * CN=TrustCor RootCert CA-1 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority
  * CN=TrustCor RootCert CA-2 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority
  * CN=TrustCor ECA-1 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority</changelog>
  <changelog author="dmueller@suse.com" date="1683547200">- update to 2023.5.7:
  Added certs:
  * CN=BJCA Global Root CA1 O=BEIJING CERTIFICATE AUTHORITY</changelog>
  <changelog author="dmueller@suse.com" date="1691582400">- update to 2023.7.22:
  Added certs:
  [#] CN=Sectigo Public Server Authentication Root E46 O=Sectigo Limited
  [#] CN=Sectigo Public Server Authentication Root R46 O=Sectigo Limited
  [#] CN=SSL.com TLS RSA Root CA 2022 O=SSL Corporation
  [#] CN=SSL.com TLS ECC Root CA 2022 O=SSL Corporation
  [#] CN=Atos TrustedRoot Root CA ECC TLS 2021 O=Atos
  [#] CN=Atos TrustedRoot Root CA RSA TLS 2021 O=Atos
  Removed certs:
  [#] CN=Hongkong Post Root CA 1 O=Hongkong Post
  [#] CN=E-Tugra Certification Authority O=E-Tu\u011fra EBG Bili\u015fim
    Teknolojileri ve Hizmetleri A.\u015e. OU=E-Tugra Sertifikasyon Merkezi
  [#] CN=E-Tugra Global Root CA RSA v3 O=E-Tugra EBG A.S. OU=E-Tugra Trust Center
  [#] CN=E-Tugra Global Root CA ECC v3 O=E-Tugra EBG A.S. OU=E-Tugra Trust Center</changelog>
  <changelog author="dmueller@suse.com" date="1701172800">- update to 2023.11.17:
  Added certs:
  * Subject: CN=TrustAsia Global Root CA G3 O=TrustAsia Technologies, Inc.
  * Subject: CN=TrustAsia Global Root CA G4 O=TrustAsia Technologies, Inc.
  * Subject: CN=CommScope Public Trust ECC Root-01 O=CommScope
  * Subject: CN=CommScope Public Trust ECC Root-02 O=CommScope
  * Subject: CN=CommScope Public Trust RSA Root-01 O=CommScope
  * Subject: CN=CommScope Public Trust RSA Root-02 O=CommScope
  Removed certs:
  * Subject: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720526400">- Refresh patches python-certifi-shipped-requests-cabundle.patch and
  two-basic-unit-tests.patch
- Remove executable bit from core.py file
- Update to 2024.7.4 (CVE-2024-39689, bsc#1227519):
  Removed certs:
  * Subject: CN=GLOBALTRUST 2020 O=e-commerce monitoring GmbH
- 2024.06.02
  Added certs:
  * Subject: CN=FIRMAPROFESIONAL CA ROOT-A WEB O=Firmaprofesional SA
- 2024.02.02
  Added certs:
  * Subject: CN=Telekom Security TLS ECC Root 2020 O=Deutsche Telekom Security GmbH
  * Subject: CN=Telekom Security TLS RSA Root 2023 O=Deutsche Telekom Security GmbH
  Removed certs:
  * Subject: O=SECOM Trust.net OU=Security Communication RootCA1
  * Fix leaking certificate issue</changelog>
  <changelog author="dmueller@suse.com" date="1728475200">- update to 2024.8.30:
  added certs:
  * TWCA CYBER Root CA O=TAIWAN-CA OU=Root CA
  * SecureSign Root CA12 O=Cybertrust Japan Co., Ltd.
  * SecureSign Root CA14 O=Cybertrust Japan Co., Ltd.
  * SecureSign Root CA15 O=Cybertrust Japan Co., Ltd.</changelog>
  <changelog author="mcepl@cepl.eu" date="1730980800">- Make the test suite working just with the standard library.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744113600">- Update to 2025.1.31
  * Added certs
  - Subject: CN=D-TRUST BR Root CA 2 2023 O=D-Trust GmbH
  - Subject: CN=D-TRUST EV Root CA 2 2023 O=D-Trust GmbH
  * Removed certs
  - Subject: CN=SwissSign Silver CA - G2 O=SwissSign AG
- from version 2024.12.14
  * Upload attestations to PyPI
  * Added 3.13 classifier (#322)
  * Test against 3.13 final
  * Added certs
  - Subject: CN=GLOBALTRUST 2020 O=e-commerce monitoring GmbH
  * Removed certs
  - Subject: CN=SecureSign RootCA11 O=Japan Certification Services, Inc.
  - Subject: CN=Entrust Root Certification Authority - G4 O=Entrust, Inc.
    OU=See www.entrust.net/legal-terms/(c) 2015 Entrust, Inc. - for
    authorized use only
  - Subject: CN=Security Communication RootCA3 O=SECOM Trust Systems CO.,LTD.</changelog>
</package>
<package pkgid="01d83303487cbf89818c800628c20c14b818d8a8ae40a49e8b698fd8638c23c55cbd81dda4accc8a8d012f3585452448a3f63dcf34508d3305cd69348e95515d" name="python313-cffi" arch="x86_64">
  <version epoch="0" ver="1.17.1" rel="160000.2.2"/>
  <changelog author="daniel.garcia@suse.com" date="1670241600">- Add python-py as test dependency</changelog>
  <changelog author="dmueller@suse.com" date="1673006400">- add 8a3c2c816d789639b49d3ae867213393ed7abdff.patch to resolve
  testsuite failures with Python 3.11</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@cepl.eu" date="1696593600">- Clean up the SPEC file</changelog>
  <changelog author="mcepl@cepl.eu" date="1696593601">- Upgrade to 1.16.0:
  - Add support for Python 3.12. With the removal of distutils
    from Python 3.12, projects using CFFI features that depend on
    distutils at runtime must add a dependency on setuptools to
    function under Python 3.12+. CFFI does not declare a runtime
    setuptools requirement to avoid an unnecessary dependency for
    projects that do not require it.
  - Drop support for end-of-life Python versions (2.7, 3.6, 3.7).
  - Move project source under src/; a more standard layout that
    also enables CI to more easily catch packaging errors.
  - Move project home to python-cffi/cffi on GitHub.
  - Add support for PEP517 builds; setuptools is now a required
    build dependency.
  - Declare python_requires metadata for Python 3.8+. This allows
    unsupported Pythons to continue using previously released
    sdists and wheels.
  - Add missing calls to PyObject_GC_UnTrack to avoid
    ResourceWarning 15c4b71
- Remove upstreamed patch
  8a3c2c816d789639b49d3ae867213393ed7abdff.patch</changelog>
  <changelog author="dcermak@suse.com" date="1709208000">- drop unnecessary buildrequire python-py</changelog>
  <changelog author="dmueller@suse.com" date="1719748800">- add py313-compat.patch
  py313-use-format-unraisable.patch
  py313-use-hashpointer.patch: add upstream patches for py3.13
  support</changelog>
  <changelog author="dmueller@suse.com" date="1725105600">- update to 1.17.0:
  * Add support for Python 3.13.
  * In API mode, when you get a function from a C library by writing
    `fn = lib.myfunc`, you get an object of a special type for
    performance reasons, instead of a `&lt;cdata 'C-function-type'&gt;`.
    Before version 1.17 you could only call such objects.
    You could write `ffi.addressof(lib, "myfunc")` in order to get
    a real `&lt;cdata&gt;` object, based on the idea that in these cases
    in C you'd usually write `&amp;myfunc` instead of `myfunc`.  In
    version 1.17, the special object `lib.myfunc` can now be passed
    in many places where CFFI expects
    a regular `&lt;cdata&gt;` object.  For example, you can now pass
    it as a callback to a C function call, or write it inside a C
    structure field of the correct pointer-to-function type, or use
    `ffi.cast()` or `ffi.typeof()` on it.
- drop py313-compat.patch, py313-use-format-unraisable.patch,
  py313-use-hashpointer.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1728475200">- update to 1.17.1:
  * Fix failing distutils.msvc9compiler imports under Windows (#118).
  * ffibuilder.emit_python_code() and ffibuiler.emit_c_code()
    accept file-like objects (#115).
  * ffiplatform calls are bypassed by ffibuilder.emit_python_code()
    and ffibuilder.emit_c_code() (#81).</changelog>
</package>
<package pkgid="03ebf591784799d0aae2477ac4ee1aa4e00ac6a00d327b367cccc8947d786c23d98ab6f351f4bb662603a61a4a7b9e1802ba66d88588ad317014218dc5ddfb5e" name="python313-charset-normalizer" arch="noarch">
  <version epoch="0" ver="3.4.2" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1679832000">- update to 3.1.0:
  * Argument `should_rename_legacy` for legacy function `detect`
    and disregard any new arguments without errors (PR #262)
  * Removed Support for Python 3.6 (PR #260)
  * Optional speedup provided by mypy/c 1.0.1</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1689076800">- update to 3.2.0:
  * Typehint for function `from_path` no longer enforce
    `PathLike` as its first argument
  * Minor improvement over the global detection reliability
  * Introduce function `is_binary` that relies on main
    capabilities, and optimized to detect binaries
  * Propagate `enable_fallback` argument throughout `from_bytes`,
    `from_path`, and `from_fp` that allow a deeper control over
    the detection (default True)
  * Edge case detection failure where a file would contain 'very-
    long' camel cased word (Issue #289)</changelog>
  <changelog author="dmueller@suse.com" date="1696248000">- update to 3.3.0:
  * Allow to execute the CLI (e.g. normalizer) through `python -m
    charset_normalizer.cli` or `python -m charset_normalizer`
  * Support for 9 forgotten encoding that are supported by Python
    but unlisted in `encoding.aliases` as they have no alias
  * Optional mypyc compilation upgraded to version 1.5.1 for
    Python &gt;= 3.7
  * Unable to properly sort CharsetMatch when both chaos/noise
    and coherence were close due to an unreachable condition in
    \_\_lt\_\_ (#350)</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 3.3.2:
  * Unintentional memory usage regression when using large
    payload that match several encoding (#376)
  * Regression on some detection case showcased in the
    documentation (#371)
  * Noise (md) probe that identify malformed arabic
    representation due to the presence of letters in isolated
    form
  * Optional mypyc compilation upgraded to version 1.6.1 for
    Python &gt;= 3.8
  * Improved the general detection reliability based on reports
    from the community</changelog>
  <changelog author="dmueller@suse.com" date="1729598400">- update to 3.4.0:
  * Argument `--no-preemptive` in the CLI to prevent the detector
    to search for hints.
  * Support for Python 3.13
  * Relax the TypeError exception thrown when trying to compare a
    CharsetMatch with anything else than a CharsetMatch.
  * Improved the general reliability of the detector based on
    user feedbacks. (#520) (#509) (#498) (#407)
  * Declared charset in content (preemptive detection) not
    changed when converting to utf-8 bytes.</changelog>
  <changelog author="dmueller@suse.com" date="1730116800">- switch to PEP517 build</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1736424000">- Update to 3.4.1
  * Project metadata are now stored using `pyproject.toml` instead of
    `setup.cfg` using setuptools as the build backend.
  * Enforce annotation delayed loading for a simpler and consistent
    types in the project.
  * Optional mypyc compilation upgraded to version 1.14 for Python &gt;= 3.8
  * Added pre-commit configuration.
  * Added noxfile.
  * Removed `build-requirements.txt` as per using `pyproject.toml`
    native build configuration.
  * Removed `bin/integration.py` and `bin/serve.py` in favor of downstream
    integration test (see noxfile).
  * Removed `setup.cfg` in favor of `pyproject.toml` metadata configuration.
  * Removed unused `utils.range_scan` function.
  * Converting content to Unicode bytes may insert `utf_8` instead of
    preferred `utf-8`. (#572)
  * Deprecation warning "'count' is passed as positional argument" when
    converting to Unicode bytes on Python 3.13+
- Drop sed command to remove code coverage flags from pytest</changelog>
  <changelog author="daniel.garcia@suse.com" date="1736942400">- Use libalternatives instead of update-alternatives, bsc#1235781</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1746446400">- Update to 3.4.2
  * Addressed the DeprecationWarning in our CLI regarding `argparse.FileType`
    by backporting the target class into the package. (#591)
  * Improved the overall reliability of the detector with CJK Ideographs.
    (#605) (#587)
  * Optional mypyc compilation upgraded to version 1.15 for Python &gt;= 3.8</changelog>
</package>
<package pkgid="c85addecace1ee0bd50624f8fe785e3d494ed01e6aa744533ca659d569c1740dc98b186e277ac1188fbe42fa298fc3fd48ff060e875ee4e55caa6f46d0d1b7f3" name="python313-click" arch="noarch">
  <version epoch="0" ver="8.2.1" rel="160000.2.2"/>
  <changelog author="daniel.garcia@suse.com" date="1679659200">- Remove not needed requirement python-setuptools</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mmachova@suse.com" date="1683288000">- add fix-tests.patch to fix tests with new versions of python packages</changelog>
  <changelog author="mmachova@suse.com" date="1690891200">- Update to 8.1.6
  * Replace all typing.Dict occurrences to typing.MutableMapping for parameter
    hints. #2255
  * Improve type hinting for decorators and give all generic types parameters.
  * Fix return value and type signature of
    shell_completion.add_completion_class function. #2421
  * Bash version detection doesn’t fail on Windows. #2461
  * Completion works if there is a dot (.) in the program name. #2166
  * Improve type annotations for pyright type checker. #2268
  * Improve responsiveness of click.clear(). #2284
  * Improve command name detection when using Shiv or PEX. #2332
  * Avoid showing empty lines if command help text is empty. #2368
  * ZSH completion script works when loaded from fpath. #2344.
  * EOFError and KeyboardInterrupt tracebacks are not suppressed when
    standalone_mode is disabled. #2380
  * @group.command does not fail if the group was created with a custom
    command_class. #2416
  * multiple=True is allowed for flag options again and does not require
    setting default=(). #2246, #2292, #2295
  * Make the decorators returned by @argument() and @option() reusable when the
    cls parameter is used. #2294
  * Don’t fail when writing filenames to streams with strict errors. Replace
    invalid bytes with the replacement character (�). #2395
  * Remove unnecessary attempt to detect MSYS2 environment. #2355
  * Remove outdated and unnecessary detection of App Engine environment. #2554
  * echo() does not fail when no streams are attached, such as with pythonw on
    Windows. #2415
  * Argument with expose_value=False do not cause completion to fail. #2336
  * Fix an issue with type hints for @click.command(), @click.option(), and
    other decorators. Introduce typing tests. #2558
  * Fix an issue with type hints for @click.group(). #2558
- Drop fix-tests.patch</changelog>
  <changelog author="dmueller@suse.com" date="1694088000">- update to 8.1.7:
  * Fix issue with regex flags in shell completion.
  * Bash version detection issues a warning instead of an
    error.
  * Fix issue with completion script for Fish shell.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1736424000">- Update to 8.1.8
  * Fix an issue with type hints for click.open_file(). :issue:2717
  * Fix issue where error message for invalid click.Path displays on
    multiple lines. :issue:2697
  * Fixed issue that prevented a default value of "" from being displayed in
    the help for an option. :issue:2500
  * The test runner handles stripping color consistently on Windows.
    :issue:2705
  * Show correct value for flag default when using default_map.
    :issue:2632
  * Fix click.echo(color=...) passing color to coloroma so it can be
    forced on Windows. :issue:2606.
- Switch build system from setuptools to pyproject.toml
  * Add python-pip and python-wheel to BuildRequires
  * Replace %python_build with %pyproject_wheel
  * Replace %python_install with %pyproject_install
  * Update name for dist directory in %files section
- Update BuildRequires from pyproject.toml</changelog>
  <changelog author="sebix@sebix.at" date="1746964800">- Update to version 8.2.0:
  * Drop support for Python 3.7, 3.8, and 3.9. #2588 #2893
  * Use modern packaging metadata with pyproject.toml instead of setup.cfg.
    [#2438]
  * Use flit_core instead of setuptools as build backend. #2543
  * Deprecate the __version__ attribute. Use feature detection, or
    importlib.metadata.version("click"), instead. #2598
  * BaseCommand is deprecated. Command is the base class for all
    commands. #2589
  * MultiCommand is deprecated. Group is the base class for all group
    commands. #2590
  * The current parser and related classes and methods, are deprecated.
    [#2205]
  - OptionParser and the parser module, which is a modified copy of
    optparse in the standard library.
  - Context.protected_args is unneeded. Context.args contains any
    remaining arguments while parsing.
  - Parameter.add_to_parser (on both Argument and Option) is
    unneeded. Parsing works directly without building a separate parser.
  - split_arg_string is moved from parser to shell_completion.
  * Enable deferred evaluation of annotations with
    from __future__ import annotations. #2270
  * When generating a command's name from a decorated function's name, the
    suffixes _command, _cmd, _group, and _grp are removed.
    [#2322]
  * Show the types.ParamType.name for types.Choice options within
  - -help message if show_choices=False is specified.
    [#2356]
  * Do not display default values in prompts when Option.show_default is
    False. #2509
  * Add get_help_extra method on Option to fetch the generated extra
    items used in get_help_record to render help text. #2516
    [#2517]
  * Keep stdout and stderr streams independent in CliRunner. Always
    collect stderr output and never raise an exception. Add a new
    output stream to simulate what the user sees in its terminal. Removes
    the mix_stderr parameter in CliRunner. #2522 #2523
  * Option.show_envvar now also shows environment variable in error messages.
    [#2695] #2696
  * Context.close will be called on exit. This results in all
    Context.call_on_close callbacks and context managers added via
    Context.with_resource to be closed on exit as well. #2680
  * Add ProgressBar(hidden: bool) to allow hiding the progressbar. #2609
  * A UserWarning will be shown when multiple parameters attempt to use the
    same name. #2396
  * When using Option.envvar with Option.flag_value, the flag_value
    will always be used instead of the value of the environment variable.
    [#2746] #2788
  * Add Choice.get_invalid_choice_message method for customizing the
    invalid choice message. #2621 #2622
  * If help is shown because no_args_is_help is enabled (defaults to True
    for groups, False for commands), the exit code is 2 instead of 0.
    [#1489] #1489
  * Contexts created during shell completion are closed properly, fixing
    a ResourceWarning when using click.File. #2644 #2800
    [#2767]
  * click.edit(filename) now supports passing an iterable of filenames in
    case the editor supports editing multiple files at once. Its return type
    is now also typed: AnyStr if text is passed, otherwise None.
    [#2067] #2068
  * Specialized typing of progressbar(length=...) as ProgressBar[int].
    [#2630]
  * Improve echo_via_pager behaviour in face of errors.
    [#2674]
  - Terminate the pager in case a generator passed to echo_via_pager
    raises an exception.
  - Ensure to always close the pipe to the pager process and wait for it
    to terminate.
  - echo_via_pager will not ignore KeyboardInterrupt anymore. This
    allows the user to search for future output of the generator when
    using less and then aborting the program using ctrl-c.
  * deprecated: bool | str can now be used on options and arguments. This
    previously was only available for Command. The message can now also be
    customised by using a str instead of a bool. #2263 #2271
  - Command.deprecated formatting in --help changed from
    (Deprecated) help to help (DEPRECATED).
  - Parameters cannot be required nor prompted or an error is raised.
  - A warning will be printed when something deprecated is used.
  * Add a catch_exceptions parameter to CliRunner. If
    catch_exceptions is not passed to CliRunner.invoke, the value
    from CliRunner is used. #2817 #2818
  * Option.flag_value will no longer have a default value set based on
    Option.default if Option.is_flag is False. This results in
    Option.default not needing to implement __bool__. #2829
  * Incorrect click.edit typing has been corrected. #2804
  * Choice is now generic and supports any iterable value.
    This allows you to use enums and other non-str values. #2796
    [#605]
  * Fix setup of help option's defaults when using a custom class on its
    decorator. Removes HelpOption. #2832 #2840</changelog>
  <changelog author="steven.kowalik@suse.com" date="1747828800">- Update to 8.2.1:
  * Fix flag value handling for flag options with a provided type.
    [#2894] #2897
  * Fix shell completion for nested groups. #2906
  * Flush sys.stderr at the end of CliRunner.invoke. #2682
  * Fix EOF handling for stdin input in CliRunner. #2787
- Update URL.</changelog>
  <changelog author="hsk17@mail.de" date="1749384000">- Add click-8.2.1-clirunner.patch to fix clirunner breaking other
  modules' tests, cf. github.com/pallets/click/issues/2939</changelog>
</package>
<package pkgid="feb37c6a92fb85d069fa7b8e982048a0c690993399f796966c16e29cad500338955721258d7bab400e8c24a72f907bbf6728d48694506d5bb05511dd4b517fa4" name="python313-configobj" arch="noarch">
  <version epoch="0" ver="5.0.9" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1673870400">- require setuptools</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 5.0.8:
  * 5.0.7 originally did this work, but 5.0.8 fixes a regression
  * update testing to validate against python version 2.7 and
    3.5-3.11
  * update broken links / non-existent services and references</changelog>
  <changelog author="mmachova@suse.com" date="1688472000">- Add CVE-2023-26112.patch (bsc#1210070)</changelog>
  <changelog author="mcepl@suse.com" date="1688558400">- Add remove_six.patch (gh#DiffSK/configobj#239) removing the
  need for six.</changelog>
  <changelog author="dmueller@suse.com" date="1704283200">- require setuptools
- remove python2 logic, this makes no sense after
  "remove_six.patch"</changelog>
  <changelog author="code@bnavigator.de" date="1704283201">- Remove six from the rpm requirements. Why would we have
  remove_six.patch in the first place if we still require it?
- Enable unit tests</changelog>
  <changelog author="mcepl@cepl.eu" date="1726056000">- Refresh CVE-2023-26112.patch according to the last state of
  gh#DiffSK/configobj!236.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1738670400">- Update to 5.0.9
  * Drop support for Python 2 and &lt;3.7
  * Fix CVE-2023-26112, ReDoS attack
- Drop CVE-2023-26112.patch, merged upstream
- Drop remove_six.patch, fixed upstream</changelog>
</package>
<package pkgid="2bb2cf2800b63f8ce27acaa87025e2593cefdf1f18b78c2d26918ebe147a8ef8b08cdee4aad8017f758f38fb2cb2aefaaa7c651374a483b21ce1481ef2fdfff4" name="python313-contextvars" arch="noarch">
  <version epoch="0" ver="2.4" rel="160000.2.2"/>
  <changelog author="jayvdb@gmail.com" date="1555243200">- Initial spec for v2.4</changelog>
  <changelog author="pgajdos@suse.com" date="1621425600">- use %pytest macro in %check</changelog>
  <changelog author="dmueller@suse.com" date="1665662400">- use https for urls</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="d98d2f8676d529352b87966266d562a9982bad2985b9b094789ce0daf319fe393857339c5bc4216d5a21e13c2b6d509ef6d8b9a903350ef7a5efb5e28a3d604b" name="python313-cryptography" arch="x86_64">
  <version epoch="0" ver="44.0.3" rel="160000.3.1"/>
  <changelog author="dmueller@suse.com" date="1727524800">- update to 43.0.1:
  * Updated Windows, macOS, and Linux wheels to be compiled with
    OpenSSL 3.3.2.</changelog>
  <changelog author="dmueller@suse.com" date="1729598400">- update to 43.0.3:
  * Fixed release metadata for cryptography-vectors
  * Fixed compilation when using LibreSSL 4.0.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1730808000">- Avoid using requires_eq, which after the last modifications
  conflicts with python singlespec (order of expansion).</changelog>
  <changelog author="code@bnavigator.de" date="1731067200">- Fix requires_eq replacement for distributions which do not have
  python3-cffi installed (such as SLE15 python module pythons)
  * gh#openSUSE/python-rpm-macros#185
- Remove outdated section in description</changelog>
  <changelog author="uncomfyhalomacro@opensuse.org" date="1737892800">- Update to version 44.0.0:
  * BACKWARDS INCOMPATIBLE: Dropped support for LibreSSL &lt; 3.9.
  * Deprecated Python 3.7 support. Python 3.7 is no longer supported by
    the Python core team. Support for Python 3.7 will be removed in a future
    cryptography release.
  * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.4.0.
  * macOS wheels are now built against the macOS 10.13 SDK. Users on older
    versions of macOS should upgrade, or they will need to build cryptography
    themselves.
  * Enforce the RFC 5280 requirement that extended key usage extensions must not be empty.
  * Added support for timestamp extraction to the :class:`~cryptography.fernet.MultiFernet` class.
  * Relax the Authority Key Identifier requirements on root CA certificates
    during X.509 verification to allow fields permitted by RFC 5280 but
    forbidden by the CA/Browser BRs.
  * Added support for
    :class:`~cryptography.hazmat.primitives.kdf.argon2.Argon2id` when using
    OpenSSL 3.2.0+.
  * Added support for the :class:`~cryptography.x509.Admissions` certificate extension.
  * Added basic support for PKCS7 decryption (including S/MIME 3.2) via
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`,
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_pem`,
    and :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_smime`.
- Update specfile to accommodate new project structure at version 44.0.0
- Update no-pytest_benchmark.patch</changelog>
  <changelog author="dmueller@suse.com" date="1740571200">- update to 44.0.1:
  * Updated Windows, macOS, and Linux wheels to be compiled with
    OpenSSL 3.4.1.
  * We now build armv7l manylinux wheels and publish them to
    PyPI.
  * We now build manylinux_2_34 wheels and publish them to PyPI.</changelog>
  <changelog author="dmueller@suse.com" date="1742731200">- update to 44.0.2:
  * We now build wheels for PyPy 3.11.</changelog>
  <changelog author="nico.krapp@suse.com" date="1746619200">- Update to 44.0.3
  * Fixed compilation when using LibreSSL 4.1.0.</changelog>
  <changelog author="nico.krapp@suse.com" date="1771329600">- CVE-2026-26007: Subgroup Attack Due to Missing Subgroup
  Validation for SECT Curves (bsc#1258074)
  * added CVE-2026-26007.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1775044800">- CVE-2026-34073: X.509 bypass of name constraints on wildcard SANs with matching peer names (bsc#1260876)
  Add patch CVE-2026-34073.patch</changelog>
</package>
<package pkgid="e6d7ce81524a317f70d8276bdd190183186e5ed914b454eca6ca4d9a0450591b242d65fca1084388e45e7752db34d7af7782c04b1a09b4b04bd21b3bfbe03be1" name="python313-cssselect" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="160000.2.2"/>
  <changelog author="tbechtold@suse.com" date="1490788800">- update to 1.0.1:
  * Add support for Python 3.6.
  * Documentation hosted `on Read the Docs &lt;https://cssselect.readthedocs.io/&gt;`_
  * Add code coverage reports.
  * Fix ``:nth-*(an+b)`` pseudo-classes selectors.
    (except ``*:nth-child()`` which looks untranslatable to XPath 1.0.)
  * Distribute as universal wheel.
  * Add support for Python 3.3, 3.4 and 3.5.
  * Drop support for Python 2.5 as testing is getting difficult.
  * Improve tests on pseudo-elements.
- Switch to singlespec approach</changelog>
  <changelog author="arun@gmx.de" date="1515240000">- specfile:
  * update copyright year
- update to version 1.0.3:
  * Fix artifact uploads to pypi
- changes from version 1.0.2:
  * Drop support for Python 2.6 and Python 3.3.
  * Fix deprecation warning in Python 3.6.
  * Minor cleanups.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1568376000">- Update to 1.1.0:
  * Support for the :scope selector, which allows to access immediate children of a selector.
  * Support for the |E syntax for type selectors without a namespace.
  * A new selector method, canonical, returns the CSS expression of the selector, as a string.</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Switch to multibuild to avoid build cycle with lxml</changelog>
  <changelog author="yarunachalam@suse.com" date="1667822400">- Update to 1.2.0
  * Drop support for Python 2.7, 3.4-3.6, add support for Python 3.7-3.11.
  * Add type annotations (PEP 484 and PEP 561).
  * More features from the CSS Selectors Level 4:
  * The ``:is()`` pseudo-class.
  * The ``:where()`` pseudo-class.
  * The ``:has()`` pseudo-class, with some limitations.
  * Fix parsing ``:scope`` after a comma.
  * Add parentheses to fix condition precedence in some cases.
  * Private API changes related to the removal of the Python 2 support:
  * Remove ``_unicode`` and ``_unichr`` aliases from ``csselect.parser``.
  * Remove ``_basestring`` and ``_unicode`` aliases from ``csselect.xpath``.
  * Deprecate ``csselect.xpath._unicode_safe_getattr()`` and change it to just
    call ``getattr()``.
  * Include tests in the PyPI tarball.
  * Many CI additions and improvements.
  * Improve the test coverage.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1742472000">- Update to 1.3.0
  * Dropped support for Python 3.7-3.8, added support for
    Python 3.12-3.13 and PyPy 3.10.
  * Removed ``_unicode_safe_getattr()``, deprecated in 1.2.0.
  * Added ``pre-commit`` and formatted the code with ``ruff``.
  * Many CI additions and improvements.
- Limit Python files matched in %files section
- Switch build system from setuptools to pyproject.toml
  * Add python-pip and python-wheel to BuildRequires
  * Replace %python_build with %pyproject_wheel
  * Replace %python_install with %pyproject_install</changelog>
  <changelog author="mcepl@cepl.eu" date="1742644800">- Remove superfluous %python_module definition</changelog>
</package>
<package pkgid="f62bf9d17affc450f2add1c833dc7452086f1fe1d8bcf5dd71bb5e2f841470bab439e837eebe79ec98b004263c57b033adbc117edf1176a1731f82a02ec670cf" name="python313-curses" arch="x86_64">
  <version epoch="0" ver="3.13.13" rel="160000.1.1"/>
  <changelog author="mcepl@cepl.eu" date="1770379200">- Update to 3.13.12: Python 3.13.12 final Release date:
  2026-02-03
  - Tools/Demos
  - gh-142095: Make gdb ‘py-bt’ command use frame from thread
    local state when available. Patch by Sam Gross and Victor
    Stinner.
  - Tests
  - gh-144415: The Android testbed now distinguishes between
    stdout/stderr messages which were triggered by a newline,
    and those triggered by a manual call to flush. This fixes
    logging of progress indicators and similar content.
  - gh-65784: Add support for parametrized resource wantobjects
    in regrtests, which allows to run Tkinter tests with the
    specified value of tkinter.wantobjects, for example -u
    wantobjects=0.
  - gh-143553: Add support for parametrized resources, such as
  - u xpickle=2.7.
  - gh-142836: Accommodated Solaris in
    test_pdb.test_script_target_anonymous_pipe.
  - gh-129401: Fix a flaky test in test_repr_rlock that checks
    the representation of multiprocessing.RLock.
  - bpo-31391: Forward-port test_xpickle from Python 2 to
    Python 3 and add the resource back to test’s command line.
  - Security
  - gh-144125: BytesGenerator will now refuse to serialize
    (write) headers that are unsafely folded or delimited; see
    verify_generated_headers. (Contributed by Bas Bloemsaat and
    Petr Viktorin in gh-121650) (bsc#1257181, CVE-2026-1299).
  - gh-143935: Fixed a bug in the folding of comments when
    flattening an email message using a modern email policy.
    Comments consisting of a very long sequence of non-foldable
    characters could trigger a forced line wrap that omitted
    the required leading space on the continuation line,
    causing the remainder of the comment to be interpreted as
    a new header field. This enabled header injection with
    carefully crafted inputs (bsc#1257029, CVE-2025-11468).
  - gh-143925: Reject control characters in data: URL media
    types (bsc#1257046, CVE-2025-15282).
  - gh-143919: Reject control characters in http.cookies.Morsel
    fields and values (bsc#1257031, CVE-2026-0672).
  - gh-143916: Reject C0 control characters within
    wsgiref.headers.Headers fields, values, and parameters
    (bsc#1257042, CVE-2026-0865).
  - Library
  - gh-144380: Improve performance of io.BufferedReader line
    iteration by ~49%.
  - gh-144169: Fix three crashes when non-string keyword
    arguments are supplied to objects in the ast module.
  - gh-144100: Fixed a crash in ctypes when using a deprecated
    POINTER(str) type in argtypes. Instead of aborting, ctypes
    now raises a proper Python exception when the pointer
    target type is unresolved.
  - gh-144050: Fix stat.filemode() in the pure-Python
    implementation to avoid misclassifying invalid mode values
    as block devices.
  - gh-144023: Fixed validation of file descriptor 0 in posix
    functions when used with follow_symlinks parameter.
  - gh-143999: Fix an issue where inspect.getgeneratorstate()
    and inspect.getcoroutinestate() could fail for generators
    wrapped by types.coroutine() in the suspended state.
  - gh-143706: Fix multiprocessing forkserver so that sys.argv
    is correctly set before __main__ is preloaded. Previously,
    sys.argv was empty during main module import in forkserver
    child processes. This fixes a regression introduced in
    3.13.8 and 3.14.1. Root caused by Aaron Wieczorek, test
    provided by Thomas Watson, thanks!
  - gh-143638: Forbid reentrant calls of the pickle.Pickler and
    pickle.Unpickler methods for the C implementation.
    Previously, this could cause crash or data corruption, now
    concurrent calls of methods of the same object raise
    RuntimeError.
  - gh-78724: Raise RuntimeError’s when user attempts to call
    methods on half-initialized Struct objects, For example,
    created by Struct.__new__(Struct). Patch by Sergey
    B Kirpichev.
  - gh-143602: Fix a inconsistency issue in write() that leads
    to unexpected buffer overwrite by deduplicating the buffer
    exports.
  - gh-143547: Fix sys.unraisablehook() when the hook raises an
    exception and changes sys.unraisablehook(): hold a strong
    reference to the old hook. Patch by Victor Stinner.
  - gh-143378: Fix use-after-free crashes when a BytesIO object
    is concurrently mutated during write() or writelines().
  - gh-143346: Fix incorrect wrapping of the Base64 data in
    plistlib._PlistWriter when the indent contains a mix of
    tabs and spaces.
  - gh-143310: tkinter: fix a crash when a Python list is
    mutated during the conversion to a Tcl object (e.g., when
    setting a Tcl variable). Patch by Bénédikt Tran.
  - gh-143309: Fix a crash in os.execve() on non-Windows
    platforms when given a custom environment mapping which is
    then mutated during parsing. Patch by Bénédikt Tran.
  - gh-143308: pickle: fix use-after-free crashes when
    a PickleBuffer is concurrently mutated by a custom buffer
    callback during pickling. Patch by Bénédikt Tran and Aaron
    Wieczorek.
  - gh-143237: Fix support of named pipes in the rotating
    logging handlers.
  - gh-143249: Fix possible buffer leaks in Windows overlapped
    I/O on error handling.
  - gh-143241: zoneinfo: fix infinite loop in
    ZoneInfo.from_file when parsing a malformed TZif file.
    Patch by Fatih Celik.
  - gh-142830: sqlite3: fix use-after-free crashes when the
    connection’s callbacks are mutated during a callback
    execution. Patch by Bénédikt Tran.
  - gh-143200: xml.etree.ElementTree: fix use-after-free
    crashes in __getitem__() and __setitem__() methods of
    Element when the element is concurrently mutated. Patch by
    Bénédikt Tran.
  - gh-142195: Updated timeout evaluation logic in subprocess
    to be compatible with deterministic environments like
    Shadow where time moves exactly as requested.
  - gh-143145: Fixed a possible reference leak in ctypes when
    constructing results with multiple output parameters on
    error.
  - gh-122431: Corrected the error message in
    readline.append_history_file() to state that nelements must
    be non-negative instead of positive.
  - gh-143004: Fix a potential use-after-free in
    collections.Counter.update() when user code mutates the
    Counter during an update.
  - gh-143046: The asyncio REPL no longer prints copyright and
    version messages in the quiet mode (-q). Patch by Bartosz
    Sławecki.
  - gh-140648: The asyncio REPL now respects the -I flag
    (isolated mode). Previously, it would load and execute
    PYTHONSTARTUP even if the flag was set. Contributed by
    Bartosz Sławecki.
  - gh-142991: Fixed socket operations such as recvfrom() and
    sendto() for FreeBSD divert(4) socket.
  - gh-143010: Fixed a bug in mailbox where the precise timing
    of an external event could result in the library opening an
    existing file instead of a file it expected to create.
  - gh-142881: Fix concurrent and reentrant call of
    atexit.unregister().
  - gh-112127: Fix possible use-after-free in
    atexit.unregister() when the callback is unregistered
    during comparison.
  - gh-142783: Fix zoneinfo use-after-free with descriptor
    _weak_cache. a descriptor as _weak_cache could cause
    crashes during object creation. The fix ensures proper
    reference counting for descriptor-provided objects.
  - gh-142754: Add the ownerDocument attribute to
    xml.dom.minidom elements and attributes created by directly
    instantiating the Element or Attr class. Note that this way
    of creating nodes is not supported; creator functions like
    xml.dom.Document.documentElement() should be used instead.
  - gh-142784: The asyncio REPL now properly closes the loop
    upon the end of interactive session. Previously, it could
    cause surprising warnings. Contributed by Bartosz Sławecki.
  - gh-142555: array: fix a crash in a[i] = v when converting
    i to an index via i.__index__ or i.__float__ mutates the
    array.
  - gh-142594: Fix crash in TextIOWrapper.close() when the
    underlying buffer’s closed property calls detach().
  - gh-142451: hmac: Ensure that the HMAC.block_size attribute
    is correctly copied by HMAC.copy. Patch by Bénédikt Tran.
  - gh-142495: collections.defaultdict now prioritizes
    __setitem__() when inserting default values from
    default_factory. This prevents race conditions where
    a default value would overwrite a value set before
    default_factory returns.
  - gh-142651: unittest.mock: fix a thread safety issue where
    Mock.call_count may return inaccurate values when the mock
    is called concurrently from multiple threads.
  - gh-142595: Added type check during initialization of the
    decimal module to prevent a crash in case of broken stdlib.
    Patch by Sergey B Kirpichev.
  - gh-142517: The non-compat32 email policies now correctly
    handle refolding encoded words that contain bytes that can
    not be decoded in their specified character set. Previously
    this resulted in an encoding exception during folding.
  - gh-112527: The help text for required options in argparse
    no longer extended with “ (default: None)”.
  - gh-142315: Pdb can now run scripts from anonymous pipes
    used in process substitution. Patch by Bartosz Sławecki.
  - gh-142282: Fix winreg.QueryValueEx() to not accidentally
    read garbage buffer under race condition.
  - gh-75949: Fix argparse to preserve | separators in mutually
    exclusive groups when the usage line wraps due to length.
  - gh-68552: MisplacedEnvelopeHeaderDefect and Missing header
    name defects are now correctly passed to the handle_defect
    method of policy in FeedParser.
  - gh-142006: Fix a bug in the email.policy.default folding
    algorithm which incorrectly resulted in a doubled newline
    when a line ending at exactly max_line_length was followed
    by an unfoldable token.
  - gh-105836: Fix asyncio.run_coroutine_threadsafe() leaving
    underlying cancelled asyncio task running.
  - gh-139971: pydoc: Ensure that the link to the online
    documentation of a stdlib module is correct.
  - gh-139262: Some keystrokes can be swallowed in the new
    PyREPL on Windows, especially when used together with the
    ALT key. Fix by Chris Eibl.
  - gh-138897: Improved license/copyright/credits display in
    the REPL: now uses a pager.
  - gh-79986: Add parsing for References and In-Reply-To
    headers to the email library that parses the header content
    as lists of message id tokens. This prevents them from
    being folded incorrectly.
  - gh-109263: Starting a process from spawn context in
    multiprocessing no longer sets the start method globally.
  - gh-90871: Fixed an off by one error concerning the backlog
    parameter in create_unix_server(). Contributed by Christian
    Harries.
  - gh-133253: Fix thread-safety issues in linecache.
  - gh-132715: Skip writing objects during marshalling once
    a failure has occurred.
  - gh-127529: Correct behavior of
    asyncio.selector_events.BaseSelectorEventLoop._accept_connection()
    in handling ConnectionAbortedError in a loop. This improves
    performance on OpenBSD.
  - IDLE
  - gh-143774: Better explain the operation of Format / Format
    Paragraph.
  - Documentation
  - gh-140806: Add documentation for enum.bin().
  - Core and Builtins
  - gh-144307: Prevent a reference leak in module teardown at
    interpreter finalization.
  - gh-144194: Fix error handling in perf jitdump
    initialization on memory allocation failure.
  - gh-141805: Fix crash in set when objects with the same hash
    are concurrently added to the set after removing an element
    with the same hash while the set still contains elements
    with the same hash.
  - gh-143670: Fixes a crash in ga_repr_items_list function.
  - gh-143377: Fix a crash in _interpreters.capture_exception()
    when the exception is incorrectly formatted. Patch by
    Bénédikt Tran.
  - gh-143189: Fix crash when inserting a non-str key into
    a split table dictionary when the key matches an existing
    key in the split table but has no corresponding value in
    the dict.
  - gh-143228: Fix use-after-free in perf trampoline when
    toggling profiling while threads are running or during
    interpreter finalization with daemon threads active. The
    fix uses reference counting to ensure trampolines are not
    freed while any code object could still reference them.
    Pach by Pablo Galindo
  - gh-142664: Fix a use-after-free crash in
    memoryview.__hash__ when the __hash__ method of the
    referenced object mutates that object or the view. Patch by
    Bénédikt Tran.
  - gh-142557: Fix a use-after-free crash in bytearray.__mod__
    when the bytearray is mutated while formatting the %-style
    arguments. Patch by Bénédikt Tran.
  - gh-143195: Fix use-after-free crashes in bytearray.hex()
    and memoryview.hex() when the separator’s __len__() mutates
    the original object. Patch by Bénédikt Tran.
  - gh-143135: Set sys.flags.inspect to 1 when PYTHONINSPECT is
    0. Previously, it was set to 0 in this case.
  - gh-143003: Fix an overflow of the shared empty buffer in
    bytearray.extend() when __length_hint__() returns 0 for
    non-empty iterator.
  - gh-143006: Fix a possible assertion error when comparing
    negative non-integer float and int with the same number of
    bits in the integer part.
  - gh-142776: Fix a file descriptor leak in import.c
  - gh-142829: Fix a use-after-free crash in
    contextvars.Context comparison when a custom __eq__ method
    modifies the context via set().
  - gh-142766: Clear the frame of a generator when
    generator.close() is called.
  - gh-142737: Tracebacks will be displayed in fallback mode
    even if io.open() is lost. Previously, this would crash the
    interpreter. Patch by Bartosz Sławecki.
  - gh-142554: Fix a crash in divmod() when
    _pylong.int_divmod() does not return a tuple of length two
    exactly. Patch by Bénédikt Tran.
  - gh-142560: Fix use-after-free in bytearray search-like
    methods (find(), count(), index(), rindex(), and rfind())
    by marking the storage as exported which causes
    reallocation attempts to raise BufferError. For contains(),
    split(), and rsplit() the buffer protocol is used for this.
  - gh-142343: Fix SIGILL crash on m68k due to incorrect
    assembly constraint.
  - gh-141732: Ensure the __repr__() for ExceptionGroup and
    BaseExceptionGroup does not change when the exception
    sequence that was original passed in to its constructor is
    subsequently mutated.
  - gh-100964: Fix reference cycle in exhausted generator
    frames. Patch by Savannah Ostrowski.
  - gh-140373: Correctly emit PY_UNWIND event when generator
    object is closed. Patch by Mikhail Efimov.
  - gh-138568: Adjusted the built-in help() function so that
    empty inputs are ignored in interactive mode.
  - gh-127773: Do not use the type attribute cache for types
    with incompatible MRO.
  - C API
  - gh-142571: PyUnstable_CopyPerfMapFile() now checks that
    opening the file succeeded before flushing.
  - Build
  - gh-142454: When calculating the digest of the JIT stencils
    input, sort the hashed files by filenames before adding
    their content to the hasher. This ensures deterministic
    hash input and hence deterministic hash, independent on
    filesystem order.
  - gh-141808: When running make clean-retain-profile, keep the
    generated JIT stencils. That way, the stencils are not
    generated twice when Profile-guided optimization (PGO) is
    used. It also allows distributors to supply their own
    pre-built JIT stencils.
  - gh-138061: Ensure reproducible builds by making JIT stencil
    header generation deterministic.
- Remove upstreamed patches:
  - CVE-2024-6923-follow-up-EOL-email-headers.patch
  - gh138131-exclude-pycache-from-digest.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1773403200">- Add CVE-2026-2297-SourcelessFileLoader-io_open_code.patch
  ensuring that `SourcelessFileLoader` uses `io.open_code` when
  opening `.pyc` files (bsc#1259240, CVE-2026-2297).</changelog>
  <changelog author="mmachova@suse.com" date="1773748800">- Adapt %suse_version checks to support new %suse_version design for
  16.1 and following (jsc#PED-15850)</changelog>
  <changelog author="mcepl@cepl.eu" date="1773835200">- Fix changelog</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267200">- Add CVE-2026-3644-cookies-Morsel-update-II.patch to reject
  control characters in http.cookies.Morsel.update() and
  http.cookies.BaseCookie.js_output (bsc#1259734, CVE-2026-3644).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267201">- Add CVE-2026-4224-expat-unbound-C-recursion.patch avoiding
  unbound C recursion in conv_content_model in pyexpat.c
  (bsc#1259735, CVE-2026-4224).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774440000">- Add CVE-2025-13462-tarinfo-header-parse.patch which skips
  TarInfo DIRTYPE normalization during GNU long name handling
  (bsc#1259611, CVE-2025-13462).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774612800">- Add CVE-2026-4519-webbrowser-open-dashes.patch to reject
  leading dashes in webbrowser URLs (bsc#1260026, CVE-2026-4519,
  gh#python/cpython#143930).</changelog>
  <changelog author="mcepl@cepl.eu" date="1775131200">- Add CVE-2026-3479-pkgutil_get_data.patch pkgutil.get_data() has
  the same security model as open(). The documented limitations
  ensure compatibility with non-filesystem loaders; Python
  doesn't check that. (bsc#1259989, CVE-2026-3479,
  gh#python/cpython#146121).</changelog>
  <changelog author="mcepl@cepl.eu" date="1775649600">- Update to 3.13.13
  - Security
  - gh-145986: xml.parsers.expat: Fixed a crash caused by
    unbounded C recursion when converting deeply nested XML
    content models with ElementDeclHandler(). This addresses
    CVE 2026-4224 (bsc#1259735, CVE-2026-4224).
  - gh-145599: Reject control characters in http.cookies.Morsel
    update() and js_output(). This addresses CVE 2026-3644
    (bsc#1259734, CVE-2026-3644).
  - gh-145506: Fixes CVE 2026-2297 by ensuring that
    SourcelessFileLoader uses io.open_code() when opening .pyc
    files (bsc#1259240, CVE-2026-2297).
  - gh-144370: Disallow usage of control characters in status
    in wsgiref.handlers to prevent HTTP header injections.
    Patch by Benedikt Johannes.
  - gh-143930: Reject leading dashes in URLs passed to
    webbrowser.open() (bsc#1260026, CVE-2026-4519).
  - Library
  - gh-144503: Fix a regression introduced in 3.14.3 and
    3.13.12 where the multiprocessing forkserver start method
    would fail with BrokenPipeError when the parent process had
    a very large sys.argv. The argv is now passed to the
    forkserver as separate command-line arguments rather than
    being embedded in the -c command string, avoiding the
    operating system’s per-argument length limit.
  - gh-146613: itertools: Fix a crash in itertools.groupby()
    when the grouper iterator is concurrently mutated.
  - gh-146080: ssl: fix a crash when an SNI callback tries to
    use an SSL object that has already been garbage-collected.
    Patch by Bénédikt Tran.
  - gh-146090: sqlite3: fix a crash when
    sqlite3.Connection.create_collation() fails with
    SQLITE_BUSY. Patch by Bénédikt Tran.
  - gh-146090: sqlite3: properly raise MemoryError instead of
    SystemError when a context callback fails to be allocated.
    Patch by Bénédikt Tran.
  - gh-145633: Fix struct.pack('f', float): use PyFloat_Pack4()
    to raise OverflowError. Patch by Sergey B Kirpichev and
    Victor Stinner.
  - gh-146310: The ensurepip module no longer looks for
    pip-*.whl wheel packages in the current directory.
  - gh-146083: Update bundled libexpat to version 2.7.5.
  - gh-146076: zoneinfo: fix crashes when deleting _weak_cache
    from a zoneinfo.ZoneInfo subclass.
  - gh-146054: Limit the size of encodings.search_function()
    cache. Found by OSS Fuzz in #493449985.
  - gh-145883: zoneinfo: Fix heap buffer overflow reads from
    malformed TZif data. Found by OSS Fuzz, issues #492245058
    and #492230068.
  - gh-145750: Avoid undefined behaviour from signed integer
    overflow when parsing format strings in the struct module.
    Found by OSS Fuzz in #488466741.
  - gh-145492: Fix infinite recursion in
    collections.defaultdict __repr__ when a defaultdict
    contains itself. Based on analysis by KowalskiThomas in
    gh-145492.
  - gh-145623: Fix crash in struct when calling repr() or
    __sizeof__() on an uninitialized struct.Struct object
    created via Struct.__new__() without calling __init__().
  - gh-145616: Detect Android sysconfig ABI correctly on 32-bit
    ARM Android on 64-bit ARM kernel
  - gh-145376: Fix null pointer dereference in unusual error
    scenario in hashlib.
  - gh-145551: Fix InvalidStateError when cancelling process
    created by asyncio.create_subprocess_exec() or
    asyncio.create_subprocess_shell(). Patch by Daan De Meyer.
  - gh-145417: venv: Prevent incorrect preservation of SELinux
    context when copying the Activate.ps1 script. The script
    inherited the SELinux security context of the system
    template directory, rather than the destination project
    directory.
  - gh-145301: hashlib: fix a crash when the initialization of
    the underlying C extension module fails.
  - gh-145264: Base64 decoder (see binascii.a2b_base64(),
    base64.b64decode(), etc) no longer ignores excess data
    after the first padded quad in non-strict (default) mode.
    Instead, in conformance with RFC 4648, section 3.3, it now
    ignores the pad character, “=”, if it is present before the
    end of the encoded data.
  - gh-145158: Avoid undefined behaviour from signed integer
    overflow when parsing format strings in the struct module.
  - gh-144984: Fix crash in
    xml.parsers.expat.xmlparser.ExternalEntityParserCreate()
    when an allocation fails. The error paths could dereference
    NULL handlers and double-decrement the parent parser’s
    reference count.
  - gh-88091: Fix unicodedata.decomposition() for Hangul
    characters.
  - gh-144835: Added missing explanations for some parameters
    in glob.glob() and glob.iglob().
  - gh-144833: Fixed a use-after-free in ssl when SSL_new()
    returns NULL in newPySSLSocket(). The error was reported
    via a dangling pointer after the object had already been
    freed.
  - gh-144259: Fix inconsistent display of long multiline
    pasted content in the REPL.
  - gh-144156: Fix the folding of headers by the email library
    when RFC 2047 encoded words are used. Now whitespace is
    correctly preserved and also correctly added between
    adjacent encoded words. The latter property was broken by
    the fix for gh-92081, which mostly fixed previous failures
    to preserve whitespace.
  - gh-66305: Fixed a hang on Windows in the tempfile module
    when trying to create a temporary file or subdirectory in
    a non-writable directory.
  - gh-140814: multiprocessing.freeze_support() no longer sets
    the default start method as a side effect, which previously
    caused a subsequent multiprocessing.set_start_method() call
    to raise RuntimeError.
  - gh-144475: Calling repr() on functools.partial() is now
    safer when the partial object’s internal attributes are
    replaced while the string representation is being
    generated.
  - gh-144538: Bump the version of pip bundled in ensurepip to
    version 26.0.1
  - gh-144363: Update bundled libexpat to 2.7.4
  - gh-143637: Fixed a crash in socket.sendmsg() that could
    occur if ancillary data is mutated re-entrantly during
    argument parsing.
  - gh-143880: Fix data race in functools.partial() in the free
    threading build.
  - gh-143543: Fix a crash in itertools.groupby that could
    occur when a user-defined __eq__() method re-enters the
    iterator during key comparison.
  - gh-140652: Fix a crash in _interpchannels.list_all() after
    closing a channel.
  - gh-143698: Allow scheduler and setpgroup arguments to be
    explicitly None when calling os.posix_spawn() or
    os.posix_spawnp(). Patch by Bénédikt Tran.
  - gh-143698: Raise TypeError instead of SystemError when the
    scheduler in os.posix_spawn() or os.posix_spawnp() is not
    a tuple. Patch by Bénédikt Tran.
  - gh-143304: Fix ctypes.CDLL to honor the handle parameter on
    POSIX systems.
  - gh-142781: zoneinfo: fix a crash when instantiating
    ZoneInfo objects for which the internal class-level cache
    is inconsistent.
  - gh-142763: Fix a race condition between zoneinfo.ZoneInfo
    creation and zoneinfo.ZoneInfo.clear_cache() that could
    raise KeyError.
  - gh-142787: Fix assertion failure in sqlite3 blob subscript
    when slicing with indices that result in an empty slice.
  - gh-142352: Fix asyncio.StreamWriter.start_tls() to transfer
    buffered data from StreamReader to the SSL layer,
    preventing data loss when upgrading a connection to TLS
    mid-stream (e.g., when implementing PROXY protocol
    support).
  - gh-141707: Don’t change tarfile.TarInfo type from AREGTYPE
    to DIRTYPE when parsing GNU long name or link headers
    (bsc#1259611, CVE-2025-13462).
  - gh-139933: Improve AttributeError suggestions for classes
    with a custom __dir__() method returning a list of
    unsortable values. Patch by Bénédikt Tran.
  - gh-138891: Fix SyntaxError when inspect.get_annotations(f,
    eval_str=True) is called on a function annotated with a PEP
    646 star_expression
  - gh-137335: Get rid of any possibility of a name conflict
    for named pipes in multiprocessing and asyncio on Windows,
    no matter how small.
  - gh-80667: Support lookup for Tangut Ideographs in
    unicodedata.
  - bpo-40243: Fix unicodedata.ucd_3_2_0.numeric() for
    non-decimal values.
  - Documentation
  - gh-126676: Expand argparse documentation for type=bool with
    a demonstration of the surprising behavior and pointers to
    common alternatives.
  - gh-145450: Document missing public wave.Wave_write getter
    methods.
  - Core and Builtins
  - gh-148157: Fix an unlikely crash when parsing an invalid
    type comments for function parameters. Found by OSS Fuzz in
    [#492782951].
  - gh-146615: Fix a crash in __get__() for METH_METHOD
    descriptors when an invalid (non-type) object is passed as
    the second argument. Patch by Steven Sun.
  - gh-146128: Fix a bug which could cause constant values to
    be partially corrupted in AArch64 JIT code. This issue is
    theoretical, and hasn’t actually been observed in
    unmodified Python interpreters.
  - gh-146250: Fixed a memory leak in SyntaxError when
    re-initializing it.
  - gh-146245: Fixed reference leaks in socket when audit hooks
    raise exceptions in socket.getaddrinfo() and
    socket.sendto().
  - gh-146227: Fix wrong type in _Py_atomic_load_uint16 in the
    C11 atomics backend (pyatomic_std.h), which used a 32-bit
    atomic load instead of 16-bit. Found by Mohammed Zuhaib.
  - gh-146056: Fix repr() for lists containing NULLs.
  - gh-145990: python --help-env sections are now sorted by
    environment variable name.
  - gh-145376: Fix GC tracking in structseq.__replace__().
  - gh-142183: Avoid a pathological case where repeated calls
    at a specific stack depth could be significantly slower.
  - gh-145783: Fix an unlikely crash in the parser when certain
    errors were erroneously not propagated. Found by OSS Fuzz
    in #491369109.
  - gh-145701: Fix SystemError when __classdict__ or
    __conditional_annotations__ is in a class-scope inlined
    comprehension. Found by OSS Fuzz in #491105000.
  - gh-145335: Fix a crash in os.pathconf() when called with -1
    as the path argument.
  - gh-145234: Fixed a SystemError in the parser when an
    encoding cookie (for example, UTF-7) decodes to carriage
    returns (\r). Newlines are now normalized after decoding in
    the string tokenizer.
  - Patch by Pablo Galindo.
  - gh-130555: Fix use-after-free in dict.clear() when the
    dictionary values are embedded in an object and
    a destructor causes re-entrant mutation of the dictionary.
  - gh-145008: Fix a bug when calling certain methods at the
    recursion limit which manifested as a corruption of
    Python’s operand stack. Patch by Ken Jin.
  - gh-144872: Fix heap buffer overflow in the parser found by
    OSS-Fuzz.
  - gh-144766: Fix a crash in fork child process when perf
    support is enabled.
  - gh-144759: Fix undefined behavior in the lexer when start
    and multi_line_start pointers are NULL in
    _PyLexer_remember_fstring_buffers() and
    _PyLexer_restore_fstring_buffers(). The NULL pointer
    arithmetic (NULL - valid_pointer) is now guarded with
    explicit NULL checks.
  - gh-144601: Fix crash when importing a module whose PyInit
    function raises an exception from a subinterpreter.
  - gh-143636: Fix a crash when calling
    SimpleNamespace.__replace__() on non-namespace instances.
    Patch by Bénédikt Tran.
  - gh-143650: Fix race condition in importlib where a thread
    could receive a stale module reference when another
    thread’s import fails.
  - gh-140594: Fix an out of bounds read when a single NUL
    character is read from the standard input. Patch by Shamil
    Abdulaev.
  - gh-91636: While performing garbage collection, clear
    weakrefs to unreachable objects that are created during
    running of finalizers. If those weakrefs were are not
    cleared, they could reveal unreachable objects.
  - gh-130327: Fix erroneous clearing of an object’s __dict__
    if overwritten at runtime.
  - gh-80667: Literals using the \N{name} escape syntax can now
    construct CJK ideographs and Hangul syllables using
    case-insensitive names.
  - Build
  - gh-146541: The Android testbed can now be built for 32-bit
    ARM and x86 targets.
  - gh-146450: The Android build script was modified to improve
    parity with other platform build scripts.
  - gh-145801: When Python build is optimized with GCC using
    PGO, use -fprofile-update=atomic option to use atomic
    operations when updating profile information. This option
    reduces the risk of gcov Data Files (.gcda) corruption
    which can cause random GCC crashes. Patch by Victor
    Stinner.
  - gh-129259: Fix AIX build failures caused by incorrect
    struct alignment in _Py_CODEUNIT and _Py_BackoffCounter by
    adding AIX-specific #pragma pack directives.
  - Tests
  - gh-144418: The Android testbed’s emulator RAM has been
    increased from 2 GB to 4 GB.
  - gh-146202: Fix a race condition in regrtest: make sure that
    the temporary directory is created in the worker process.
    Previously, temp_cwd() could fail on Windows if the “build”
    directory was not created. Patch by Victor Stinner.
  - gh-144739: When Python was compiled with system expat older
    then 2.7.2 but tests run with newer expat, still skip
    test.test_pyexpat.MemoryProtectionTest.
- Removed upstreamed patches:
  - CVE-2025-13462-tarinfo-header-parse.patch
  - CVE-2026-2297-SourcelessFileLoader-io_open_code.patch
  - CVE-2026-3479-pkgutil_get_data.patch
  - CVE-2026-3644-cookies-Morsel-update-II.patch
  - CVE-2026-4224-expat-unbound-C-recursion.patch
  - CVE-2026-4519-webbrowser-open-dashes.patch</changelog>
</package>
<package pkgid="117c98ec7a348929b504a4668dcf2dc0b806f17100651da9fc79fe17d678976180ddadc3bf4e986fabdafe00b0ad3eb9adbcb5e5bcf57a39f44c5c5d3d181660" name="python313-dasbus" arch="noarch">
  <version epoch="0" ver="1.7" rel="160000.2.2"/>
  <changelog author="predivan@mts.rs" date="1615809600">- Initial packaging.</changelog>
  <changelog author="predivan@mts.rs" date="1621425600">- Update to dasbus-1.5
  * Provide additional info about the DBus call (vponcova)
  * Rename TestMessageBus class to silence pytest warning (luca)
  * Fix the raise-missing-from warning (vponcova)
- Add gobject-introspection to BuildRequires
  Needed for typelib() requires auto-detection.
- Require python-gobject instead of python3-gobject
  Otherwise every built python flavor (3.6, 3.8, and 3.9) will depend on python 3.8.</changelog>
  <changelog author="predivan@mts.rs" date="1623153600">- Update to dasbus-1.6
  * Allow to generate multiple output arguments (vponcova)
  * Support multiple output arguments (vponcova)
  * Add the is_tuple_of_one function (vponcova)
- Package changes:
  * Switch from PyPI to Github download.</changelog>
  <changelog author="predivan@mts.rs" date="1641556800">- Add python-rpm-macros to BuildRequires.</changelog>
  <changelog author="yarunachalam@suse.com" date="1669982400">- Update to dasbus-1.7
  Document limitations of the DBus specification generator by @poncovka in #63
  Fix testing with Travis CI by @poncovka in #68
  Allow to run tests in a container by @poncovka in #69
  Provide a language argument for the code blocks by @seahawk1986 in #71
  Change the type of 'h' glib objects from 'File' to 'UnixFD' by @wdouglass in #70
  Add functions for generating/consuming fdlists with variants by @wdouglass in #72
  Use CentOS Stream for testing with Travis by @poncovka in #83
  add remove dbus object function on bus and update tests by @mc18g13 in #74
  properly measure coverage across multiprocess test cases by @wdouglass in #82
  Extend the .coveragerc file by @poncovka in #86
  Disable builds for Fedora ELN on commits by @poncovka in #85
  Run tests for Debian and Ubuntu in Travis by @poncovka in #84
  Fix pylint issues by @poncovka in #91
  Support unixfd transfer via dbus by @wdouglass in #78
  Raise TimeoutError if a DBus call times out by @poncovka in #92
  UnixFD: Rename a parameter to server_arguments by @poncovka in #94
  UnixFD: Revert a change in GLibClient._async_call_finish by @poncovka in #93
  Don't use pylint from pip on Fedora Rawhide by @poncovka in #96
  Simplify the code for replacing values of the UnixFD type by @poncovka in #95
  UnixFD: Move the unit tests to a new file by @poncovka in #97
  Use pylint from pip on Fedora Rawhide by @poncovka in #98
  Always pull the latest container image by @poncovka in #99
  CI: Run tests for all supported Python versions by @poncovka in #103
  UnixFD: Move the support for Unix file descriptors to dasbus.unix by @poncovka in #100
  UnixFD: Clean up tests of DBus calls with Unix file descriptors by @poncovka in #101
  UnixFD: Handle DBus signals with Unix file descriptors by @poncovka in #102
  Fix rpm lint warnings for OpenSUSE 15.3 by @cmcantalupo in #89
  Fix bullet point lists by @poncovka in #107
  Remove untracked files from the git repository interactively by @poncovka in #108
  Simplify the hostname example by @poncovka in #106
  UnixFD: Document the support for Unix file descriptors by @poncovka in #105
  Improve the installation instruction by @poncovka in #109</changelog>
</package>
<package pkgid="e23894e9ceab2b7ad8479820547b03d81ba5a8b12065cb5ac0f21de11787f76349dde32a441ed900a1998228da6856bd9178e17664ec244197366b419326be3d" name="python313-dbus-python" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1530705600">- Use requires_ge instead of the rpm calls</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Version update to version 1.2.8:
  * Python 2.7 required or 3.4 respectively
  * Tests use tap.py functionality
  * Upstream dropped epydoc completely
  * See NEWS for more</changelog>
  <changelog author="nicolas.bock@suse.com" date="1538395200">- Add missing dependency for pkg-config files</changelog>
  <changelog author="mgorse@suse.com" date="1578484800">- Version update to version 1.2.14:
  * Ensure that the numeric types from dbus.types get the same
    str() under Python 3.8 that they did under previous versions.
  * Disable -Winline.
  * Add Python 3.8 to CI.
  - Changes in version 1.2.12:
  * Don't save and restore the exception indicator when called
    from C code.
  - Changes in version 1.2.10:
  * Rewrite CONTRIBUTING.md document, based on Wayland's equivalent
  * Add clearer license information using SPDX-License-Identifier.
  * Improve test coverage.
  * Don't set deprecated tp_print to NULL under Python 3.
  * Include inherited methods and properties when documenting
    objects, which regressed when migrating from epydoc to sphinx.
  * Add missing variant_level member to UnixFd type, for parity
    with the other dbus.types types (dbus-python!3.
  - Note that this is a potentially incompatible change: unknown
    keyword arguments were previously ignored (!) and are now an
    error.
  * Don't reply to method calls if they have the NO_REPLY_EXPECTED
    flag (fd.o#32529, dbus-python#26.
  * Silence -Wcast-function-type with gcc 8.
  * Fix distcheck with python3.7 by deleting __pycache__ during
    uninstall.
  * Consistently save and restore the exception indicator when
    called from C code.
  * Avoid a long-standing race condition in the automated tests.
  * Fix Qt website URL.
- Up dbus dependency; 1.8 is now required.</changelog>
  <changelog author="code@bnavigator.de" date="1607688000">- Support builds with more than one python3 flavor
  gh#openSUSE/python-rpm-macros#66
- Remove shebang from examples (rpmlint warning, is in common doc)
- Clean duplicate python flavor variables for configure
- Update the provides/obsoletes tags for old-style dbus-1-$python</changelog>
  <changelog author="dmueller@suse.com" date="1610193600">- update to 1.2.16:
  * All tests are run even if the tap.py module is not available, although
    diagnostics for failing tests will be better if it is present.
  * Forbid unexpanded AX-prefixed macros more selectively</changelog>
  <changelog author="sflees@suse.de" date="1623240000">- Enable testsuite</changelog>
  <changelog author="dmueller@suse.com" date="1627387200">- update to 1.2.18:
  * dbus-python will be built for python3
  * Python 2 reached end-of-life on 2020-01-01. A future version of
    dbus-python is likely to remove Python 2 support.
  * Move from collections.Sequence to collections.abc.Sequence on
    Python ≥ 3.3, for Python 3.10 compatibility
  * Avoid another deprecation warning for inspect.getargspec().
    This is similar to the one fixed in 1.2.4, but for dbus.decorators.signal
    rather than dbus.decorators.method. (dbus-python!8; Martin Stumpf)
  * Fix an unlikely fd leak if memory allocation fails for UnixFd
  * Fix memory and fd leak if UnixFd is given an invalid negative
    variant_level
  * Avoid more deprecation warnings
  * Disable -Wdeclaration-after-statement. Python 3.9 relies on intermixed
    declarations and statements in its headers, so we can no longer
    enforce this. (Simon McVittie)
  * Convert examples to Python 3 (Simon McVittie)
  * Use the same Python executable for build and dist/distcheck by default
  * CI fixes</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 1.3.2:
  * Python 3, version 3.5 or later, is required.
  * Installing from source code using Autotools requires Python 3.5 or
    later.
  * dbus.gobject_service, dbus.types.UTF8String and the utf8_strings
  keyword argument were only usable with Python 2, and therefore have
  been removed, along with the rest of the special cases for Python 2.
  * Add methods to Message objects to manipulate the interactive
  authorization flag
  * Add licensing information in REUSE format
  * Raise ValueError instead of crashing with assertion failure when a
  Unix fd index number is greater than the number of fds actually attached
  to the message (firewalld#985; Simon McVittie)
  * Raise ValueError instead of crashing with assertion failure when
  a negative number is passed to the UnixFd constructor
  * Fix undefined escape sequences in docstrings
  * Make `distcheck` compatible with Automake 1.16.4, by forcing an
  appropriate prefix to be used
  * Update AX_PYTHON_DEVEL from autoconf-archive for better
  forwards-compatibility
  * Avoid various deprecation warnings in the build system
  - distutils.sysconfig → sysconfig
  - distutils.util → sysconfig</changelog>
  <changelog author="ecsos@opensuse.org" date="1686398400">- Add %{?sle15_python_module_pythons}</changelog>
</package>
<package pkgid="aee1764279c94c5ac12c517103bbbc4d83e56648f13768a5006bb853d1e8717661f1001f797d1f9d3d7dfa5f710c20244c76335598aec07a02267aaa8b546523" name="python313-decorator" arch="noarch">
  <version epoch="0" ver="5.2.1" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1552996800">- Update to 4.4.0:
  * Fixed a regression with decorator factories breaking the case with no
    arguments by going back to the syntax used in version 4.2.</changelog>
  <changelog author="dmueller@suse.com" date="1576843200">- update to 4.4.1:
  Changed the description to "Decorators for Humans" are requested by
  several users. Fixed a .rst bug in the description as seen in PyPI.</changelog>
  <changelog author="dmueller@suse.com" date="1584187200">- update to 4.4.2:
  * removing the usage of `__file__`, that was breaking PyOxidizer.
  * fixes for the future Python 3.9.
  * some fixes for the future Python 3.10.</changelog>
  <changelog author="dmueller@suse.com" date="1627387200">- update to 5.0.9:
  * Fixed a test breaking PyPy. Restored support for Sphinx.
  * Made the decorator module more robust when decorating builtin functions
    lacking dunder attributes, like `dict.__setitem__`.
  * The decorator module was not passing correctly the defaults inside the
    `*args` tuple, thanks to Dan Shult for the fix.
  * The decorator module was not copying the __module__ attribute anymore.
  * Dropped support for Python &lt; 3.5 with a substantial simplification of
    the code base (now building a decorator does not require calling "exec").
    Added a way to mimic functools.wraps-generated decorators.</changelog>
  <changelog author="mmachova@suse.com" date="1628164800">- Add upstream patch kwsyntax.patch</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 5.1.0:
  * Added a function `decoratorx` using the `FunctionMaker` and thus
    preserving the signature of `__code__` objects.
  * Sphinx was printing a few warnings when building the documentation
  * functions decorated with `decorator.contextmanager` were one-shot,
    as discovered by Alex Pizarro.
  * `decorator.decorator` was not passing the kwsyntax argument.
- drop kwsyntax.patch (usptream)</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.1.1:
  * cythonized functions can now be decorated.
  * fixed an issue in the `decorator_apply` example and
  * regression fix for the "fix" in version 5.1 broke
  ` decorator.contextmanager` even more. Both issues are now solved.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1747742400">- Update to 5.2.1
  * Updated CHANGES.md
  * Update Makefile [ci skip]
  * Include tests and documentation in sdist
  * Managed functions without __name__
- from version 5.2.0
  * Replace deprecated logging.warn with logging.warning
  * Add support for Python 3.11
  * Update download links
  * Fix codespell errors
  * Add support for decorative partial functions
  * Replace 'bytecode' by 'binary' in LICENSE.txt to align with BSD-2-Clause
  * Add support for Python 3.12
  * Stop testing EOL Python 3.5 and 3.6 due to CI unavailability
  * Requiring Python &gt;= 3.7
  * Dropped support for Python &lt;= 3.6
  * Use SPDX license identifier
  * Add support for Python 3.13
  * codespell: assertIn is not a typo
  * Testing only Python &gt;= 3.8
  * Using asyncio.run
  * Replaced setup.py with pyproject
  * Updated copyright
  * Moved tests outside of src
- Switch package to modern Python Stack on SLE-15
  * Use Python 3.11 on SLE-15 by default
  * Drop support for older Python versions
- Switch build system from setuptools to pyproject.toml
  * Add python-pip and python-wheel to BuildRequires
  * Replace %python_build with %pyproject_wheel
  * Replace %python_install with %pyproject_install
  * Update name for dist directory in %files section</changelog>
</package>
<package pkgid="3195f73ceb3d588830cd7cf035d52973ef678fe534fa989c33a6199b71d49d34003d402378513d8769186911b681e5f770b68d815b973c9fcb18c13fef72dc31" name="python313-distro" arch="noarch">
  <version epoch="0" ver="1.9.0" rel="160000.2.2"/>
  <changelog author="mcepl@suse.com" date="1632657600">- Expliciting setting of locale is not necessary anymore
  (gh#python-distro/distro#223).</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1637323200">- Tests: Set locale to UTF-8 to fix tests on Leap 15.3.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1644926400">- remove shebang from distro.py
- update to version 1.7.0:
  - BACKWARD COMPATIBILITY:
  - Dropped support for EOL Pythons 2.7, 3.4 and 3.5 [[#281](https://github.com/python-distro/distro/pull/281)]
  - Dropped support for LSB and `uname` back-ends when `--root-dir` is specified [[#311](https://github.com/python-distro/distro/pull/311)]
  - Moved `distro.py` to `src/distro/distro.py` [[#315](https://github.com/python-distro/distro/pull/315)]
  - ENHANCEMENTS:
  - Documented that `distro.version()` can return an empty string on rolling releases [[#312](https://github.com/python-distro/distro/pull/312)]
  - Documented support for Python 3.10 [[#316](https://github.com/python-distro/distro/pull/316)]
  - Added official support for Rocky Linux distribution [[#318](https://github.com/python-distro/distro/pull/318)]
  - Added a shebang to `distro.py` to allow standalone execution [[#313](https://github.com/python-distro/distro/pull/313)]
  - Added support for AIX platforms [[#311](https://github.com/python-distro/distro/pull/311)]
  - Added compliance for PEP-561 [[#315](https://github.com/python-distro/distro/pull/315)]
  - BUG FIXES:
  - Fixed `include_uname` parameter oversight [[#305](https://github.com/python-distro/distro/pull/305)]
  - Fixed crash when `uname -rs` output is empty [[#304](https://github.com/python-distro/distro/pull/304)]
  - Fixed Amazon Linux identifier in `distro.id()` documentation [[#318](https://github.com/python-distro/distro/pull/318)]
  - Fixed OpenSuse &gt;= 15 support [[#319](https://github.com/python-distro/distro/pull/319)]
  - Fixed encoding issues when opening distro release files [[#324](https://github.com/python-distro/distro/pull/324)]
  - Fixed `linux_distribution` regression introduced in [[#230](https://github.com/python-distro/distro/pull/230)] [[#325](https://github.com/python-distro/distro/pull/325)]</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 1.8.0:
  * Lowered `LinuxDistribution._distro_release_info` method complexity
    [#327]
  * Added official support for Buildroot distribution [#329]
  * Added official support for Guix distribution [#330]
  * Added support for `/etc/debian_version` [#333] &amp; [#349]
  * Fixed a typography in CONTRIBUTING.md [#340]
  * Improved README.md "Usage" code block [#343]
  * Bumped black to v22.3.0 in pre-commit.ci configuration [#331]
  * Enabled GitHub Dependabot to keep GitHub Actions up to date [#335]</changelog>
  <changelog author="kastl@b1-systems.de" date="1683288000">- add sle15_python_module_pythons</changelog>
  <changelog author="daniel.garcia@suse.com" date="1695038400">- Remove duplicate files calling %fdupes</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 1.9.0:
  * Refactor distro.info() method to return an InfoDict [#360]
  * Ignore the file '/etc/board-release' [#353]
  * Ignore the file '/etc/ec2_version' [#359]
  * Test on modern versions of CPython and PyPy and macOS [#362]
  * Add support for ALT Linux Server 10.1 distribution [#354]
  * Add Debian Testing to the tests [#356]
  * Update archlinux resource for tests [#352]</changelog>
  <changelog author="steven.kowalik@suse.com" date="1708689600">- Switch to autosetup macro.</changelog>
  <changelog author="nico.krapp@suse.com" date="1737720000">- Use libalternatives instead of update-alternatives, bsc#1235785</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1739880000">- Build package for multiple Python flavors on the SLE15 family</changelog>
</package>
<package pkgid="4a2d6571e6be77d73a334e12698d534670eebddb2b337a25d70de7ece3895ef144d1b9919f8a2aef1715729c979f08e3a5efe5fb1eefe29e549af524cbf13445" name="python313-dnspython" arch="noarch">
  <version epoch="0" ver="2.7.0" rel="160000.2.2"/>
  <changelog author="sebix+novell.com@sebix.at" date="1647259200">- Update to version 2.2.1:
  * dns.zone.from_text failed if relativize was False and an origin was
  specified in the parameters.
  * A number of types permitted an empty "rest of the rdata".
  * L32, L64, LP, and NID were missing from dns/rdtypes/ANY/__init__.py
  * The type definition for dns.resolver.resolve_address() was incorrect.
  * dns/win32util.py erroneously had the executable bit set.
  * The type definition for a number of asynchronous query routines was
  missing the default of None for the backend parameter.
  * dns/tsigkeyring.py didn't import dns.tsig.
  * A number of rdata types that have a "rest of the line" behavior for
  the last field of the rdata erroneously permitted an empty string.
  * Timeout intervals are no longer reported with absurd precision in
  exception text.</changelog>
  <changelog author="mcepl@suse.com" date="1665403200">- Include in filelist directories with their content.</changelog>
  <changelog author="mardnh@gmx.de" date="1675512000">- Update to version 2.3.0
  * The get_soa() method has been added to dns.zone.Zone.
  * The minimum TLS version is now 1.2.
  * EDNS padding is now supported. Messages with EDNS enabled and
    with a non-zero pad option will be automatically padded
    appropriately when converted to wire format.
  * dns.zone.from_text() and dns.zone.from_file() now have an
    allow_directives parameter to allow finer control over how
    directives in zonefiles are processed.
  * A preliminary implementation of DNS-over-QUIC has been added,
    and will be available if the aioquic library is present. See
    dns.query.quic(), dns.asyncquery.quic(), and examples/doq.py
    for more info. This API is subject to change in future releases
    For asynchronous I/O, both asyncio and Trio are supported,
    but Curio is not.
  * DNSSEC signing support has been added to the dns.dnssec module,
    along with a number of functions to help generate DS, CDS, and
    CDNSKEY RRsets.
  * Curio asynchronous I/O support is deprecated as of this release
    and will be removed in a future release.
  * The resolver object’s nameserver field is planned to become a
    property in dnspython 2.4. Writing to this field other than by
    direct assignment is deprecated, and so is depending on the
    mutability and form of the iterable returned when it is read.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1682078401">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="sebix@sebix.at" date="1692705600">- update to version 2.4.2:
  * Async queries could wait forever instead of respecting the timeout if the timeout was
  0 and a packet was lost.  The timeout is now respected.
  * Restore HTTP/2 support which was accidentally broken during the https refactoring done
  as part of 2.4.0.
  * When an inception time and lifetime are specified, the signer now sets the expiration
  to the inception time plus lifetime, instead of the current time plus the lifetime.
- update to version 2.4.1:
  * Importing dns.dnssecalgs without the cryptography module installed no longer causes
  an ImportError.
  * A number of timeout bugs with the asyncio backend have been fixed.
  * DNS-over-QUIC for the asyncio backend now works for IPv6.
  * Dnspython now enforces that the candidate DNSKEYs for DNSSEC signatures
  have protocol 3 and have the ZONE flag set.  This is a standards compliance issue more
  than a security issue as the legitimate authority would have to have published
  the non-compliant keys as well as updated their DS record in order for the records
  to validate (the DS digest includes both flags and protocol).  Dnspython will not
  make invalid keys by default, but does allow them to be created and used
  for testing purposes.
  * Dependency specifications for optional features in the package metadata have been
  improved.
- update to version 2.4.0:
  * Python 3.8 or newer is required.
  * The stub resolver now uses instances of ``dns.nameserver.Nameserver`` to represent
  remote recursive resolvers, and can communicate using
  DNS over UDP/TCP, HTTPS, TLS, and QUIC.  In additional to being able to specify
  an IPv4, IPv6, or HTTPS URL as a nameserver, instances of ``dns.nameserver.Nameserver``
  are now permitted.
  * The DNS-over-HTTPS bootstrap address no longer causes URL rewriting.
  * DNS-over-HTTPS now only uses httpx; support for requests has been dropped.  A source
  port may now be supplied when using httpx.
  * DNSSEC zone signing with NSEC records is now supported. Thank you
  very much (again!) Jakob Schlyter!
  * The resolver and async resolver now have the ``try_ddr()`` method, which will try to
  use Discovery of Designated Resolvers (DDR) to upgrade the connection from the stub
  resolver to the recursive server so that it uses DNS-over-HTTPS, DNS-over-TLS, or
  DNS-over-QUIC. This feature is currently experimental as the standard is still in
  draft stage.
  * The resolver and async resolver now have the ``make_resolver_at()`` and
  ``resolve_at()`` functions, as a convenience for making queries to specific
  recursive servers.
  * Curio support has been removed.</changelog>
  <changelog author="mcepl@suse.com" date="1696507200">- Don't use curio.</changelog>
  <changelog author="mardnh@gmx.de" date="1718884800">- Update to version 2.6.1
  * The Tudoor fix ate legitimate Truncated exceptions, preventing
    the resolver from failing over to TCP and causing the query to
    timeout.
- Update to version 2.6.0
  * As mentioned in the “TuDoor” paper and the associated
    CVE-2023-29483, the dnspython stub resolver is vulnerable to a
    potential DoS if a bad-in-some-way response from the right
    address and port forged by an attacker arrives before a
    legitimate one on the UDP port dnspython is using for that
    query.
    This release addresses the issue by adopting the recommended
    mitigation, which is ignoring the bad packets and continuing to
    listen for a legitimate response until the timeout for the
    query has expired.
  * Added support for the NSID EDNS option.
  * Dnspython now looks for version metadata for optional packages
    and will not use them if they are too old. This prevents
    possible exceptions when a feature like DoH is not desired in
    dnspython, but an old httpx is installed along with
    dnspython for some other purpose.
  * The DoHNameserver class now allows GET to be used instead of
    the default POST, and also passes source and source_port
    correctly to the underlying query methods.
- Update to version 2.5.0
  * Dnspython now uses hatchling for builds.
  * Cython is no longer supported due to various typing issues.
  * Dnspython now explicitly canonicalizes IPv4 and IPv6 addresses.
    Previously it was possible for non-canonical IPv6 forms to be
    stored in a AAAA address, which would work correctly but
    possibly cause problmes if the address were used as a key in a
    dictionary.
  * The number of messages in a section can be retrieved with
    section_count().
  * Truncation preferences for messages can be specified.
  * The length of a message can be automatically prepended when
    rendering.
  * dns.message.create_response() automatically adds padding when
    required by RFC 8467.
  * The TLS verify parameter is now supported by dns.query.tls(),
    and the DoH and DoT Nameserver subclasses.
  * The MutableMapping used to store content in a zone may now be
    specified by a factory when subclassing. Factories may also be
    provided for writable verisons and immutable versions.
  * dns.name.Name now has predecessor() and successor() methods
    implementing RFC 4471.
  * QUIC has had a number of bug fixes and also now supports
    session tickets for faster session resumption.
  * The NSEC3 class now has a next_name() method for retrieving the
    next name as a dns.name.Name.</changelog>
  <changelog author="mardnh@gmx.de" date="1728216000">- Update to version 2.7.0
  * dns.query.https() and dns.asyncquery.https() now support
    HTTP/3 and the http_version parameter may be used to specify
    which version to use.
  * If the cryptography module is installed, then dnspython will
    now create deterministic ECDSA signatures by default.
  * The RESINFO and WALLET RdataTypes are now supported.
  * The COOKIE and Report-Channel EDNS0 options are now supported.
  * All supported RdataTypes can now be imported at a single time
    rather than lazily on first use by calling
    dns.rdata.load_all_types().
  * The SVCB and HTTPS records now support the ohttp parameter.
  * xfr() and inbound_xfr() now share a common implementation.
  * Tokens are now supported for QUIC and HTTP/3.
  * dns.message.from_wire() now saves the input wire format in the
    Message’s “wire” attribute. Likewise,
    dns.message.Message.to_wire() now records the generated wire
    format in that attribute.
  * The dns.message.Message object now has a get_options() helper
    to retrieve EDNS0 options of a specified type, and an
    extended_errors() helper to retrieve the list of EDE options
    in a message (if any).
  * dns.message.make_response() now has a copy mode which controls
    how sections are copied. By default, a copy mode appropriate
    for the opcode is used.
    This is currently dns.message.CopyMode.QUESTION for all opcodes
  * If an IP address is used as the hostname in a URL, the https
    query code now passes the sni_hostname to httpx as this is
    required to get httpx to validate the certificate and check for
    an IP subject alternative name.
  * The minimum supported aioquic version is now 1.0.0.
  * The minimum supported Python version is now 3.9.</changelog>
  <changelog author="mardnh@gmx.de" date="1728388800">- Skip some tests
  * that require a working resolver and external DNS resolution
  * that require an openssl3 version with support for
    ECDSA with deterministic signature (RFC 6979)"</changelog>
</package>
<package pkgid="01403e11cb122f730c28f89cd14b17d6b2cbf03758333cccc0fcbcf69fcb69e0a437b23578f371356249d2a5b40710c816cb13d8918e0e58a47d920e3dcb8be2" name="python313-extras" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.2.2"/>
  <changelog author="tbechtold@suse.com" date="1472558400">update to version 1.0.0
  * Add trove classifiers specifying Python 3 support.
  * Release 1.0.0.
  * Add a tox.ini for testing with.
  * Add a .travis.yml.
  * Handle import cycles.
  * Support universal wheels</changelog>
  <changelog author="tbechtold@suse.com" date="1472558401">- Use pypi.io as Source url</changelog>
  <changelog author="aplanas@suse.com" date="1472644800">- User https schema for Source URL</changelog>
  <changelog author="aloisio@gmx.com" date="1491048000">- Converted to single-spec</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1544011200">- Trim bias from descriptions.</changelog>
  <changelog author="mcepl@suse.com" date="1571054400">- Replace %fdupes -s with plain %fdupes; hardlinks are better.</changelog>
  <changelog author="mcalabkova@suse.com" date="1591790400">- replace nose
- enable testing by default with multibuild</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="042a83d2f2f512f7a06be002c940be7d551811a9398671167bd3cedd776d31128137a324a1798f15f8d61a04137d5188fa3ddb3aacf33e2f484e7d34093030c5" name="python313-gobject" arch="x86_64">
  <version epoch="0" ver="3.52.3" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1710158400">- Update to version 3.48.1:
  + Fix installation with pip failing in some environments with
    ModuleNotFoundError in g-ir-scanner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712577600">- Update to version 3.48.2:
  + Fix support for fundamental (primitive) types, such as
    Gst.Bitmask.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725624000">- Update to version 3.49.0:
  + Rename master branch to main
  + Drop support for Python 3.8
  + Add Override for Gio.DataInputStream
  + Treat GParamSpec as any other fundamental type
  + override connection.register_object to prevent an invocation
    object from leaking
  + Various PyPy related fixes
  + bind_property: Accept keyword arguments
  + Various documentation improvements
  + Python2 / GTK2 cleanups
  + asyncio integration with support to await Gio async functions
  + meson: move from .egg-info to .dist-info/METADATA
  + build: fixes for building with gobject-introspection 1.81
- Stop removing executable bits from examples, no longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726142400">- Update to version 3.50.0:
  + tests: Fix event test errors when GTK is not installed</changelog>
  <changelog author="i@guoyunhe.me" date="1730289600">- Add python-pygobject provides: help packages to eliminate rpmlint
  warnings when comparing requrements.txt vs the packages depdency.
  'pygobject' is the proper upstream name.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738756800">- Update to version 3.51.0:
  + Use `girepository` 2.0 for GIR mappings.
  + Use Python's vectorcall protocol internally.
  + Improved API for asyncio.
  + Deprecation: The pygtkcompat module now throws an exception
    when imported.
  + Method signatures are exposed from PyGObject now.
  + Convenience API for Gdk.RGBA got GDK 4, similar to GDK 3.
  + Use standard `enum` module for enums and flags in PyGObject.
  + Added an option to skip automatic initialization of GTK and
    GDK.
  + Fixed iterator protocol implementation for properties.
  + Various code and documentation improvements.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741608000">- Update to version 3.52.1
  + Use `girepository` 2.0 for GIR mappings.
  + Use Python's vectorcall protocol internally.
  + Improved API for asyncio.
  + Deprecation: The pygtkcompat module now throws an exception
    when imported.
  + Method signatures are exposed from PyGObject now.
  + Use gobject-introspection-tests for testing.
  + Convenience API for Gdk.RGBA got GDK 4, similar to GDK 3.
  + Added a [pre-commit](https://pre-commit.com/) configuration.
  + Use standard `enum` module for enums and flags in PyGObject.
  + Added an option to skip automatic initialization of GTK and
    GDK.
  + PyGObject is no longer automatically tested on i386
    architecture.
  + Fixed iterator protocol implementation for properties.
  + Various code and documentation improvements.
- Add pythoncapi-compat as subproject.
- Pass -Dtests=false to meson: disable tests for now, as we do not
  have the submodule for that.
- Pass -Dwheel=false to meson, as we use our own python
  single-spec mechanism to install the python bindings.
- Add pygobject-license.patch: Fix build by not relying on PE-639
  yet.
- Replace pkgconfig(gobject-introspection-1.0) BuildRequires with
  pkgconfig(girepository-2.0): follow upstreams changes.
- Drop pkgconfig(gmodule-2.0) BuildRequires: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741780800">- Update to version 3.52.2:
  + Revert to legacy license definition in pyproject.toml.
- Drop pygobject-license.patch: variant of this has been merged
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 3.52.3:
  + Remove invalid error check for gi_constant_info_get_value.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1743508800">- Re-add BuildRequires pkgconfig(gobject-introspection-1.0) to
  fix "cannot import name GLib, introspection typelib not found"
  error (boo#1240549)</changelog>
</package>
<package pkgid="78919fe3293ebb4b0638de20133fadc6b9f9baaeac917395a146ac55aa03ab883967a82bf156b4f4b05201a5c4d06d82963a31f0ccda930f7ca379786a83951f" name="python313-gobject-Gdk" arch="x86_64">
  <version epoch="0" ver="3.52.3" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1710158400">- Update to version 3.48.1:
  + Fix installation with pip failing in some environments with
    ModuleNotFoundError in g-ir-scanner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712577600">- Update to version 3.48.2:
  + Fix support for fundamental (primitive) types, such as
    Gst.Bitmask.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725624000">- Update to version 3.49.0:
  + Rename master branch to main
  + Drop support for Python 3.8
  + Add Override for Gio.DataInputStream
  + Treat GParamSpec as any other fundamental type
  + override connection.register_object to prevent an invocation
    object from leaking
  + Various PyPy related fixes
  + bind_property: Accept keyword arguments
  + Various documentation improvements
  + Python2 / GTK2 cleanups
  + asyncio integration with support to await Gio async functions
  + meson: move from .egg-info to .dist-info/METADATA
  + build: fixes for building with gobject-introspection 1.81
- Stop removing executable bits from examples, no longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726142400">- Update to version 3.50.0:
  + tests: Fix event test errors when GTK is not installed</changelog>
  <changelog author="i@guoyunhe.me" date="1730289600">- Add python-pygobject provides: help packages to eliminate rpmlint
  warnings when comparing requrements.txt vs the packages depdency.
  'pygobject' is the proper upstream name.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738756800">- Update to version 3.51.0:
  + Use `girepository` 2.0 for GIR mappings.
  + Use Python's vectorcall protocol internally.
  + Improved API for asyncio.
  + Deprecation: The pygtkcompat module now throws an exception
    when imported.
  + Method signatures are exposed from PyGObject now.
  + Convenience API for Gdk.RGBA got GDK 4, similar to GDK 3.
  + Use standard `enum` module for enums and flags in PyGObject.
  + Added an option to skip automatic initialization of GTK and
    GDK.
  + Fixed iterator protocol implementation for properties.
  + Various code and documentation improvements.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741608000">- Update to version 3.52.1
  + Use `girepository` 2.0 for GIR mappings.
  + Use Python's vectorcall protocol internally.
  + Improved API for asyncio.
  + Deprecation: The pygtkcompat module now throws an exception
    when imported.
  + Method signatures are exposed from PyGObject now.
  + Use gobject-introspection-tests for testing.
  + Convenience API for Gdk.RGBA got GDK 4, similar to GDK 3.
  + Added a [pre-commit](https://pre-commit.com/) configuration.
  + Use standard `enum` module for enums and flags in PyGObject.
  + Added an option to skip automatic initialization of GTK and
    GDK.
  + PyGObject is no longer automatically tested on i386
    architecture.
  + Fixed iterator protocol implementation for properties.
  + Various code and documentation improvements.
- Add pythoncapi-compat as subproject.
- Pass -Dtests=false to meson: disable tests for now, as we do not
  have the submodule for that.
- Pass -Dwheel=false to meson, as we use our own python
  single-spec mechanism to install the python bindings.
- Add pygobject-license.patch: Fix build by not relying on PE-639
  yet.
- Replace pkgconfig(gobject-introspection-1.0) BuildRequires with
  pkgconfig(girepository-2.0): follow upstreams changes.
- Drop pkgconfig(gmodule-2.0) BuildRequires: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741780800">- Update to version 3.52.2:
  + Revert to legacy license definition in pyproject.toml.
- Drop pygobject-license.patch: variant of this has been merged
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 3.52.3:
  + Remove invalid error check for gi_constant_info_get_value.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1743508800">- Re-add BuildRequires pkgconfig(gobject-introspection-1.0) to
  fix "cannot import name GLib, introspection typelib not found"
  error (boo#1240549)</changelog>
</package>
<package pkgid="b37c3708528b527cff9065e9750ee6d388747d7c7994ffea84b1584b350a50907f5f48595ab369ab1667661fe7c861efe0eab4ff03c3188d7e0643e3d9e92f34" name="python313-gobject-cairo" arch="x86_64">
  <version epoch="0" ver="3.52.3" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1710158400">- Update to version 3.48.1:
  + Fix installation with pip failing in some environments with
    ModuleNotFoundError in g-ir-scanner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712577600">- Update to version 3.48.2:
  + Fix support for fundamental (primitive) types, such as
    Gst.Bitmask.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725624000">- Update to version 3.49.0:
  + Rename master branch to main
  + Drop support for Python 3.8
  + Add Override for Gio.DataInputStream
  + Treat GParamSpec as any other fundamental type
  + override connection.register_object to prevent an invocation
    object from leaking
  + Various PyPy related fixes
  + bind_property: Accept keyword arguments
  + Various documentation improvements
  + Python2 / GTK2 cleanups
  + asyncio integration with support to await Gio async functions
  + meson: move from .egg-info to .dist-info/METADATA
  + build: fixes for building with gobject-introspection 1.81
- Stop removing executable bits from examples, no longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726142400">- Update to version 3.50.0:
  + tests: Fix event test errors when GTK is not installed</changelog>
  <changelog author="i@guoyunhe.me" date="1730289600">- Add python-pygobject provides: help packages to eliminate rpmlint
  warnings when comparing requrements.txt vs the packages depdency.
  'pygobject' is the proper upstream name.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738756800">- Update to version 3.51.0:
  + Use `girepository` 2.0 for GIR mappings.
  + Use Python's vectorcall protocol internally.
  + Improved API for asyncio.
  + Deprecation: The pygtkcompat module now throws an exception
    when imported.
  + Method signatures are exposed from PyGObject now.
  + Convenience API for Gdk.RGBA got GDK 4, similar to GDK 3.
  + Use standard `enum` module for enums and flags in PyGObject.
  + Added an option to skip automatic initialization of GTK and
    GDK.
  + Fixed iterator protocol implementation for properties.
  + Various code and documentation improvements.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741608000">- Update to version 3.52.1
  + Use `girepository` 2.0 for GIR mappings.
  + Use Python's vectorcall protocol internally.
  + Improved API for asyncio.
  + Deprecation: The pygtkcompat module now throws an exception
    when imported.
  + Method signatures are exposed from PyGObject now.
  + Use gobject-introspection-tests for testing.
  + Convenience API for Gdk.RGBA got GDK 4, similar to GDK 3.
  + Added a [pre-commit](https://pre-commit.com/) configuration.
  + Use standard `enum` module for enums and flags in PyGObject.
  + Added an option to skip automatic initialization of GTK and
    GDK.
  + PyGObject is no longer automatically tested on i386
    architecture.
  + Fixed iterator protocol implementation for properties.
  + Various code and documentation improvements.
- Add pythoncapi-compat as subproject.
- Pass -Dtests=false to meson: disable tests for now, as we do not
  have the submodule for that.
- Pass -Dwheel=false to meson, as we use our own python
  single-spec mechanism to install the python bindings.
- Add pygobject-license.patch: Fix build by not relying on PE-639
  yet.
- Replace pkgconfig(gobject-introspection-1.0) BuildRequires with
  pkgconfig(girepository-2.0): follow upstreams changes.
- Drop pkgconfig(gmodule-2.0) BuildRequires: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741780800">- Update to version 3.52.2:
  + Revert to legacy license definition in pyproject.toml.
- Drop pygobject-license.patch: variant of this has been merged
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 3.52.3:
  + Remove invalid error check for gi_constant_info_get_value.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1743508800">- Re-add BuildRequires pkgconfig(gobject-introspection-1.0) to
  fix "cannot import name GLib, introspection typelib not found"
  error (boo#1240549)</changelog>
</package>
<package pkgid="260dde9fd39ef81771086621f84f658d16fd2b831b5e5b8479c5fb014f3f312a528b5ec198e2b5f1c5750876a9eb5859a6d257eaa8df6b4d24dec778200c8431" name="python313-h11" arch="noarch">
  <version epoch="0" ver="0.16.0" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1588766400">- Do not restrict pytest anymore, seems working</changelog>
  <changelog author="aloisio@gmx.com" date="1597320000">- Update to version 0.10.0
  * Drop support for Python 3.4.
  * Support Python 3.8.
  * Make error messages returned by match failures less ambiguous</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- update to 0.11.0:
  * h11 now stores and makes available the raw header name as
  received. In addition h11 will write out header names with the same
  casing as passed to it. This allows compatibility with systems that
  expect titlecased header names. See `#31
  * Multiple content length headers are now merged into a single header
  if all the values are equal, if any are unequal a LocalProtocol
  error is raised (as before). See `#92</changelog>
  <changelog author="aloisio@gmx.com" date="1612526400">- Update to version to 0.12.0
  * Add early detection of invalid http data when request line
    starts with binary
  * Drop support for Python 2
  * Fix ReST formatting
  * Tuned maybe_extract_next_line to search only \r\n
  * Changed the ReceiveBuffer
  * Speed up maybe_extract_lines and removed unused variables
  * Changed the maybe_extract_lines logic according PR review
  * Small rfg (renamed body_and_headers_delimiter_regex -&gt;
    blank_line_delimiiter_regex) and slightly updated docs
  * Fixed some performance issues
  * Added ability to use LF, not only CRLF delimiter</changelog>
  <changelog author="dmueller@suse.com" date="1645012800">- update to 0.13.0:
  * Clarify that the Headers class is a Sequence and inherit from the
    collections Sequence abstract base class to also indicate this (and
    gain the mixin methods).
  * Switch event classes to dataclasses for easier typing and slightly
    improved performance.
  * Shorten traceback of protocol errors for easier readability
  * Add typing including a PEP 561 marker for usage by type checkers
  * Expand the allowed status codes to [0, 999] from [0, 600]
  * Ensure request method is a valid token</changelog>
  <changelog author="yarunachalam@suse.com" date="1665576000">- Update to 0.14.0
  No upstream changelog</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- spec cleanup</changelog>
  <changelog author="daniel.garcia@suse.com" date="1745582400">- Update 0.16.0:
  * Security fix (CVE-2025-43859, bsc#1241872)
    Reject certain malformed Transfer-Encoding: chunked bodies that
    were previously accepted. These could have enabled
    request-smuggling attacks when an h11-based HTTP server was placed
    behind a load balancer with a matching bug in its chunked
    handling.
    Advisory with more details:
    https://github.com/python-hyper/h11/security/advisories/GHSA-vqfr-h8mv-ghfj
- 0.15.0:
  * Reject Content-Lengths &gt;= 1 zettabyte (1 billion terabytes) early,
    without attempting to parse the integer (#181)</changelog>
</package>
<package pkgid="23f033498c09ed7f8ec4ab07881c88415a7bac5cd21ddacc248623d83f84fbe09fb9ddcc227f1f7a9351e93a938c8ceefb7a4f70390fcfa77af972a58ad3eaa2" name="python313-httpcore" arch="noarch">
  <version epoch="0" ver="1.0.9" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 0.17.0:
  * Add DEBUG level logging. (#648)
  * Respect HTTP/2 max concurrent streams when settings updates
    are sent by server. (#652)
  * Increase the allowable HTTP header size to 100kB. (#647)
  * Add `retries` option to SOCKS proxy classes. (#643)</changelog>
  <changelog author="simmphonie@opensuse.org" date="1694347200">- update to 0.17.3
  * Support async cancellations, ensuring that the connection pool
    is left in a clean state when cancellations occur. (#726)
  * The networking backend interface has been added to the public API.
    Some classes which were previously private implementation detail
    are now part of the top-level public API. (#699)
  * Graceful handling of HTTP/2 GoAway frames, with requests being
    transparently retried on a new connection. (#730)
  * Add exceptions when a synchronous trace callback is passed to an
    asynchronous request or an asynchronous trace callback is passed
    to a synchronous request. (#717)
- version 0.17.2
  * Add socket_options argument to ConnectionPool and HTTProxy classes. (#668)
  * Improve logging with per-module logger names. (#690)
  * Add sni_hostname request extension. (#696)
  * Resolve race condition during import of anyio package. (#692)
  * Enable TCP_NODELAY for all synchronous sockets. (#651)
- version 0.17.1
  * If 'retries' is set, then allow retries if an SSL handshake
    error occurs. (#669)
  * Improve correctness of tracebacks on network exceptions, by
    raising properly chained exceptions. (#678)
  * Prevent connection-hanging behaviour when HTTP/2 connections
    are closed by a server-sent 'GoAway' frame". (#679)
  * Fix edge-case exception when removing requests from the connection pool. (#680)
  * Fix pool timeout edge-case. (#688)</changelog>
  <changelog author="mcepl@cepl.eu" date="1698235200">- Update to 0.18.0:
  - Add support for HTTPS proxies.
  - Handle sni_hostname extension with SOCKS proxy.
  - Change the type of Extensions from Mapping[Str, Any] to
    MutableMapping[Str, Any].
  - Handle HTTP/1.1 half-closed connections gracefully.
  - Drop Python 3.7 support.
- Update httpcore-allow-deprecationwarnings-test.patch
- Skip failing tests test_ssl_request and test_extra_info
  (gh#encode/httpcore!832)</changelog>
  <changelog author="dmueller@suse.com" date="1701950400">- update to 1.0.2:
  * Fix `float("inf")` timeouts in `Event.wait` function. (#846)
  * Fix pool timeout to account for the total time spent
    retrying. (#823)
  * Raise a neater RuntimeError when the correct async deps are
    not installed. (#826)
  * Add support for synchronous TLS-in-TLS streams. (#840)
  * From version 1.0 our async support is now optional, as the
    package has minimal dependencies by default.
  * For async support use either `pip install
    'httpcore[asyncio]'` or `pip install 'httpcore[trio]'`.
  * The project versioning policy is now explicitly governed by
    SEMVER. See https://semver.org/.
  * Async support becomes fully optional. (#809)
  * Add support for Python 3.12. (#807)</changelog>
  <changelog author="dmueller@suse.com" date="1710849600">- update to 1.0.4:
  * Add `target` request extension.
  * Fix support for connection `Upgrade` and `CONNECT` when some
    data in the stream has been read.
  * Fix support for async cancellations.
  * Fix trace extension when used with socks proxy.
  * Fix SSL context for connections using the "wss" scheme</changelog>
  <changelog author="dmueller@suse.com" date="1712145600">- update to 1.0.5:
  * Handle `EndOfStream` exception for anyio backend.
  * Allow trio `0.25.*` series in package dependancies.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1730203200">- Update to 1.0.6
  * Relax `trio` dependency pinning.
  * Handle `trio` raising `NotImplementedError` on unsupported platforms.
  * Handle mapping `ssl.SSLError` to `httpcore.ConnectError`.
- Update Requires from pyproject.toml</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1736769600">- Update to 1.0.7
  * Support `proxy=…` configuration on `ConnectionPool()`.</changelog>
  <changelog author="felix.stegmeier@suse.com" date="1744804800">- Update to 1.0.8
  * Fix AttributeError when importing on Python 3.14. (#1005)</changelog>
  <changelog author="mmachova@suse.com" date="1745582400">- Update to 1.0.9
  * Resolve https://github.com/advisories/GHSA-vqfr-h8mv-ghfj with h11
    dependency update. (#1008)</changelog>
</package>
<package pkgid="3783bad1f9d4d3bc50ac1e16f5688b647a5bd9d2d3935ebbae8f8cd496e183ea739b7c61148152e578e6d36652e38236b058e47217a0450c5151071ce2613c54" name="python313-httpx" arch="noarch">
  <version epoch="0" ver="0.28.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 0.24.0:
  * The logging behaviour has been changed to be more in-line
    with other standard Python logging usages. We no longer have
    a custom `TRACE` log level, and we no longer use the
    `HTTPX_LOG_LEVEL` environment variable to auto-configure
    logging. We now have a significant amount of `DEBUG` logging
    available at the network level. Full documentation is
    available at https://www.python-httpx.org/logging/ (#2547,
    encode/httpcore#648)
  * The `Response.iter_lines()` method now matches the stdlib
    behaviour and does not include the newline characters. It
    also resolves a performance issue. (#2423)
  * Query parameter encoding switches from using + for spaces and
    %2F for forward slash, to instead using %20 for spaces and
    treating forward slash as a safe, unescaped character. This
    differs from `requests`, but is in line with browser behavior
    in Chrome, Safari, and Firefox. Both options are RFC valid.
    (#2543)
  * NetRC authentication is no longer automatically handled, but
    is instead supported by an explicit `httpx.NetRCAuth()`
    authentication class. See the documentation at
    https://www.python-httpx.org/advanced/#netrc-support (#2525)
  * The `rfc3986` dependancy has been removed. (#2252)</changelog>
  <changelog author="simmphonie@opensuse.org" date="1694260800">- update to 0.24.1
  * Provide additional context in some InvalidURL exceptions. (#2675)
  * Fix optional percent-encoding behaviour. (#2671)
  * More robust checking for opening upload files in binary mode. (#2630)
  * Properly support IP addresses in NO_PROXY environment variable. (#2659)
  * Set default file for NetRCAuth() to None to use the stdlib default. (#2667)
  * Set logging request lines to INFO level for async requests, in line
    with sync requests. (#2656)
  * Fix which gen-delims need to be escaped for path/query/fragment
    components in URL. (#2701)</changelog>
  <changelog author="mcepl@cepl.eu" date="1697803200">- Update to 0.25.0:
  - Drop support for Python 3.7.
  - Support HTTPS proxies.
  - Change the type of Extensions from Mapping[Str, Any] to
    MutableMapping[Str, Any].
  - Add socket_options argument to httpx.HTTPTransport and
    httpx.AsyncHTTPTransport classes.
  - The Response.raise_for_status() method now returns
    the response instance. For example: data =
    httpx.get('...').raise_for_status().json().
  - Return 500 error response instead of exceptions when
    raise_app_exceptions=False is set on ASGITransport.
  - Ensure all WSGITransport environs have a SERVER_PROTOCOL.
  - Always encode forward slashes as %2F in query parameters
  - Use Mozilla documentation instead of httpstatuses.com for
    HTTP error reference
- Requires higher version of httpcore.</changelog>
  <changelog author="mmachova@suse.com" date="1698753600">- Add upstream newer-httpcore.patch
  * it only allows httpcore 1.0.0 in the pyproject.toml, no code changes</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 0.25.2:
  * Add missing type hints to few `__init__()` methods. (#2938)
  * Add support for Python 3.12. (#2854)
  * Add support for httpcore 1.0 (#2885)
  * Raise `ValueError` on `Response.encoding` being set after
    `Response.text` has been accessed. (#2852)
- drop newer-httpcore.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1704542400">- update to 0.26.0:
  * The `proxy` argument was added. You should use the `proxy`
    argument instead of the deprecated `proxies`, or use
    `mounts=` for more complex configurations.
  * The `proxies` argument is now deprecated. It will still
    continue to work, but it will be removed in the future.
  * Fix cases of double escaping of URL path components. Allow /
    as a safe character in the query portion.
  * Handle `NO_PROXY` envvar cases when a fully qualified URL is
    supplied as the value.
  * Allow URLs where username or password contains unescaped '@'.
  * Ensure ASGI `raw_path` does not include URL query component.
  * Ensure `Response.iter_text()` cannot yield empty strings.</changelog>
  <changelog author="mmachova@suse.com" date="1711108800">- Update to 0.27.0
  * The app=... shortcut has been deprecated. Use the explicit style of
    transport=httpx.WSGITransport() or transport=httpx.ASGITransport() instead.
  * Respect the http1 argument while configuring proxy transports. (#3023)
  * Fix RFC 2069 mode digest authentication. (#3045)</changelog>
  <changelog author="dmueller@suse.com" date="1725796800">- update to 0.27.2:
  * Reintroduced supposedly-private `URLTypes` shortcut.
  * Support for `zstd` content decoding using the python
    `zstandard` package is added. Installable using
    `httpx[zstd]`.
  * Improved error messaging for `InvalidURL` exceptions.
  * Fix `app` type signature in `ASGITransport`.</changelog>
  <changelog author="code@bnavigator.de" date="1733572800">- Update to 0.28.1
  * Fix SSL case where verify=False together with client side
    certificates.
- Release 0.28.0
  [#]# Deprecations:
  * We are working towards a simplified SSL configuration API.
  * For users of the standard verify=True or verify=False cases, or
    verify=&lt;ssl_context&gt; case this should require no changes. The
    following cases have been deprecated...
  - The verify argument as a string argument is now deprecated
    and will raise warnings.
  - The cert argument is now deprecated and will raise warnings.
  * Our revised SSL documentation covers how to implement the same
    behaviour with a more constrained API.
  [#]# The following changes are also included:
  * The deprecated proxies argument has now been removed.
  * The deprecated app argument has now been removed.
  * JSON request bodies use a compact representation. (#3363)
  * Review URL percent escape sets, based on WHATWG spec. (#3371,
    [#3373])
  * Ensure certifi and httpcore are only imported if required.
    (#3377)
  * Treat socks5h as a valid proxy scheme. (#3178)
  * Cleanup Request() method signature in line with
    client.request() and httpx.request(). (#3378)</changelog>
  <changelog author="nico.krapp@suse.com" date="1736942400">- Use libalternatives instead of update-alternatives, bsc#1235784
- don't run tests in strict async mode, upstream doesn't either
- disable flaky test</changelog>
</package>
<package pkgid="d4e8d49df4593259a0170e2987b72496b8660b6c17a054b52bbbb1b168abddf9c986afbe016e787620fbd6c9f601008e12a4330ae516580d69aef4f356971eec" name="python313-idna" arch="noarch">
  <version epoch="0" ver="3.10" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1622980800">- update to 3.2:
  * Add type hints (Thanks, Seth Michael Larson!)
  * Remove support for Python 3.4</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 3.3:
  - Update to Unicode 14.0.0
  - Update to in-line type annotations
  - Throw IDNAError exception correctly for some malformed input
  - Advertise support for Python 3.10
  - Improve testing regime on Github
  - Fix Russian typo in documentation</changelog>
  <changelog author="kastl@b1-systems.de" date="1656590400">- add version constraint for python-rpm-macros &gt;= 20220106.80d3756,
  otherwise this fails to build on 15.3 at '%pyunittest discover -v'</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 3.4:
  * Update to Unicode 15.0.0
  * Migrate to pyproject.toml for build information (PEP 621)
  * Correct another instance where generic exception was raised instead of
    IDNAError for malformed input
  * Source distribution uses zeroized file ownership for improved
    reproducibility</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.6:
  * Fix regression to include tests in source distribution.
  * Update to Unicode 15.1.0
  * String codec name is now "idna2008" as overriding the system codec
    "idna" was not working.
  * Fix typing error for codec encoding
  * "setup.cfg" has been added for this release due to some downstream
  * lack of adherence to PEP 517. Should be removed in a future release
    so please prepare accordingly.
  * Removed reliance on a symlink for the "idna-data" tool to comport
    with PEP 517 and the Python Packaging User Guide for sdist
    archives.
  * Added security reporting protocol for project</changelog>
  <changelog author="daniel.garcia@suse.com" date="1713441600">- update to 3.7 (bsc#1222842, CVE-2024-3651):
  * Fix issue where specially crafted inputs to encode() could take
    exceptionally long amount of time to process. [CVE-2024-3651]</changelog>
  <changelog author="dmueller@suse.com" date="1725796800">- update to 3.8:
  * Fix regression where IDNAError exception was not being
    produced for certain inputs.
  * Add support for Python 3.13, drop support for Python 3.5 as
    it is no longer testable.
  * Documentation improvements
  * Updates to package testing using Github actions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729684800">- Update to 3.10
  * Reverted to Unicode 15.1.0 data. Unicode 16 has some significant changes
    to UTS46 processing that will require more work to properly implement.
- from version 3.9
  * Update to Unicode 16.0.0
  * Deprecate setup.cfg in favour of pyproject.toml
  * Use ruff for code formatting</changelog>
</package>
<package pkgid="41d4b36d680bb3dd0354a57796d06e1779922b1dd224e5f4d4565cc8b6d04c34f9d3c5d9d1a42b8e60aeec57d41b1089cda325b80764b80f76f2a4626da60715" name="python313-immutables" arch="x86_64">
  <version epoch="0" ver="0.21" rel="160000.2.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1650888000">- Add the package to SUSE Linux Enterprise 15 (jsc#SLE-24404)</changelog>
  <changelog author="dmueller@suse.com" date="1658232000">- update to 0.18:
  * Fix iteration when tree is 7 levels deep and has collissions
  * Test on python 3.10
  * consolidate mypy and pytest config into pyproject.toml</changelog>
  <changelog author="code@bnavigator.de" date="1661169600">- Don't do mypy static type checking of the sources in order to
  avoid mypy in Ring1. The functionality of the binary rpm package
  is not affected by properly typed python sources.
- Remove obsolete setup.py sed fix
- Don't catchall sitearch files in %files section</changelog>
  <changelog author="yarunachalam@suse.com" date="1665576000">- Update to version 0.19
  * Support for Python 3.11</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1687435200">- limit to newer python versions, older are no longer needed</changelog>
  <changelog author="dmueller@suse.com" date="1692014400">- add python312.patch to fix build with python 3.12</changelog>
  <changelog author="dmueller@suse.com" date="1701432000">- update to 0.20:
  * Enable support for pattern matching (#96)
  * add support for aix/sunos (#98)
  * Python 3.12 compatibility (#105)
  * Add __contains__ to MapKeys (#99)
  * Add PEP 585 GenericAlias support (#101)
  * Move metadata to `pyproject.toml`, fix test fixture inclusion
    in sdist (#111)
- drop python312.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1729684800">- update to 0.21:
  * Drop typing_extensions dependency
  * Replace `_PyLong_Format` with `PyNumber_ToBase`</changelog>
</package>
<package pkgid="48071fb2c3b349e08b8fe77f9985631a31c2823db5d06386e10aaa76a7229fb4dc42d3e1e896b91aa4ab6baf849961d56ca27f8282b2a3b6355bbea309481614" name="python313-jsonpatch" arch="noarch">
  <version epoch="0" ver="1.33" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 1.28:
  * Make it possible for from_diff to support custom types (issue #107)
  * Python 3.9 support</changelog>
  <changelog author="dmueller@suse.com" date="1619092800">- update to 1.31:
  * Add support for preserving Unicode charaters
  * remove pypy build</changelog>
  <changelog author="dmueller@suse.com" date="1621339200">- update to 1.32:
  * take_index causing 'move' of incorrect values due to bad True==1 comparison</changelog>
  <changelog author="mcepl@suse.com" date="1631880000">- Don't use python setup.py test expression.</changelog>
  <changelog author="schubi@suse.de" date="1633003200">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@localhost" date="1633435200">- Added BuildRequires:  alts</changelog>
  <changelog author="code@bnavigator.de" date="1634040000">- Fix requirements</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update 1.33:
  * fix invalid remove index
  * remove unused import
  * feat(jsondiff): Add support for preserving Unicode characters</changelog>
</package>
<package pkgid="c33314374c36f1acc91381624934a09dd91ea4629b392a5c3f1f7315e95e85c7716a98874c48180ca822b6033fc0548d04dbb4fab3e077a3b92b66a840437dd9" name="python313-jsonpointer" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1553774400">- Update to 2.0:
  * Fix typos in messages
  * Accept pointer as argument in commandline utility
- Run tests</changelog>
  <changelog author="jengelh@inai.de" date="1553774401">- Use noun phrase in descriptions.</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- update to 2.1:
  * py 3.7-3.9 support
  * Avoid converting readme to rST for PyPI upload
  * Fix typos in messages
  * Use SVG versions of status icons in README.md</changelog>
  <changelog author="schubi@suse.de" date="1629633600">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 2.2:
  * Add method and add classmethod tag
  * Add test for get_parts</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- update to 2.3:
  * Support setting - for arrays
  * Add join and / operator
  * Fix invalid escape sequences</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 2.4:
  * migrate to github actions</changelog>
  <changelog author="dmueller@suse.com" date="1732017600">- update to 3.0.0:
  * Add support for python 3.12
  * drop python 2.7 support
  * CI fixes</changelog>
</package>
<package pkgid="19b0700f98602759bcfca0e87ab9cf0075a4f39920b2be847c8844540149f2c1750f469bc5644816ec3e0397534e78cf930af71a65b459efffb4f0d5ef694f6e" name="python313-jsonschema" arch="noarch">
  <version epoch="0" ver="4.24.0" rel="160000.2.2"/>
  <changelog author="kastl@b1-systems.de" date="1691064000">- update to 4.18.6:
  * Set a jsonschema specific user agent when automatically
    retrieving remote references (which is deprecated).</changelog>
  <changelog author="kastl@b1-systems.de" date="1694088000">- update to 4.19.0:
  * Importing the |Validator| protocol directly from the package
    root is deprecated. Import it from
    |jsonschema.protocols.Validator| instead.
  * Automatic retrieval of remote references (which is still
    deprecated) now properly succeeds even if the retrieved
    resource does not declare which version of JSON Schema it uses.
    Such resources are assumed to be 2020-12 schemas. This more
    closely matches the pre-|referencing| library behavior.</changelog>
  <changelog author="kastl@b1-systems.de" date="1695297600">- update to 4.19.1:
  * Allow single label hostname in format string by @swaeberle in
    [#1164]</changelog>
  <changelog author="kastl@b1-systems.de" date="1698667200">- update tp 4.19.2:
  * Fix the error message for additional items when used with
    heterogeneous arrays.
  * Don't leak the additionalItems keyword into JSON Schema draft
    2020-12, where it was replaced by items.</changelog>
  <changelog author="kastl@b1-systems.de" date="1700222400">- update to 4.20.0:
  * Properly consider items (and properties) to be evaluated by
    unevaluatedItems (resp. unevaluatedProperties) when behind a
    $dynamicRef as specified by the 2020 and 2019 specifications.
  * jsonschema.exceptions.ErrorTree.__setitem__ is now deprecated.
    More broadly, in general users of jsonschema should never be
    mutating objects owned by the library.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1705492800">- update to 4.21.0:
  * Wrong behaviour for enum keyword by @otto-ifak in
    https://github.com/python-jsonschema/jsonschema/pull/1208</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1705752000">- update to 4.21.1:
  * Slightly speed up the contains keyword by removing some
    unnecessary validator (re-)creation.</changelog>
  <changelog author="git@johannes-kastl.de" date="1714651200">- update to 4.22.0:
  * Improve best_match (and thereby error messages from
    jsonschema.validate) in cases where there are multiple sibling
    errors from applying anyOf / allOf -- i.e. when multiple
    elements of a JSON array have errors, we now do prefer showing
    errors from earlier elements rather than simply showing an
    error for the full array (#1250).
  * (Micro-)optimize equality checks when comparing for JSON Schema
    equality by first checking for object identity, as == would.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1720699200">- update to 4.23.0:
  * Add some typing to the exceptions.py module by @DanielNoord in
    [#1019]
  * Declare support for 3.13 by @rominf in #1282</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1748520000">- update to 4.24.0:
  * Fix calculation of evaluated properties by @V02460 in #1351
  * Support for Python 3.8 has been dropped, as it is end-of-life.</changelog>
</package>
<package pkgid="62276706e5fb0e6b53c701ca9f100ec9feb0b2ff86321a9ca4e032fcd6c76880a27105ca155bce723a1d0130c033e407daecdb0a8d70200679a380a2166cabb6" name="python313-jsonschema-specifications" arch="noarch">
  <version epoch="0" ver="2024.10.1" rel="160000.2.2"/>
  <changelog author="kastl@b1-systems.de" date="1679659200">- new package python-jsonschema-specifications</changelog>
  <changelog author="kastl@b1-systems.de" date="1683288000">- add sle15_python_module_pythons</changelog>
  <changelog author="kastl@b1-systems.de" date="1684324800">- update to 2023.05.1:
  full changelog available at
  https://github.com/python-jsonschema/jsonschema-specifications/
  compare/v2023.03.6...v2023.05.1</changelog>
  <changelog author="kastl@b1-systems.de" date="1685534400">- update to 2023.5.2:
  full changelog available at
  https://github.com/python-jsonschema/jsonschema-specifications/
  compare/v2023.05.1...v2023.05.2</changelog>
  <changelog author="kastl@b1-systems.de" date="1687780800">- update to 2023.6.1:
  full diff available at
  https://github.com/python-jsonschema/jsonschema-specifications/
  compare/v2023.05.2...v2023.06.1
  * bump doc requirements
  * Enable PYTHONWARNDEFAULTENCODING to catch an encoding
    mistake.</changelog>
  <changelog author="kastl@b1-systems.de" date="1689681600">- update to 2023.7.1:
  no changelog, only diff available at
  https://github.com/python-jsonschema/jsonschema-specifications/compare/v2023.06.1...v2023.07.1</changelog>
  <changelog author="kastl@b1-systems.de" date="1700222400">- update to 2023.11.1:
  no changelog, only diff available at
  https://github.com/python-jsonschema/jsonschema-specifications/compare/v2023.07.1...v2023.11.1</changelog>
  <changelog author="kastl@b1-systems.de" date="1701345600">- update to 2023.11.2:
  no changelog, only diff available at
  https://github.com/python-jsonschema/jsonschema-specifications/compare/v2023.11.1...v2023.11.2</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 2023.12.1:
  * Ignore dotfiles when collectimg schemas</changelog>
  <changelog author="dmueller@suse.com" date="1729771200">- update to 2024.10.1:
  * Declare support for Python 3.13</changelog>
</package>
<package pkgid="b189095c59b5304bab2b5cb5f791b79e4e0a60973f04ffdabc1c85db02c723a4cb1e15525729833e9bf999fe54f114fd345fc10ec67be70470d0e950d8a9e424" name="python313-legacy-cgi" arch="noarch">
  <version epoch="0" ver="2.6.2" rel="160000.2.2"/>
  <changelog author="steven.kowalik@suse.com" date="1728648000">- Initial release of 2.6.1.</changelog>
  <changelog author="ecsos@opensuse.org" date="1730635200">- Add %{?sle15_python_module_pythons}</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1738756800">- Update to 2.6.2
  * Remove the &lt;4 Python requirement</changelog>
</package>
<package pkgid="e2f3c0329b28c7315dda40d0d414110db8c9ee33ab681746fbfe526bd07093959e8cfe9b9ad6b88fbb1848da7b6d707bf9942021246929d7d617bb2d350e613e" name="python313-libvirt-python" arch="x86_64">
  <version epoch="0" ver="11.4.0" rel="160000.2.2"/>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to 10.6.0
  - Add all new APIs and constants in libvirt 10.6.0
  - jsc#PED-8909</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to 10.7.0
  - Add all new APIs and constants in libvirt 10.7.0
  - jsc#PED-8909</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to 10.8.0
  - Add all new APIs and constants in libvirt 10.8.0
  - jsc#PED-8909</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to 10.9.0
  - Add all new APIs and constants in libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to 10.10.0
  - Add all new APIs and constants in libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to 11.0.0
  - Add all new APIs and constants in libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855</changelog>
  <changelog author="jfehlig@suse.com" date="1741089600">- Update to 11.1.0
  - Add all new APIs and constants in libvirt 11.1.0</changelog>
  <changelog author="jfehlig@suse.com" date="1743508800">- Update to 11.2.0
  - Add all new APIs and constants in libvirt 11.2.0</changelog>
  <changelog author="jfehlig@suse.com" date="1746446400">- Update to 11.3.0
  - Add all new APIs and constants in libvirt 11.3.0</changelog>
  <changelog author="jfehlig@suse.com" date="1749211200">- Update to 11.4.0
  - Add all new APIs and constants in libvirt 11.4.0</changelog>
</package>
<package pkgid="35cdb2df56e11ca3e36e126526181fd4cdc175cc807b71b169b30a59287031a00c08eb3b8602f10dfac75d966824e74ba914d96070c2ab0ec7842d5f9077faba" name="python313-libxml2" arch="x86_64">
  <version epoch="0" ver="2.13.8" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1739880000">- Update to version 2.13.6 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  + Security:
  - [CVE-2025-24928] Fix stack-buffer-overflow in
    xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after
    xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  + Regressions:
  - xmllint: Support compressed input from stdin
  - uri: Fix handling of Windows drive letters
  - reader: Fix return value of xmlTextReaderReadString again
  - SAX2: Fix xmlSAX2ResolveEntity if systemId is NULL
  + Portability:
  - dict: Handle ENOSYS from getentropy gracefully
  - Fix compilation with uclibc (Dario Binacchi)
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  - cmake: Work around broken sys/random.h in old macOS SDKs
  + Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: add missing `Bcrypt` link on Windows
  - cmake: Fix compatibility in package version file
  - xmlIO: Fix reading from non-regular files like pipes
  - xmlreader: Fix return value of xmlTextReaderReadString
  - parser: Fix loading of parameter entities in external DTDs
  - parser: Fix downstream code that swaps DTDs
  - parser: Fix detection of duplicate attributes
  - string: Fix va_copy fallback
  - xpath: Fix parsing of non-ASCII names
- Drop libxml2-support-compressed-input-from-stdin.patch: Fixed
  upstream.
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743163200">- Update to version 2.13.7:
  + Regressions:
  - tree: Fix xmlTextMerge with NULL args
  - io: Fix `compressed` flag for uncompressed stdin
  - parser: Fix parsing of DTD content</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1744891200">- Update to version 2.13.8:
  + Security:
  - [CVE-2025-32415] schemas: Fix heap buffer overflow in
    xmlSchemaIDCFillNodeTables.
  - [CVE-2025-32414] python: Read at most len/4 characters.
- bug references: [bsc#1241453], [bsc#1241551]</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1769083200">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="4baa512929e16fe268393dd6fd050a46dff358231a931b26b41baca3a8de3dc769b103b0a4def25314ffcd72d23ee135d6fdeccd363605fdc3f8419878072a56" name="python313-linux-procfs" arch="noarch">
  <version epoch="0" ver="0.7.3" rel="160000.2.2"/>
  <changelog author="trenn@suse.de" date="1544184000">- Inital version 0.6 submission</changelog>
  <changelog author="trenn@suse.de" date="1544443200">- Package needed for latest tuned (bsc#1071436)
- correct version in first changelog entry
- only xz, removed gz tarball
- called test executable in %check section
- Removed never/unused patch
- Use python3_install and python3_build, this package is only
  needed for python3 intentionally
- Remove %{python_files} from %files section again, this package
  is for python3 intended only
- Run spec_cleaner
- Use pycache_only</changelog>
  <changelog author="tchvatal@suse.com" date="1544529600">- Switch to full singlespec for others to use with all python
  variants as the targets are defined in distro setup (ie py3 only
  on SLE15)</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- %python3_only -&gt; %python_alternative</changelog>
  <changelog author="dmueller@suse.com" date="1673092800">- update to 0.7.1:
  * Correct VERSION number in procfs.py
  * Use f-strings
  * Add missing open in with statement
  * Use sys.exit and add some docstrings
  * Add tar.xz and asc files to gitignore
  * Fix traceback with non-utf8 chars in the /proc/PID/cmdline
  * Propagate error to user if a pid is completed
  * pflags: Handle pids that completed
  * Makefile: Add ctags
  * Remove procfs/sysctl.py
  * Various clean-ups
  * Fix UnicodeDecodeError
  * Fix more spacing problems with procfs.py
  * procfs.py: Simplify is_s390
  * procfs.py: Fix a few more style problems
  * clean-ups for recent python formating regarding spacing, tabs, etc
  * Fix to parse the number of cpus correctly on s390(x)</changelog>
  <changelog author="dmueller@suse.com" date="1700654400">- update to 0.7.3:
  * python 3.12 support (remove distutils)
  * drop spec files and add SPDX licenses</changelog>
  <changelog author="pgajdos@suse.com" date="1707998400">- align license tag with COPYING</changelog>
</package>
<package pkgid="20804349d9420c475bff3157afc1e6f06855fd6d4566712143ed607c1919fc9bfef7449114549e5f6044ebcc58c7508b037b1009a2de7760f97c0c30b44fd862" name="python313-looseversion" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="160000.2.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679054400">- Initial package: looseversion 1.1.2</changelog>
  <changelog author="dmueller@suse.com" date="1701950400">- update to 1.3.0:
  * Restore Python 3 semantics for `LooseVersion`, creating
    `LooseVersion2` to restore Python 2 semantics.
  * Test on Python 3.12
  * Enable installation on Python 2+
  * Ensure consistent semantics between Python 2 and 3</changelog>
  <changelog author="daniel.garcia@suse.com" date="1725624000">- Add %{?sle15_python_module_pythons}</changelog>
</package>
<package pkgid="4f018c05e3bbe736393d3747f053af93c1cdc2e4eba1a21df5237aa031eff89cafcb93573be7811068ae3d039208c11a49d792869f1ba433801f0d4f8a22e160" name="python313-lxml" arch="x86_64">
  <version epoch="0" ver="5.4.0" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1694001600">- skip html5lib tests - cyclic dependency with html5lib tests
- remove python 2.x from testing</changelog>
  <changelog author="mmachova@suse.com" date="1701086400">- Add libxml2212-tests.patch to fix tests with new libxml2</changelog>
  <changelog author="dmueller@suse.com" date="1703073600">- update to 4.9.4:
  * LP#2046398: Inserting/replacing an ancestor into a node's
    children could loop indefinitely.
  * LP#1980767, GH#379: ``TreeBuilder.close()`` could fail with a
    ``TypeError`` after parsing incorrect input.
  * LP#1522052: A file-system specific test is now optional and
    should no longer fail on systems that don't support it.
  * Built with Cython 0.29.37.
- drop libxml2212-tests.patch (upstream)</changelog>
  <changelog author="adrian@suse.de" date="1705233600">- update to version 5.1.0:
  Details on  https://lxml.de/5.1/changes-5.1.0.html
  removed merged patches:
  - ISO-Schematron-schema-optional.patch
  - remove-ISO-Schematron-schema.patch
  - close_file_before_test.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1706097600">- Fix build error for Leap.
  Use build and test as descriped on upstream.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add skip-test-under-libexpat-2.6.0.patch to skip broken test with
  expat 2.6.0, gh#python/cpython#115133</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718366400">- Remove not needed patch skip-test-under-libexpat-2.6.0.patch
- Update to 5.2.2:
  - GH#417: The test_feed_parser test could fail if lxml_html_clean
    was not installed.  It is now skipped in that case.
  - LP#2059910: The minimum CPU architecture for the Linux x86 binary
    wheels was set back to "core2", without SSE 4.2.
  - If libxml2 uses iconv, the compile time version is available as
    etree.ICONV_COMPILED_VERSION.
- 5.2.1
  - LP#2059910: The minimum CPU architecture for the Linux x86 binary
    wheels was set back to "core2", but with SSE 4.2 enabled.
  - LP#2059977: ``Element.iterfind("//absolute_path")`` failed with a
    ``SyntaxError`` where it should have issued a warning.
  - GH#416: The documentation build was using the non-standard
    ``which`` command.  Patch by Michał Górny.
- 5.2.0
  - LP#1958539: The ``lxml.html.clean`` implementation suffered from
    several (only if used) security issues in the past and was now
    extracted into a separate library:
    https://github.com/fedora-python/lxml_html_clean
    Projects that use lxml without "lxml.html.clean" will not notice
    any difference, except that they won't have potentially vulnerable
    code installed.  The module is available as an "extra" setuptools
    dependency "lxml[html_clean]", so that Projects that need
    "lxml.html.clean" will need to switch their requirements from
    "lxml" to "lxml[html_clean]", or install the new library
    themselves.
  - The minimum CPU architecture for the Linux x86 binary wheels was
    upgraded to "sandybridge" (launched 2011), and glibc 2.28 / gcc 12
    (manylinux_2_28) wheels were added.
  - Built with Cython 3.0.10.
- 5.1.2
  - LP#2059977: ``Element.iterfind("//absolute_path")`` failed with a
    ``SyntaxError`` where it should have issued a warning.
- 5.1.1
  - LP#2048920: ``iterlinks()`` in ``lxml.html`` rejected ``bytes``
    input in 5.1.0.
  - High source line numbers from the parser are no longer truncated
    (up to a C ``long``) when using libxml2 2.11 or later.
  - GH#407: A compatibility test was adapted to recent expat versions.
    Patch by Miro Hrončok.
  - Binary wheels use the library versions libxml2 2.12.6 and libxslt
    1.1.39.
  - Windows binary wheels use the library versions libxml2 2.11.7 and
    libxslt 1.1.39.
  - Built with Cython 3.0.9.</changelog>
  <changelog author="adrian@suse.de" date="1727265600">- 5.3.0 (2024-08-10)
  Features added
  - GH#421: Nested CDATA sections are no longer rejected but split
    on output to represent ]]&gt; correctly. Patch by Gertjan Klein.
  Bugs fixed
  - LP#2060160: Attribute values serialised differently in
    xmlfile.element() and xmlfile.write().
  - LP#2058177: The ISO-Schematron implementation could fail on
    unknown prefixes. Patch by David Lakin.
  Other changes
  - LP#2067707: The strip_cdata option in HTMLParser() turned out
    to be useless and is now deprecated.
  - Built with Cython 3.0.11.</changelog>
  <changelog author="dmueller@suse.com" date="1744632000">- update to 5.3.2 (bsc#1237370, CVE-2025-24928):
  * This release resolves CVE-2025-24928 as described in
  * https://gitlab.gnome.org/GNOME/libxml2/-/issues/847
  * GH#440: Some tests were adapted for libxml2 2.14.0.
  * LP#2097175: ``DTD(external_id="…")`` erroneously required a
    byte string as ID value.
  * GH#450: ``iterparse()`` internally triggered the
    `DeprecationWarning`` added in lxml 5.3.0 when parsing HTML.</changelog>
  <changelog author="nico.krapp@suse.com" date="1748347200">- Update to 5.4.0
  * LP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve
    several CVEs. Issue found by Anatoly Katyushin, see
    https://bugs.launchpad.net/lxml/+bug/2107279</changelog>
</package>
<package pkgid="7b7e8d80cc15e80af57908524747d970985c21e147599e4367b264853e2ceb69bc122b497259091a533f858981c38e03973a6550d5e52de4db5d2c651332605f" name="python313-markdown-it-py" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="160000.2.2"/>
  <changelog author="sebix+novell.com@sebix.at" date="1650974400">- initial package for version 2.1.0.</changelog>
  <changelog author="eroca@mailbox.org" date="1662379200">- Cleanup requirements, tests, files section and comments</changelog>
  <changelog author="sebix@sebix.at" date="1678104000">- update to version 2.2.0:
  - What's Changed:
  - UPGRADE: Allow linkify-it-py v2
  - FIX: CVE-2023-26303, fix boo#1208974
  - FIX: CLI crash on non-utf8 character
  - DOCS: Add section about markdown renderer
  - Update benchmark pkg versions</changelog>
  <changelog author="kastl@b1-systems.de" date="1683288000">- add sle15_python_module_pythons</changelog>
  <changelog author="daniel.garcia@suse.com" date="1700740800">- Update to version 3.0.0:
  * drop python 3.7 support
  * Update from upstream markdown-it 12.2.0 to 13.0.0
  - A key change is the addition of a new Token type, text_special,
    which is used to represent HTML entities and backslash escaped
    characters.
  - This ensures that (core) typographic transformation rules are not
    incorrectly applied to these texts.
  - The final core rule is now the new text_join rule, which joins
    adjacent text/text_special tokens, and so no text_special tokens
    should be present in the final token stream.
  - Any custom typographic rules should be inserted before text_join.
  - A new linkify rule has also been added to the inline chain, which
    will linkify full URLs (e.g. https://example.com), and fixes
    collision of emphasis and linkifier (so
    http://example.org/foo._bar_-_baz is now a single link, not
    emphasized).
  - Emails and fuzzy links are not affected by this.
  * REFACTOR: Replace most character code use with strings
  - The use of StateBase.srcCharCode is deprecated (with
    backward-compatibility), and all core uses are replaced by
    StateBase.src.
  - Conversion of source string characters to an integer
    representing the Unicode character is prevalent in the upstream
    JavaScript implementation, to improve performance. However, it
    is unnecessary in Python and leads to harder to read code and
    performance deprecations (during the conversion in the StateBase
    initialisation).
  * Centralise indented code block tests
  - For CommonMark, the presence of indented code blocks prevent any
    other block element from having an indent of greater than 4
    spaces.
  - Certain Markdown flavors and derivatives, such as mdx and djot,
    disable these code blocks though, since it is more common to use
    code fences and/or arbitrary indenting is desirable.
  - Previously, disabling code blocks did not remove the indent
    limitation, since most block elements had the 3 space limitation
    hard-coded.
  - This change centralised the logic of applying this limitation
    (in StateBlock.is_code_block), and only applies it when indented
    code blocks are enabled.
  * Maintenance changes
  - Strict type annotation checking has been applied to the whole
    code base, ruff is now used for linting, and fuzzing tests have
    been added to the CI, to integrate with Google OSS-Fuzz testing,
    thanks to @DavidKorczynski.</changelog>
</package>
<package pkgid="8268ca06a9852b723692153beb7d14bcb2f6947b9308e8335b8f27efa185a02774a3136973c3414fd6e649b10e7845f53596e247d6e6ef0bde0bf823988fe26e" name="python313-maturin" arch="x86_64">
  <version epoch="0" ver="1.8.7" rel="160000.4.1"/>
  <changelog author="mia@0x0.st" date="1727524800">- Update to 1.7.4
  * Fix musllinux rpath for non-cffi bindings
    gh#PyO3/maturin#2233
- Changes in 1.7.3:
  * Fix pypi/testpypi upload
    gh#PyO3/maturin#2229
- Changes in 1.7.2:
  * Split out test-windows-cross to speed up ci
    gh#PyO3/maturin#2188
  * Upgrade cargo-deny
    gh#PyO3/maturin#2200
  * Cross building fixes
    gh#PyO3/maturin#2204
  * UniFFI: supports bindings generated from multiple crates
    gh#PyO3/maturin#2208
  * doc: add -r/--release flag info to tutorial
    gh#PyO3/maturin#2211
  * Enable --all-features when building source distribution
    gh#PyO3/maturin#2215
  * Replace "." with "/" in module_name
    gh#PyO3/maturin#2219</changelog>
  <changelog author="code@bnavigator.de" date="1734523200">- Update to 1.7.8
  * Fix aarch64 Windows cross compilation by @messense in #2359
- Release 1.7.7
  * fix abi3 interpreter discovery on Windows by @davidhewitt in
    [#2333]
  * fix: remove extra indent in generated CI by @jsstevenson in
    [#2340]
  * Upgrade cargo-xwin to unify rustls versions by @kornelski in
    [#2222]
  * Normalize python source directory path by @messense in #2343
  * Enable fat LTO for maturin release workflow by @messense in
    [#2344]
  * Use different binding dirs for different uniffi modules by
    @messense in #2348
  * Update minimal Python minor version for pyo3 0.23 by @messense
    in #2350
  * Limit minimal PyPy version based on bindings crate version by
    @messense in #2351
  * Remove hard coded pip show in fix_direct_url by @mbway in #2352
  * Do not use xwin to compile on Windows when MSVC compiler can
    build for the target by @messense in #2353
- Release 1.7.6
  * allow -i 3.13t by @davidhewitt in #2324
  * propagate abiflags to wheel name on Windows by @davidhewitt in
  [#2325]
  * Add free-threaded wheel build to generate-ci by default by
  @messense in #2329
  * Bump metadata version to 2.4 to fix license bug by @konstin in
  [#2332]
- Release 1.7.5
  * Auto detect Python 3.13 by @messense in #2248
  * feat: add skip attestation option to maturin ci github by
  @moldhouse in #2254
  * generate-ci: use macos-13 runner for x86_64 build job by
  @messense in #2255
  * Improve wheel reproducibility by sorting libs by @ycongal-smile
  in #2261
  * Fix inverted workspace inclusions by @konstin in #2262
  * Fix broken links to PyO3 building docs by @laurentS in #2270
  * Update goblin to 0.9 by @musicinmybrain in #2284
  * Don't resolve python interpreter when building sdist only by
  @messense in #2292
  * include timestamps in the suggested log format by @mbway in
  [#2304]
  * Add support for GNU/Hurd by @sthibaul in #2306
  * Fix __init__ exports when using multiple UniFFI bindings by
  @Nickersoft in #2305
  * Add free-threaded Python support by @messense in #2310
- Fix _service file for cargo_vendor
- Update description</changelog>
  <changelog author="mmachova@suse.com" date="1735905600">- Update to 1.8.1
  * Downgrade invalid version info in `pyproject.toml` error to
    warning in #2417
  * Make `maturin develop` fail if version info is invalid in
    pyproject.toml in #2418
  * Don't add wheel data to sdist in #2367
  * Add sparcv9 architecture support in #2380
  * Properly handle dynamic version in pyproject.toml in #2391
  * Fix xwin cross compile on non-Windows system in #2391
  * Fix interpreter selection for abi3 bindings in #2392
  * Use the official recommended naming pattern for cffi module
    file in #2406
  * Add Linux armv5te architecture support in #2409
  * Only build Python 3.13t wheels by default for `pyo3` 0.23+ in
    [#2413]</changelog>
  <changelog author="dmueller@suse.com" date="1739016000">- update to 1.8.2:
  * Exclude packages not in the dependency tree when finding
    bindings in #2426
  * Use uv automatically when running maturin develop inside uv-
    created virtualenv in #2433
  * Consider abi3 minor version when resolving Python
    interpreters in #2437
  * Handle archived dylibs on AIX in #2442
  * Fix unnecessary rebuilds due to pyo3 config file modified
    time change in #2446
  * Fix the name of the .data directory in the generated wheel in
    [#2449]
  * Update minimal manylinux version for loongarch64 in #2451</changelog>
  <changelog author="mia@0x0.st" date="1742126400">- Update to 1.8.3
  * Fix cargo run uniffi-bindgen when cross compiling
    gh#PyO3/maturin#2476
  * Add rnet python library to examples
    gh#PyO3/maturin#2480
  * bump the attest-build-provenance version in the generated ci file
    gh#PyO3/maturin#2484
  * Auto detect PyPy 3.11
    gh#PyO3/maturin#2487
  * Update manylinux/musllinux policies to the latest main
    gh#PyO3/maturin#2491
  * Update generate-ci options in user guide
    gh#PyO3/maturin#2501
  * chore: Update cbindgen to 0.28.0
    gh#PyO3/maturin#2498
  * Don't install dependencies when running maturin develop --skip-install
    gh#PyO3/maturin#2504
  * Upgrade pyo3 to 0.24.0
    gh#PyO3/maturin#2511
  * Update the TP docs to use pypi as the GH Env name
    gh#PyO3/maturin#2512
  * fix auditwheel .so relocation for namespace modules
    gh#PyO3/maturin#2513
  * Updates Rng legacy methods in tutorial
    gh#PyO3/maturin#2514</changelog>
  <changelog author="nico.krapp@suse.com" date="1746792000">- Update to 1.8.4
  * Install a Rust toolchain into a temporary directory when building maturin
    itself or a package and a Rust toolchain is missing. Set
    MATURIN_NO_INSTALL_RUST to disable this behavior. #2421
  * Fix broken maturin develop with latest uv in #2584
  * Add PYO3_PYTHON env var support in #2534
  * Sort RECORD file in wheel archives to make them deterministic in #2550
  * Publish wheel for loongarch64 in #2548
  * Add --compression-level option to build command in #2572</changelog>
  <changelog author="mia@0x0.st" date="1747137600">- Update to 1.8.6
  * Print a message when overriding platform tag from
    `_PYTHON_HOST_PLATFORM`
    gh#PyO3/maturin#2594
  * Use the current python interpreter's version when the abi3
    feature is set with no explicit version
    gh#PyO3/maturin#2597</changelog>
  <changelog author="mia@0x0.st" date="1749470400">- Update to 1.8.7
  * Allow specifying compression method and level, in both `build`
    and `develop` modes
    gh#PyO3/maturin#2625</changelog>
  <changelog author="nico.krapp@suse.com" date="1756814400">- Update vendor tarball to fix CVE-2025-58160 (bsc#1249011)</changelog>
  <changelog author="nico.krapp@suse.com" date="1773057600">- CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date
  parser can lead to stack exhaustion (bsc#1257918)
  * refreshed vendor tarball to update time crate to 0.3.47</changelog>
</package>
<package pkgid="76e4fffe1d58ddec324effc3199808478f85cb84b002c96ac573c536573ad0d666e49039bac72ff775a15eee44c904c1268484598adf47c54a08bda08b6d6963" name="python313-mdurl" arch="noarch">
  <version epoch="0" ver="0.1.2" rel="160000.2.2"/>
  <changelog author="sebix+novell.com@sebix.at" date="1650974400">- initial package for version 0.1.1.</changelog>
  <changelog author="yarunachalam@suse.com" date="1664452800">- Update to 0.1.2
  Add a decode test with invalid utf8
  * Bump version: 0.1.1 → 0.1.2
  * Fix decode returning utf-16 code units (#9)
  * [pre-commit.ci] pre-commit autoupdate (#8)</changelog>
  <changelog author="kastl@b1-systems.de" date="1683288000">- add sle15_python_module_pythons</changelog>
</package>
<package pkgid="9bd18dc53439354461f384fe586a1585e1b910af281507d8066be8aaa1c65df6b99d0dbebca1933a19af2ac16b56108852b0ccbeebe2947bf79bae590c79131e" name="python313-msgpack" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1584014400">- Fix build without python2</changelog>
  <changelog author="pgajdos@suse.com" date="1585656000">- version update to 1.0.0
  * Remove Python 2 support from the msgpack/_cmsgpack. msgpack/fallback still supports Python 2.
  * Remove encoding option from the Packer and Unpacker.
  * Unpacker: The default value of max_buffer_type is changed to 100MiB.
  * Unpacker: strict_map_key is True by default now.
  * Unpacker: String map keys are interned.
  * Drop old buffer protocol support.
  * Support Timestamp type.
  * Support serializing and decerializing datetime object with tzinfo.
  * Unpacker: Fix Unpacker.read_bytes() in fallback implementation. (#352)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 1.0.2:
  * Python 3.9 support
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 1.0.3:
  * add python 3.10 support
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1655640000">- update to 1.0.4:
  * Support Python 3.11 (beta)
  * refresh ci settings.
  * Don't define _*ENDIAN macro on Unix.
  * Update setuptools and black
  * Use PyFloat_Pack8() on Python 3.11a7
  * Upgrade black to fix CI
  * Fix Unpacker max_buffer_length handling
  * ci: Update action versions.</changelog>
  <changelog author="dmueller@suse.com" date="1679832000">- update to 1.0.5:
  * Fallback to compiler defines when __BYTE_ORDER is not
    available
  * Fix build error caused by ntohs, ntohl
  * Add python 3.11 wheels
  * fallback: Fix packing multidim memoryview
  * minor type in exception message</changelog>
  <changelog author="kastl@b1-systems.de" date="1683547200">- add sle15_python_module_pythons</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 1.0.7:
  * remove inline macro for msvc
  * do not fallback on build error
  * fix: build status badge
  * Drop python2 support
  * Drop Python 3.6 support
  * try Cython 3.0
  * sphinx-related work</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1721649600">- Update to 1.0.8
  * Update Cython to 3.0.8. This fixes memory leak when iterating
    ``Unpacker`` object on Python 3.12.
  * Do not include C/Cython files in binary wheels.
- Drop removal of C/Cython files from %install section</changelog>
  <changelog author="ecsos@opensuse.org" date="1726228800">- Update to 1.1.0
  * Avoid using floating points during timestamp-datetime conversions in #591
  * use ruff instead of black in #598
  * update Cython and setuptools in #599
  * Add experimental support for Python 3.13 in #600
  * update README in #561
  * update cibuildwheel to 2.17 in #601
  * implement buffer protocol in #602
  * Remove unused code in #603
  * packer: add buf_size option in #604
  * update readme in #605
  * cython: better exception handling in #606
  * better error checks in #607
  * Cleanup code and pyproject in #608
  * Release v1.1.0rc1 in #609
  * do not install cython as build dependency in #610
  * update Cython to 3.0.11 in #617
  * update cibuildwheel to 2.20.0 in #618
  * Release v1.1.0rc2 in #619
  * MNT: use PyLong_* instead of PyInt_* in #620
  * release v1.1.0 in #622</changelog>
</package>
<package pkgid="06c5409fda1f96b32561c1438663c73671b344d652dd1f6afd03039c82e42d5a32316921152f2825976844e64580a519e0afe9c5c015364f375b047b1a9c8e03" name="python313-netaddr" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="160000.2.2"/>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="pgajdos@suse.com" date="1590062400">- %python3_only -&gt; %python_alternative</changelog>
  <changelog author="mardnh@gmx.de" date="1593864000">- Update to version 0.8.0
  * Fixed weak reference support in classes with __slots__
  * Added __bytes__ to IPAddress for intuitive usage
  * Added format() function to EUI
  * Added IPNetwork.netmask property setter
  * Added support for IABs in the 40:D8:55 OUI
  * Drastically optimized spanning_cidr()
  * Fixed "x.x.x.x/x" in IPNetwork tests
  * Added support for passing iterables of IPRange to IPSet and
    cidr_merge()
  Bugfixes:
  * N log N complexity instead of linear
  * Efficiently creating a large IPSet from a list of IPRanges?
  * Weak reference support
- Run testsuite</changelog>
  <changelog author="dmueller@suse.com" date="1636372800">- fix build for older distros</changelog>
  <changelog author="ecsos@opensuse.org" date="1686484800">- Add %{?sle15_python_module_pythons}</changelog>
  <changelog author="mardnh@gmx.de" date="1695643200">- Update to version 0.9.0
  Added:
  * Add hash capabilities to OUI.
  Fixed:
  * Backwards incompatible: Handle RFC 6164 IPv6 addresses (don't
    reserve first IP address in point-to-point subnets).
  * Technically backwards incompatible: Fix for is_loopback
    behaviour – consider IPNetwork('::1/128') to be loopback.
  * Fix print syntax in the documentation to be Python 3 compatible
  * Fix the Sphinx syntax in the documentation.
  Other:
  * Deprecate Python 3.6.
  * Eliminate unnecessary evals.</changelog>
  <changelog author="dmueller@suse.com" date="1704628800">- update to 0.10.1:
  * Get rid of some warnings
  * Add an :data:`INET_ATON` flag to explicitly request
    ``inet_aton()`` IPv4 parsing semantics from :class:`IPAddress`.
  * Add an :meth:`IPAddress.is_ipv4_private_use` convenience
    method.
  * Add an :meth:`IPAddress.is_global` convenience method to
    allow determining if an address is considered globally reachable.
  * Add an :meth:`IPAddress.is_ipv6_unique_local` convenience
    method.
  * Improve Python 3.13 compatibility, thank you John Eckersberg.
  * Deprecate Python 3.7 support.
  * Deprecate abbreviated CIDR format support in
    :class:`IPNetwork`
  * Deprecate accepting leading zeros when parsing IPv4 addresses
    in :data:`INET_PTON` mode (it's been allowed on some platforms).
    If you need to allow and discard leading zeros use the
    :data:`ZEROFILL` flag.
  * Raise an exception if invalid flags are passed to
    ``IPAddress``, ``IPNetwork`` or ``IPRange``.
  * Improve the documentation substantially.
  * Update the DB files to the latest versions (2023-12-23).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1711022400">- Update to 1.2.1:
  * Fix bad version 1.2.0 upload to PyPI – now yanked. No changes to
    the package.
- 1.2.0:
  * Add CLI tool subcommand to display cli-network-info.
  * Support running interactive-shell without IPython installed.
  * Explicitly raise TypeError is a non-string value is passed to
    valid_ipv4 or valid_ipv6.
- 1.1.0:
  * Add the required Python version to the package metadata (#365).
  * Add expand_partial_ipv4_address to the public API.
  * Fix IPNetwork(...) in IPRange(...) false negatives (#157).
  * Fix a few IPNetwork slicing edge cases (#214).
  * Fix support for partial IP addresses accidentally left in IPNetwork in 1.0.0.
  * Fixed an incorrect license classifier in the package metadata.
- 1.0.0:
  * Removed:
  * Drop support for Python versions lower than 3.7.
  * Remove the flag shorthands: N, P and Z. Use NOHOST, INET_PTON
    and ZEROFILL instead.
  * Remove abbreviated CIDR format support in IPNetwork (implicit_prefix=True),
    use cidr_abbrev_to_verbose if you need this behavior.
  * Remove the IPAddress.is_private method.
  * Changed:
  * Stop accepting leading zeros when parsing IPv4 addresses in INET_PTON mode
    (it's been allowed on some platforms).
  * Stop parsing IPv4 addresses permissively (inet_aton()-like) by default.
  * Apply the two changes above to valid_ipv4 as well.
  * Update the address databases to the 2024-02-10 versions.
  * Fixed:
  * Return False instead of raising AddrFormatError when an empty string is passed
    to valid_ipv4 or valid_ipv6.
  * Fix handling of dialect provided to EUI during copy-construction.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1733400000">- update to 1.3.0:
  * Added:
  - Add partial address expansion in IPNetwork via the
    expand_partial switch, this enables opting into pre-1.1.0
    behavior
  * Fixed:
  - Fix running the test suite on musl systems
  - Fix IPAddress IPv6 parsing with ZEROFILL enabled
  - Fix handling of the NOHOST flag in the IPNetwork copy
    constructor</changelog>
  <changelog author="mcepl@cepl.eu" date="1733400001">- Fix incorrect removal of shebangs</changelog>
</package>
<package pkgid="ea6e70de5e1a2c72464cc0d46c0d2bf3e79ffde9e3c78c43e30aa38115a52ac948217b17df79c931a4e87df484dcc18309a2c475d8882cca252e30d2e98c2d79" name="python313-nftables" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 1.0.8
  * Support for setting meta and ct mark from other fields in
    rules, e.g. set meta mark to ip dscp header field.
  * Enhacements for -o/--optimize to deal with NAT statements, to
    compact masquerade statements.
  * Support for stateful statements in anonymous maps, such as
    counters.
  * Support for resetting stateful expressions in sets, maps and
    elements, e.g. counters.
  * broute support to short-circuit bridge logic from the bridge
    prerouting hook and pass up packets to the local IP stack.
  * JSON support for table and chain comments.
- Added 0001-Revert-py-replace-distutils-with-setuptools.patch</changelog>
  <changelog author="jengelh@inai.de" date="1697716800">- Update to release 1.0.9
  * Custom conntrack timeouts can use time specification with
    units other than seconds.
  * Allow combination of dnat with numgen.
  * Allow for using constants as key in dynamic sets.
  * Support for matching on the target address of a IPv6 neighbour
    solicitation/advertisement.
  * Restore bitwise operations in combination with maps, e.g. jump
    to chain depending on bitwise operation on packet mark.
  * Fix crash with log prefix longer that 127 bytes.
- Drop merged 0001-Revert-py-replace-distutils-with-setuptools.patch</changelog>
  <changelog author="code@bnavigator.de" date="1704283200">- Fix the python bindings subpackages
  * The PEP517 python build requires setuptools
  * Actually use the rpm subpackage definition
  * The version is actually python3dist(nftables) = 0.1
  * is noarch and requires libnftables1 through dlopen, tell
    rpmlint
  * remove unused shebang</changelog>
  <changelog author="dmueller@suse.com" date="1704369600">- buildrequire setuptools explicitly as pip drops the dependency</changelog>
  <changelog author="jengelh@inai.de" date="1721217600">- Update to release 1.1.0
  * Restore compatibility set element dump with &lt;= 0.9.8
  * Disallow empty interface names
  * Restore rule replace command
  * Search for group, rt_mark, rt_realms at
    /etc/iproute2, /usr/share/iproute2
  * Resolve some timezone issues
  * Support for variables in map expressions
  * VLAN support</changelog>
  <changelog author="jengelh@inai.de" date="1727956800">- Update to release 1.1.1
  * Reduce netlink cache dependencies to speed up incremental
    updates.
  * Allow zero burst in byte ratelimiter expression.
  * Fix double-free when users call nft_ctx_clear_vars() followed
    by nft_ctx_free().
  * Document that the tproxy statement is non-terminal (unlike in
    iptables). This allows for tproxy+log and tproxy+mark combos,
    see man nft(8) for details.
  * Add egress support for the `list hooks` subcommand.</changelog>
  <changelog author="jengelh@inai.de" date="1741089600">- Add 0001-tools-add-a-systemd-unit-for-static-rulesets.patch
  [boo#1237277]</changelog>
  <changelog author="jengelh@inai.de" date="1741435200">- Update 0001-tools-add-a-systemd-unit-for-static-rulesets.patch
  from new submission.</changelog>
  <changelog author="jengelh@inai.de" date="1744632000">- Update to release 1.1.2
  * Allow for expressing protocol dependency on sets.
  * Support for more advanced bitwise operations with statements.
  * Set element auto-merge now skips elements with
    timeout/expiration.
  * Memory footprint reduction for set elements.
  * Updated `nft monitor` to report flowtable events.
  * Support for merging bitmask matching in set/map with
  - o/--optimize.
  * Improved MPTCP support with symbol table for subtypes.</changelog>
  <changelog author="jengelh@inai.de" date="1745323200">- Update to release 1.1.3
  * Fix incorrect bytecode for vlan pcp mangling from netdev family
    chains such as ingress/egress: `... vlan pcp set 6 counter`
  * Fix bogus element in large concatenated set ranges, leading to:
    ``16777216 . 00:11:22:33:44:55 . 10.1.2.3 comment "123"``
    instead of:
    ``"lo" . 00:11:22:33:44:55 . 10.1.2.3 comment "123"``
  * Restore set auto-merge feature with timeouts, disabled in the
    previous v1.1.2 release.</changelog>
</package>
<package pkgid="026ebbf2ee12c8478eaa858c03d78f7d80e77629e46227e18898b864259afe678cf0203e1d3ac8148521f05c6902114a72028352c40e58fe13a4d598a9fe8205" name="python313-oauthlib" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1621944000">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="dmueller@suse.com" date="1622980800">- update to 3.1.1:
  * #753: Fix acceptance of valid IPv6 addresses in URI validation
  * #730: Base OAuth2 Client now has a consistent way of managing the `scope`: it consistently
    relies on the `scope` provided in the constructor if any, except if overridden temporarily
    in a method call. Note that in particular providing a non-None `scope` in
    `prepare_authorization_request` or `prepare_refresh_token` does not override anymore
    `self.scope` forever, it is just used temporarily.
  * #726: MobileApplicationClient.prepare_request_uri and MobileApplicationClient.parse_request_uri_response,
    ServiceApplicationClient.prepare_request_body,
    and WebApplicationClient.prepare_request_uri now correctly use the default `scope` provided in
    constructor.
  * #725: LegacyApplicationClient.prepare_request_body now correctly uses the default `scope` provided in constructor
  * #711: client_credentials grant: fix log message
  * #746: OpenID Connect Hybrid - fix nonce not passed to add_id_token
  * #756: Different prompt values are now handled according to spec (e.g. prompt=none)
  * #759: OpenID Connect - fix Authorization: Basic parsing
  * #716: improved skeleton validator for public vs private client
  * #720: replace mock library with standard unittest.mock
  * #727: build isort integration
  * #734: python2 code removal
  * #735, #750: add python3.8 support
  * #749: bump minimum versions of pyjwt and cryptography
- drop o_switch_to_unitest_mock.patch (upstream)</changelog>
  <changelog author="arun@gmx.de" date="1643889600">- specfile:
  * update copyright year
- update to version 3.2.0:
  * OAuth2.0 Client: * #795: Add Device Authorization Flow for Web
    Application * #786: Add PKCE support for Client * #783: Fallback
    to none in case of wrong expires_at format.
  * OAuth2.0 Provider: * #790: Add support for CORS to metadata
    endpoint. * #791: Add support for CORS to token endpoint. * #787:
    Remove comma after Bearer in WWW-Authenticate
  * OAuth2.0 Provider - OIDC:
    + #755: Call save_token in Hybrid code flow
    + #751: OIDC add support of refreshing ID Tokens with
    refresh_id_token
    + #751: The RefreshTokenGrant modifiers now take the same
    arguments as the AuthorizationCodeGrant modifiers (token,
    token_handler, request).
  * General:
    + Added Python 3.9, 3.10, 3.11
    + Improve Travis &amp; Coverage</changelog>
  <changelog author="arun@gmx.de" date="1662984000">- specfile:
  * update requirements
- update to version 3.2.1:
  * OAuth2.0 Provider: * #803: Metadata endpoint support of non-HTTPS
  * CVE-2022-36087, bugzilla # 1203333
  * OAuth1.0: * #818: Allow IPv6 being parsed by signature
  * General: * Improved and fixed documentation warnings. * Cosmetic
    changes based on isort</changelog>
  <changelog author="arun@gmx.de" date="1666440000">- update to version 3.2.2:
  * OAuth2.0 Provider: * CVE-2022-36087
- Also remove the conditional definition of python_module.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1723464000">- Skip failing test with jwt 2.9.0
  gh#oauthlib/oauthlib#877</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1725883200">- Cherry-pick upstream patch to make UtilsTests.test_filter_params Python 3.13+ compatible
  * Make-UtilsTests.test_filter_params-Python-3.13-compatible.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1727179200">- Fix build error under Leap.</changelog>
</package>
<package pkgid="0bee6b97a9e139d7d3c456715b048e5994098cf5521dc2dd7db3e95fd8bf56dbc21a892a4f3dcde42865076ec39138fa886b0f3c112b3e97508f1ef6871b80c8" name="python313-packaging" arch="noarch">
  <version epoch="0" ver="24.2" rel="160000.2.2"/>
  <changelog author="code@bnavigator.de" date="1673611200">- Update to v23.0
  * Remove unused LPAREN token from tokenizer by @hrnciar in #630
  * Reorganise the project layout and version management by
    @pradyunsg in #626
  * Correctly handle non-normalised specifiers in requirements by
    @pradyunsg in #634
  * Use stable Python 3.11 in tests by @153957 in #641
  * Fix typing for specifiers.BaseSpecifier.filter() by @henryiii
    in #643
  * Correctly handle trailing whitespace on URL requirements by
    @pradyunsg in #642
  * refactor _generic_api to use EXT_SUFFIX by @mattip in #607
  * Allow "extra" to be None in the marker environment by
    @pradyunsg in #650
  * Fix typos by @kianmeng in #648
  * Update changelog for release by @pradyunsg in #656</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- Don't use :primary multibuild flavor for non-Tumbleweed
  * accomodates special SLE15 projects defininig extra flavors but
    not building for primary python3</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 23.1
  * chore: add typed classifier
  * Improve parser error messaging around mistakes in/around
    version specifiers
  * Upgrade to latest mypy
  * Delete print() from test_tags
  * Update our linters
  * Improve error for local version label with unsupported operators
  * Parse raw metadata
  * Handle prefix match with zeros at end of prefix correctly
  * Relax typing of _key on _BaseVersion
  * Replace spaces in platform names with underscores
  * Import underlying parser function as an underscored variable</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="ecsos@opensuse.org" date="1699531200">- Update ot 23.2:
  * parse_marker should consume the entire source string in #687
  * Create a Security Policy file in #695
  * Add python 3.12 to CI in #689
  * Remove URL validation from requirement parsing in #684
  * Add types for packaging.version._Version in #665
  * Add PyPy 3.10 to CI in #699
  * Remove unused argument in _manylinux._is_compatible in #700
  * Canonicalize names for requirements comparison in #696
  * Add platform tag support for LoongArch in #693
  * Ability to install armv7l manylinux/musllinux wheels on armv8l in #690
  * Include CHANGELOG.rst in sdist in #704
  * Update pyupgrade to Python 3.7+ in #580
  * Fix version pattern pre-releases in #705
  * Fix typos found by codespell in #706
  * Support enriched metadata in #686
  * Correct rST syntax in CHANGELOG.rst in #709
  * fix: platform tag for GraalPy in #711
  * Document that this library uses a calendar-based versioning scheme in #717
  * fix: Update copyright date for docs in #713
  * Bump pip version to avoid known vulnerabilities in #720
  * Typing annotations fixed in version.py in #723
  * parse_{sdist,wheel}_filename: don't raise InvalidVersion in #721
  * Fix code blocks in CHANGELOG.md in #724</changelog>
  <changelog author="dmueller@suse.com" date="1710590400">- update to 24.0:
  * Do specifier matching correctly when the specifier contains
    an epoch number and has more components than the version
    (:issue:`683`)
  * Support the experimental --disable-gil builds in
    packaging.tags (:issue:`727`)
  * BREAKING: Make optional metadata.Metadata attributes default
    to None (:issue:`733`)
  * Fix errors when trying to access the
    description_content_type, keywords, and requires_python
    attributes on metadata.Metadata when those values have not
    been provided (:issue:`733`)
  * Fix a bug preventing the use of the built in ExceptionGroup
    on versions of Python that support it (:issue:`725`)</changelog>
  <changelog author="dmueller@suse.com" date="1718884800">- update to 24.1:
  * No unreleased changes.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1731240000">- update to 24.2:
  * PEP 639: Implement License-Expression and License-File
    (:issue:`828`)
  * Use !r formatter for error messages with filenames
    (:issue:`844`)
  * Add support for PEP 730 iOS tags (:issue:`832`)
  * Fix prerelease detection for &gt; and &lt; (:issue:`794`)
  * Fix uninformative error message (:issue:`830`)
  * Refactor canonicalize_version (:issue:`793`)
  * Patch python_full_version unconditionally (:issue:`825`)
  * Fix doc for canonicalize_version to mention strip_trailing_zero
    and a typo in a docstring (:issue:`801`)
  * Fix typo in Version __str__ (:issue:`817`)
  * Support creating a SpecifierSet from an iterable of Specifier
    objects (:issue:`775`)</changelog>
  <changelog author="dmueller@suse.com" date="1747137600">- skip primary build only for Tumbleweed (adjust version)</changelog>
</package>
<package pkgid="fa9bce133d60576b2fdf1a31847e9610a4573d23b38da2880a0ad3ca87cc6a1c819965cd2d8de5893df3ac1e35fc5700ba53d5878da68b8f23846f6740f2aaa7" name="python313-passlib" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="160000.2.2"/>
  <changelog author="hpj@urpla.net" date="1600948800">- Add optional dependencies: bcrypt, argon2_cffi, cryptography
  and scrypt.</changelog>
  <changelog author="jayvdb@gmail.com" date="1605960000">- Update URL to https://foss.heptapod.net/python-libs/passlib
- Add optional dependencies: Django, apache2-utils
- Update %check to report skipped tests
- Update to v0.7.4
  * updated tests to pass for Django 1.8 - 3.1
  * CryptContext will now throw UnknownHashError when it can't
    identify a hash provided to methods such as CryptContext.verify
    Previously it would throw a generic :exc:`ValueError`.
- from v1.7.3
  * ldap_salted_sha512 LDAP "salted hash" support added for SHA-256
    and SHA-512
  * bcrypt: Fixed Python 3 OS native backend detection on BSD platforms
  * safe_crypt added support for crypt.crypt unexpectedly returning
    bytes under Python 3
  * safe_crypt added support for crypt.crypt throwing OSError
    which can happen as of Python 3.9
  * passlib.ext.django fixed lru_cache import for Django 3 compatibility
  * bcrypt_sha256 Internal algorithm has been changed to use HMAC-SHA256
    instead of plain SHA256
  * bcrypt OS native backend ("os_crypt") now raises the new
    PasswordValueError if password is provided as non-UTF8 bytes
  * lookup_hash's required=False kwd was modified to report unsupported
    hashes via the HashInfo.supported attribute; rather than letting
    ValueErrors through uncaught.
  * Various Python 3.9 compatibility fixes</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Use _multibuild to only have the test dependencies as
  buildrequires of the test build.
- Have optional test dependencies (Django and scrypt) that are not
  available in SLE only be buildrequired in TW.</changelog>
  <changelog author="mcepl@suse.com" date="1611835201">- OpenLeap is not SLE</changelog>
  <changelog author="mcepl@suse.com" date="1628251200">- Skip failing tests and ask upstream for investigation
  (https://foss.heptapod.net/python-libs/passlib/-/issues/135).</changelog>
  <changelog author="mcepl@suse.com" date="1643371200">- The disaster of falling tests (see previous record in this
  changelog for URL) just continues with test_02_handler_wrapper.</changelog>
  <changelog author="kastl@b1-systems.de" date="1683633600">- add sle15_python_module_pythons</changelog>
  <changelog author="steven.kowalik@suse.com" date="1691064000">- Add patch no-pkg_resources.patch:
  * Stop using pkg_resources.
- Switch to pyproject macros.</changelog>
  <changelog author="mmachova@suse.com" date="1727352000">- Only run the full testsuite in openSUSE</changelog>
  <changelog author="steven.kowalik@suse.com" date="1728648000">- Add patch no-crypt-with-python-313.patch:
  * Do not run tests requiring 'crypt' with Python 3.13.</changelog>
</package>
<package pkgid="15ced6622144a9b9b1f32494e2a79b43fed9d8b3db7d2bba0f7d2edc81a906c881e26aea125c05583a4decc40421120c4c922ef43902d349168b10f3afbb009a" name="python313-policycoreutils" arch="noarch">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="cathy.hu@suse.com" date="1701691200">- Re-add "Obsoletes: policycoreutils-python &lt;= 2.6" to avoid file
  conflicts with /usr/share/bash-completion/completions/setsebool
  of older policycoreutils-python-2.6</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;
- Remove reproducible-build.patch since it is upstream now
- Fix issues in get_os_version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="cathy.hu@suse.com" date="1710504000">- exclude %python3_fix_shebang for distros &lt;=15.4 to avoid build
  failure</changelog>
  <changelog author="cathy.hu@suse.com" date="1716897600">- Rework packaging to modern python packaging as we need
  policycoreutils-python-tools as build dependency for python311-setools
  - General:
  - python version for scripts is now set to python311, deprecating python3.6
    on 15.4 + 15.5
  - replaced python3 dependencies with corresponding dependencies
  - moved %{_localstatedir}/lib/selinux out of the python-policycoreutils
    rpm and into policycoreutils-python-utils as it does not belong
    into a module and causes conflicts when module is built for multiple
    python versions
  - Factory-specific changes:
  - python-policycoreutils module is now built for python310, python311,
    python312 instead of python3
  - added %python3_fix_shebang to set the shebang to the current python
  - 15.4 and 15.5 specific changes
  - python-policycoreutils module is now built for python311 instead
    of python3
  - added %python311_fix_shebang to set the shebang to python311, this
    is currently a dirty hack since the python3_fix_shebang_path macro
    does not exist in &lt;=15.5 so far
  - 15.4 specific changes
  - policycoreutils-devel requires python3-distro still, as there
    is no python311-distro package</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  User-visible changes:
  * audit2allow -C for CIL output mode
  * sepolgen: adjust parse for refpolicy
  * Bugfixes:
  * fixfiles: drop unnecessary \ line endings
  * setfiles: avoid unsigned integer underflow
  * python/semanage: Do not sort local fcontext definitions
  * python/semanage: Allow modifying records on "add"
- Refresh get_os_version.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Replace python-gtk Requires for -gui with introspection typelib for Gtk 3</changelog>
  <changelog author="dimstar@opensuse.org" date="1737460801">- Drop manually generated typelib(Gtk) Requires: this was the
  minimal fix to eliminate usage of pythonj-gtk, but the python
  code references more typelibs; hence add gobject-introspection
  BuildRequires in order to inspect the code for typelib()
  dependencies.
- Replace python3-gobject Requires for python3-gobject-Gdk: as this
  is a GUI application, we do need to Gdk bridge too.</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * policycoreutils: introduce unsetfiles
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Update make_targets.patch
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
</package>
<package pkgid="fe9b4c3e7af31a081bba039ed37653515a69d73cbee24038765c03c37b435d43eb8c334577aa111e41ee723f66e234b469f19835ca1fee068f43ef2f97ff72c7" name="python313-psutil" arch="x86_64">
  <version epoch="0" ver="7.0.0" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1694001600">- BuildRequire /usr/bin/who: called by the test suite. With
  coreutils 9.4 'who' is no longer part of the main package but is
  shipped as part of coreutils-systemd.</changelog>
  <changelog author="code@bnavigator.de" date="1696075200">- Require /usr/bin/who only for suse_version &gt; 1500: 15.X does not
  provide it, but has it in coreutils.
- PEP517
- Clean up specfile from obsolete python2 stuff</changelog>
  <changelog author="aplanas@suse.com" date="1698148800">- Rebase logind_y2038.patch based on the reviewed code</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1700049600">- update to version 5.9.6:
  * Enhancements
    + 1703: cpu_percent() and cpu_times_percent() are now thread
    safe, meaning they can be called from different threads and
    still return meaningful and independent results.
    + 2266: if Process class is passed a very high PID, raise
    NoSuchProcess instead of OverflowError. (patch by Xuehai Pan)
    + 2246: drop python 3.4 &amp; 3.5 support. (patch by Matthieu
    Darbois)
    + 2290: PID reuse is now pre-emptively checked for
    Process.ppid() and Process.parents().
    + 2312: use ruff Python linter instead of flake8 + isort. It's
    an order of magnitude faster + it adds a ton of new code
    quality checks.
  * Bug fixes
    + 2195, [Linux]: no longer print exception at import time in
    case /proc/stat can't be read due to permission error.
    + 2268: bytes2human() utility function was unable to properly
    represent negative values.
    + 2284, [Linux]: Process.memory_full_info() may incorrectly
    raise ZombieProcess if it's determined via
    /proc/pid/smaps_rollup.
    + 2288, [Linux]: correctly raise ZombieProcess on
    Process.exe(), Process.cmdline() and Process.memory_maps()
    instead of returning a "null" value.
    + 2290: differently from what stated in the doc, PID reuse is
    not pre-emptively checked for Process.nice() (set),
    Process.ionice(), (set), Process.cpu_affinity() (set),
    Process.rlimit() (set), Process.parent().
- refresh skip_rlimit_tests_on_python2.patch
- drop removal of shebang: fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 5.9.7:
  * 2324_: enforce Ruff rule `raw-string-in-exception`, which
    helps providing clearer tracebacks when exceptions are
    raised by psutil.
  * 2325_, [PyPy]: psutil did not compile on PyPy due to missing
    `PyErr_SetExcFromWindowsErrWithFilenameObject` cPython API.
- drop logind_y2038.patch (upstream)</changelog>
  <changelog author="fvogt@suse.com" date="1711108800">- BuildRequire pkgconfig(libsystemd) instead of full systemd</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1721217600">- Update to version 6.0.0
  * 2109_: ``maxfile`` and ``maxpath`` fields were removed from the namedtuple
    returned by `disk_partitions()`_. Reason: on network filesystems (NFS) this
    can potentially take a very long time to complete.
  * 2366_, [Windows]: log debug message when using slower process APIs.
  * 2375_, [macOS]: provide arm64 wheels.  (patch by Matthieu Darbois)
  * 2396_: `process_iter()`_ no longer pre-emptively checks whether PIDs have
    been reused. This makes `process_iter()`_ around 20x times faster.
  * 2396_: a new ``psutil.process_iter.cache_clear()`` API can be used the clear
    `process_iter()`_ internal cache.
  * 2401_, Support building with free-threaded CPython 3.13. (patch by Sam Gross)
  * 2407_: `Process.connections()`_ was renamed to `Process.net_connections()`_.
    The old name is still available, but it's deprecated (triggers a
    ``DeprecationWarning``) and will be removed in the future.
  * 2425_: [Linux]: provide aarch64 wheels.  (patch by Matthieu Darbois / Ben Raz)
  * 2250_, [NetBSD]: `Process.cmdline()`_ sometimes fail with EBUSY. It usually
    happens for long cmdlines with lots of arguments. In this case retry getting
    the cmdline for up to 50 times, and return an empty list as last resort.
  * 2254_, [Linux]: offline cpus raise NotImplementedError in cpu_freq() (patch
    by Shade Gladden)
  * 2272_: Add pickle support to psutil Exceptions.
  * 2359_, [Windows], [CRITICAL]: `pid_exists()`_ disagrees with `Process`_ on
    whether a pid exists when ERROR_ACCESS_DENIED.
  * 2360_, [macOS]: can't compile on macOS &lt; 10.13.  (patch by Ryan Schmidt)
  * 2362_, [macOS]: can't compile on macOS 10.11.  (patch by Ryan Schmidt)
  * 2365_, [macOS]: can't compile on macOS &lt; 10.9.  (patch by Ryan Schmidt)
  * 2395_, [OpenBSD]: `pid_exists()`_ erroneously return True if the argument is
    a thread ID (TID) instead of a PID (process ID).
  * 2412_, [macOS]: can't compile on macOS 10.4 PowerPC due to missing `MNT_`
    constants.
  * 2109_: the namedtuple returned by `disk_partitions()`_' no longer has
    ``maxfile`` and ``maxpath`` fields.
  * 2396_: `process_iter()`_ no longer pre-emptively checks whether PIDs have
    been reused. If you want to check for PID reusage you are supposed to use
    `Process.is_running()`_ against the yielded `Process`_ instances. That will
    also automatically remove reused PIDs from `process_iter()`_ internal cache.
  * 2407_: `Process.connections()`_ was renamed to `Process.net_connections()`_.
    The old name is still available, but it's deprecated (triggers a
    ``DeprecationWarning``) and will be removed in the future.
- from version 5.9.8
  * 2343_, [FreeBSD]: filter `net_connections()`_ returned list in C instead of
    Python, and avoid to retrieve unnecessary connection types unless explicitly
    asked. E.g., on an IDLE system with few IPv6 connections this will run around
    4 times faster. Before all connection types (TCP, UDP, UNIX) were retrieved
    internally, even if only a portion was returned.
  * 2342_, [NetBSD]: same as above (#2343) but for NetBSD.
  * 2349_: adopted black formatting style.
  * 930_, [NetBSD], [critical]: `net_connections()`_ implementation was broken.
    It could either leak memory or core dump.
  * 2340_, [NetBSD]: if process is terminated, `Process.cwd()`_ will return an
    empty string instead of raising `NoSuchProcess`_.
  * 2345_, [Linux]: fix compilation on older compiler missing DUPLEX_UNKNOWN.
  * 2222_, [macOS]: `cpu_freq()` now returns fixed values for `min` and `max`
    frequencies in all Apple Silicon chips.
- Drop obsolete patch to skip tests on Python 2
  * skip_rlimit_tests_on_python2.patch
- Update patch to skip failing tests for new version
  * skip_failing_tests.patch</changelog>
  <changelog author="dmueller@suse.com" date="1732104000">- update to 6.1.0:
  * 2366_, [Windows]: drastically speedup `process_iter()`_. We
    now determine process unique identity by using process "fast"
    create time method. This will considerably speedup those apps
    which use `process_iter()`_ only once, e.g. to look for a
    process with a certain name.
  * 2446_: use pytest instead of unittest.
  * 2448_: add make install-sysdeps target to install the
    necessary system dependencies (python-dev, gcc, etc.) on all
    supported UNIX flavors.
  * 2449_: add make install-pydeps-test and make install-pydeps-
    dev targets. They can be used to install dependencies meant
    for running tests and for local development. They can also be
    installed via pip install .[test] and pip install .[dev].
  * 2456_: allow to run tests via python3 -m psutil.tests even if
    pytest module is not installed. This is useful for production
    environments that don't have pytest installed, but still want
    to be able to test psutil installation.
  * 2427_: psutil (segfault) on import in the free-threaded (no
    GIL) version of Python 3.13.  (patch by Sam Gross)
  * 2455_, [Linux]: IndexError may occur when reading
    /proc/pid/stat and field 40 (blkio_ticks) is missing.
  * 2457_, [AIX]: significantly improve the speed of
    `Process.open_files()`_ for some edge cases.
  * 2460_, [OpenBSD]: `Process.num_fds()`_ and
    `Process.open_files()`_ may fail with `NoSuchProcess`_ for
    PID 0. Instead, we now return "null" values (0 and []
    respectively).
- drop skip_failing_tests.patch: obsolete</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1736164800">- Update to 6.1.1
  * 2471_: use Vulture CLI tool to detect dead code.
  * 2418_, [Linux]: fix race condition in case /proc/PID/stat does not exist, but
    /proc/PID does, resulting in FileNotFoundError.
  * 2470_, [Linux]: `users()`_ may return "localhost" instead of the actual IP
    address of the user logged in.</changelog>
  <changelog author="dmueller@suse.com" date="1748520000">- update to 7.0.0:
  * 669_, [Windows]: `net_if_addrs()`_ also returns the broadcast
    address instead of None.
  * 2480_: Python 2.7 is no longer supported. Latest version
    supporting Python 2.7 is psutil 6.1.X. Install it with: pip2
    install psutil==6.1.*.
  * 2490_: removed long deprecated Process.memory_info_ex()
    method. It was deprecated in psutil 4.0.0, released 8 years
    ago. Substitute is Process.memory_full_info().
  * 2496_, [Linux]: Avoid segfault (a cPython bug) on
    Process.memory_maps() for processes that use hundreds of GBs
    of memory.
  * 2502_, [macOS]: `virtual_memory()`_ now relies on
    host_statistics64 instead of host_statistics. This is the
    same approach used by vm_stat CLI tool, and should grant more
    accurate results.
  * 2480_: Python 2.7 is no longer supported.
  * 2490_: removed long deprecated Process.memory_info_ex()
    method.</changelog>
</package>
<package pkgid="47ae421279144a99838b7178230d95a5d26d93cc40106f89f72d2f5bf81f4aaa534fafe5941d0488945ce2a9f5ff34907db39567168b949e96c784e3263fd66c" name="python313-pycairo" arch="x86_64">
  <version epoch="0" ver="1.26.1" rel="160000.2.2"/>
  <changelog author="fcrozat@suse.com" date="1628769600">- Add Obsoletes/Provides for python3-cairo-devel.</changelog>
  <changelog author="code@bnavigator.de" date="1657972800">- Work around vendored distutils in setuptools &gt;= 60 incorrectly
  installing pkgconfig files into the wrong libdir
- Deduplicate files in python_sitearch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663070400">- Update to version 1.21.0:
  * Require Python 3.7+
  * Require meson 0.53+
  * Using setup.py directly to build/install pycairo is deprecated.
    Use meson instead.
  * setup.py now requires setuptools. Previously it was optional.
  * The complete API reference is now included in the typing stubs,
    so it can be consumed/shown by IDEs.
- Add f5a795ea.patch: Some test improvements for cairo 1.17.6</changelog>
  <changelog author="dimstar@opensuse.org" date="1669636800">- Updtae to version 1.22.0:
  * Officially support Python 3.11.
  * PDFSurface.version_to_string(): Fix crash with negative
    versions.
  * typing: ImageSurface.get_stride() returns an int.
  * typing: Fix incorrect interface for Matrix constructor.
  * typing: Use Generic for Context.
  * docs: some cairo.Context fixes.
  * docs: try to make create_from_png/write_to_png more clear.
  * docs: add an example for how to convert a surface to pillow.
  * docs: cairo.Format.RGB24: document that unused bytes may be
    overwritten.
  * tests: don’t depend on specific ref counts.
  * tests: compatibility fixes for cairo 1.17.6.
- Drop f5a795ea.patch: fixed upstream.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to version 1.23.0
  * Reminder to distro packagers: Building/installing pycairo using setup.py is deprecated, please use meson instead.
  * git: changed default branch from “master” to “main”
  * Windows: Update the cairo version included in the wheels from 1.17.2 to 1.17.6 #pr-243
  * docs: Document how to look up pycairo headers without loading the module #pr-300
  * tests: don’t error out if cairo wasn’t built with all features #pr-293
  New APIs:
  * Status.DWRITE_ERROR #pr-294
  * Format.RGB96F, Format.RGBA128F #pr-295
  * PDFVersion.VERSION_1_6, PDFVersion.VERSION_1_7 #pr-296
  * HAS_DWRITE_FONT #pr-297
  * Context.set_hairline(), Context.get_hairline() #pr-298
  * PDFSurface.set_custom_metadata() #pr-299</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Switch to single spec version build for PSP</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- update to 1.24.0:
  * Dropped Python 3.7 support
  * Bumped meson version requirement from 0.53.0 to 0.56.0
  * Various cairo dependency updates for the Windows wheel build
  * Various code cleanups :pr:`306`
  * Added Python 3.12 Windows wheels</changelog>
  <changelog author="uncomfy+openbuildservice@uncomfyhalomacro.pl" date="1698148800">- update to 1.25.1:
  * fix a crash in pypy3.10
  * Fix the build with CPython 3.13.0a1
- introduced from 1.25.0:
  * update to cairo 1.18.0 (for windows only)
  * new apis:
  - Status.SVG_FONT_ERROR
  - FontOptions.get_color_mode(), FontOptions.set_color_mode(), ColorMode
  - FontOptions.set_color_palette(), FontOptions.get_color_palette(), COLOR_PALETTE_DEFAULT
  - FontOptions.set_custom_palette_color(), FontOptions.get_custom_palette_color()
  - TAG_CONTENT, TAG_CONTENT_REF
  - Pattern.get_dither(), Pattern.set_dither(), Dither</changelog>
  <changelog author="dmueller@suse.com" date="1711108800">- update to 1.26.0:
  * Bump minimum required meson version from 0.56.0 to 0.64.0
  * Various meson related cleanups :pr:`350`
  * Fix header file being installed to the wrong location with
    meson on some systems :pr:`350`
  * Adds a new ``wheel`` meson build option as preparation for
    meson-python support :pr:`350` :pr:`345`
  * Update dependencies (libpng, pixman, zlib) of the Windows
    wheels :pr:`358`
  * Various maintenance related updates :pr:`360` :pr:`359`
    :pr:`361` :pr:`362`</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1722254400">- Update to 1.26.1
  * Fix Surface.set_mime_data() with Python 3.13 :pr:`366`
    This also fixes the test suite with Python 3.13b2.
  * Update vendored Windows wheel dependencies :pr:`370`</changelog>
</package>
<package pkgid="d010e4b0e60d643620a1513ba379dd994b55d5230140e9e5a3172716a62838371ae894306bef3de30ea6af732d55ef668cb9daf9cc6d89088ee8ef2fadedd675" name="python313-pycparser" arch="noarch">
  <version epoch="0" ver="2.22" rel="160000.2.2"/>
  <changelog author="jmatejek@suse.com" date="1490356800">- sort out duplicate rpmlintrc</changelog>
  <changelog author="tbechtold@suse.com" date="1499860800">- update to 2.18:
  - PR #161 &amp; #184: Update bundled PLY version to 3.10
  - PR #158: Add support for the __int128 type.
  - PR #169: Handle more tricky TYPEID in declarators.
  - PR #178: Add columns to the coord of each node</changelog>
  <changelog author="toddrme2178@gmail.com" date="1537790400">- Update to 2.19
  - PR #277: Fix parsing of floating point literals
  - PR #254: Add support for parsing empty structs
  - PR #240: Fix enum formatting in generated C code (also #216)
  - PR #222: Add support for #pragma in struct declarations
- Rebase fix-lexer-build.patch</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jbrownell@suse.com" date="1547035200">- Restrict pattern matching to real files (not symlinks) during packaging
  of fake_libc_include to avoid build errors on Red Hat platforms.
  * fix-lexer-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1583755200">- update to 2.20:
  - #61: Fix slow backtracking when parsing strings.
  - #99: Parser for FuncDecl incorrectly sets declname attribute on return type.
  - #310: Fix crash when file starts with a semicolon.
  - #313: Fix array type generation.
  - #314: Fix failed parsing of unnamed function parameters with array dim
    qualifiers.
  - #315: Fix pointer type generation.
  - #324: Fixes for u/l constant integer suffix.
  - #346: Fix error transforming an empty switch.
  - #350: Recognize integer multicharacter constants like 'ABCD'.
  - #363: Fix incorrect AST when parsing offsetof.</changelog>
  <changelog author="dmueller@suse.com" date="1638187200">- update to 2.21:
  - Much improved support for C11 (multiple PRs)
  - Support for parehthesized compount statements (#423)
  - Support for modern Python versions (3.9 and 3.10)
  - Fix support for structs with nested enums (#387)
  - Multiple small bug fixes</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1713700800">- update to 2.22:
  * Add missing SCHAR limit defines
  * Use proper SPDX identifier
  * Add Python 3.11 as a supported version
  * Fix multi-pragma/single statement blocks (#479)
  * Add an encoding parameter to parse_file
  * Feature/add pragma support
  * Set up permissions to ci.yml
  * _build_tables: Invalidate cache before importing generated modules
  * Upgrade GitHub Actions
  * Create a Security Policy
  * New example to generate AST from scratch
  * Add support for Python 3.12
  * ply: Make generated lextab.py deterministic
- drop fix-lexer-build.patch (upstream)</changelog>
</package>
<package pkgid="418253d99596e577c3259ea075ec28dbcaf9df00ac76f61e9e9be66f228b35804ff5931821ab6fb3334e2141f5a3cf12917232be1ac1cdac27b56f1ad2ea40ab" name="python313-pyinotify" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="160000.2.2"/>
  <changelog author="p.drouand@gmail.com" date="1358078400">- Update to 0.9.4 version
- Cleanup spec file</changelog>
  <changelog author="p.drouand@gmail.com" date="1358078401">- Initial python3 support</changelog>
  <changelog author="saschpe@suse.de" date="1358510400">- Avoid using github source link to please factory-auto</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 0.9.5:
  * no changelog available
- point the source URL to pypi
- remove unwanted shebang in pyinotify.py</changelog>
  <changelog author="dmueller@suse.com" date="1451908800">- update to 0.9.6:
  * fixes for sysctl compatibility issues</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="pgajdos@suse.com" date="1589976000">- %python3_only -&gt; %python_alternative</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="f4b4755d7fd648fb62daf8a10823e49d6a97e2bf3a83d444c49d51d1537264906613641c7d7edc0be32b4f1df8be9bb70021bc8a7ad6e29e1ab679932b10f36a" name="python313-pyparsing" arch="noarch">
  <version epoch="0" ver="3.2.3" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mmachova@suse.com" date="1688212800">- update to 3.1.0
  * API ENHANCEMENT: `Optional(expr)` may now be written as `expr | ""`
  * Added new class property `identifier` to all Unicode set classes in
    `pyparsing.unicode`, using the class's values for `cls.identchars`
    and `cls.identbodychars`.
  * ParseResults` now has a new method `deepcopy()`, in addition to the
    current `copy()` method.
  * Reworked `delimited_list` function into the new `DelimitedList` class.
  * Added new class method `ParserElement.using_each`
  * Added new builtin `python_quoted_string`, which will match any form
    of single-line or multiline quoted strings defined in Python.
  * `ParserElement.validate()` is deprecated.
  * Added bool `embed` argument to `ParserElement.create_diagram()`.
  * Added support for Python 3.12.
  * Updated `create_diagram()` code to be compatible with
    railroad-diagrams package version 3.0.
  * Many other changes, see upstream CHANGES</changelog>
  <changelog author="mmachova@suse.com" date="1689076800">- Add upstream patch limit-error-messages.patch as a part of
  a workaround for boo#1213007</changelog>
  <changelog author="dmueller@suse.com" date="1701432000">- update to 3.1.1:
  * Fixed regression in Word(min), reported by Ricardo Coccioli,
    good catch!
  * Fixed bug in bad exception messages raised by Forward
  * Fixed regression in SkipTo, where ignored expressions were
    not checked when looking for the target expression.
  * Fixed type annotation for enable_packrat
  * Some general internal code cleanup
- drop limit-error-messages.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use newly supported shrink{} on OBS to exclude python flavors
  will all python versions skipped.</changelog>
  <changelog author="dmueller@suse.com" date="1710590400">- update to 3.1.2:
  * Added `ieee_float` expression to `pyparsing.common`, which
    parses float values, plus "NaN", "Inf", "Infinity".
  * Updated pep8 synonym wrappers for better type checking
    compatibility.
  * Fixed empty error message bug, PR submitted by InSync (#534).
    This _should_ return
    pyparsing's exception messages to a former, more helpful
    form. If you have code that
    parses the exception messages returned by pyparsing, this
    may require some code changes.
  * Some code refactoring to reduce code nesting, PRs submitted
    by InSync.
  * All internal string expressions using '%' string
    interpolation and `str.format()` converted to f-strings.</changelog>
  <changelog author="dmueller@suse.com" date="1725105600">- update to 3.1.4:
  * Fix to type annotation that referenced `re.Pattern`. Since
    this type was introduced in Python 3.7, using this type
    definition broke Python 3.6 installs of pyparsing.
  * Added new `Tag` ParserElement, for inserting metadata into
    the parsed results.
    This allows a parser to add metadata or annotations to the
    parsed tokens.
  * The `Tag` element also accepts an optional `value`
    parameter, defaulting to `True`.
    See the new `tag_metadata.py` example in the `examples`
    directory.
  * Fixed issue where PEP8 compatibility names for
    `ParserElement` static methods were
    not themselves defined as `staticmethods`. When called
    using a `ParserElement` instance, this resulted  in a
  `TypeError` exception.
  * To address a compatibility issue in RDFLib, added a property
    setter for the `ParserElement.name` property, to call
    `ParserElement.set_name`.
  * Modified `ParserElement.set_name()` to accept a None value,
    to clear the defined name and corresponding error message for
    a `ParserElement`.
  * Updated railroad diagram generation for `ZeroOrMore` and
    `OneOrMore` expressions with `stop_on` expressions, while
    investigating #558
  * Added exception type to `trace_parse_action` exception
    output, while investigating SO question posted by medihack.
  * Added `set_name` calls to internal expressions generated in
    `infix_notation`, for improved railroad diagramming.
  * Fixed bug (and corresponding test code) in `delta_time`
    example that did not handle weekday references in time
    expressions
  * Minor performance speedup in `trim_arity`, to benefit any
    parsers using parse actions.
  * Added early testing support for Python 3.13 with JIT enabled.</changelog>
  <changelog author="dmueller@suse.com" date="1730116800">- update to 3.2.0:
  * Discontinued support for Python 3.6, 3.7, and 3.8. Adopted
    new Python features from Python versions 3.7-3.9:
  - Updated type annotations to use built-in container types
    instead of names imported from the `typing` module
    (e.g., `list[str]` vs `List[str]`).
  - Reworked portions of the packrat cache to leverage
    insertion-preserving ordering in dicts (including removal of
    uses of `OrderedDict`).
  - Changed `pdb.set_trace()` call in `ParserElement.set_break()`
    to `breakpoint()`.
  - Converted `typing.NamedTuple` to `dataclasses.dataclass`
    in railroad diagramming code.
  - Added `from __future__ import annotations` to clean up
    some type annotations.</changelog>
  <changelog author="dmueller@suse.com" date="1738670400">- update to 3.2.1:
  * Updated generated railroad diagrams to make non-terminal
    elements links to their related sub-diagrams. This _greatly_
    improves navigation of the diagram, especially for
    large, complex parsers.
  * Simplified railroad diagrams emitted for parsers using
    `infix_notation`, by hiding lookahead terms. Renamed
    internally generated expressions for clarity, and improved
    diagramming.
  * Improved performance of `cpp_style_comment`,
    `c_style_comment`, `common.fnumber`
    and `common.ieee_float` Regex expressions.
  * Add missing type annotations to `match_only_at_col`,
    `replace_with`, `remove_quotes`, `with_attribute`, and
    `with_class`. Issue #585 reported by rafrafrek.</changelog>
  <changelog author="dmueller@suse.com" date="1744286400">- update to 3.2.3:
  * Fixed bug released in 3.2.2 in which `nested_expr` could
    overwrite parse actions for defined content, and could truncate
    list of items within a nested list.
  * Released `cvt_pyparsing_pep8_names.py` conversion utility to
    upgrade pyparsing-based programs and libraries that use legacy
    camelCase names to use the new PEP8-compliant
    snake_case method names.
  * Fixed bug in `nested_expr` where nested contents were
    stripped of whitespace when the default whitespace characters
    were cleared
  * Fixed bug in `rest_of_line` and the underlying `Regex` class,
    in which matching a pattern that could match an empty string
    (such as `".*"` or `"[A-Z]*"` would not raise
    a `ParseException` at or beyond the end of the input
    string. This could cause an
    infinite parsing loop when parsing `rest_of_line` at the
    end of the input string.
  * Fixed syntax warning raised in `bigquery_view_parser.py`,
    invalid escape sequence "\s".
  * Added support for Python 3.14.</changelog>
</package>
<package pkgid="146e1cdc4f34f13cb909b1d29e6451605d0ad2952e80f2613bed4c5084573e289cad8b2ffd67623acbd72dd54cc31ca67635e4aedad0ae207713d44dee304e9e" name="python313-pyserial" arch="noarch">
  <version epoch="0" ver="3.5" rel="160000.2.2"/>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1555329600">- Remove unnecessary Windows and OSX modules from runtime package
- Remove Mono and Java CLI modules from runtime package
- Activate test suite
- Fix fdupes, hashbangs and executable bits
- Remove non-break-space in python-pyserial.changes with normal space</changelog>
  <changelog author="adrian@suse.de" date="1611144000">- update to version 3.5:
  New Features:
  [#411] Add a backend for Silicon Labs CP2110/4 HID-to-UART bridge. (depends on hid module)
  Improvements:
  [#315] Use absolute import everywhere
  [#354] Make ListPortInfo hashable
  [#372] threaded: "write" returns byte count
  [#400] Add bytesize and stopbits argument parser to tcp_serial_redirect
  [#408] loop: add out_waiting
  [#495] list_ports_linux: Correct "interface" property on Linux hosts
  [#500] Remove Python 3.2 and 3.3 from test
  [#261, #285, #296, #320, #333, #342, #356, #358, #389, #397, #510] doc updates
  miniterm: add CTRL+T Q as alternative to exit
  miniterm: suspend function key changed to CTRL-T Z
  add command line tool entries pyserial-miniterm (replaces miniterm.py) and pyserial-ports (runs serial.tools.list_ports).
  python -m serial opens miniterm (use w/o args and it will print port list too) [experimental]
  Bugfixes:
  [#371] Don't open port if self.port is not set while entering context manager
  [#437, #502] refactor: raise new instances for PortNotOpenError and SerialTimeoutException
  [#261, #263] list_ports: set default name attribute
  [#286] fix: compare only of the same type in list_ports_common.ListPortInfo
  rfc2217/close(): fix race-condition
  [#305] return b'' when connection closes on rfc2217 connection
  [#386] rfc2217/close(): fix race condition
  Fixed flush_input_buffer() for situations where the remote end has closed the socket.
  [#441] reset_input_buffer() can hang on sockets
  examples: port_publisher python 3 fixes
  [#324] miniterm: Fix miniterm constructor exit_character and menu_character
  [#326] miniterm: use exclusive access for native serial ports by default
  [#497] miniterm: fix double use of CTRL-T + s use z for suspend instead
  [#443, #444] examples: refactor wx example, use Bind to avoid deprecated warnings, IsChecked, unichr
  [#265] posix: fix PosixPollSerial with timeout=None and add cancel support
  [#290] option for low latency mode on linux
  [#335] Add support to xr-usb-serial ports
  [#494] posix: Don't catch the SerialException we just raised
  [#519] posix: Fix custom baud rate to not temporarily set 38400 baud rates on linux
  [#509 #518] list_ports: use hardcoded path to library on osx
  [#542] list_ports_osx: kIOMasterPortDefault no longer exported on Big Sur
  [#545, #545] list_ports_osx: getting USB info on BigSur/AppleSilicon</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1722254400">- Cherry-pick upstream patch to fix tests with Python 3.13
  * replace-deprecated-unittest-function.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1727179200">- Fix build error under Leap.</changelog>
  <changelog author="nico.krapp@suse.com" date="1736942400">- Use libalternatives instead of update-alternatives, bsc#1235782</changelog>
  <changelog author="nico.krapp@suse.com" date="1737115200">- fix alternatives</changelog>
</package>
<package pkgid="abf741d347c927693d013f9f26d6e1a9149d606b906c3a1e497d3306f51b019eac6d06bf34b88ff7f9b7daddaef3c6b0843c0f42df9ae8bf89985a0c8dc5aa82" name="python313-pyudev" arch="noarch">
  <version epoch="0" ver="0.24.3" rel="160000.2.2"/>
  <changelog author="mcepl@cepl.eu" date="1642334400">- Update to version 0.22.0+git.1642212208.d5630bf (bsc#1194613):
  * Remove another flakey test
  * Remove all traces of tox
  * Update next Fedora to 35
  * Delete a test which is probably flakey for real
  * Bump recommended development environment to fedora 34
  * Use yamllint on all the configuration files
  * Add annotations to GitHub workflows
  * No longer use --recursive for isort
  * Update formatting for new black
  * Establish a weekly task for future fedora
- Remove upstreamed patches:
  - remove_mock.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Don't add date to version for reproducible builds (boo#1047218)</changelog>
  <changelog author="mcepl@cepl.eu" date="1646913600">- Update to version 0.23.2+14:
  * Remove a bunch of python-2 only testing
  * Bump some Python versions
  * Get rid of six dependency
  * Drop all pylint tasks
  * Remove overly rigorous tests
  * Make a package target that uses build
  * Omit PyPy flakey test
  * Check whether the Context has a "_libudev" attribute
  * Remove setup.cfg
  * Remove obsolete egg_info parameter
  * Delete another flaky test
- Rebase hypothesis_settings.patch and pytest_register_mark.patch.
- Drop six (Build)?Requires.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1647518400">- Skip some unreliable tests.</changelog>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 0.24.0:
  * Remove six dependency
  * Drop pylint tasks
  * Support python 3.9 and 3.10</changelog>
  <changelog author="dmueller@suse.com" date="1665748800">- update hypothesis_settings.patch:
  * extend deadlines to handle qemu emulated arches better</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 0.24.1:
  * Recommended development release: Fedora 37
  * Add support for PySide6
  * Add missing 'priority' argument for GLib.to_add_watch()
  * Tidies and Maintenance fixes</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698667200">- update hypothesis_settings.patch:
  * Extend deadline for test_child_of_parents that fails on ppc64le (bsc#1216607)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1715774400">- Update to 0.24.3:
  * Tidies and Maintenance fixes
- Switch to pyproject macros.
- No more greedy globs in %files.
- Add patch support-pytest-8.patch:
  * Support pytest 8 changes.</changelog>
</package>
<package pkgid="085210fe798edde3b823ae6e7554552c0c02314d0c7872d5b42637027ed0b3b60c4dbac18a61577cf3a997d3488f29dabb4bc52af85240409c04bb28d02d5f75" name="python313-pyzmq" arch="x86_64">
  <version epoch="0" ver="25.1.2" rel="160000.2.2"/>
  <changelog author="arun@gmx.de" date="1660737600">- update to version 23.2.1:
  * Improvements:
    + First release with wheels for Python 3.11 (thanks
    cibuildwheel!).
    + linux aarch64 wheels now bundle the same libzmq (4.3.4) as all
    other builds, thanks to switching to native arm builds on
    CircleCI.
  * Fixes:
    + Some type annotation fixes in devices.</changelog>
  <changelog author="arun@gmx.de" date="1663416000">- update to version 24.0.0:
  * Breaking changes:
    + Due to a libzmq bug causing unavoidable crashes for some users,
    Windows wheels no longer bundle libzmq with AF_UNIX support. In
    order to enable AF_UNIX on Windows, pyzmq must be built from
    source, linking an appropriate build of libzmq
    (e.g. libzmq-v142). AF_UNIX support will be re-enabled in pyzmq
    wheels when libzmq published fixed releases.
    + Using a {class}zmq.Context as a context manager or deleting a
    context without closing it now calls {meth}zmq.Context.destroy
    at exit instead of {meth}zmq.Context.term. This will have little
    effect on most users, but changes what happens when user bugs
    result in a context being implicitly destroyed while sockets are
    left open. In almost all cases, this will turn what used to be a
    hang into a warning. However, there may be some cases where
    sockets are actively used in threads, which could result in a
    crash. To use sockets across threads, it is critical to properly
    and explicitly close your contexts and sockets, which will
    always avoid this issue.</changelog>
  <changelog author="arun@gmx.de" date="1664107200">- update to version 24.0.1:
  * Fix several possible resource warnings and deprecation warnings
    when cleaning up contexts and sockets, especially in pyzmq's own
    tests and when implicit teardown of objects is happening during
    process teardown.</changelog>
  <changelog author="pmonreal@suse.com" date="1667995200">- Fix build with OpenSSL 3.0 [bsc#1205042]
  * Temporarily disable test_on_recv_basic</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- skip numy tests for the testsuite on SLE15</changelog>
  <changelog author="mmachova@suse.com" date="1683892800">- Update to version 25.0.2
  * Bundled subset of tornado's IOLoop (deprecated since pyzmq 17) is removed,
    so ZMQStream cannot be used without an actual install of tornado.
  * Remove support for tornado 4.
  * Added `socket_class` argument to zmq.Context.socket
  * Support shadowing sockets with socket objects.
  * In zmq.auth and zmq.eventloop.zmqstream callbacks may now be async.
  * License files have been renamed to more standard LICENSE.BSD, LICENSE.LESSER
    to appease some license auto-detect tools.</changelog>
  <changelog author="arun@gmx.de" date="1689163200">- update to version 25.1.0:
  * Enhancements:
    + Include address in error message when bind/connect fail.
  * Packaging changes:
    + Fix inclusion of some test files in source distributions.
    + Add Cython as a build-time dependency in build-system.requires
    metadata, following current recommendations of the Cython
    maintainers. We still ship generated Cython sources in source
    distributions, so it is not a strict dependency for packagers
    using --no-build-isolation, but pip will install Cython as part
    of building pyzmq from source. This makes it more likely that
    past pyzmq releases will install on future Python releases,
    which often require an update to Cython but not pyzmq
    itself. For Python 3.12, Cython &gt;=3.0.0b3 is required.</changelog>
  <changelog author="arun@gmx.de" date="1691668800">- update to version 25.1.1:
  * Changes:
    + Allow Cython 0.29.35 to build Python 3.12 wheels (no longer
    require Cython 3)
  * Bugs fixed:
    + Fix builds on Solaris by including generated platform.hpp
    + Cleanup futures in Socket.poll() that are cancelled and never
    return
    + Fix builds with -j when numpy is present in the build env</changelog>
  <changelog author="dmueller@suse.com" date="1704456000">- update to 25.1.2:
  * Fix builds with some recent compilers and bundled libzmq
  * Fix builds with upcoming Cython 3.1</changelog>
  <changelog author="ecsos@opensuse.org" date="1711627200">- Add %{?sle15_python_module_pythons}</changelog>
</package>
<package pkgid="7bf4f5a04ba89c21d377f487e2cb2fed2433f6635f74a1ca93c73e3ba5e114377c4f97b3ce9d49a4378a58c9a333b250538fdffb5d0ea4f82ddd70981aec2a1b" name="python313-referencing" arch="noarch">
  <version epoch="0" ver="0.36.2" rel="160000.2.2"/>
  <changelog author="kastl@b1-systems.de" date="1701345600">- Update to version 0.31.1:
  * Do more silly things to pepper over type checking nonsense.
  * Minor noxfile tweaking.
  * Add the explicit Tidelift link.
  * Complain about spurious type: ignores.
  * [pre-commit.ci] pre-commit autoupdate</changelog>
  <changelog author="kastl@b1-systems.de" date="1701950400">- Update to version 0.32.0:
  * Add Specification.detect.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1704628800">- Update to version 0.32.1:
  * We CannotDetermineSpecification for $schema kyes that aren't
    strs
  * [pre-commit.ci] pre-commit autoupdate
  * Update requirements.
  * Enable more ruff rulesets.
  * Remove an unneeded doc ext, we have no CLI.
  * [pre-commit.ci] pre-commit autoupdate
  * Bump actions/setup-python from 4 to 5
  * Update pre-commit hooks.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1706529600">- Update to version 0.33.0:
  * Add a referencing.jsonschema.SchemaResource type alias to go
    along with the other JSON Schema specialized types.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1710590400">- Update to version 0.34.0:
  * Also look inside definitions keywords even on newer dialects.
    The specification recommends doing so regardless of the rename
    to $defs.
  * Ensure non-blocking mypy compatibility by @jamescw19 in #130</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1713960000">- Update to version 0.35.0:
  * Make Registry.contents raise NoSuchResource when needed.
  * Update pre-commit hooks.
  * Run coverage with 3.12
  * Try convincing RTD to use uv.
  * uv and minor workflow tweaks
  * Use uv for envs, particularly the requirements env.
  * [pre-commit.ci] pre-commit autoupdate
  * Whatever pyright regression was present is still present.
  * [pre-commit.ci] pre-commit autoupdate
  * Bump suite from `71c85d0` to `87851a6`
  * Bump suite from `d3fdf35` to `71c85d0`
  * Bump suite from `e3fe0aa` to `d3fdf35`</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1714651200">- Update to version 0.35.1:
  * Make Resource.pointer also properly handle empty pointers
    (which refer to the root document).
    This fix likely only affects you if you were using that
    function directly, as Resource.lookup already handles empty
    fragments.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737115200">- Update to version 0.36.0:
  * Declare support for Python 3.13.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737115201">- Update to version 0.36.1:
  * Add a lower pin on typing-extensions for the version we depend
    on.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737806400">- Update to version 0.36.2:
  * Release using the newer twine release to preserve PEP 639
    license metadata.</changelog>
</package>
<package pkgid="4aa9ac1ba85dfaa6d23636c4cbf16b94ed5fb07ff47ac8b212f8e36673fa10401383cd7d21dfa3ddbb0c76e7e289240d9d0fa57c72a2965206b799fb8e200a48" name="python313-requests" arch="noarch">
  <version epoch="0" ver="2.32.4" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli (same as urllib3)</changelog>
  <changelog author="mmachova@suse.com" date="1716292800">- Update to 2.32.1
  * Fixed an issue where setting verify=False on the first request from a Session
    will cause subsequent requests to the same origin to also ignore cert verification,
    regardless of the value of verify. (bsc#1224788, CVE-2024-35195)
  * verify=True now reuses a global SSLContext which should improve request time
    variance between first and subsequent requests.
  * Requests now supports optional use of character detection (chardet or charset_normalizer)
    when repackaged or vendored. This enables pip and other projects to minimize their
    vendoring surface area.
  * Requests has officially added support for CPython 3.12 and dropped support for CPython 3.7.
  * Starting in Requests 2.33.0, Requests will migrate to a PEP 517 build system using hatchling.</changelog>
  <changelog author="mmachova@suse.com" date="1716379200">- Update to 2.32.2
  * To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0,
    we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing
    custom HTTPAdapters will need to migrate their code to use this new API. get_connection is
    considered deprecated in all versions of Requests&gt;=2.32.0.</changelog>
  <changelog author="dmueller@suse.com" date="1717675200">- update to 2.32.3:
  * Fixed bug breaking the ability to specify custom SSLContexts
    in sub-classes of HTTPAdapter.
  * Fixed issue where Requests started failing to run on Python
    versions compiled without the `ssl` module.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1724932800">- Remove Requires on python-py, it should have been removed earlier.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1729166400">- Add patch inject-default-ca-bundles.patch:
  * Inject the default CA bundles if they are not specified.
    (bsc#1226321, bsc#1231500)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1729771200">- Switch to pyproject macros.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1749124800">- Add CVE-2024-47081.patch upstream patch, fixes netrc credential leak
  (gh#psf/requests#6965, CVE-2024-47081, bsc#1244039)</changelog>
  <changelog author="dmueller@suse.com" date="1749556800">- update to 2.32.4:
  * CVE-2024-47081 Fixed an issue where a maliciously crafted URL
    and trusted environment will retrieve credentials for the wrong
    hostname/machine from a netrc file
  * Numerous documentation improvements
  * Added support for pypy 3.11 for Linux and macOS.
  * Dropped support for pypy 3.9 following its end of support.
- drop CVE-2024-47081.patch (merged upstream)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1752494400">- Add revert-caching-default-sslcontext.patch upstream patch to avoid
  problems with certificate caching in sslcontext.
  bsc#1246104, gh#psf/requests#6767</changelog>
</package>
<package pkgid="563af43195031b92e51dec90bdc134948f84f0e7b0cdc87adf356c31215a73d22d491dba5f410cd1bdf354aa20d5b231b840e7ab8a16186b14b5e7ed3ca4c408" name="python313-rich" arch="noarch">
  <version epoch="0" ver="14.0.0" rel="160000.2.2"/>
  <changelog author="arun@gmx.de" date="1688817600">- specfile:
  * update copyright year
- update to version 13.4.2:
  * Changed
    + Relaxed markdown-it-py dependency</changelog>
  <changelog author="ecsos@opensuse.org" date="1689768000">- %{?sle15_python_module_pythons} mut be at beginning to work.</changelog>
  <changelog author="arun@gmx.de" date="1693137600">- specfile:
  * update copyright year
- update to version 13.5.2:
  * Fixed
    + Fixed Text.expand_tab assertion error
- changes from version 13.5.1:
  * Fixed
    + Fix tilde character (~) not included in link regex when printing
    to console #3057
- changes from version 13.5.0:
  * Fixed
    + Fixed Text.expand_tabs not expanding spans.
    + Fixed TimeElapsedColumn from showing negative.
    + Fix for escaping strings with a trailing backslash #2987
    + Fixed exception in Markdown with partial table #3053
    + Fixed the HTML export template so that the &lt;html&gt; tag comes
    before the &lt;head&gt; tag #3021
    + Fixed issue with custom classes overwriting __eq__ #2875
    + Fix rich.pretty.install breakage in iPython #3013
  * Added
    + Added Text.extend_style method.
    + Added Span.extend method.
  * Changed
    + Text.tab_size now defaults to None to indicate that
    Console.tab_size should be used.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1700136000">- update to version 13.7.0:
  * Added
    + Adds missing parameters to Panel.fit #3142
  + Fixed
    + Some text goes missing during wrapping when it contains
    double width characters #3176
    + Ensure font is correctly inherited in exported HTML #3104
    + Fixed typing for FloatPrompt.
- additional changes from 13.6.0:
  * Added Python 3.12 to classifiers.
- additional changes from 13.5.3:
  * Fixed
    + Markdown table rendering issue with inline styles and links
    [#3115]
    + Fix Markdown code blocks on a light background #3123</changelog>
  <changelog author="dmueller@suse.com" date="1710590400">- update to 13.7.1:
  * Fixes some character widths</changelog>
  <changelog author="dmueller@suse.com" date="1732104000">- update to 13.9.4:
  * Optimizations to cell_len which may speed up Rich / Textual
    output https://github.com/Textualize/rich/pull/3546
- update to 13.9.3:
  * Fix a broken regex that resulted in the slow path being
    chosen for some operations. This fix should result in notable
    speedups for some operations, such as wrapping text.
  * Fixed broken regex that may have resulted in poor
    performance. https://github.com/Textualize/rich/pull/3535
- update to 13.9.2:
  * A hotfix for highlighting in the table, and a fix for
    `Segment.split_cells`
  * Fixed `Table` columns not highlighting when added by
    `add_row` https://github.com/Textualize/rich/issues/3517
  * Fixed an issue with Segment.split_cells reported in Textual
    https://github.com/Textualize/textual/issues/5090
- update to 13.9.1:
  * Fixed typing_extensions dependency
- update to 13.9.0:
  * Dropped support for Python3.7
  * Rich will display tracebacks with finely grained error
    locations on python 3.11+
  * Fixed issue with Segment._split_cells
  * Fix auto detection of terminal size on Windows
  * `Text.style` now respected in Panel title/subtitle
- update to 13.8.1:
  * Added support for Python 3.13
  * Fixed infinite loop when appending Text to same instance
- update to 13.8.0:
  * Fixed `Table` rendering of box elements so "footer" elements
    truly appear at bottom of table, "mid" elements in main table
    body.
  * Fixed styles in Panel when Text objects are used for title
  * Fix pretty repr for `collections.deque`
  * Thread used in progress.track will exit if an exception
    occurs in a generator
  * Progress track thread is now a daemon thread
  * Fixed cached hash preservation upon clearing meta and links
  * Fixed overriding the `background_color` of `Syntax` not
    including padding
  * Fixed pretty printing of dataclasses with a default repr in
    Python 3.13
  * Fixed selective enabling of highlighting when disabled in the
    `Console`
  * Fixed BrokenPipeError writing an error message
  * Fixed superfluous space above Markdown tables
  * Fixed issue with record and capture interaction
  * Fixed control codes breaking in `append_tokens`
  * Fixed exception pretty printing a dataclass with missing
  * `RichHandler` errors and warnings will now use different
    colors (red and yellow)
  * Removed the empty line printed in jupyter while using
    `Progress`
  * Running tests in environment with `FORCE_COLOR` or `NO_COLOR`
    environment variables
  * ansi decoder will now strip problematic private escape
    sequences
  * Tree's ASCII_GUIDES and TREE_GUIDES constants promoted to
    class attributes
  * Adds a `case_sensitive` parameter to `prompt.Prompt`. This
    determines if the response is treated as case-sensitive.
  * Added `Console.on_broken_pipe`</changelog>
  <changelog author="steven.kowalik@suse.com" date="1733400000">- Switch to GitHub tarball so we can run the testsuite.
- Correct version guard for typing_extensions Requires.
- Drop Python 3.7 sections.</changelog>
  <changelog author="mmachova@suse.com" date="1737115200">- Add pygments.patch to fix tests with Pygments 2.19</changelog>
  <changelog author="mmachova@suse.com" date="1745323200">- Add test dependency on attrs</changelog>
  <changelog author="nico.krapp@suse.com" date="1748606400">- Update to 14.0.0
  * Added
  - Added env var TTY_COMPATIBLE to override auto-detection of TTY
    support (See console.rst for details). #3675
  * Changed
  - An empty NO_COLOR env var is now considered disabled. #3675
  - An empty FORCE_COLOR env var is now considered disabled. #3675
  - Rich tracebacks will now render notes on Python 3.11 onwards
    (added with Exception.add_note) #3676
  - Indentation in exceptions won't be underlined #3678
  - Rich tracebacks will now render Exception Groups #3677</changelog>
</package>
<package pkgid="a3aee54c993e0ae07c7de3b96bbc7809897ee6122e8d8210db470e344455cd9ffaf4e16e74a204e788ae0dedfd464bb0687ccb562e342aebdfe61f117d946547" name="python313-rpds-py" arch="x86_64">
  <version epoch="0" ver="0.22.3" rel="160000.2.2"/>
  <changelog author="kastl@b1-systems.de" date="1679313600">- new package python-rpds-py, needed as dependency for jsonschema</changelog>
  <changelog author="kastl@b1-systems.de" date="1683288000">- add sle15_python_module_pythons</changelog>
  <changelog author="adrian@suse.de" date="1733313600">- Update to version 0.21.0:
  * Release v0.21.0
  * Oh hello there zizmor.
  * Add a link to the upstream repo.
  * The packaging docs apparently discourage license.
  * bump pyO3 to 0.22.6
  * Update requirements.
  * Drop support for 3.8, which is EOL.
  * Bump to 0.20.1.
  * Set --profile=dev in tests to catch issues like #86.
  * Bump pyo3 from 0.22.3 to 0.22.5
  * Bump wntrblm/nox from 2024.04.15 to 2024.10.09
  * [pre-commit.ci] pre-commit autoupdate
  * Bump pyo3 from 0.22.2 to 0.22.3
  * Bump archery from 1.2.0 to 1.2.1
  * Fix hashing overflow issues
  * Tag a release.
  * Minor comment typo.
  * [pre-commit.ci] pre-commit autoupdate
  * Bump hynek/setup-cached-uv from 1 to 2
  * Tag a release.
  * Bump pyo3 from 0.22.1 to 0.22.2
  * Better result handling
  * Fix ruff configuration section
  * Fix styling
  * Turn on hashing tests for HashTrieMap
  * Remove hash error handling for elements in HashTrieSet
  * Implement __hash__ for HashTrieMap
  * Fix tests
  * Remove __hash__ for HashTrieMap
  * Fix testing
  * Re-implement __hash__ for unordered collections
  * Make Python versions in GitHub Actions consistent
  * Move to the v4 artifact actions.
  * Newer ruff + minor linter tweaks.
  * Let pre-commit.ci handle pre-commit.
  * uv in the noxfile and CI.
  * Add the 3.13 classifier.
  * Bump to 0.19.0
  * Update requirements.
  * Revise inline comments
  * Implement __hash__ for HashTrieMap
  * Add __hash__ to ListPy
  * Implement __hash__ for HashTrieSetPy
  * Update PyO3 from 0.22.0 to 0.22.1
  * Use #[derive(FromPyObject)] instead of manual impl
  * Remove redundant Python::wiht_gil calls
  * Add Python 3.13 to GitHub actions CI
  * Fix clippy warnings
  * Remove redundant Python::with_gil calls
  * Fix formatting
  * WIP
  * WIP
  * Bump pyo3 from 0.20.3 to 0.22.0
  * [pre-commit.ci] pre-commit autoupdate
  * deps: bump libc from 0.2.147 to 0.2.155
  * WIP
  * Tag a release for PyO3 0.20.3 support.
  * [pre-commit.ci] pre-commit autoupdate
  * Update requirements.
  * [pre-commit.ci] pre-commit autoupdate
  * Bump wntrblm/nox from 2024.03.02 to 2024.04.15
  * [pre-commit.ci] pre-commit autoupdate
  * [pre-commit.ci] pre-commit autoupdate
  * Bump softprops/action-gh-release from 1 to 2
  * Bump wntrblm/nox from 2023.04.22 to 2024.03.02
  * Bump archery from 1.1.0 to 1.2.0
  * Bump pyo3 from 0.20.2 to 0.20.3
  * I'm one person, not two.
  * [pre-commit.ci] pre-commit autoupdate
  * Type annotation and test for HashTrieMap.update.
  * [pre-commit.ci] pre-commit autoupdate
  * Bump pre-commit/action from 3.0.0 to 3.0.1
  * [pre-commit.ci] auto fixes from pre-commit.com hooks
  * [pre-commit.ci] pre-commit autoupdate
  * Implement Queue.__hash__.
  * Explicitly remind ourselves that dict.values != dict.values in the tests.
  * Yet again, same mistake.
  * Remove a non-doc dependency.
  * Reimplement view types for maps.
  * Start reworking the HashTrieMap methods that should return views.
  * And same for HashTrieMap.
  * And now an iterator for HashTrieSet.
  * Trim down the manual Py wrapping too.
  * Proper List + Queue iterators.
  * Bump pyo3 from 0.20.1 to 0.20.2
  * Bump pyo3 from 0.20.0 to 0.20.1
  * Type annotation for fromkeys.
  * Release v0.16.1
  * Add HashTrieMap.fromkeys with dict.fromkeys' signature.
  * [pre-commit.ci] pre-commit autoupdate
  * Fix the Queue type annotations.
  * Install cargo in RTD.
  * Release v0.15.0 for docs!
  * Still install the package obviously, and minor spelling and style fix.
  * Enable the rest of the ruff rulesets.
  * Simple docs.
  * Fix HashTrieMap.get to properly take 2 arguments.
  * Le type annotacions
  * Expose rpds.Queue.
  * [pre-commit.ci] pre-commit autoupdate
  * Bump actions/setup-python from 4 to 5
  * Update pre-commit hooks.
  * Fix HashTrieMap __repr__s, which need to repr() the key as well.
  * Add the explicit Tidelift link.
  * Release v0.13.1.
  * Fix `drop_first` method name for typing
  * Release v0.13.0
  * Configure Black in pyproject.toml
  * [pre-commit.ci] auto fixes from pre-commit.com hooks
  * Add pickle support
  * [pre-commit.ci] pre-commit autoupdate
  * Bump rpds from 1.0.1 to 1.1.0
  * That's what I get for copy/paste.
  * Skip Rust on pre-commit.ci which doesn't seem to have Rust installed.
  * Bump archery from 1.0.0 to 1.1.0
  * List.drop_front
  * Update for PyO3 0.20.0.
  * Update pre-commit hooks.
  * [pre-commit.ci] pre-commit autoupdate
  * Publish to PyPI using trusted publishing.
  * Try enabling sccache.
  * Build wheel for Windows on Python 3.12
  * Give up entirely for now.
  * Flail again for Windows.
  * There is apparently no --release argument for sdist.
  * Build an sdist in a separate explicit job.
  * Give up for  now. Let's get 3.12 working.
  * Take 3 on PyPy+Windows.
  * Try again to get PyPy 3.x versions on Windows.
  * Drop PyPy 3.8 which seems to fail.
  * Release v0.10.4
  * Try building wheels for more Windows interpreters as well.
  * Release v0.10.3
  * Update test dependencies.
  * Remove an unused test dependency on hypothesis
  * Bump rpds from 1.0.0 to 1.0.1
  * Bump actions/checkout from 3 to 4
  * Release v0.10.2
  * Update pre-commit hooks.
  * Enable clippy and fix what it complains about.
  * Update requirements.
  * Don't use nox.session.create_tmp.
  * Release 0.10.0.
  * Unused.
  * Bump rpds from 0.13.0 to 1.0.0
  * Bump pyo3 from 0.19.1 to 0.19.2
  * Add a security policy.
  * More correct listing of nox envs for the GitHub actions workflow
  * Bump archery from 0.5.0 to 1.0.0
  * Take 3, try using setup-python with multiple versions.
  * Try enabling pre-releases in the setup-python action.
  * Declare support for 3.12.
  * Link to rpds.
  * Update deps and bump the version.
  * Update target-lexicon to support loongarch64 architecture
  * Again forget to bump the version properly...
  * Try adding wheels for PyPy3.10 and CPython 3.12
  * Also build wheels for macOS 3.9 and others.
  * Add a note on installation instructions (and the need for rust).
  * One more wheel for aarch64.
  * Fix the needs list as well.
  * Let's see if this gets us MUSL wheels.
  * Fix the badge URLs.
  * Sigh and the lock too...
  * Actually bump the version to 0.8.3.
  * Add the missing Project URLs for PyPI
  * Add rpds to known_first_party for isort.
  * Bump to PyO3 v0.19
  * Bump pre-commit.
  * Bump wntrblm/nox from 2022.11.21 to 2023.04.22
  * Update pre-commit hooks.
  * Bump pyo3 from 0.18.2 to 0.18.3
  * Bump pyo3 from 0.18.1 to 0.18.2
  * Exclude bots from release notes.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737115200">- Update to version 0.22.0:
  * Bump to 0.22.0 for a free-threading-supported beta release.
  * Enable free-threaded wheel builds
  * [pre-commit.ci] pre-commit autoupdate
  * [pre-commit.ci] auto fixes from pre-commit.com hooks
  * revert changes to wheel-building config
  * work around CPython issue 127065
  * declare support for free-threading
  * [pre-commit.ci] pre-commit autoupdate
  * Bump pyo3 from 0.23.0 to 0.23.1
  * Build on all branches.
  * Skip zizmor in pre-commit.ci as well.
  * add 3.13t to CI config
  * point Cargo.toml at pyo3 0.23 on crates.io
  * update rpds.py for PyO3 0.23
  * [pre-commit.ci] pre-commit autoupdate
  * Bump the zizmor version.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737115201">- Update to version 0.22.1:
  * Tag a release for regaining all the Windows wheels.
  * ci: separate free-threaded and standard 3.13 distribution
    builds
  * Bump pyo3 from 0.23.1 to 0.23.2</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737115202">- Update to version 0.22.3:
  * Properly tag a release fixing the soundness issue.
  * Bump to PyO3 0.23.3, avoiding 0.23.x's previous soundness
    issues.
  * [pre-commit.ci] pre-commit autoupdate</changelog>
</package>
<package pkgid="35ba55b95cb18b9ab73ffdcf358c6ec485709899f1e86a717e982fbe194d6a93f0e1541bc89f02e92c04e1643573abbdeef94f60f8a4ad1f67b8051582624bd5" name="python313-rpm" arch="x86_64">
  <version epoch="0" ver="4.20.1" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1658404800">- update to rpm-4.17.1</changelog>
  <changelog author="mls@suse.de" date="1669982400">- update to rpm-4.18.0</changelog>
  <changelog author="jsrain@suse.com" date="1685448000">- add _multibuild for multiple .spec-files</changelog>
  <changelog author="mls@suse.de" date="1697025600">- update to rpm-4.19.1</changelog>
  <changelog author="mcepl@cepl.eu" date="1698667200">- Modernize python-rpm.spec to stop using deprecated macros
  (%python_build and %python_install).</changelog>
  <changelog author="dmueller@suse.com" date="1706788800">- buildrequire setuptools</changelog>
  <changelog author="mls@suse.de" date="1706788801">- Use cmake for compiling and installing the python modules
  * Drop python_setup.diff
  * Add cmake_python_version.diff</changelog>
  <changelog author="mls@suse.de" date="1707480000">- update to rpm-4.19.1.1</changelog>
  <changelog author="mls@suse.de" date="1734350400">- update to rpm-4.20.0</changelog>
  <changelog author="mls@suse.de" date="1741348800">- update to rpm-4.20.1</changelog>
</package>
<package pkgid="b9652cf1e11ad114e85f16fd2f6eef2ebf9949b8aea1d282bb83547a1226955e071a29e427fd7bf717afc5f766d8c1ecc535529a32c0e83ab86ff284c25a4f85" name="python313-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="160000.4.1"/>
  <changelog author="yeray.gutierrez@suse.com" date="1722600000">- Fix rich rule comparison in firewalld module (bsc#1222684)
- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Make auth.pam more robust with Salt Bundle and fix tests
- Fix performance of user.list_groups with many remote groups
- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Skip certain tests if necessary for some OSes and set flaky ones
- Add a timer to delete old env post update for venv-minion
- Several fixes for tests to avoid errors and failures in some OSes
- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Make "man" a recommended package instead of required
- Added:
  * provide-systemd-timer-unit.patch
  * make-logging-calls-lighter.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * improve-broken-events-catching-and-reporting.patch
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * several-fixes-for-tests-to-avoid-errors-and-failures.patch
  * fix-user.list_groups-omits-remote-groups.patch
  * some-more-small-tests-fixes-enhancements-661.patch
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch
  * firewalld-normalize-new-rich-rules-before-comparing-.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1727870400">- Fix failing x509 tests with OpenSSL &lt; 1.1
- Avoid explicit reading of /etc/salt/minion (bsc#1220357)
- Allow NamedLoaderContexts to be returned from loader
- Revert the change making reactor less blocking (bsc#1230322)
- Use --cachedir for extension_modules in salt-call (bsc#1226141)
- Prevent using SyncWrapper with no reason
- Fix the SELinux context for Salt Minion service (bsc#1219041)
- Set contextvars as a build requirement for package
- Increase warn_until_date date for code we still support
- The test_debian test now uses port 80 for ubuntu keyserver
- Fix too frequent systemd service restart in test_system test
- Avoid crash on wrong output of systemctl version (bsc#1229539)
- Improve error handling with different OpenSSL versions
- Remove redundant run_func from salt.master.MWorker._handle_aes
- Fix cloud minion configuration for multiple masters (bsc#1229109)
- Use Pygit2 id instead of deprecated oid in gitfs
- Fix few failing tests to work with both Salt and Salt bundle
- Skip testing unsupported OpenSSL crypto algorithms
- Added:
  * skip-more-tests-related-to-old-openssl-algorithms.patch
  * fix-the-selinux-context-for-salt-minion-service-bsc-.patch
  * allow-namedloadercontexts-to-be-returned-from-loader.patch
  * join-masters-if-it-is-a-list-671.patch
  * remove-redundant-run_func-from-salt.master.mworker._.patch
  * prevent-using-syncwrapper-with-no-reason.patch
  * fix-test_debian-to-work-in-our-infrastructure-676.patch
  * fix-x509-test-fails-on-old-openssl-systems-682.patch
  * make-tests-compatible-with-venv-bundle.patch
  * avoid-crash-on-wrong-output-of-systemctl-version-bsc.patch
  * revert-the-change-making-reactor-less-blocking-bsc-1.patch
  * avoid-explicit-reading-of-etc-salt-minion-bsc-122035.patch
  * improve-error-handling-with-different-openssl-versio.patch
  * replace-use-of-pygit2-deprecated-and-removed-1.15.0-.patch
  * fix-test_system-flaky-setup_teardown-fn.patch
  * use-cachedir-for-extension_modules-in-salt-call-bsc-.patch
  * fix-deprecated-code-677.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1742385600">- Fix aptpkg 'NoneType object has no attribute split' error
- Detect openEuler as RedHat family OS
- Ensure the correct crypt module is loaded
- Implement multiple inventory for ansible.targets
- Make x509 module compatible with M2Crypto 0.44.0
- Remove deprecated code from x509.certificate_managed test mode
- Move logrotate config to /usr/etc/logrotate.d where possible
- Add DEB822 apt repository format support
- Make Salt-SSH work with all SSH passwords (bsc#1215484)
- Fix issue of using update-alternatives with alts (#105)
- Fix virt_query outputter and add support for block devices
- Make _auth calls visible with master stats
- Repair mount.fstab_present always returning pending changes
- Set virtual grain in Podman systemd container
- Fix crash due wrong client reference on `SaltMakoTemplateLookup`
- Enhace batch async and fix some detected issues
- Enhacement of Salt packaging
  * Use update-alternatives for all salt scripts
  * Use flexible dependencies for the subpackages
  * Make salt-minion to require flavored zypp-plugin
  * Make zyppnotify to use update-alternatives
  * Drop unused yumnotify plugin
  * Add dependency to python3-dnf-plugins-core for RHEL based
- Fix tests failures after "repo.saltproject.io" deprecation
- Fix error to stat '/root/.gitconfig' on gitfs
  (bsc#1230944) (bsc#1234881) (bsc#1220905)
- Adapt to removal of hex attribute in pygit2 v1.15.0 (bsc#1230642)
- Enhance smart JSON parsing when garbage is present (bsc#1231605)
- Fix virtual grains for VMs running on Nutanix AHV (bsc#1234022)
- Fix issues running on Python 3.12 and 3.13
- Revert setting SELinux context for minion service (bsc#1233667)
- Remove System V init support
  * Make systemd the only supported init system by removing System V init
  and insserv references
  * Ensure package builds with no init system dependencies if built
  without systemd (for example for use in containers)
  * Apply some spec-cleaner suggestions (update copyright year, sort
  requirements, adjust spacing)
- Fix the condition of alternatives for Tumbleweed and Leap 16
- Use update-alternatives for salt-call and fix builing on EL8
- Build all python bindings for all flavors
- Make minion reconnecting on changing master IP (bsc#1228182)
- Handle logger exception when flushing already closed file
- Include passlib as a recommended dependency
- Make Salt Bundle more tolerant to long running jobs (bsc#1228690)
- Fix additional x509 tests and test_suse tests for SLE12
- Added:
  * fix-deb822-nonetype-object-has-no-attribute-split-71.patch
  * detect-openeuler-as-redhat-family-os.patch
  * ensure-the-correct-crypt-module-is-loaded.patch
  * implement-multiple-inventory-for-ansible.targets.patch
  * make-x509-module-compatible-with-m2crypto-0.44.0.patch
  * remove-deprecated-code-from-x509.certificate_managed.patch
  * add-deb822-apt-source-format-support-692.patch
  * remove-password-from-shell-after-functional-text-mat.patch
  * repair-virt_query-outputter-655.patch
  * make-_auth-calls-visible-with-master-stats-696.patch
  * repair-fstab_present-test-mode-702.patch
  * set-virtual-grain-in-podman-systemd-container-703.patch
  * fixed-file-client-private-attribute-reference-on-sal.patch
  * backport-batch-async-fixes-and-improvements-701.patch
  * fix-tests-failures-after-repo.saltproject.io-depreca.patch
  * fix-failed-to-stat-root-.gitconfig-issue-on-gitfs-bs.patch
  * update-for-deprecation-of-hex-in-pygit2-1.15.0-and-a.patch
  * enhance-find_json-garbage-filtering-bsc-1231605-688.patch
  * fix-virtual-grains-for-vms-running-on-nutanix-ahv-bs.patch
  * fix-issues-that-break-salt-in-python-3.12-and-3.13-6.patch
  * revert-setting-selinux-context-for-minion-service-bs.patch
  * make-minion-reconnecting-on-changing-master-ip-bsc-1.patch
  * handle-logger-flushing-already-closed-file-686.patch
  * enhance-cleanup-mechanism-after-salt-bundle-upgrade-.patch
  * fix-x509-private-key-tests-and-test_suse-on-sle12-68.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1751371200">- Prevent tests failures when pygit2 is not present
- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Fix Ubuntu 24.04 edge-case test failures
- Fix broken tests for Ubuntu 24.04
- Fix refresh of osrelease and related grains on Python 3.10+
- Make "salt" package to obsolete "python3-salt" package on SLE15SP7+
- Fix issue requiring proper Python flavor for dependencies and recommended package
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch
  * several-fixes-for-security-issues.patch
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch
  * fix-ubuntu-24.04-specific-failures-716.patch
  * fix-debian-tests-715.patch
  * fix-refresh-of-osrelease-and-related-grains-on-pytho.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762344000">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)
- Use versioned python interpreter for salt-ssh
- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Set python-CherryPy as required for python-salt-testsuite (#115)
- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- This reverts commit aa40615dcf7a15325ef71bbc09a5423ce512491d.
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch
  * use-versioned-python-interpreter-for-salt-ssh.patch
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Builds with py &gt;=3.13 require python-legacy-cgi
- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="alexander.graul@suse.com" date="1764158400">- Add minimum_auth_version to enforce security (CVE-2025-62349)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- Junos module yaml loader fix (CVE-2025-62348)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Extend warn_until period to 2027
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
</package>
<package pkgid="421c940a77f54ecb6604b993e4a45d42a4f3440c8575b603052a5fa2eac301ebcaee783fda77523d96cd908930d7bb7541d616db8d32a16e8316bb7f84486cfb" name="python313-selinux" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="kastl@b1-systems.de" date="1685620800">- allow building this with different python versions, to make this
  usable for the new sle15 macro (using python3.11)</changelog>
  <changelog author="jsegitz@suse.com" date="1687262400">- Add explicit BuildRequires for python3-pip and python3-wheel on
  15.5, currently the macros don't do the right thing</changelog>
  <changelog author="mcepl@suse.com" date="1691150400">- (bsc#1212618) Divide libselinux and libselinux-bindings again.
  libselinux itself is in Ring0 so it has to have absolutely
  minimal dependencies, so it is better to separate
  libselinux-bindings into a separate pacakge.</changelog>
  <changelog author="cathy.hu@suse.com" date="1701345600">- Also build python3-selinux for toolchain compability on SLE</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * libselinux: performance optimization for duplicate detection
  * Introduce getpolicyload - a helper binary to print the number of policy reloads on the running system
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="code@bnavigator.de" date="1704283200">- The PEP517 python build requires setuptools</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes
  * libselinux/utils/selabel_digest: drop unsupported option -d
  * libselinux/utils: improve compute_av output
  * libselinux: fail selabel_open(3) on invalid option
  * Improved man pages
  * Improvements
  * libselinux, libsepol: Add CFLAGS and LDFLAGS to Makefile checks
  * libselinux: enable usage with pedantic UB sanitizers
  * libselinux: support huge passwd/group entries
  * Bugfixes:
  * libselinux/utils/selabel_digest: avoid buffer overflow
  * libselinux: avoid pointer dereference before check
  * libselinux/utils/selabel_digest: pass BASEONLY only for file backend
  * libselinux: free empty scandir(3) result
  * libselinux: free data on selabel open failure
  * libselinux: use reentrant strtok_r(3)</changelog>
  <changelog author="cathy.hu@suse.com" date="1728993600">- Add 1231587-build-libselinux-with-swig-4.3.0.patch to fix build
  failure with swig 4.3.0 (bsc#1231587)</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libselinux: deprecate security_disable(3)
  * libselinux/utils: introduce selabel_compare
  * improved selabel_lookup performance
  * libselinux: support parallel usage of selabel_lookup(3)
  * Improved man pages
  * Always build for LFS mode on 32-bit archs.
  * Binary fcontext files format changed, files using old format are ignored
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Drop 1231587-build-libselinux-with-swig-4.3.0.patch: fixed upstream
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
</package>
<package pkgid="13db264a584c6a008f8208be995087bba7f913a1693af4ad8e2b18002921dc364ce135966ab18489a65b5f7f16c74ca58abce980dac0ae213fcf8de36c0b9bdd" name="python313-semanage" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO now (boo#1138812).</changelog>
  <changelog author="jsegitz@suse.com" date="1679659200">- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="cathy.hu@suse.com" date="1716897600">- Build python-semanage for python311 in 15.4 and 15.5 instead of
  python3.6 to fix build dependencies</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * Bugfixes:
  * libsemanage: support huge passwd entries</changelog>
  <changelog author="cathy.hu@suse.com" date="1728993600">- Add 1231587-build-libsemanage-with-swig-4.3.0.patch to fix
  build failure with swig 4.3.0 (bsc#1231587)</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libsemanage: Preserve file context and ownership in policy store
  * libsemanage: Optionally allow duplicate declarations
  * Improved man pages
  * libsemanage: Mute error messages from selinux_restorecon introduced in 3.8-rc1
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Drop 1231587-build-libsemanage-with-swig-4.3.0.patch: fixed upstream
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * libsemanage: improved performance of semanage store rebuild</changelog>
</package>
<package pkgid="7df4fd76d95fa67d4f1bf307b0d1f7564b2343b6da25a6290edb349256a31d26d40e008f624d517291a4ec6b649d50894fdd7fd60aeb123f01bbfd0b2a3e98dc" name="python313-setools" arch="x86_64">
  <version epoch="0" ver="4.5.1" rel="160000.2.2"/>
  <changelog author="filippo.bonazzi@suse.com" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
  <changelog author="jsegitz@suse.com" date="1702296000">- Update to version 4.4.4:
  * Update for compiling with libsepol 3.6.</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1711022400">- Update to version 4.5.0:
  - User Visible Changes
  * Add graphical results for information flow analysis and domain
    transition analysis, available in apol, sedta, and seinfoflow.
  * Add tooltips, What's This?, and detail popups in apol to help
    cross-referencing query and analysis results along with
    context-sensitive help.
  - Under The Hood Changes
  * Rework apol to fully generate the UI programmatically.
  * Update apol to PyQt6
  * Replace deprecated uses of pkg_resources and distutils.
  * Begin adding unit tests for apol UI.
  - Updated Dependencies
    SETools now higher minimum versions of the following dependencies:
  * Python 3.10
  * NetworkX 2.6
  * PyQt6
  * Cython 0.29.14
  - New Dependencies
  * pygraphviz (for seinfoflow, sedta, apol)</changelog>
  <changelog author="cathy.hu@suse.com" date="1713441600">- Fix build for 15.4 and 15.5:
  - Minimum required python version is 3.11, so building only for python311
  - Remove dependency for networkx: 0001-Make-networkx-optional-again-Fixes-125.patch</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1714651200">- Update to version 4.5.1:
  - Correct annotations of NetworkX types to make it optional again.
  - Fix packaging issue for apol's style sheet (apol.css).
- Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream
- Change networkx Requires to Suggests</changelog>
  <changelog author="cathy.hu@suse.com" date="1716897600">- Rework packaging to modern python packaging
  - python-setools module now builds for python310, python311, python312
    for tw and builds for python311 in 15.4 + 15.5
  - setools-console scripts will use python311 as default in factory, 15.4
    and 15.5
  - moved %dir %{_docdir}/%{name}/ and %{_docdir}/%{name}/* out of the
    python-setools module into setools-console as it does not belong in there
    and causes conflicts between python versions
  - moved %{python_sitearch}/setoolsgui from setools-gui into the
    python-setools module for multiversion build</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1726660800">- Add upstream tarball signature
- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring</changelog>
</package>
<package pkgid="8e5aa40f70addc2e732d687a1c305d96afd7ed7b6a92d686ee47e8e865ce143883758da66d7f7a8dfb86338e396ed2837c172107ce8582ccd4225f41fcb994a7" name="python313-setuptools" arch="noarch">
  <version epoch="0" ver="78.1.1" rel="160000.2.2"/>
  <changelog author="mcepl@cepl.eu" date="1732190400">- Skip over the tests which require network.
- Don't use pytest-xdist, it breaks test suite.</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- remove duplicated "uses_network" skip</changelog>
  <changelog author="steven.kowalik@suse.com" date="1736942400">- Split out the primary Python build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736942401">- Explicitly BuildRequire python-rpm-packaging: when primary flavor
  is added, this is auto-installed by dependencies. But as we now
  build the primary flavor separated, we have to ensure to also
  have it present in the other cases, in order to get the python(abi)
  dependencies added.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737028800">- Also provide python3-setuptools-wheel for the primary flavor.</changelog>
  <changelog author="dmueller@suse.com" date="1740484800">- update to 75.8.0:
  * Implemented Dynamic field for core metadata (as introduced in
    PEP 643). The existing implementation is currently
    experimental and the exact approach may change in future
    releases.
  * Synced with pypa/distutils@c97a3db2f including better support
    for free threaded Python on Windows (pypa/distutils#310),
    improved typing support, and linter accommodations.
  * Synced with pypa/distutils@ff11eed0c including bugfix for
    duplicate CFLAGS and adaption to support Python 3.13 is_abs
    in the C compiler (#4669).</changelog>
  <changelog author="adrian@suse.de" date="1742644800">- update to 77.0.3:
  * Temporarily convert error for license glob patterns containing
    ../ into a deprecation warning to allow an accomodation period
  * Better error messages for packaging.
  * Avoided eagerly raising an exception when license-files is
    defined simultaneously inside and outside of pyproject.toml.
  * Added initial support for license expression (PEP 639)
  * Store License-Files in .dist-info/licenses subfolder and
    added support for recursive globs for license_files (PEP 639)
  * Bump core metadata version to 2.4.
  * Updated vendored copy of wheel to v0.45.1</changelog>
  <changelog author="mmachova@suse.com" date="1742817600">- update to 78.0.2
  * Reverted distutils changes that broke the monkey patching of command
    classes.
  * Temporarily remove requests from integration tests.</changelog>
  <changelog author="dmueller@suse.com" date="1743336000">- update to 78.1.0:
  * Restore access to _get_vc_env with a warning.</changelog>
  <changelog author="dmueller@suse.com" date="1747137600">- update to 78.1.1:
  * More fully sanitized the filename in PackageIndex._download.
- switch build-exclusion to be tumbleweed only</changelog>
</package>
<package pkgid="15c4b8705d498bcb51220d53a0e8540663f66c2371278aba9de73111990928adf1d7969e4a689d55babd9dfc9cecfa192227a58095292ff87984b2b26e4abb9b" name="python313-six" arch="noarch">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1583755200">- use setuptools for building to support pip 10.x (bsc#1166139)</changelog>
  <changelog author="tchvatal@suse.com" date="1583841600">- Do not cause buildcycle with previous change but rather
  install the egg-info prepared metadata from the tarball</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.15.0:
  - Pull request #331: Optimize `six.ensure_str` and `six.ensure_binary`.</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Use %pycache_only %python_sitelib instead of %python3_sitelib
  * fixes gh#openSUSE/python-rpm-macros#64#issuecomment-715373348</changelog>
  <changelog author="dmueller@suse.com" date="1620561600">- update to 1.16.0:
- Port _SixMetaPathImporter to Python 3.10.</changelog>
  <changelog author="code@bnavigator.de" date="1623931200">- provide python3*dist(six): work around boo#1186870</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- require setuptools</changelog>
  <changelog author="rrahl0@opensuse.org" date="1734004800">- update to 1.17:
  * Add python 3.9 testing
  * Fix UserDict move in Python2
  * Delete pep8ignore and flakes-ignore
  * tkinter.tix was removed from Python 3.13, skip the test
  * Fix deprecation warning from setuptools
  * Python 3.14 removed the URLopener and FancyURLopener classes,
    from urllib.requests
  * Update copyright years
  * Expunge travis</changelog>
</package>
<package pkgid="fa8d14619364c79461ec7af42cd2ceac873722dc75f5785163901b2456e2b6534689933c14e7148988b2c21d892551a813b78498225e3d4d92ec3270ddb7cbc8" name="python313-sniffio" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 1.2.0:
  * Include type hints</changelog>
  <changelog author="code@bnavigator.de" date="1607083200">- skip upcoming python36 flavor because there is no python36-curio</changelog>
  <changelog author="code@bnavigator.de" date="1607515200">- Revert the python36 skip. python36-curio has been reenabled</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Fix the contextvars requirement for python36</changelog>
  <changelog author="dmueller@suse.com" date="1663243200">- update to 1.3.0:
  * requires python 3.7</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@cepl.eu" date="1696507200">- Clean up the SPEC file</changelog>
  <changelog author="mcepl@cepl.eu" date="1700136000">- Remove dependency on curio completely.</changelog>
  <changelog author="dmueller@suse.com" date="1710417600">- update to 1.3.1:
  * Added missing thread_local to sniffio.__all__
  * Add support for Python 3.9 and 3.10.
  * Provide sniffio.thread_local.name for coroutine libraries to
    set
  * Drop support for Python 3.5 and 3.6.
  * Include type hints</changelog>
</package>
<package pkgid="8a5b3f8113e31e04059724edfd4406e924638521da4398f7ad7c4e67d8261b3abd44a44b7e1401df35aefc4c84fbd45f87d45c507036e2c92cf0a320820dc3c1" name="python313-sortedcontainers" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="160000.2.2"/>
  <changelog author="toddrme2178@gmail.com" date="1527681600">- Update to 2.0.2
  + API Changes
  * SortedListWithKey is deprecated. Use SortedKeyList instead.
    The name SortedListWithKey remains as an alias for SortedKeyList. The
    alias will be removed in Version 3.
  * sortedcontainers.sortedlist.LOAD has moved to
    SortedList.DEFAULT_LOAD_FACTOR so that derived classes can customize the
    value.
  * SortedList._half and SortedList._dual have been removed. Use
    SortedList._load instead.
  * SortedList.add parameter val renamed to value.
  * SortedList.__contains__ parameter val renamed to value.
  * SortedList.discard parameter val renamed to value.
  * SortedList.remove parameter val renamed to value.
  * SortedList.__delitem__ parameter idx renamed to index.
  * SortedList.__getitem__ parameter idx renamed to index.
  * SortedList.__setitem__ now raises :exc:NotImplementedError. Use
    SortedList.__delitem__ and SortedList.add instead.
  * SortedList.bisect_left parameter val renamed to value.
  * SortedList.bisect_right parameter val renamed to value.
  * SortedList.bisect parameter val renamed to value.
  * SortedList.count parameter val renamed to value.
  * SortedList.append now raises :exc:NotImplementedError. Use
    SortedList.add instead.
  * SortedList.extend now raises :exc:NotImplementedError. Use
    SortedList.update instead.
  * SortedList.insert now raises :exc:NotImplementedError. Use
    SortedList.add instead.
  * SortedList.pop parameter idx renamed to index.
  * SortedList.index parameter val renamed to value.
  * SortedList.__add__ parameter that renamed to other.
  * SortedList.__iadd__ parameter that renamed to other.
  * SortedList.__mul__ parameter that renamed to num.
  * SortedList.__imul__ parameter that renamed to num.
  * SortedList._make_cmp renamed to SortedList.__make_cmp.
  * SortedKeyList.add parameter val renamed to value.
  * SortedKeyList.__contains__ parameter val renamed to value.
  * SortedKeyList.discard parameter val renamed to value.
  * SortedKeyList.remove parameter val renamed to value.
  * SortedKeyList.bisect_left parameter val renamed to value.
  * SortedKeyList.bisect_right parameter val renamed to value.
  * SortedKeyList.bisect parameter val renamed to value.
  * SortedKeyList.count parameter val renamed to value.
  * SortedKeyList.append now raises :exc:NotImplementedError. Use
    SortedKeyList.add instead.
  * SortedKeyList.extend now raises :exc:NotImplementedError. Use
    SortedKeyList.update instead.
  * SortedKeyList.insert now raises :exc:NotImplementedError. Use
    SortedKeyList.add instead.
  * SortedKeyList.index parameter val renamed to value.
  * SortedKeyList.__add__ parameter that renamed to other.
  * SortedKeyList.__radd__ added.
  * SortedKeyList.__iadd__ parameter that renamed to other.
  * SortedKeyList.__mul__ parameter that renamed to num.
  * SortedKeyList.__rmul__ added.
  * SortedKeyList.__imul__ parameter that renamed to num.
  * Removed SortedDict.iloc. Use SortedDict.keys and
    SortedKeysView instead.
  * SortedDict.fromkeys parameter seq renamed to iterable.
  * SortedDict.keys now returns SortedKeysView.
  * SortedDict.items now returns SortedItemsView.
  * SortedDict.values now returns SortedValuesView.
  * Removed SortedDict.viewkeys. Use SortedDict.keys instead.
  * Removed SortedDict.viewitems. Use SortedDict.items instead.
  * Removed SortedDict.viewvalues. Use SortedDict.values instead.
  * SortedDict.iterkeys removed. Use SortedDict.keys instead.
  * SortedDict.iteritems removed. Use SortedDict.items instead.
  * SortedDict.itervalues removed. Use SortedDict.values instead.
  * SortedDict.popitem now accepts an optional index argument. Default
    `-1`.
  * sorteddict.KeysView renamed to SortedKeysView.
  * sorteddict.ItemsView renamed to SortedItemsView.
  * sorteddict.ValuesView renamed to SortedValuesView.
  * Sorted dict views rely on collections abstract base classes: dict views and
    sequence. The SortedKeysView.__getitem__,
    SortedItemsView.__getitem__, and SortedValuesView.__getitem__
    methods are implemented and optimized. All other mixin methods use the
    default implementation provided by the base class. Prefer SortedDict
    methods to view methods when possible.
  * SortedSet._make_cmp renamed to SortedSet.__make_cmp.
  * SortedSet.symmetric_difference parameter that renamed to other.
  * SortedSet.symmetric_difference_update parameter that renamed to
    other.
  + Miscellaneous
  * Sphinx autodoc now used for API documentation.
  * All benchmarks now run on CPython 3.6 unless otherwise noted.
  * Testing now uses pytest rather than nose.
  * AppVeyor CI testing added.
  * Updated versions of alternative implementations.
  * Rename Github repo from grantjenks/sorted_containers to
    grantjenks/python-sortedcontainers.
  * Fix broken links in documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 2.1.0:
  * Small updates to docs and tests for Python 3.7.
  * Change imports for Abstract Base Classes to collections.abc to avoid warnings in Python 3.7.
  * SortedDict methods iterkeys, iteritems, itervalues, viewkeys, viewitems, and viewvalues are not implemented for Python 2. Attribute lookup now raises :exc:`AttributeError`.
  * Accessing SortedDict.iloc will emit DeprecationWarning.
  * SortedSet.__rsub__ erroneously reversed its arguments. The method has been removed in favor of the inherited Set.__rsub__ which has a correct implementation.
  * :class:`SortedKeysView` and :class:`SortedValuesView` set-operations now return :class:`SortedSet` objects to better match the semantics of version 1.
- use github tarball for tests</changelog>
  <changelog author="dmueller@suse.com" date="1592136000">- update to 2.2.2
  * Add "small slice" optimization to SortedList.__getitem__.
  * Silence warning when testing SortedList.iloc.
  * Fix a warning regarding classifiers in setup.py.
  * Change SortedDict to avoid cycles for CPython reference counting.</changelog>
  <changelog author="tchvatal@suse.com" date="1597147200">- Switch to multibuild to avoid cycles with matplotib</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.3.0:
  * Make sort order stable when updating with large iterables.</changelog>
  <changelog author="code@bnavigator.de" date="1611316800">- Remove NumPy, SciPy, and Matplotlib requirement. They are not
  used in the regular test suite.
- no multibuild needed anymore</changelog>
  <changelog author="dmueller@suse.com" date="1622980800">- update to 2.4.0:
  * Implement SortedDict methods: __or__, __ror__, and __ior__ per PEP 584.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="b56abf2bf36116fe13a54cb3210bd20c8a01a441f513f0a6115d61dd29343af6d48226bb28a323b95a8c3bb53995a0ed5f5ac3b56735cacdeda293aeee1a21fa" name="python313-systemd" arch="x86_64">
  <version epoch="0" ver="235" rel="160000.2.2"/>
  <changelog author="jweberhofer@weberhofer.at" date="1498478400">- exclude-tests-on-obs.patch: Exclude test which fail because of
  a bug in the OBS: https://github.com/openSUSE/obs-build/pull/351
- Upgrade to release 234
  * _daemon,_reader: return ENOSYS instead of NotImplemented
  * _daemon: allow specifying flowinfo
  * Added section for installation on openSUSE &amp; SLE
  * Adjust import order, spacing, operators as recommended by pylint
  * build-sys: add sign and upload targets
  * daemon: add basic support for sd_is_socket_sockaddr
  * daemon: add wrapper for sd_is_socket_sockaddr and tests
  * daemon: properly skip sd_is_socket_sockaddr calls if not available
  * Fix handling of addresses without port and add tests
  * Fix styling to match PEP8 in most places
  * Improve test skipping on old systems
  * Include all fields from record
  * journal: do not convert extra args to string in JournalHandler
  * journal: fix repr of JournalHandler to match python3.6
  * journal: improve docstring formatting a bit
  * journal: rename SENDER_FUNCTION to sender_function
  * Makefile: add "doc" target for convenience
  * Makefile: add convenience "shell" target to start python shell
  * Makefile: remove unneeded -I/usr/include from flags
  * Makefile: use $(INCLUDE_DIR) also for compilation
  * Prevent non-str values from being concatenated with +
  * Python 3.6 invalid escape sequence deprecation fixes
  * Remove mid from JournalHandler
  * replace dict.iteritems() with dict.items() to support py3
  * setup.py: allow LIBSYSTEMD_VERSION to be overridden
  * test_daemon: xfail test_notify_with_socket if bind() fails
  * test_journal: add tests for MESSAGE_ID passing
  * tests: move login tests from doctest to separate file
  * tests: skip journal.stream tests on ENOENT error
  * Update to constants from systemd-233
  * util: add compatibility for old glibc</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507377600">- singlespec</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1509969600">- iso-c-90.patch added to fix building on SLE12-SP3</changelog>
  <changelog author="mpluskal@suse.com" date="1510660800">- Use more of python building macros
- Do not build documentation (build is broken if /usr/bin/python is
  not present anyways)
- Run spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1580644800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1656849600">- 0002-reader-make-PY_SSIZE_T_CLEAN.patch added to fix boo#1200686
  reader: make PY_SSIZE_T_CLEAN</changelog>
  <changelog author="mcepl@suse.com" date="1656849601">- Remove exclude-tests-on-obs.patch, this is not the way how to
  do it, besides %python_exec setup.py check doesn't the test
  suite.
- Make tests running properly again</changelog>
  <changelog author="mcepl@suse.com" date="1660737600">- Update to version 235:
  * Adapt the rename of systemd-activate to
    systemd-socket-activate performed in systemd 230.
  * Support for sd_listen_fds_with_names added in systemd 227.
  * Support for sd_journal_get_cutoff_realtime_usec added in
    systemd 186.
  * Make the Reader PY_SSIZE_T_CLEAN for py3.10 compatibility.
  * id128: update for systemd-243 compatibility and other fixes.
  * C syntax modernization. A minimum of C99 is assumed.
  * Fix seek_realtime to work with timezone aware date on Python 3.
  * journal: add namespace support.
  * Fixes for memory leaks and documentation.
  * Support for Python 2 will be removed after this release.
- Remove upstreamed 0002-reader-make-PY_SSIZE_T_CLEAN.patch.
- Skip two failing tests (gh#systemd/python-systemd#118)</changelog>
  <changelog author="mcepl@suse.com" date="1660737601">- Add OBS_missing_etc_machine_id.patch to partially fix
  gh#systemd/python-systemd#118.</changelog>
  <changelog author="ecsos@opensuse.org" date="1686484800">- Add %{?sle15_python_module_pythons}</changelog>
</package>
<package pkgid="ae6eb931c923492939e096b8baaf2e2296fce54ddc2d5d54d26bda50495195eea76c807b1a21d5e99c7eeb82ca03ea0b60cbdcb938073e99e771e70f6e775fb6" name="python313-toml" arch="noarch">
  <version epoch="0" ver="0.10.2" rel="160000.2.2"/>
  <changelog author="bruno@ioda-net.ch" date="1526385600">- Update to version 0.9.4
  + Changes see https://github.com/uiri/toml/compare/0.9.3...0.9.4
  + Contain again test which are run
- Packaging
  + spec-cleaner minimal (date, license)
  + Resurection to be included in d:l:p and Factory to be used
  by Cloud people and others</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1550923200">- Activate test suite
- Update to v0.10.0
  * Changes see https://github.com/uiri/toml/compare/0.9.4...0.10.0
  * Includes tests not previously included in source tarball</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Use pytest macro directly</changelog>
  <changelog author="mimi.vx@gmail.com" date="1591617600">- update to 0.10.1
  * update testdata</changelog>
  <changelog author="tchvatal@suse.com" date="1598875200">- Switch to multibuild to not cycle with numpy</changelog>
  <changelog author="mliska@suse.cz" date="1605787200">- Update to 0.10.2:
  Fix a ValueError: Circular reference detected for empty {}</changelog>
  <changelog author="code@bnavigator.de" date="1613304000">- Don't test NumPy with python36 flavor (NumPy 1.20 in TW dropped
  Python 3.6, NEP 29), tests are automatically skipped if not
  installed.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="0ed7dbe9618a30c0c5e46ea00fcf41d254de324d337073678b6c3738182f38a7110322aa80d7f0a978bb5132f74a4d54ff8df315ee920a2acf8c00f8e401d9e7" name="python313-tornado6" arch="x86_64">
  <version epoch="0" ver="6.5" rel="160000.4.1"/>
  <changelog author="dcermak@suse.com" date="1685448000">- New upstream release 6.3.2 (bsc#1211741, CVE-2023-28370)
  - Security improvements
  - Fixed an open redirect vulnerability in StaticFileHandler
    under certain configurations.
  - ``tornado.web``
  - `.RequestHandler.set_cookie` once again accepts capitalized
    keyword arguments for backwards compatibility. This is
    deprecated and in Tornado 7.0 only lowercase arguments will
    be accepted.
  - What's new in Tornado 6.3.0
  - The new `.Application` setting ``xsrf_cookie_name``
    can now be used to take advantage of the ``__Host``
    cookie prefix for improved security.  To use it, add
    ``{"xsrf_cookie_name": "__Host-xsrf", "xsrf_cookie_kwargs":
    {"secure": True}}`` to your `.Application` settings. Note
    that this feature currently only works when HTTPS is used.
  - `.WSGIContainer` now supports running the application in
    a ``ThreadPoolExecutor`` so the event loop is no longer
    blocked.
  - `.AsyncTestCase` and `.AsyncHTTPTestCase`, which were
    deprecated in Tornado 6.2, are no longer deprecated.
  - WebSockets are now much faster at receiving large messages
    split into many fragments.
  - General changes
  - Python 3.7 is no longer supported; the minimum supported  .
    Python version is 3.8 Python 3.12 is now supported        .
  - To avoid spurious deprecation warnings, users of Python
    3.10 should upgrade to at least version 3.10.9, and users
    of Python 3.11 should upgrade to at least version 3.11.1.
  - Tornado submodules are now imported automatically on
    demand. This means it is now possible to use a single
    ``import tornado`` statement and refer to objects in
    submodules such as `tornado.web.RequestHandler`.
  - Deprecation notices
  - In Tornado 7.0, `tornado.testing.ExpectLog` will match
    ``WARNING`` and above regardless of the current logging
    configuration, unless the ``level`` argument is used.
  - `.RequestHandler.get_secure_cookie` is now a deprecated
    alias for `.RequestHandler.get_signed_cookie`.
    `.RequestHandler.set_secure_cookie` is now a deprecated
    alias for `.RequestHandler.set_signed_cookie`.
  - `.RequestHandler.clear_all_cookies` is
    deprecated. No direct replacement is provided;
    `.RequestHandler.clear_cookie` should be used on individual
    cookies.
  - Calling the `.IOLoop` constructor without a
    ``make_current`` argument, which was deprecated in Tornado
    6.2, is no longer deprecated.
  - `.AsyncTestCase` and `.AsyncHTTPTestCase`, which were
    deprecated in Tornado 6.2, are no longer deprecated.
  - `.AsyncTestCase.get_new_ioloop` is deprecated.
  - ``tornado.auth``
  - New method `.GoogleOAuth2Mixin.get_google_oauth_settings`
    can now be overridden to get credentials from a source
    other than the `.Application` settings.
  - ``tornado.gen``
  - `contextvars` now work properly when a ``@gen.coroutine``
    calls a native coroutine.
  - ``tornado.options``
  - `~.OptionParser.parse_config_file` now recognizes single
    comma-separated strings (in addition to lists of strings)
    for options with ``multiple=True``.
  - ``tornado.web``
  - New `.Application` setting ``xsrf_cookie_name`` can be used
    to change the name of the XSRF cookie. This is most useful
    to take advantage of the ``__Host-`` cookie prefix.
  - `.RequestHandler.get_secure_cookie` and
    `.RequestHandler.set_secure_cookie` (and related
    methods and attributes) have been renamed
    to `~.RequestHandler.get_signed_cookie` and
    `~.RequestHandler.set_signed_cookie`.  This makes it
    more explicit what kind of security is provided, and
    avoids confusion with the ``Secure`` cookie attribute
    and ``__Secure-`` cookie prefix.  The old names remain
    supported as deprecated aliases.
  - `.RequestHandler.clear_cookie` now accepts all keyword
    arguments accepted by `~.RequestHandler.set_cookie`. In
    some cases clearing a cookie requires certain arguments to
    be passed the same way in which it was set.
  - `.RequestHandler.clear_all_cookies` now accepts
    additional keyword arguments for the same reason as
    ``clear_cookie``. However, since the requirements for
    additional arguments mean that it cannot reliably clear all
    cookies, this method is now deprecated.
  - ``tornado.websocket``
  - It is now much faster (no longer quadratic) to receive
    large messages that have been split into many fragments.
  - `.websocket_connect` now accepts a ``resolver`` parameter.
  - ``tornado.wsgi``
  - `.WSGIContainer` now accepts an ``executor`` parameter
    which can be used to run the WSGI application on a thread
    pool.
  - What's new in Tornado 6.2.0
  - Deprecation notice
  - Python 3.10 has begun the process of significant changes
    to the APIs for managing the event loop. Calls to
    methods such as `asyncio.get_event_loop` may now raise
    `DeprecationWarning` if no event loop is running. This
    has significant impact on the patterns for initializing
    applications, and in particular invalidates patterns that
    have long been the norm in Tornado's documentation and
    actual usage. In the future (with some as-yet-unspecified
    future version of Python), the old APIs will be
    removed. The new recommended pattern is to start the event
    loop with `asyncio.run`. More detailed migration guides
    will be coming in the future.
  - The `.IOLoop` constructor is deprecated unless
    the ``make_current=False`` argument is used. Use
    `.IOLoop.current` when the loop is already running
    instead.
  - `.AsyncTestCase` (and `.AsyncHTTPTestCase`) are
    deprecated. Use `unittest.IsolatedAsyncioTestCase`
    instead.
  - Multi-process `.TCPServer.bind`/`.TCPServer.start`
    is deprecated. See `.TCPServer` docs for supported
    alternatives.
  - `.AnyThreadEventLoopPolicy` is deprecated. This class
    controls the creation of the "current" event loop so it
    will be removed when that concept is no longer supported.
  - `.IOLoop.make_current` and `.IOLoop.clear_current` are
    deprecated. In the future the concept of a "current"
    event loop as distinct from one that is currently running
    will be removed.
  - ``TwistedResolver`` and ``CaresResolver`` are deprecated
    and will be removed in Tornado 7.0.
  - General changes
  - The minimum supported Python version is now 3.7.
  - Wheels are now published with the Python stable ABI
    (``abi3``) for compatibility across versions of Python.
  - SSL certificate verfication and hostname checks are now
    enabled by default in more places (primarily in client-side
    usage of `.SSLIOStream`).
  - Various improvements to type hints throughout the package.
  - CI has moved from Travis and Appveyor to Github Actions.
  - `tornado.gen`
  - Fixed a bug in which ``WaitIterator.current_index`` could
    be incorrect.
  - ``tornado.gen.TimeoutError``` is now an alias for
    `asyncio.TimeoutError`.
  - `tornado.http1connection`
  - ``max_body_size`` may now be set to zero to disallow a
    non-empty body.
  - ``Content-Encoding: gzip`` is now recognized
    case-insensitively.
  - `tornado.httpclient`
  - ``curl_httpclient`` now supports non-ASCII (ISO-8859-1)
    header values, same as ``simple_httpclient``.
  - `tornado.ioloop`
  - `.PeriodicCallback` now understands coroutines and will not
    start multiple copies if a previous invocation runs too
    long.
  - `.PeriodicCallback` now accepts `datetime.timedelta`
    objects in addition to numbers of milliseconds.
  - Avoid logging "Event loop is closed" during
    shutdown-related race conditions.
  - Tornado no longer calls `logging.basicConfig` when starting
    an IOLoop; this has been unnecessary since Python 3.2 added
    a logger of last resort.
  - The `.IOLoop` constructor now accepts an ``asyncio_loop``
    keyword argument to initialize with a specfied asyncio
    event loop.
  - It is now possible to construct an `.IOLoop` on one thread
    (with ``make_current=False``) and start it on a different
    thread.
  - `tornado.iostream`
  - `.SSLIOStream` now supports reading more than 2GB at a
    time.
  - ``IOStream.write`` now supports typed `memoryview` objects.
  - `tornado.locale`
  - `.load_gettext_translations` no longer logs errors when
    language directories exist but do not contain the expected
    file.
  - `tornado.netutil`
  - `.is_valid_ip` no longer raises exceptions when the input
    is too long.
  - The default resolver now uses the same methods (and thread
    pool) as `asyncio`.
  - `tornado.tcpserver`
  - `.TCPServer.listen` now supports more arguments to pass
    through to `.netutil.bind_sockets`.
  - `tornado.testing`
  - `.bind_unused_port` now takes an optional ``address``
    argument.
  - Wrapped test methods now include the ``__wrapped__``
    attribute.
  - `tornado.web`
  - When using a custom `.StaticFileHandler` subclass, the
    ``reset()`` method is now called on this subclass instead
    of the base class.
  - Improved handling of the ``Accept-Language`` header.
  - `.Application.listen` now supports more arguments to pass
    through to `.netutil.bind_sockets`.
  - `tornado.websocket`
  - `.WebSocketClientConnection.write_message` now
    accepts `dict` arguments for consistency with
    `.WebSocketHandler.write_message`.
  - `.WebSocketClientConnection.write_message` now raises
    an exception as documented if the connection is already
    closed.
- Gave rpmlint a hug
- Remove upstreamed ignore-py310-deprecation-warnings.patch</changelog>
  <changelog author="mmachova@suse.com" date="1695297600">- Update to 6.3.3
  * The Content-Length header and chunked Transfer-Encoding sizes
    are now parsed more strictly (according to the relevant RFCs)
    to avoid potential request-smuggling vulnerabilities when
    deployed behind certain proxies.
- Add py312-datetime.patch to fix build with Python 3.12</changelog>
  <changelog author="dmueller@suse.com" date="1704283200">- update to 6.4:
  * https://www.tornadoweb.org/en/stable/releases/v6.4.0.html
  * Python 3.12 is now supported.
- drop py312-datetime.patch (upstream)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704974400">- Add patch openssl-3.2.patch gh#tornadoweb/tornado#3355</changelog>
  <changelog author="steven.kowalik@suse.com" date="1715947200">- Add patch support-pytest-8.2.patch:
  * Support pytest &gt;= 8.2 changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 6.4.1:
  + Security Improvements:
  - Parsing of the ``Transfer-Encoding`` header is now stricter.
    Unexpected transfer-encoding values were previously ignored
    and treated as the HTTP/1.0 default of read-until-close. This
    can lead to framing issues with certain proxies. We now treat
    any unexpected value as an error.
  - Handling of whitespace in headers now matches the RFC more
    closely. Only space and tab characters are treated as
    whitespace and stripped from the beginning and end of header
    values. Other unicode whitespace characters are now left
    alone. This could also lead to framing issues with certain
    proxies.
  - `tornado.curl_httpclient` now prohibits carriage return and
    linefeed headers in HTTP headers (matching the behavior of
    `simple_httpclient`). These characters could be used for
    header injection or request smuggling if untrusted data were
    used in headers.
  + General Changes:
  - `tornado.iostream`: `SLIOStream` now understands changes to
    error codes from OpenSSL 3.2. The main result of this change
    is to reduce the noise in the logs for certain errors.
  - `tornado.simple_httpclient`: `simple_httpclient` now
    prohibits carriage return characters in HTTP headers. It had
    previously prohibited only linefeed characters.
  - `tornado.testing`: `.AsyncTestCase` subclasses can now be
    instantiated without being associated with a test method.
    Improves compatibility with test discovery in Pytest 8.2.
- Drop  support-pytest-8.2.patch: fixed upstream.
- Drop openssl-3.2.patch: fixed upstream.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1732536000">- Update to 6.4.2:
  + Security Improvements:
  * Parsing of the cookie header is now much more efficient. The older
    algorithm sometimes had quadratic performance which allowed for a
    denial-of-service attack in which the server would spend excessive
    CPU time parsing cookies and block the event loop.
    (CVE-2024-52804, bsc#1233668)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1747396800">- Update to 6.5.0 (CVE-2025-47287, bsc#1243268):
  * Security Improvements:
  - Previously, malformed multipart-form-data requests could log
    multiple warnings and constitute a denial-of-service attack. Now
    an exception is raised at the first error, so there is only one
    log message per request. This fixes CVE-2025-47287.
  * General Changes:
  - Python 3.14 is now supported. Older versions of Tornado will
    work on Python 3.14 but may log deprecation warnings.
  - The free-threading mode of Python 3.13 is now supported on an
    experimental basis. Prebuilt wheels are not yet available for
    this configuration, but it can be built from source.
  - The minimum supported Python version is 3.9.
  * Deprecation Notices:
  - Support for obs-fold continuation lines in HTTP headers is
    deprecated and will be removed in Tornado 7.0, as is the use of
    carriage returns without line feeds as header separators.
  - The callback argument to websocket_connect is deprecated and
    will be removed in Tornado 7.0. Note that on_message_callback is
    not deprecated.
  - The log_message and args attributes of tornado.web.HTTPError are
    deprecated. Use the new get_message method instead.</changelog>
  <changelog author="nico.krapp@suse.com" date="1765800000">- Add security patches:
  * CVE-2025-67724.patch (bsc#1254903)
  * CVE-2025-67725.patch (bsc#1254905)
  * CVE-2025-67726.patch (bsc#1254904)</changelog>
  <changelog author="nico.krapp@suse.com" date="1773748800">- CVE-2026-31958: parsing large multipart bodies with many parts can cause a
  denial of service (bsc#1259553)
  * added CVE-2026-31958.patch
- VUL-0: incomplete validation of cookie attributes allows for injection of
  user-controlled values in other cookie attributes (bsc#1259630)
  * added VUL-0-cookie-attribute-validation.patch</changelog>
</package>
<package pkgid="3681b4a40eb84e0ce65d774c7f2894d1646f3b66617536566eda454f3b10bb4099e099ab1a0ef52c63356e1b406e34a39022b5236db3cedc2cceeeb9e51cd034" name="python313-typing_extensions" arch="noarch">
  <version epoch="0" ver="4.13.2" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="sebix@sebix.at" date="1691928000">- update to version 4.7.1:
  - Fix support for `TypedDict`, `NamedTuple` and `is_protocol` on PyPy-3.7 and
  PyPy-3.8. Patch by Alex Waygood. Note that PyPy-3.7 and PyPy-3.8 are unsupported
  by the PyPy project. The next feature release of typing-extensions will
  drop support for PyPy-3.7 and may also drop support for PyPy-3.8.
- update to version 4.7.0:
  - This is expected to be the last feature release supporting Python 3.7,
  which reaches its end of life on June 27, 2023. Version 4.8.0 will support
  only Python 3.8.0 and up.
  - Fix bug where a `typing_extensions.Protocol` class that had one or more
  non-callable members would raise `TypeError` when `issubclass()`
  was called against it, even if it defined a custom `__subclasshook__`
  method. The correct behaviour -- which has now been restored -- is not to
  raise `TypeError` in these situations if a custom `__subclasshook__` method
  is defined. Patch by Alex Waygood (backporting
  https://github.com/python/cpython/pull/105976).
- update to version 4.7.0rc1:
  - Add `typing_extensions.get_protocol_members` and
  `typing_extensions.is_protocol` (backport of CPython PR #104878).
  Patch by Jelle Zijlstra.
  - `typing_extensions` now re-exports all names in the standard library's
  `typing` module, except the deprecated `ByteString`. Patch by Jelle
  Zijlstra.
  - Due to changes in the implementation of `typing_extensions.Protocol`,
  `typing.runtime_checkable` can now be used on `typing_extensions.Protocol`
  (previously, users had to use `typing_extensions.runtime_checkable` if they
  were using `typing_extensions.Protocol`).
  - Align the implementation of `TypedDict` with the implementation in the
  standard library on Python 3.9 and higher.
  `typing_extensions.TypedDict` is now a function instead of a class. The
  private functions `_check_fails`, `_dict_new`, and `_typeddict_new`
  have been removed. `is_typeddict` now returns `False` when called with
  `TypedDict` itself as the argument. Patch by Jelle Zijlstra.
  - Declare support for Python 3.12. Patch by Jelle Zijlstra.
  - Fix tests on Python 3.13, which removes support for creating
  `TypedDict` classes through the keyword-argument syntax. Patch by
  Jelle Zijlstra.
  - Fix a regression introduced in v4.6.3 that meant that
  ``issubclass(object, typing_extensions.Protocol)`` would erroneously raise
  ``TypeError``. Patch by Alex Waygood (backporting the CPython PR
  https://github.com/python/cpython/pull/105239).
  - Allow `Protocol` classes to inherit from `typing_extensions.Buffer` or
  `collections.abc.Buffer`. Patch by Alex Waygood (backporting
  https://github.com/python/cpython/pull/104827, by Jelle Zijlstra).
  - Allow classes to inherit from both `typing.Protocol` and `typing_extensions.Protocol`
  simultaneously. Since v4.6.0, this caused `TypeError` to be raised due to a
  metaclass conflict. Patch by Alex Waygood.
  - Backport several deprecations from CPython relating to unusual ways to
  create `TypedDict`s and `NamedTuple`s. CPython PRs #105609 and #105780
  by Alex Waygood; `typing_extensions` backport by Jelle Zijlstra.
  - Creating a `NamedTuple` using the functional syntax with keyword arguments
    (`NT = NamedTuple("NT", a=int)`) is now deprecated.
  - Creating a `NamedTuple` with zero fields using the syntax `NT = NamedTuple("NT")`
    or `NT = NamedTuple("NT", None)` is now deprecated.
  - Creating a `TypedDict` with zero fields using the syntax `TD = TypedDict("TD")`
    or `TD = TypedDict("TD", None)` is now deprecated.
  - Fix bug on Python 3.7 where a protocol `X` that had a member `a` would not be
  considered an implicit subclass of an unrelated protocol `Y` that only has a
  member `a`. Where the members of `X` are a superset of the members of `Y`,
  `X` should always be considered a subclass of `Y` iff `Y` is a
  runtime-checkable protocol that only has callable members. Patch by Alex
  Waygood (backporting CPython PR
  https://github.com/python/cpython/pull/105835).
- update to version 4.6.3 (June 1, 2023)
  - Fix a regression introduced in v4.6.0 in the implementation of
  runtime-checkable protocols. The regression meant
  that doing `class Foo(X, typing_extensions.Protocol)`, where `X` was a class that
  had `abc.ABCMeta` as its metaclass, would then cause subsequent
  `isinstance(1, X)` calls to erroneously raise `TypeError`. Patch by
  Alex Waygood (backporting the CPython PR
  https://github.com/python/cpython/pull/105152).
  - Sync the repository's LICENSE file with that of CPython.
  `typing_extensions` is distributed under the same license as
  CPython itself.
  - Skip a problematic test on Python 3.12.0b1. The test fails on 3.12.0b1 due to
  a bug in CPython, which will be fixed in 3.12.0b2. The
  `typing_extensions` test suite now passes on 3.12.0b1.
- update to version 4.6.2:
  - Fix use of `@deprecated` on classes with `__new__` but no `__init__`.
  Patch by Jelle Zijlstra.
  - Fix regression in version 4.6.1 where comparing a generic class against a
  runtime-checkable protocol using `isinstance()` would cause `AttributeError`
  to be raised if using Python 3.7.
- update to version 4.6.1:
  - Change deprecated `@runtime` to formal API `@runtime_checkable` in the error
  message. Patch by Xuehai Pan.
  - Fix regression in 4.6.0 where attempting to define a `Protocol` that was
  generic over a `ParamSpec` or a `TypeVarTuple` would cause `TypeError` to be
  raised. Patch by Alex Waygood.
- update to version 4.6.0:
  - `typing_extensions` is now documented at
  https://typing-extensions.readthedocs.io/en/latest/. Patch by Jelle Zijlstra.
  - Add `typing_extensions.Buffer`, a marker class for buffer types, as proposed
  by PEP 688. Equivalent to `collections.abc.Buffer` in Python 3.12. Patch by
  Jelle Zijlstra.
  - Backport two CPython PRs fixing various issues with `typing.Literal`:
  https://github.com/python/cpython/pull/23294 and
  https://github.com/python/cpython/pull/23383. Both CPython PRs were
  originally by Yurii Karabas, and both were backported to Python &gt;=3.9.1, but
  no earlier. Patch by Alex Waygood.
  A side effect of one of the changes is that equality comparisons of `Literal`
  objects will now raise a `TypeError` if one of the `Literal` objects being
  compared has a mutable parameter. (Using mutable parameters with `Literal` is
  not supported by PEP 586 or by any major static type checkers.)
  - `Literal` is now reimplemented on all Python versions &lt;= 3.10.0. The
  `typing_extensions` version does not suffer from the bug that was fixed in
  https://github.com/python/cpython/pull/29334. (The CPython bugfix was
  backported to CPython 3.10.1 and 3.9.8, but no earlier.)
  - Backport [CPython PR 26067](https://github.com/python/cpython/pull/26067)
  (originally by Yurii Karabas), ensuring that `isinstance()` calls on
  protocols raise `TypeError` when the protocol is not decorated with
  `@runtime_checkable`. Patch by Alex Waygood.
  - Backport several significant performance improvements to runtime-checkable
  protocols that have been made in Python 3.12 (see
  https://github.com/python/cpython/issues/74690 for details). Patch by Alex
  Waygood.
  A side effect of one of the performance improvements is that the members of
  a runtime-checkable protocol are now considered “frozen” at runtime as soon
  as the class has been created. Monkey-patching attributes onto a
  runtime-checkable protocol will still work, but will have no impact on
  `isinstance()` checks comparing objects to the protocol. See
  ["What's New in Python 3.12"](https://docs.python.org/3.12/whatsnew/3.12.html#typing)
  for more details.
  - `isinstance()` checks against runtime-checkable protocols now use
  `inspect.getattr_static()` rather than `hasattr()` to lookup whether
  attributes exist (backporting https://github.com/python/cpython/pull/103034).
  This means that descriptors and `__getattr__` methods are no longer
  unexpectedly evaluated during `isinstance()` checks against runtime-checkable
  protocols. However, it may also mean that some objects which used to be
  considered instances of a runtime-checkable protocol on older versions of
  `typing_extensions` may no longer be considered instances of that protocol
  using the new release, and vice versa. Most users are unlikely to be affected
  by this change. Patch by Alex Waygood.
  - Backport the ability to define `__init__` methods on Protocol classes, a
  change made in Python 3.11 (originally implemented in
  https://github.com/python/cpython/pull/31628 by Adrian Garcia Badaracco).
  Patch by Alex Waygood.
  - Speedup `isinstance(3, typing_extensions.SupportsIndex)` by &gt;10x on Python
  &lt;3.12. Patch by Alex Waygood.
  - Add `typing_extensions` versions of `SupportsInt`, `SupportsFloat`,
  `SupportsComplex`, `SupportsBytes`, `SupportsAbs` and `SupportsRound`. These
  have the same semantics as the versions from the `typing` module, but
  `isinstance()` checks against the `typing_extensions` versions are &gt;10x faster
  at runtime on Python &lt;3.12. Patch by Alex Waygood.
  - Add `__orig_bases__` to non-generic TypedDicts, call-based TypedDicts, and
  call-based NamedTuples. Other TypedDicts and NamedTuples already had the attribute.
  Patch by Adrian Garcia Badaracco.
  - Add `typing_extensions.get_original_bases`, a backport of
  [`types.get_original_bases`](https://docs.python.org/3.12/library/types.html#types.get_original_bases),
  introduced in Python 3.12 (CPython PR
  https://github.com/python/cpython/pull/101827, originally by James
  Hilton-Balfe). Patch by Alex Waygood.
  This function should always produce correct results when called on classes
  constructed using features from `typing_extensions`. However, it may
  produce incorrect results when called on some `NamedTuple` or `TypedDict`
  classes that use `typing.{NamedTuple,TypedDict}` on Python &lt;=3.11.
  - Constructing a call-based `TypedDict` using keyword arguments for the fields
  now causes a `DeprecationWarning` to be emitted. This matches the behaviour
  of `typing.TypedDict` on 3.11 and 3.12.
  - Backport the implementation of `NewType` from 3.10 (where it is implemented
  as a class rather than a function). This allows user-defined `NewType`s to be
  pickled. Patch by Alex Waygood.
  - Fix tests and import on Python 3.12, where `typing.TypeVar` can no longer be
  subclassed. Patch by Jelle Zijlstra.
  - Add `typing_extensions.TypeAliasType`, a backport of `typing.TypeAliasType`
  from PEP 695. Patch by Jelle Zijlstra.
  - Backport changes to the repr of `typing.Unpack` that were made in order to
  implement [PEP 692](https://peps.python.org/pep-0692/) (backport of
  https://github.com/python/cpython/pull/104048). Patch by Alex Waygood.</changelog>
  <changelog author="mcepl@cepl.eu" date="1697716800">- Update to 4.8.0:
  - Add typing_extensions.Doc, as proposed by PEP 727
  - Drop support for Python 3.7 (including PyPy-3.7)
  - Fix bug where get_original_bases() would return incorrect
    results when called on a concrete subclass of a generic class
  - Fix bug where ParamSpec(default=...) would raise a TypeError
    on Python versions &lt;3.11</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 4.9.0:
  * This feature release adds `typing_extensions.ReadOnly`, as
    specified by PEP 705, and makes various other improvements,
    especially to `@typing_extensions.deprecated()`.
  * Add support for PEP 705, adding `typing_extensions.ReadOnly`.
  * All parameters on `NewType.__call__` are now positional-only.
    This means that the signature of
    `typing_extensions.NewType.__call__` now exactly matches the
  * signature of `typing.NewType.__call__`.
  * Fix bug with using `@deprecated` on a mixin class.
  * Exclude `__match_args__` from `Protocol` members.
  * When creating a `typing_extensions.NamedTuple` class, ensure
    `__set_name__` is called on all objects that define
    `__set_name__` and exist in the values of the `NamedTuple`
    class's class dictionary.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707393600">- Add backport-recent-implementation-of-protocol.patch upstream patch
  gh#python/typing_extensions@004b893ddce2</changelog>
  <changelog author="adrian@suse.de" date="1709121600">- update to 4.10.0:
  This feature release adds support for PEP 728 (TypedDict with extra
  items) and PEP 742 (``TypeIs``).
  - Add support for PEP 728, supporting the `closed` keyword argument and the
    special `__extra_items__` key for TypedDict. Patch by Zixuan James Li.
  - Add support for PEP 742, adding `typing_extensions.TypeIs`. Patch
    by Jelle Zijlstra.
  - Drop runtime error when a read-only `TypedDict` item overrides a mutable
    one. Type checkers should still flag this as an error. Patch by Jelle
    Zijlstra.
  - Speedup `issubclass()` checks against simple runtime-checkable protocols by
    around 6% (backporting https://github.com/python/cpython/pull/112717, by Alex
    Waygood).
  - Fix a regression in the implementation of protocols where `typing.Protocol`
    classes that were not marked as `@runtime_checkable` would be unnecessarily
    introspected, potentially causing exceptions to be raised if the protocol had
    problematic members. Patch by Alex Waygood, backporting
    https://github.com/python/cpython/pull/113401.
- obsoletes backport-recent-implementation-of-protocol.patch</changelog>
  <changelog author="dmueller@suse.com" date="1712404800">- update to 4.11.0:
  * Fix tests on Python 3.13.0a5. Patch by Jelle Zijlstra.
  * Fix the runtime behavior of type parameters with defaults
  * Fix minor discrepancy between error messages produced by
    `typing` and `typing_extensions` on Python 3.10.
  * When `include_extra=False`, `get_type_hints()` now strips
    `ReadOnly` from the annotation.</changelog>
  <changelog author="dmueller@suse.com" date="1717848000">- update to 4.12.2:
  * Fix regression in v4.12.0 where specialization of certain
  * generics with an overridden `__eq__` method would raise
    errors.
  * Fix tests so they pass on 3.13.0b2
  * Preliminary changes for compatibility with the draft
    implementation of PEP 649 in Python 3.14.
  * Fix regression in v4.12.0 where nested `Annotated` types
    would cause `TypeError` to be raised if the nested
    `Annotated` type had unhashable metadata.
  * Fix incorrect behaviour of `typing_extensions.ParamSpec` on
    Python 3.8 and 3.9 that meant that
    `isinstance(typing_extensions.ParamSpec("P"),
    typing.TypeVar)` would have a different result in some
    situations depending on whether or not a profiling
    function had been set using `sys.setprofile`.
  * This release focuses on compatibility with the upcoming
    release of Python 3.13. Most changes are related to the
    implementation of type parameter defaults (PEP 696).</changelog>
  <changelog author="dmueller@suse.com" date="1743249600">- update to 4.13.0:
  * Add `typing_extensions.TypeForm` from PEP 747.
  * Add `typing_extensions.get_annotations`, a backport of
  * `inspect.get_annotations` that adds features specified
  * by PEP 649.
  * Backport `evaluate_forward_ref` from CPython
  * Update PEP 728 implementation to a newer version of the PEP.
  * Copy the coroutine status of functions and methods wrapped
    with `@typing_extensions.deprecated`.
  * Fix bug where `TypeAliasType` instances could be subscripted
    even where they were not generic.
  * Fix bug where a subscripted `TypeAliasType` instance did not
    have all attributes of the original `TypeAliasType` instance
    on older Python versions.
  * Fix bug where subscripted `TypeAliasType` instances (and some
    other subscripted objects) had wrong parameters if they were
    directly subscripted with an `Unpack` object.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1747742400">- Update to 4.13.2
  * Fix `TypeError` when taking the union of `typing_extensions.TypeAliasType`
    and a `typing.TypeAliasType` on Python 3.12 and 3.13.
  * Backport from CPython PR #132160) to avoid having user arguments
    shadowed in generated `__new__` by `@typing_extensions.deprecated`.
- from version 4.13.1
  * Fix regression in 4.13.0 on Python 3.10.2 causing a `TypeError` when
    using `Concatenate`.
  * Fix `TypeError` when using `evaluate_forward_ref` on Python 3.10.1-2
    and 3.9.8-10.</changelog>
</package>
<package pkgid="95413d5e2b57809c84a794088865fac550538f74cb1d6fb537fe51cff6ff8e34c20e26ad4a236f8b49e2cdcd95bcbfbf5b95c490918c2473a054937289a9deb4" name="python313-urllib3" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="160000.4.1"/>
  <changelog author="daniel.garcia@suse.com" date="1704974400">- Add upstream patch openssl-3.2.patch, to fix tests with opennssl
  3.2.0, gh#urllib3/urllib3#3271</changelog>
  <changelog author="mmachova@suse.com" date="1718712000">- Add CVE-2024-37891.patch (bsc#1226469)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1727956800">- Update to 2.2.3:
  * Features
    + Added support for Python 3.13.
  * Bugfixes
    + Fixed the default encoding of chunked request bodies to be UTF-8
    instead of ISO-8859-1. All other methods of supplying a request body
    already use UTF-8 starting in urllib3 v2.0.
    + Fixed ResourceWarning on CONNECT with Python &lt; 3.11.4 by backporting
    python/cpython#103472.
    + Fixed a crash where certain standard library hash functions were absent
    in restricted environments.
    + Added the Proxy-Authorization header to the list of headers to strip
    from requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.
    + Allowed passing negative integers as amt to read methods of
    http.client.HTTPResponse as an alternative to None.
    + Fixed issue where InsecureRequestWarning was emitted for HTTPS
    connections when using Emscripten.
    + Fixed HTTPConnectionPool.urlopen to stop automatically casting
    non-proxy headers to HTTPHeaderDict. This change was premature as it
    did not apply to proxy headers and HTTPHeaderDict does not handle byte
    header values correctly yet.
    + Changed InvalidChunkLength to ProtocolError when response terminates
    before the chunk length is sent.
    + Changed ProtocolError to be more verbose on incomplete reads with
    excess content.
    + Added support for HTTPResponse.read1() method.
    + Fixed issue where requests against urls with trailing dots were
    failing due to SSL errors when using proxy.
    + Fixed HTTPConnection.proxy_is_verified and
    HTTPSConnection.proxy_is_verified to be always set to a boolean after
    connecting to a proxy. It could be None in some cases previously.
    + Fixed an issue where headers passed in a request with json= would be
    mutated
    + Fixed HTTPSConnection.is_verified to be set to False when connecting
    from a HTTPS proxy to an HTTP target. It was set to True previously.
    + Fixed handling of new error message from OpenSSL 3.2.0 when configuring
    an HTTP proxy as HTTPS
    + Fixed TLS 1.3 post-handshake auth when the server certificate
    validation is disabled
  * HTTP/2 (experimental)
    + Excluded Transfer-Encoding: chunked from HTTP/2 request body
    + Added a probing mechanism for determining whether a given target
    origin supports HTTP/2 via ALPN.
    + Add support for sending a request body with HTTP/2
  * Removals
    + Drop support for end-of-life PyPy3.8 and PyPy3.9.
- Drop patches, they are now included upstream:
  * CVE-2024-37891.patch
  * openssl-3.2.patch
- Included patched hypercorn, which is only unpacked and used for the test
  suite.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1734523200">- Ignore DeprecationWarning in tests (bsc#1234681)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1734609600">- Skip some flaky tests that fail sometimes in OBS (bsc#1234681)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1748347200">- Skip test_close_after_handshake flaky test, it fails sometimes in
  ppc64le and s390x architectures, bsc#1243583</changelog>
  <changelog author="daniel.garcia@suse.com" date="1748347201">- Update to 2.4.0
  * Applied PEP 639 by specifying the license fields in
    pyproject.toml. (#3522)
  * Updated exceptions to save and restore more properties during the
    pickle/serialization process. (#3567)
  * Added verify_flags option to create_urllib3_context with a default
    of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python
    3.13+. (#3571)
  * Fixed a bug with partial reads of streaming data in Emscripten.
    (#3555)
  * Switched to uv for installing development dependecies. (#3550)
  * Removed the multiple.intoto.jsonl asset from GitHub releases.
    Attestation of release files since v2.3.0 can be found on PyPI.
    (#3566)
- 2.3.0:
  * Added HTTPResponse.shutdown() to stop any ongoing or future reads
    for a specific response. It calls shutdown(SHUT_RD) on the
    underlying socket. This feature was sponsored by LaunchDarkly.
    (#2868)
  * Added support for JavaScript Promise Integration on Emscripten.
    This enables more efficient WebAssembly requests and streaming,
    and makes it possible to use in Node.js if you launch it as node
  - -experimental-wasm-stack-switching. (#3400)
  * Added the proxy_is_tunneling property to HTTPConnection and
    HTTPSConnection. (#3285)
  * Added pickling support to NewConnectionError and
    NameResolutionError. (#3480)
  * Fixed an issue in debug logs where the HTTP version was rendering
    as "HTTP/11" instead of "HTTP/1.1". (#3489)
  * Removed support for Python 3.8. (#3492)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1750680000">- Update to 2.5.0:
  * Security issues
    Pool managers now properly control redirects when retries is passed
    (CVE-2025-50181, GHSA-pq67-6m6q-mj2v, bsc#1244925)
    Redirects are now controlled by urllib3 in the Node.js runtime
    (CVE-2025-50182, GHSA-48p4-8xcf-vxj5, bsc#1244924)
  * Features
    Added support for the compression.zstd module that is new in Python 3.14.
    Added support for version 0.5 of hatch-vcs
  * Bugfixes
    Raised exception for HTTPResponse.shutdown on a connection already
    released to the pool.
    Fixed incorrect CONNECT statement when using an IPv6 proxy with
    connection_from_host. Previously would not be wrapped in [].</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1768305600">- Add CVE-2026-21441.patch to fix excessive resource consumption
  during decompression of data in HTTP redirect responses
  (bsc#1256331, CVE-2026-21441)</changelog>
  <changelog author="nico.krapp@suse.com" date="1768910400">- Add security patch:
  * CVE-2025-66471.patch (bsc#1254867)
  * CVE-2025-66418.patch (bsc#1254866)</changelog>
</package>
<package pkgid="113e8ff7bf3ff66430170573303db4f49b08795ba2d93ed1d243418bfbd49bc9b50fa2260be2bdc18684e5644ffac02a07798927008c594ded63d48826fc9c31" name="python313-zypp-plugin" arch="noarch">
  <version epoch="0" ver="0.6.6" rel="160000.1.1"/>
  <changelog author="tchvatal@suse.com" date="1512993600">- Switch to singlespec packaging to make it easy to disable either
  python3 or python2 plugin and make sure all is buildable
- version 0.6.3</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Fix a bit the obsoletes/provides to allow migration, previously
  was overwritten by macros
- BR python-rpm-macros to build on older distributions
- Fix bit python detection conditions on install phase to be better
  readable and uniform</changelog>
  <changelog author="ma@suse.de" date="1516363200">- Disable singlespec packaging in SLE12* and older distros while it's
  not working there. They provide python2 packages only.</changelog>
  <changelog author="ma@suse.com" date="1519041600">- Provide python3-zypp-plugin in SLE12-SP3 (bsc#1081596)</changelog>
  <changelog author="ma@suse.com" date="1520942400">- Provide python3-zypp-plugin down to SLE12 (bsc#1081596)</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- singlespec in Tumbleweed must support multiple python3 flavors
  in the future gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="ma@suse.com" date="1721044800">- Fix stomp header regex to include '-' (bsc#1227793)
- version 0.6.4</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1739793600">- Build package for multiple Python flavors on the SLE15 family
  (fixes #4)</changelog>
  <changelog author="ma@suse.com" date="1739880000">- version 0.6.5</changelog>
  <changelog author="ma@suse.com" date="1764158400">- Fix link to libzypp plugins documentation:
  https://opensuse.github.io/libzypp/zypp-plugins.html
- version 0.6.6</changelog>
</package>
<package pkgid="f8d4539691fe68700efdc4d927f2ea419cd175c5ebc821f69f269780e2f069da9f45ef2b02aa605ce5b3625f7888b72c96bc186b638731479ea483265d489252" name="qemu" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="386ed25df55196ffba8055a22fb286c236294206ca6c6cc5ac1ff61ba324017e282aa304024f6bc90a7204d054753f98a44691134b31ec807acfffa171291cd2" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="a1c54b5df0f2530c2a5a55a635b37c494bbb8ac5700fda82fd4fd98cd7ad4cb37d676b9e24d1f7b244957777c2916eda96c5a9b95bb8907d97921d5e092b1d7b" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="1b631a12bac111c7482a185741a4916cca239fca9f3c64f8dbb5f0ad38e7f88a5a627b0ae7202b479cceafe2027e17b39706f192f26e98f6e5b140b09cc3901b" name="qemu-block-rbd" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="1c653d46f8ad2cde94b2b247d6d4976bac16196f3db110ec6d2f20c99f3489e6b94476fcc50955e62bec8f64766c6c22ad69b4f736a0062fd7b8db8310eb6a4c" name="qemu-block-ssh" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="2359e6f8bd46ee1b454e81465faebf3362d7970c8028e47b81f653af32e6d23e556d670d85fc6a63ea2ab89702234ea16447afb84f17fd20f68e3e5c6c92b630" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="e886acb12dcd53a11aa92f76f59c725902fcad6b596ca4c6b6f5ad65a1b58dff61d2ac740b5d5a7a8ffc7ae20708382ef81d08c82e72f6fd443bf04be66c21d2" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="2cba6278219a22812159919b75cfdc0713048d3716eff1f73a16ebf515fea9bde902c8e3092cdc16bb90febc6c28934581781de739dec50892c1247235e1c819" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="761903008d9c8803791312f96169a3915630eb31c00c7bb64e821d03cdf5941cefd0ef71481dceb8ecd027652edb6c534be958d9736f0a944d8513f37f713090" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="15dc132a0b228cd39a2185a92ddd4c3f2532641e7e7ca47b4187ebf8ec59cb900ae0a87cc5b449e2c6a6cef2ed025d21a1f7019443e13104702abc5c0ba9e4cc" name="qemu-hw-display-virtio-gpu-pci" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="aeb34af8e669b719875f9c7ea589939a153365ba62d080de936f02593f1c320abce57ce2791a6e8b60e4553effbf224eed7e553e156c20088e4cdc6b137d6b01" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="3b33e83c091ef4320b21a856f37a39ea99879b23bf3b9b8ba19d152cabdbae5afdb4d5ebca0aea20481562360ecb5cb1c2ff309e931f87ed705357a2a9c125c1" name="qemu-hw-usb-host" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="aee99c7fcdf2a6c9288081223dca39ebd359cc71ff0d3a6f6bd413fcee49e096e8ae866cdd9d92b52724a0b636dc088298dab3721ca791e7f9f6b156c60a2ecf" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="764850e2fc6561030675dd2150e2e3c4869389b5983b556482628b77581c9a7fc921c4b34dff217d002aa5cf7613a92f056b2dc80e5bb9b9b73771f7d99d3186" name="qemu-img" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="55ae15cb7fb62e2080d030b213d8f4fbc65d8a051dc2928c0a9614dcedbaf3ac0f0aeed9b3825fb369bcd466ab8774d77e034986fde1fe240f631dbe30260218" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="87cb79dd3ea8ca3f6ad9c95bf575715789dee61d702ef829e212fb26c07b440265307c0cbe091c8de637e16a8f86d8803d2ec607d9da31bcfa79b8adfc49fd2c" name="qemu-ksm" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="08425490f7748774b058039aaa28ee3c20983e4b59053785022082d6350274f6cd7e35541aa4bfac0031fb3455c60ccb290816e936cee0b1dfe30dcb9783b6a3" name="qemu-lang" arch="noarch">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="aa3b476a714d7d4d76e433cd2a5d6bfb17b30d4e1f5016f38452ac868f5f41e62898cd46c77e580c549c3e350d2cc5e5df4bc52f555a08d4e8f23fbf3afce0e8" name="qemu-ovmf-x86_64" arch="noarch">
  <version epoch="0" ver="202502" rel="160000.4.1"/>
  <changelog author="richard.lyu@suse.com" date="1750939200">- Add patch to make Ovmf builds reproducible in OvmfPkg and ArmVirtPkg (bsc#1244218)
  - Add ovmf-OvmfPkg-ArmVirtPkg-Keep-JSON-stack-cookie-files.patch</changelog>
  <changelog author="richard.lyu@suse.com" date="1751025600">- Enables UEFI Shell support for virtual machines on X64 and AARCH64 platforms (bsc#1244266)
  - Build Shell.efi and install it to /usr/share/ovmf/
  - Add ovmf-ShellPkg-Add-post-script-for-Shell-installation.patch
  - Add post-install and post-uninstall scripts in /usr/share/ovmf/
  - Install Shell.efi to the EFI boot partition
    (/boot/efi/EFI/opensuse/ or /boot/efi/EFI/sles/)
  - Register Shell.efi as a UEFI boot entry</changelog>
  <changelog author="richard.lyu@suse.com" date="1751457600">- Remove 60-ovmf-x86_64-sev.json descriptor (bsc#1245497)</changelog>
  <changelog author="jlee@suse.com" date="1751544000">- Removed ovmf-Revert-OvmfPkg-PlatformInitLib-dynamic-mmio-window-s.patch
  because the bsc#1205978 be fixed in qemu. And re-enabling 'dynamic mmio
  window size' feature in ovmf can support big GPU passthrough to guest.
  (bsc#1245542)</changelog>
  <changelog author="richard.lyu@suse.com" date="1751630400">- Revert the following change due to security concerns and potential underlying issues.
  - Enables UEFI Shell support for guests on X64 and AARCH64 platforms (bsc#1244266)
  - Build Shell.efi independently
  - Add ovmf-ShellPkg-Add-post-script-for-Shell-installation.patch
  - Install Shell.efi to EFI boot partition (/boot/efi/EFI/opensuse/ or /boot/efi/EFI/sles/)
  - Register Shell.efi as a boot entry</changelog>
  <changelog author="richard.lyu@suse.com" date="1751976000">- Backport the patch from edk2-stable202505 (jsc#PED-13202)
  - ovmf-UefiCpuPkg-MpInitLib-Fix-SNP-AP-creation.patch
    dca5d26bc57e UefiCpuPkg/MpInitLib: Fix SNP AP creation when using known APIC IDs</changelog>
  <changelog author="richard.lyu@suse.com" date="1755000000">- Update firmware descriptors for SEV-SNP and TDX (bsc#1247847)
  - Add 50-ovmf-x86_64-sev-snp.json to support the 'amd-sev-snp' feature.
  - Remove the sev-snp feature from 50-ovmf-x86_64-sev.json.
  - Update the device in 60-ovmf-x86_64-tdx.json from 'pflash' to 'memory'.</changelog>
  <changelog author="richard.lyu@suse.com" date="1755086400">- Update firmware descriptors to remove tab whitespace (bsc#1247847)
  - Replace tab whitespace with spaces in 50-ovmf-x86_64-sev.json
  - Replace tab whitespace with spaces in 50-ovmf-x86_64-sev-snp.json</changelog>
  <changelog author="richard.lyu@suse.com" date="1758628800">- Add backported patch to enable iSCSI boot support by default (bsc#1245454)
  - ovmf-OvmfPkg-Add-NETWORK_ISCSI_DEFAULT_ENABLE-build-flag.patch
    502f0dfda4 OvmfPkg: Add NETWORK_ISCSI_DEFAULT_ENABLE build flag
  - Add build flag NETWORK_ISCSI_DEFAULT_ENABLE for x64 OVMF to enable iSCSI boot support by default</changelog>
  <changelog author="richard.lyu@suse.com" date="1773748800">- Update mbedtls to 3.6.5 to fix CVE-2025-59438 (bsc#1252441)
  - Requires Mbed TLS 3.6.5 or higher to mitigate vulnerability.
  - Add backported patches to support MbedTLS 3.6.5 for ARM32
  - ovmf-CryptoPkg-EDK2-code-update-for-Mbedtls-3.6.5.patch
    c2147ed33a CryptoPkg: EDK2 code update for Mbedtls 3.6.5.
  - ovmf-CryptoPkg-MbedTls-not-support-content-data-signature.patch
    95838ecb96 CryptoPkg: MbedTls not support content data signature.
  - ovmf-CryptoPkg-Override-mbedtls_config-header.patch
    77f21b70fd CryptoPkg: Override mbedtls_config header
  - Add patch to fix ARM32 build failures
  - ovmf-CryptoPkg-Library-MbedTlsLib-Add-compiler-defines-fo.patch</changelog>
</package>
<package pkgid="960540e46294dfa9dafbb16f1908cbd8d9d697a516b4901023257a9b6b42ca96a1a83309302d283c70494c4e7aebe8686bfb85f6cfbbeeb5883c9b59fdc653b3" name="qemu-pr-helper" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="14683d2ed5c9f1c2ce83698dea14cfceb1abfb257f2e99639379b772f00b65572f2fb459a78abfcb8536a29042e4b34883df11350f70ce6967dbfc831069788f" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="10.0.91.16.3_3_g3d33c746" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="ceb6e2d683ccfe76f59d4558b27f862aada9d57d837423b7debb114d9b4cf6c2f5a4d34a0e3f2823faeec29d18e46e095366f5d8281f35c6485a2b2c735092d6" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="37d02ade2359d6da42c648a12e84b41a7e5facdd3a124f6271b6c79e8bb51605ac80d1e73975877e7cd4f69d7d575104ce2e3bb39118c16b440dcc106fea6303" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="71c90c7b7a9b227ec8bec196a96f1dc6729ef26a0592fde4560b5f3ada229276831574966e9899f552c04882b62b69ab144d1dd28377ece8a410866f8ab51f1a" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="056f80d25aa8347336f9e484c25dcfc9a63eca14632e865b3336b9380fac0dc697a0fad05d846dd1244a4ea0c17e63fc1508c6a22f17df9f7e9d91e21121448c" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="10.0.91.16.3_3_g3d33c746" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="755718d5a2b23133d29d1b26a236da48c39f9254d3bcfcc75d7547211cf38aba3221659fd7410a51e6a46fd4be38e61114ef7c1b9d53994d3e1335f6fd0ee792" name="qemu-vmsr-helper" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="838260ec59a492c409c22ff413445ef1ab42e1f9fef257261c75dcc4ef6823e845333761c580183b32537e301d4b7bb21ada8bb8221d736c741524f2affdfef1" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="160000.1.1"/>
  <changelog author="dfaggioli@suse.com" date="1758801600">- Fix bsc#1230042:
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1759147200">- Resolve a repo-has-moved service running issue:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors</changelog>
  <changelog author="dfaggioli@suse.com" date="1759233600">- Update to version 10.0.4:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported below:
  hvf: arm: Emulate ICC_RPR_EL1 accesses properly
  target/arm: Correct encoding of Debug Communications Channel registers
  ui: fix setting client_endian field defaults
  hw/net/npcm_gmac.c: Send the right data for second packet in a row
  target/i386: do not expose ARCH_CAPABILITIES on AMD CPU
  i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  i386/cpu: Fix overflow of cache topology fields in CPUID.04H
  i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  ui/vnc: Do not copy z_stream
  vhost: Fix used memslot tracking when destroying a vhost device
  roms: re-remove execute bit from hppa-firmware*
  file-posix: Fix aio=threads performance regression after enablign FUA
  amd_iommu: Fix truncation of oldval in amdvi_writeq
  amd_iommu: Remove duplicated definitions
  amd_iommu: Fix the calculation for Device Table size
  amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE
  amd_iommu: Fix masks for various IOMMU MMIO Registers
  amd_iommu: Update bitmasks representing DTE reserved fields
  amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command
  amd_iommu: Fix Miscellaneous Information Register 0 encoding
  virtio-net: Add queues for RSS during migration
  net: fix buffer overflow in af_xdp_umem_create()
  accel/kvm: Adjust the note about the minimum required kernel version
  linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC
  migration: Don't sync volatile memory after migration completes
  linux-user: Hold the fd-trans lock across fork
  linux-user: Check for EFAULT failure in nanosleep
  linux-user: Implement fchmodat2 syscall
  hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ
  target/arm: Don't enforce NSE,NS check for EL3-&gt;EL3 returns
  target/i386: fix TB exit logic in gen_movl_seg() when writing to SS
  target/arm: Fix bfdotadd_ebf vs nan selection
  target/arm: Fix f16_dotadd vs nan selection
  target/arm: Fix PSEL size operands to tcg_gen_gvec_ands
  target/arm: Fix 128-bit element ZIP, UZP, TRN
  target/arm: Fix sve_access_check for SME
  target/arm: Fix SME vs AdvSIMD exception priority
  hw/s390x/ccw-device: Fix memory leak in loadparm setter
  virtio-gpu: support context init multiple timeline
  target/arm: Correct KVM &amp; HVF dtb_compatible value
  target/arm: Make RETA[AB] UNDEF when pauth is not implemented
  tcg: Fix constant propagation in tcg_reg_alloc_dup
  target/loongarch: fix vldi/xvldi raise wrong error
  target/loongarch: add check for fcond
  linux-user/arm: Fix return value of SYS_cacheflush
  hw/arm/mps2: Configure the AN500 CPU with 16 MPU regions
  qemu-options.hx: Fix reversed description of icount sleep behavior
  hw/arm/virt: Check bypass iommu is not set for iommu-map DT property
  hw/loongarch/virt: Fix big endian support with MCFG table
  hw/core/qdev-properties-system: Add missing return in set_drive_helper()
  iotests: fix 240
  target/i386: Remove FRED dependency on WRMSRNS
  hw/audio/asc: fix SIGSEGV in asc_realize()
  audio: fix size calculation in AUD_get_buffer_size_out()
  audio: fix SIGSEGV in AUD_get_buffer_size_out()
  hw/i386/amd_iommu: Fix xtsup when vcpus &lt; 255
  hw/i386/amd_iommu: Fix device setup failure when PT is on.</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516800">- Support for Intel TDX (jsc#PED-9266)
  A list of backported patches (so far) is:
  i386/tdx: Build TDX only for 64-bit target
  i386/tdx: Clarify the error message of mrconfigid/mrowner/mrownerconfig
  i386/tdx: Fix the typo of the comment of struct TdxGuest
  i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  i386/tdx: Error and exit when named cpu model is requested
  i386/cpu: Warn about why CPUID_EXT_PDCM is not available
  i386/tdvf: Fix build on 32-bit host
  i386/tdx: Fix build on 32-bit host
  x86/loader: Don't update kernel header for CoCo VMs
  docs: Add TDX documentation
  i386/tdx: Validate phys_bits against host value
  i386/tdx: Make invtsc default on
  i386/tdx: Don't treat SYSCALL as unavailable
  i386/tdx: Fetch and validate CPUID of TD guest
  target/i386: Print CPUID subleaf info for unsupported feature
  i386: Remove unused parameter "uint32_t bit" in feature_word_description()
  i386/cgs: Introduce x86_confidential_guest_check_features()
  i386/tdx: Define supported KVM features for TDX
  i386/tdx: Add XFD to supported bit of TDX
  i386/tdx: Add supported CPUID bits relates to XFAM
  i386/tdx: Add supported CPUID bits related to TD Attributes
  i386/tdx: Add TDX fixed1 bits to supported CPUIDs
  i386/tdx: Implement adjust_cpuid_features() for TDX
  i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features()
  cpu: Don't set vcpu_dirty when guest_state_protected
  i386/apic: Skip kvm_apic_put() for TDX
  i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs
  i386/tdx: Don't synchronize guest tsc for TDs
  i386/tdx: Set and check kernel_irqchip mode for TDX
  i386/tdx: Disable PIC for TDX VMs
  i386/tdx: Disable SMM for TDX VMs
  i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM
  i386/tdx: Force exposing CPUID 0x1f
  i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  i386/tdx: implement tdx_cpu_instance_init()
  i386/cpu: introduce x86_confidential_guest_cpu_instance_init()
  kvm: Check KVM_CAP_MAX_VCPUS at vm level
  i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility
  i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL
  i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE
  i386/tdx: Finalize TDX VM
  i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu
  i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION
  i386/tdx: Setup the TD HOB list
  headers: Add definitions from UEFI spec for volumes, resources, etc...
  i386/tdx: Track RAM entries for TDX VM
  i386/tdx: Track mem_ptr for each firmware entry of TDVF
  i386/tdx: Don't initialize pc.rom for TDX VMs
  i386/tdx: Parse TDVF metadata for TDX VM
  i386/tdvf: Introduce function to parse TDVF metadata
  i386/tdx: load TDVF for TD guest
  i386/tdx: Implement user specified tsc frequency
  i386/tdx: Set APIC bus rate to match with what TDX module enforces
  i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig
  i386/tdx: Validate TD attributes
  i386/tdx: Wire CPU features up with attributes of TD guest
  i386/tdx: Make sept_ve_disable set by default
  i386/tdx: Add property sept-ve-disable for tdx-guest object
  i386/tdx: Initialize TDX before creating TD vcpus
  kvm: Introduce kvm_arch_pre_create_vcpu()
  i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object
  i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES
  i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context
  i386/tdx: Implement tdx_kvm_type() for TDX
  i386: Introduce tdx-guest object
  linux-headers: update from 6.15 + kvm/next
  linux-headers: Update to Linux v6.15-rc3</changelog>
  <changelog author="dfaggioli@suse.com" date="1762516801">- Update to version 10.0.6
  Full backport list:
  https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  linux-user/microblaze: Fix little-endianness binary
  target/hppa: correct size bit parity for fmpyadd
  target/i386: user: do not set up a valid LDT on reset
  async: access bottom half flags with qatomic_read
  target/i386: fix x86_64 pushw op
  i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit
  i386/cpu: Prevent delivering SIPI during SMM in TCG mode
  i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS
  target/i386: Fix CR2 handling for non-canonical addresses
  block/curl.c: Use explicit long constants in curl_easy_setopt calls
  pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs
  target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd
  target/riscv: Fix ssamoswap error handling
- Update to version 10.0.5:
  Full backport list:
  https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/
  A selection of them is reported below:
  tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image
  tests/functional/test_ppc_bamboo: Replace broken link with working assets
  physmem: Destroy all CPU AddressSpaces on unrealize
  memory: New AS helper to serialize destroy+free
  include/system/memory.h: Clarify address_space_destroy() behaviour
  migration: Fix state transition in postcopy_start() error handling
  target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions
  target/riscv: rvv: Replace checking V by checking Zve32x
  target/riscv: Fix endianness swap on compressed instructions
  hw/riscv/riscv-iommu: Fixup PDT Nested Walk
  ...
- Fix bsc#1230042</changelog>
  <changelog author="dfaggioli@suse.com" date="1765627200">- Update to version 10.0.7
  Full backport list:
  https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/
  Fixes:
  bsc#1253002 (CVE-2025-12464)
  bsc#1250984 (CVE-2025-11234)
  A selection of them is reported here below:
  kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  docs/devel: Update URL for make-pullreq script
  target/arm: Fix assert on BRA.
  hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  hw/core/machine: Provide a description for aux-ram-share property
  hw/pci: Make msix_init take a uint32_t for nentries
  block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit()
  block-backend: Fix race when resuming queued requests
  ui/vnc: Fix qemu abort when query vnc info
  chardev/char-pty: Do not ignore chr_write() failures
  hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section()
  hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs
  hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure
  migration: Fix transition to COLO state from precopy
- Other updates and bugfixes:
  * [openSUSE][RPM} spec: delete old specfile constructs
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494)</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688000">- Bug and spec file fixes:
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1769688001">- Fix bsc#1257474:
  * ui/vdagent: remove migration blocker (bsc#1257474)
  * ui/vdagent: add migration support (bsc#1257474)
  * ui/vdagent: factor out clipboard peer registration (bsc#1257474)
  * ui/vdagent: keep "connected" state (bsc#1257474)
  * ui/vdagent: replace Buffer with GByteArray (bsc#1257474)
  * ui/clipboard: delay clipboard update when not running (bsc#1257474)
  * ui/clipboard: add vmstate_cbinfo (bsc#1257474)
  * ui/clipboard: split out QemuClipboardContent (bsc#1257474)
  * ui/clipboard: use int for selection field (bsc#1257474)
  * ui/gtk: warn if setting the clipboard failed (bsc#1257474)</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Update to version 10.0.8
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260213060647.200707-1-mjt@tls.msk.ru/
  Fixes:
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits
  bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT
  hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default
  linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition
  ...
- Bugfix:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)</changelog>
  <changelog author="dfaggioli@suse.com" date="1775822400">- Update to version 10.0.9:
  Full backport list:
  https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
  Fixes:
  bsc#1259079 (CVE-2026-3196)
  bsc#1259080 (CVE-2026-3195)
  bsc#1258509 (CVE-2026-2243)
  A selection of them is reported here below:
  hyperv/syndbg: check length returned by cpu_physical_memory_map()
  fuse: Copy write buffer content before polling
  target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
  target/loongarch: Preserve PTE permission bits in LDPTE
  hw/net/npcm_gmac: Catch accesses off the end of the register array
  linux-user: fix TIOCGSID ioctl
  tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
  bsd-user: Deal with mmap where start &gt; reserved_va
  linux-user: Deal with mmap where start &gt; reserved_va
  hw/net/xilinx_ethlite: Check for oversized TX packets
  virtio-gpu: Ensure BHs are invoked only from main-loop thread
  block/nfs: Do not enter coroutine from CB
  block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
  block/throttle-groups: fix deadlock with iolimits and muliple iothreads
  mirror: Fix missed dirty bitmap writes during startup
  block/curl: fix concurrent completion handling
  block/vmdk: fix OOB read in vmdk_read_extent()
  hw/net/smc91c111: Don't allow negative-length packets
  io: fix cleanup for websock I/O source data on cancellation
  io: fix cleanup for TLS I/O source data on cancellation
  io: separate freeing of tasks from marking them as complete
  target/i386/hvf/x86_mmu: Fix compiler warning
  hw/i386/vmmouse: Fix hypercall clobbers
  tests/docker: upgrade most non-lcitool debian tests to debian 13
  hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
  hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
  ...
- Add support for AMD-Turn CPUs (jsc#PED-13174)
  * target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
  * target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
  * target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
  * target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
  * target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)</changelog>
</package>
<package pkgid="fbc5762a61555261ae2dc97f60518865a7d8efa9d87da69c717239c22963376bdaab42344f9c876709f37cf5d7191f51ed5ffc9c8633ca6891ae10d8fdeae9cb" name="qrencode" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1360929600">- build also against libpng16
  * libpng16.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1374840000">- Update to 3.4.2:
  * Memory leak bug has been fixed.
  * Micro QR Code encoding bug has been fixed.
  * String splitting has been improved.
- Removed qrencode-libpng16.patch (fixed upstream).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1384603200">- Update to 3.4.3:
  * New option "--rle" has been added to the command line tool.
  * Bug fixes in the library and command line tool.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf, needed for kdebase4-workspace-libs-32bit</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1412337600">- Update to 3.4.4
  * Bugfix release. See the changelog file for the list of changes.
  * New option "--verbose" has been added to the command line tool.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to github as an url so people can see the progress
  * web is not really up-to-date
- Remove compat support for sle11</changelog>
  <changelog author="christophe@krop.fr" date="1516795200">- Update to 4.0.0
  * EPS output now supports foreground and background color
  * XPM and PNG32 support added
  * CMake support added
  * Various bugs and performance fixes
- Add qrencode-fix-installation.patch. Fixes installation for x86_64
  targets.</changelog>
  <changelog author="aloisio@gmx.com" date="1567771200">- Update to version 4.0.2
  * Build script fixes. (Thanks to @mgorny)
  version 4.0.1
  * CMake support improved.
  * New test scripts have been added.
  * Some compile time warnings have been fixed.
- Refreshed qrencode-fix-installation.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599912000">- update to 4.1.0:
  * Command line tool "qrencode" has been improved:
  * New option "--inline" has been added. (Thanks to @jp-bennett)
  * New option "--strict-version" has been added.
  * UTF8 mode now supports ANSI256 color. (Thanks to András Veres-
    Szentkirályi)
  * Micro QR Code no longer requires to specify the version number.
  * 'make check' allows to run the test programs. (Thanks to Jan Tojnar)
  * Some compile time warnings have been fixed.
  * Various CMake support improvements. (Thanks to @mgorny and @sdf5)
  * Some minor bug fixes. (Thanks to Lonnie Abelbeck and Frédéric Wang)
  * Some documentation/manpage improvements. (Thanks to Dan Jacobson)
  * Some performance improvements. (Thanks to @4061N and Mika Lindqvist)
- remove qrencode-fix-installation.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1602763200">- update to 4.1.1 (jsc#PED-7296):
  * Some minor bugs in Micro QR Code generation have been fixed.
  * The data capacity calculations are now correct. These bugs probably did not
    affect the Micro QR Code generation.</changelog>
</package>
<package pkgid="9ae864bc396284927681fa9e1f5a3970c6c9347b9dc9c2621a210a57fd2ac99dad0dbd2c167fa9c7f81ebc7b1119aabca5b9a5ab46af2c64302167c08ba48d98" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="56.1" rel="160000.2.2"/>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="nicolas.morey@suse.com" date="1739966400">- Update to rdma-core v56.0 (jsc#PED11323)
  - No release notes available</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743681600">- Update to rdma-core v56.1 (jsc#PED-11289, jsc#PED-11323)
  - Bug fixes for all providers</changelog>
</package>
<package pkgid="41e1fb2b83c6c6c7a2baf1994edaee321baa970e92329a36372e85b029144d07b8e2113c2d59f7ea814e4ae72cda62bf5023b606948037a61a33bedee7c852f0" name="read-only-root-fs" arch="noarch">
  <version epoch="0" ver="1.0+git20250708.3eed5de" rel="160000.4.1"/>
  <changelog author="fvogt@suse.com" date="1659700800">- Update to version 1.0+git20220805.4a3d850:
  * Work around read-only state of subvolumes in a different way</changelog>
  <changelog author="fvogt@suse.com" date="1659960000">- Update to version 1.0+git20220808.cd59f4f:
  * Fix writableagain.conf</changelog>
  <changelog author="fvogt@suse.com" date="1709121600">- Update to version 1.0+git20240228.d85232a:
  * etc/grub.d/01_suse_ro_root: Don't btrfs-mount-subvol inside grub-emu</changelog>
  <changelog author="fvogt@suse.com" date="1744632000">- Update to version 1.0+git20250414.6ef7163:
  * Add a note why we need to keep 10-read-only-root-fs.conf around
  * Migrate from /etc overlays to subvolumes
- Switch _service to use mode="manual"</changelog>
  <changelog author="fvogt@suse.com" date="1744718400">- Add missing dependencies for %post</changelog>
  <changelog author="fvogt@suse.com" date="1744718401">- Update to version 1.0+git20250415.7e7aea4:
  * Add missing dependency on mountpoint</changelog>
  <changelog author="fvogt@suse.com" date="1745323200">- Update to version 1.0+git20250422.3e17744:
  * Remount /sysroot/etc between sysroot-etc.mount and initrd-fs.target</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Update to version 1.0+git20250708.3eed5de:
  * writable-etc: Install findmnt instead of mountpoint
  * CI: Omit volatile-overlay from the initrd
  * Add basic CI
  * Only remount when [/sysroot]/etc is ro (bsc#1246021)</changelog>
  <changelog author="iforster@suse.com" date="1758283200">- Add additional check in %post to prevent generating the btrfs
  /etc subvolume during a KIWI run
  [bsc#1250133] [gh#openSUSE/read-only-root-fs#27]</changelog>
  <changelog author="fvogt@suse.com" date="1770292800">- Add patch to fix workaround for read-only / subvolumes (bsc#1252892):
  * 0001-Fix-workaround-for-read-only-subvolumes-by-remountin.patch</changelog>
</package>
<package pkgid="77ff7d2f3cf9b95893660866868dfbac34dde8792d787fb371116ed80a7e40ef384fa3ee4c282fcbec47693b091c212fc1bb1b0d5d682ed200ff8d54077fa657" name="rebootmgr" arch="x86_64">
  <version epoch="0" ver="3.3+git20250512.b6e4e84" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1731326400">- Add compatibility symlink for rebootmgrctl to sbin</changelog>
  <changelog author="kukuk@suse.com" date="1734609600">- Update to version 3.0+git20241219.7166827:
  * Remove left overs from dbus related manual page
  * Use int64 to parse JSON for time_t
  * Set varlink info
  * Move announce_ready() call to a later place
  * Require libeconf 0.7.5
  * Free event loop in destroy context.
  * Add missing error reply
  * Remove unused log_type variable
  * Add internal error to varlink interface
  * Move varlink definition into own file
  * Update manual pages</changelog>
  <changelog author="kukuk@suse.com" date="1736942400">- Update to version 3.0+git20250114.f74a9d5:
  * Add bash-completion for rebootmgrctl</changelog>
  <changelog author="kukuk@suse.com" date="1737979200">- Update to version 3.0+git20250127.73667d7:
  * rebootmgrctl: implement verbose dump-config verb
  * Fix search path for vendor config file
  * Add CI with openSUSE container
  * Add new methods and use UID auth
- Add timezone to BuildRequires for test suite</changelog>
  <changelog author="kukuk@suse.com" date="1738065600">- Update to version 3.0+git20250128.8fa577c:
  * Import version 3.0 based on sd-varlink</changelog>
  <changelog author="kukuk@suse.com" date="1738152000">- Update to version 3.0+git20250129.eed876f:
  * Release version 3.1
  * rebootmgrd: fix check if new strategy is valid</changelog>
  <changelog author="kukuk@suse.com" date="1739275200">- Update to version 3.0+git20250211.a56a554:
  * rebootmgr.service: fix Type=notify
- Readd compat symlink of rebootmgrctl for tukit</changelog>
  <changelog author="kukuk@suse.com" date="1739448000">- Update to version 3.2+git20250213.bff65b1:
  * Release version 3.2
  * Handle case that main-window is not set correct
  * rebootmgrd: fix instantly strategy</changelog>
  <changelog author="kukuk@suse.com" date="1742212800">- Update to version 3.2+git20250317.27192cc:
  * Set c_std to gnu17</changelog>
  <changelog author="kukuk@suse.com" date="1747051200">- Update to version 3.3+git20250512.b6e4e84:
  * Release version 3.3
  * Fix handling of temporarily disabled reboots</changelog>
</package>
<package pkgid="0b6b3ca6e72947e12cd2f035de32881d942bf6da14b98790cbbfe6450ea203e758928724f9e5486060db2e45f3b675f01ee39cd579ef3b074f4cc25867a16eda" name="regionServiceClientConfigAzure" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="160000.1.2"/>
  <changelog author="rjschwei@suse.com" date="1588852800">- Update to version 1.0.0 (bsc#1171465, bsc#1171465)
  + Merge region server setup for SLES and SLES For SAP</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 1.0.5 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic
  + Use latest API to query the metadata server and send additional data</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 2.0.0 (bsc#1199668)
  + Move the certs to /usr from /var to accomodate ro filesystem of
    SLE-Micro
  + Fix source url in spec file</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 2.0.1 (bsc#1217537)
  + Replacing 104.45.31.195.pem 191.237.254.253.pem certs
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that
    expire soon</changelog>
  <changelog author="jesus.bv@suse.com" date="1715256000">- Update to version 2.1.0 (bsc#1217537)
  + Replace certs 23.100.36.229.pem and 40.121.202.140.pem (4096 length):
    rgnsrv-azure-westus -&gt; 23.100.36.229.pem expires 9 years
    rgnsrv-azure-eastus  -&gt; 40.121.202.140.pem expires 10 years</changelog>
  <changelog author="rjschwei@suse.com" date="1722340800">- Update to version 2.2.0 (jsc#PCT-360)
  + Add IPv6 certs to enable IPv6 access of the update infrastructure
  + Add noipv6.patch to patch out IPv6 on SLE 12, no IPv6 support in SLE 12
    in the Public Cloud</changelog>
  <changelog author="jesus.bv@suse.com" date="1734955200">- Update to version 2.2.1
  + New 4096 certificate for rgnsrv-azure-southeastasia</changelog>
  <changelog author="jesus.bv@suse.com" date="1734955201">- Update to version 2.2.2
  + Replacing certificate for rgnsrv-azure-southeastasia to get
    rid of weird chain cert</changelog>
  <changelog author="rjschwei@suse.com" date="1747915200">- Update dependency name for metadata package, name change in SLE 16
  (bsc#1243419)</changelog>
  <changelog author="rjschwei@suse.com" date="1756296000">- Update to version 3.0.0 (bsc#1246995)
  + SLE 16 python-requests requiers SSL v3 certificates. Update 2
    region server certs to support SLE 16 when it gets released.</changelog>
</package>
<package pkgid="7498e1c44d3ba58bb72d919d109a28d44f5eab48482e5f29d28a78fa4aa495571d354966c8a4127f4e2c04dd430e54e4ead63d46b4e6c39f0fc00eb60ef556c3" name="regionServiceClientConfigEC2" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="160000.1.2"/>
  <changelog author="rjschwei@suse.com" date="1662552000">- Update to version 4.1.0 (bsc#1203215)
  + New certs for 52.79.82.165 and 54.247.166.75</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 4.1.1 (bsc#1217536)
  + Replace 54.247.166.75.pem and 54.253.118.149.pem old soon to expired certs
    with new generated ones that expire in 8 years and have longer length (4096)</changelog>
  <changelog author="jesus.bv@suse.com" date="1704974400">- Version 4.1.1
  Add patch no-ipv6.patch to not serve IPv6 addresses on SLES12
  Related to bsc#1218656</changelog>
  <changelog author="jesus.bv@suse.com" date="1715256000">- Version 4.2.0
  Replace certs (length 4096):
  rgnsrv-ec2-cn-north1  -&gt; 54.223.148.145 expires in 8 years
  rgnsrv-ec2-us-west2-2 -&gt; 54.245.101.47  expires in 9 years
  Sidenote: We have one server with a short cert (2048) left;
  34.197.223.242 expires in 2027</changelog>
  <changelog author="rjschwei@suse.com" date="1721995200">- Switch the patch syntax away form the deprecated shorthand macro</changelog>
  <changelog author="rjschwei@suse.com" date="1721995201">- Update to version 4.3.0 (bsc#1228363)
  + The IPv6 cert was switched up for the region server running in us-west-2
    and as such the SSL handshake was failing. Drop the incorrect cert
    and add the correct cert.</changelog>
  <changelog author="jesus.bv@suse.com" date="1734955200">- Update to version 4.3.1
  + New 4096 certificate for rgnsrv-ec2-us-east1</changelog>
  <changelog author="jesus.bv@suse.com" date="1734955201">- Update to version 4.3.2
  + Fix us-east-1 cert</changelog>
  <changelog author="rjschwei@suse.com" date="1747915200">- Update dependency to accomodate metadata binary package name change
  in SLE 16 (bsc#1243419)</changelog>
  <changelog author="rjschwei@suse.com" date="1756296000">- Update to version 5.0.0 (bsc#1246995)
  + SLE 16 python-requests requiers SSL v3 certificates. Update 2
    region server certs to support SLE 16 when it gets released.</changelog>
</package>
<package pkgid="0e68b2e3822c8f2acd7619ee35c5a004d68c3f67c03072933db764f6719a6033f97895685bcda9b5beca21089005accb62862ab950d7036e387fa5019a8df3b7" name="regionServiceClientConfigGCE" arch="noarch">
  <version epoch="0" ver="5.2.0" rel="160000.1.1"/>
  <changelog author="rjschwei@suse.com" date="1588939200">- Update to version 3.0.0 (bsc#1171467, bsc#1171469)
  + Unify the configuration between SLES and SLES For SAP</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 3.0.1 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 4.0.0 (bsc#1199668)
  + Move the cert location to /usr for compatibility with ro setup of
    SLE-Micro
  + Fix url in spec file to pint to the proper location of the source</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 4.0.1 (bsc#1217538)
  + Replace 130.211.242.136.pem and 130.211.88.88.pem certs
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that
    expire soon</changelog>
  <changelog author="jesus.bv@suse.com" date="1715256000">- Update to version 4.1.0 (bsc#1217538)
  + Replace 162.222.182.90 and 35.187.193.56 (length 4096):
    rgnsrv-gce-asia-northeast1 -&gt; 162.222.182.90 expires in 9 years
    rgnsrv-gce-us-central1 -&gt; 35.187.193.56 expires in 10 years</changelog>
  <changelog author="rjschwei@suse.com" date="1722168000">- Version 4.2.0 (jsc#PCT-361)
  + Add IPv6 certs to supprt access of the update infrastructure via
    IPv6 on GCE instances.
  + Add noipv6.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1746619200">- Update conditional to handle name change of metadata package
  in SLE 16 (bsc#1242063)</changelog>
  <changelog author="rjschwei@suse.com" date="1756296000">- Update to version 5.0.0 (bsc#1246995)
  + SLE 16 python-requests requires SSL v3 certificates. Update 2
    region server certs to support SLE 16 when it gets released.</changelog>
  <changelog author="sean.marlow@suse.com" date="1769601600">- Update to version 5.1.0 (jsc#PCT-590)
  + Add licenses info in the metdata
- Accomodate build setup</changelog>
  <changelog author="sean.marlow@suse.com" date="1770292800">- Update to version 5.2.0
  + Drop the if condition for gcemetdata requirement</changelog>
</package>
<package pkgid="519572149f8ddc7cbee5fe93c5f13236c208a754fe982cc74ab9fa9070df0d008e3737b23f26a434fc602b816fdf511495d334fa784b299b49284bb50449e663" name="registries-conf-default" arch="noarch">
  <version epoch="0" ver="20250409" rel="160000.2.2"/>
  <changelog author="meissner@suse.com" date="1710936000">- reenable SUSE registry key validation for new key.</changelog>
  <changelog author="danish.prakash@suse.com" date="1712577600">- Add patch to keep containers.conf modifications in sync with upstream (bsc#1213556)
  + 0001-containers.conf-SUSE-clear-cni-config-dir-for-ALP.patch
- Fallback to podman's default capabilities and journal driver via containers.conf
- New release 20240408
- bump bundled c/common to 0.58.0
- bump bundled c/image to 5.30.0
- bump bundled c/storage to 1.53.0</changelog>
  <changelog author="danish.prakash@suse.com" date="1713960000">- Introduce new subpackage that ships registries.conf that uses
  registry.suse.com as the only unqualified registry while pulling images on
  SL Micro and SP6. (jsc#SMO-376, jsc#PED-8289)</changelog>
  <changelog author="danish.prakash@suse.com" date="1718712000">- Move the following distro configs files to /usr/share/containers/:
  * /etc/containers/mounts.json
  * /etc/containers/storage.conf
  * /etc/containers/seccomp.json
- New release 20240618
- bump bundled c/common to 0.59.1
- bump bundled c/image to 5.31.0
- bump bundled c/storage to 1.54.0</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- update storage.conf &amp; containers.conf to latest versions from upstream
  The only functional changes are in storage.conf:
  * change storage.options.pull_options.enable_partial_images from false to true
  * change storage.options.overlay.mount_options from `mountopt =
    "nodev,metacopy=on"` to `mountopt = "nodev"`
- add download_files service to fetch the latest config on `osc service mr`
- add storage-conf-prio-list.patch that modifies the upstream storage.conf to
  add our storage driver priority list</changelog>
  <changelog author="danish.prakash@suse.com" date="1719230401">- While migrating config files from /etc/containers/ to /usr/share/containers/,
  preserve config files *if* modified by the user (fixes bsc#1226825).</changelog>
  <changelog author="dmueller@suse.com" date="1738929600">- fix shortnames.config by updating them from upstream</changelog>
  <changelog author="danish.prakash@suse.com" date="1744200000">- containers.conf default configuration modifications:
  * set runc as the default OCI runtime (bsc#1239088)
  * set nftables as the default firewall driver for netavark
- New release 20250409
  * bump bundled c/common to 0.59.1
  * bump bundled c/image to 5.31.0
  * bump bundled c/storage to 1.54.0</changelog>
  <changelog author="danish.prakash@suse.com" date="1748520000">- Sync containers.conf &amp; storage.conf with the current c/* versions
- Rename storage-conf-prio-list.patch to 0002-storage-conf-prio-list.patch
- Add patch to set SUSE defaults to containers.conf:
  * 0003-containers-conf-suse-defaults.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1752494400">- Remove subpackage libcontainers-sles-mounts and prevent auto mounting
  SUSEConnect credentials from host to container. SLE16 onwards, the idea is
  to expect users to explicitly mount secrets. (bsc#1246227)</changelog>
</package>
<package pkgid="0b5a51189bdbedd8d107fa4f0afc2f3972fa2df397996cdb87e2b49e122ff8e27a71956af71670deaab07b4a59ff833738fdb054ae79fe623771abb5c21adce2" name="restorecond" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="jsegitz@suse.com" date="1636977600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_restorecond.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1638446400">- Claim ownership for %{_sysconfdir}/selinux</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * Support parallel relabeling</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * Code improvements, no user visible changes
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="cathy.hu@suse.com" date="1701086400">- Change deprecated `%patch1 -p1` syntax to supported `%patch -P1 -p1`
  (bsc#1216669)</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * no changes from 3.6, only version changed to 3.7</changelog>
  <changelog author="cathy.hu@suse.com" date="1729771200">- Fix issue where inotify events are not being handled properly
  * added: 1231512-Set-GLib-IO-channels-to-binary-mode.patch
- Fix issue where restorecond -u is not terminating with SIGTERM (bsc#1231512)
  * added: 1231512-Set-GLib-IO-channels-to-nonblocking.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * No functional change
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Drop 1231512-Set-GLib-IO-channels-to-binary-mode.patch: included upstream
- Drop 1231512-Set-GLib-IO-channels-to-nonblocking.patch: included upstream
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
</package>
<package pkgid="257e11d6c76e6a24a877cda95df4d9f72333674bbae8e3efe98b57c409ab0418fb5a277e1171f49f888ce90ec4a2d2c13b38b2b84e7961c04c622b23834a6b15" name="rp-pppoe" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="ilya@ilya.cf" date="1510228800">- Refresh pppoe.spec via spec-cleaner.</changelog>
  <changelog author="ilya@ilya.cf" date="1511438400">- Add Requires/Requires(pre) group(dialout) (boo#1067511).
- Add %verify_permissions script for pppoe-wrapper.</changelog>
  <changelog author="ilya@ilya.cf" date="1520683200">- Refresh spec-file via spec-cleaner and manual optimisations.
- Add %license macro.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ilya@ilya.cf" date="1560772800">- Refresh spec-file via spec-cleaner and manual optimisations.
  * New URL and Source project.
  * Add pkgconfig for BuildRequires.
- Update rp-pppoe to version 3.13.
  * Fix potential use-after-free bug.
  * Properly detecte kernel-mode PPPoE.</changelog>
  <changelog author="ilya@ilya.cf" date="1590667200">- Refresh spec-file via spec-cleaner and manual optimisations.
  * Add make_build and autopatch macros.
  * Remove group tag and obsoleted conditions.
- Refresh and rename patches:
  * docdir.diff to rp-pppoe-3.14-docdir.patch
  * nonrfc-modems.diff to rp-pppoe-3.14-nonrfc-modems.patch
  * release-buildsystem.diff to rp-pppoe-3.14-release-buildsystem.patch
  * resolve-conf.diff to rp-pppoe-3.14-resolve-conf.patch
  * rp-pppoe-3.10-config.patch to rp-pppoe-3.14-config.patch
  * rp-pppoe-3.10-init.patch to rp-pppoe-3.14-init.patch
  * rp-pppoe-pie.patch to rp-pppoe-3.14-pie.patch
  * strip.diff to rp-pppoe-3.14-strip.patch
- Update to 3.14
  * Add -H and -M options for sending HURL and MOTM packets respectively.
  * Change VERSION macro to RP_VERSION to avoid conflict with pppd macro.</changelog>
  <changelog author="ilya@ilya.cf" date="1620475200">- Refreshed spec-file via spec-cleaner and manual optimisations.
  * Changed files: pppoe-connect, pppoe-setup, pppoe-status and
    pppoe-stop (replaced /var/run by /run).
- Updated to 3.15
  * Don't ignore SIGTERM and SIGINT.
    Send PADT and exit if one of those signals is received.
  * Switch from net-tools to iproute2.</changelog>
  <changelog author="ilya@ilya.cf" date="1646913600">- Removed Wants=network.target from pppoe.service (bsc#1196359).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- Converted usage of egrep to "grep -E" (boo#1203092).</changelog>
  <changelog author="fcrozat@suse.com" date="1684152000">- Updated to 4.0:
  * SPDX-License-Identifier: tags added to most source files
  * rp-pppoe.so plugin: Modified to compile against both pppd &gt;= 2.5.0 and
    pppd &lt; 2.5.0.
  * pppoe-server: If -L or -R option is specified as 0.0.0.0, then IP allocation
    is delegated to pppd.
  * pppoe-server: New -g option specifies the path of the rp-pppoe.so plugin to
    use with pppd in kernel-mode PPPoE.
  * pppoe-server: New -U option specifies a UNIX-domain control socket.  This
    lets you send control commands to the server while it is running; see the
    pppoe-server man page for details.
  * All source code: Many cleanups and use of standard types like uint16_t rather
    than ones we define.
  * All source code: Support for OSes other than Linux has been dropped.
  * Documentation: Updated from modern Linux systems.
  * Cleanup: The following old and obsolete files have been removed:
  - Old connection scripts scripts/pppoe-connect.in, scripts/pppoe-start.in,
    scripts/pppoe-init-suse.in, scripts/pppoe-setup.in, scripts/pppoe-status,
    scripts/pppoe-init.in, and scripts/pppoe-stop.in
  * Obsolete firewall scripts configs/firewall-standalone and
    configs/firewall-masq
  - Obsolete configuration files configs/pppoe.conf and configs/pap-secrets
  - The Tcl/Tk gui script gui/tkpppoe.in and supporting files
  - The RPM spec file rp-pppoe.spec
- Drop rp-pppoe-3.14-nonrfc-modems.patch, rp-pppoe-3.14-resolve-conf.patch,
  rp-pppoe-3.14-config.patch, rp-pppoe-3.14-init.patch,
  patched scripts no longer exists.
- Drop rp-pppoe-3.14-release-buildsystem.patch, rp-pppoe-3.14-pie.patch
  rp-pppoe-3.14-strip.patch, no longer needed.</changelog>
</package>
<package pkgid="b828e91d106e94cbf09390650915748c1f93c9ae8c8379094ac2b0f6bd0bce7e769a8dda190914d86b3090b5dfbb051d2ebdd16f5e6c2526c528eab86dbdaf0f" name="rpcbind" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="160000.2.2"/>
  <changelog author="Thomas.Blume@suse.com" date="1560340800">- change rpcbind locking path from /var/run/rpcbind.lock to
  /run/rpcbind.lock (bsc#1134659)
  add 0001-change-lockingdir-to-run.patch
- change the order of socket/service in the %postun scriptlet to
  avoid an error from rpcbind.socket when rpcbind is running
  during package update</changelog>
  <changelog author="kukuk@suse.com" date="1583755200">- rpc-user.conf: use sysusers method to create rpc user
- Minimize dependencies for container usage</changelog>
  <changelog author="pvorel@suse.cz" date="1591358400">- Enable debug (--enable-debug, needed for getting messages with -d)</changelog>
  <changelog author="fvogt@suse.com" date="1618315200">- Specify the appropriate set of local nss modules (boo#1177461)</changelog>
  <changelog author="pvorel@suse.cz" date="1621252800">- Update to rpcbind 1.2.6
- Remove 0031-rpcbind-manpage.patch (accepted upstream in commit 4bedcee)
- Drop pmap_set.c (installed as pmap_set2): bnc#446388 is from 2008, for
  openSUSE 11.
- Refresh 0001-change-lockingdir-to-run.patch
- Replace %setup with %autosetup</changelog>
  <changelog author="gmbr3@opensuse.org" date="1624276800">- Add now working CONFIG parameter to sysusers generator
- UsrMerge changes</changelog>
  <changelog author="jsegitz@suse.com" date="1637064000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rpcbind.service.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Remove unused libnsl build requires</changelog>
  <changelog author="thomas.blume@suse.com" date="1739793600">- Require system-user-nobody for as the rpc user relies on `nobody`
  from this package
- Update to rpcbind 1.2.7
  * rpcinfo: try connecting using abstract address
  * Listen on an AF_UNIX abstract address if supported
  * autotools/systemd: call rpcbind with -w only on enabled warm starts
  * rpcbind: fix double free in init_transport
- Refresh and rename patches (while turning them into git patches)
  * 0001-systemd-unit-files.patch -&gt; 0001-systemd-rpcbind.service-Fix-ordering-add-etc-sysconf.patch
  * harden_rpcbind.service.patch -&gt; 0001-systemd-rpcbind.service-Add-hardening-bsc-1181400.patch</changelog>
</package>
<package pkgid="a53fe464162ff82cb1787083a8f019a1cb5a00b3cc6579db28986ff26186d331f15ee3aad4e939de8304b8d70c6b9cf2bc1b012ffe8f48e15c00fc2617959800" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.20.1" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1736251200">- make misuses of %global with %buildroot work again
  * new patch: undefbuildroot.diff</changelog>
  <changelog author="adrian@suse.de" date="1738238400">- enable config.guess/sub update also for loongarch64 architecture
- update config.guess/sub files to current state from autoconf-2.72</changelog>
  <changelog author="mls@suse.de" date="1738238401">- Split unshare plugin configuration into a new "rpm-plugin-unshare"
  subpackage. This disables the plugin unless the new package
  is installed.</changelog>
  <changelog author="mls@suse.de" date="1738584000">- allow to have the primary binding signature in the unhashed area
  * updated rpmpgp_legacy-1.0.tar.gz to rpmpgp_legacy-1.1.tar.gz</changelog>
  <changelog author="mls@suse.de" date="1739361600">- make the rpm package not depend on libarchive
  * move the rpmuncompress tool to rpm-build
  * rewrite rpm2archive to not use libarchive for cpio/tar writing
  * new patch: rpm2archive.diff
- revert buildroot macro setting that did more harm than good
- add set_to_buildtime and set_to_source_date_epoch mtime policy
  support
  * new patch: mtime_policy_set.diff
- drop unused 0001-Add-option-to-set-mtime-of-files-in-rpms.patch
  patch
- do not output debug messages in rpmspec -q if a buildsystem is
  used
  * new patch: buildsys.diff</changelog>
  <changelog author="mls@suse.de" date="1741348800">- update to rpm-4.20.1
  * add support for fully locked user accounts in sysusers.d
  * fix unmodified %config files being removed in case of an
    unpack failure
  * fix lua deprecation warnings being shown packages built with
    old rpm versions
  * ignore all files in macro directories that do not end with an
    alphanumeric character
- refreshed patches:
  * rpmqpack.diff
  * unshare.diff
  * rpm2archive.diff
- dropped patches:
  * debugpackage.diff
  * nextfiles.diff
  * buildsys.diff</changelog>
  <changelog author="mls@suse.de" date="1742990400">- Backport check_c_compiler_flag cmake tests fix from upstream
  The old code would pick up -fhardened by accident
  * new patch: cmake_fhardened.diff</changelog>
  <changelog author="mls@suse.de" date="1745582400">- print scriptlet messages in --runposttrans
  * needed to fix leaking tmp files [bsc#1218459]
  * updated patch: posttrans.diff
- backport architecture check fix from upstream
  * new patch: archcheck.diff
- backport empty password fix from upstream
  * new patch: emptypw.diff
- backport buildsys specific prep fix from upstream
  * new patch: buildsysprep.diff
- fix memory leak in str2locale [bsc#1241052]
  * updated patch: localetag.diff</changelog>
  <changelog author="mls@suse.de" date="1747828800">- fix posttrans scriptlet argument in the update case [bsc#1243279]
  * updated patch: posttrans.diff
- fix postuntrans scriptlets not being run if dump_posttrans is set</changelog>
  <changelog author="mls@suse.de" date="1748865600">- use the pubkey modification time instead of the creation time
  as the release number, as it was with older rpm versions
  * new patch: pgpreleasemtime.diff</changelog>
</package>
<package pkgid="294d314484e5808ff4f75e687fa4af33bd8dfeaf1ed765f4986e3670b23f3034da7516edfbcdd26081b38323fd0d2aed9a25f2be89fad1f56988df7f73f67e48" name="rpm-config-SUSE" arch="noarch">
  <version epoch="0" ver="20250328" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1664193600">- Update to version 20220926:
  * Revert macros.debuginfo and prefer a direct rpm patch
  * Fix kernel builds after #59
  * Redefine %__debug_install_post to simplify debuginfo setup
  * Fix bug not using custom name for summary and description in language packages (boo#1137381)</changelog>
  <changelog author="lnussel@suse.de" date="1689163200">- Update to version 20230712:
  * Add more prjconf macros
  * update comment about _lto_cflags
  * drop %usrmerged macro (boo#1206798)
  * Fix SLE sbat macros used on Leap (bsc#1198458)</changelog>
  <changelog author="lnussel@suse.com" date="1705320000">- Update to version 20240115:
  * macros.initrd: %regenerate_initrd_post: don't fail if mkdir is unavailable
  * scripts: Do full ksyms dependencies on Tumbleweed (bsc#1215015)</changelog>
  <changelog author="lnussel@suse.com" date="1705579200">- Update to version 20240118:
  * find-provides.ksyms: Fix ksym provides on Tumbleweed/ALP</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1707912000">- Update to version 20240214:
  * set_permissions: handle chkstat failure more grateful (bsc#1219736)</changelog>
  <changelog author="bwiedemann@suse.com" date="1723118400">- Use a deterministic binarychangelogtrim
  based on build times of BuildRequires (boo#1047218)</changelog>
  <changelog author="dmueller@suse.com" date="1730376000">- Update to version 20241031:
  * Drop {set,verify}_permissions macros
  * Strip the explicit /bin/bash dependency for ksym macros
  * locale.prov: handle glibc-locale-base (boo#1221250)
  * lang_package: Add 'basename' option
  * %requires_eq|ge(): Report error if package version cannot be determined</changelog>
  <changelog author="dmueller@suse.com" date="1730376001">- Update to version 20241031:
  * Merge in changes that already happened in the package</changelog>
  <changelog author="dmueller@suse.com" date="1742817600">- Update to version 20250324:
  * Define %jobs as variable (boo#1237231)
  * %requires_eq|ge(): Fix multiline output
  * Split the SUSE distribution version macros to a separate file</changelog>
  <changelog author="dmueller@suse.com" date="1743163200">- Update to version 20250328:
  * Revert "Define %jobs as variable (boo#1237231)"
  * Create the directory for rpm macros installation in install</changelog>
</package>
<package pkgid="02b41aae420b77311f000d064bf569eb2415b0828da477782e01062081d5e4773114720d3bf841db366a2085f52f8b1f5ad8edb5e091fec1ca1f95093bce505b" name="rsync" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="160000.2.3"/>
  <changelog author="mail+rpm@georg-pfuetzenreuter.net" date="1725537600">- Add rsyncd-return-from-list-command-with-0.patch to not treat #list as failure</changelog>
  <changelog author="meissner@suse.com" date="1725624000">- rsync-gcc14.patch: fixed the ipv6 configure check (bsc#1230156)</changelog>
  <changelog author="angel.yankov@suse.com" date="1736424000">- Security update, fix multiple vulnerabilities:
  * CVE-2024-12084, bsc#1234100 - Heap Buffer Overflow in Checksum Parsing
  * CVE-2024-12085, bsc#1234101 - Info Leak via uninitialized Stack contents defeats ASLR
  * CVE-2024-12086, bsc#1234102 - Server leaks arbitrary client files
  * CVE-2024-12087, bsc#1234103 - Server can make client write files outside of destination directory using symbolic links
  * CVE-2024-12088, bsc#1234104 - --safe-links Bypass
  * Added rsync-CVE-2024-12084-overflow-01.patch
  * Added rsync-CVE-2024-12084-overflow-02.patch
  * Added rsync-CVE-2024-12085.patch
  * Added rsync-CVE-2024-12086_01.patch
  * Added rsync-CVE-2024-12086_02.patch
  * Added rsync-CVE-2024-12086_03.patch
  * Added rsync-CVE-2024-12086_04.patch
  * Added rsync-CVE-2024-12087_01.patch
  * Added rsync-CVE-2024-12087_02.patch
  * Added rsync-CVE-2024-12088.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1736856000">- Security update,CVE-2024-12747, bsc#1235475 race condition in handling symbolic links
  * Added rsync-CVE-2024-12747.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1736942400">- Update to 3.4
  * Bump to protocol 32
  Drop CVE patches:
  * Drop rsync-gcc14.patch
  * Removed rsync-CVE-2024-12084-overflow-01.patch
  * Removed rsync-CVE-2024-12084-overflow-02.patch
  * Removed rsync-CVE-2024-12085.patch
  * Removed rsync-CVE-2024-12086_01.patch
  * Removed rsync-CVE-2024-12086_02.patch
  * Removed rsync-CVE-2024-12086_03.patch
  * Removed rsync-CVE-2024-12086_04.patch
  * Removed rsync-CVE-2024-12087_01.patch
  * Removed rsync-CVE-2024-12087_02.patch
  * Removed rsync-CVE-2024-12088.patch
  * Removed rsync-CVE-2024-12747.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1736942401">- Backport patch from PR 705 to fix broken handling of hashes and
  hard links:
  * Add 705.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1737028800">- update to 3.4.1
  * fixed handling of -H flag with conflict in internal flag values
    (replaces 705.patch)
  * fixed a user after free in logging of failed rename
  * fixed build on systems without openat()
  * removed dependency on alloca() in bundled popt</changelog>
  <changelog author="ecsos@opensuse.org" date="1737115200">- Update to 3.4.1
  * BUG FIXES:
  - fixed handling of -⁠H flag with conflict in internal flag values
  - fixed a user after free in logging of failed rename
  - fixed build on systems without openat()
  - removed dependency on alloca() in bundled popt
  * DEVELOPER RELATED:
  - fix to permissions handling in the developer release script
- Drop 705.patch, because now in upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="hsk17@mail.de" date="1743163200">- Add rsync341-gcc15-bool.patch to fix gcc15 compile time error</changelog>
</package>
<package pkgid="3d79f3a7320bd5eb7bd6e95c113b518ba5475d04630f7d44a4535a61e475c940011ea87a8405f594a62f7aa46e6ae27f61e361df863b245203191cf21eeaa0a5" name="rt-tests" arch="x86_64">
  <version epoch="0" ver="2.8" rel="160000.2.2"/>
  <changelog author="daniel.wagner@suse.com" date="1627560000">- Enable build on all architectures.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1630411200">- Update to upstream version v2.2
  * signaltest: Fix JSON output latency values for 32bit machines
  * oslat: Don't take trace_threshold into account during preheat
  * sched_deadline: Update HRTICK_DL location
  * Allow static builds by dropping dependency on pthread_getaffinity_np</changelog>
  <changelog author="pvorel@suse.cz" date="1669291200">- Update to upstream version v2.4
  https://lore.kernel.org/linux-rt-users/20220708150017.13462-1-jkacur@redhat.com/
- Update to upstream version v2.3
  https://lore.kernel.org/linux-rt-users/20211210184649.11084-1-jkacur@redhat.com/
- Remove old patch rt-tests-1.10-Makefile.patch, which installed
  src/cyclictest/get_cyclictest_snapshot.8. Upstream guarded it with PYLIB in
  3d1976b ("Makefile: manpages: only add get_cyclictest_snapshot if PYLIB")
  but PYLIB should be defined due BuildRequires:  python3-base
- Backport runtime fixes from upcomming release:
  * 0001-cyclictest-Fix-threads-being-affined-even-when-a-isn.patch
  * 0002-rt-tests-Remove-arbitrary-num-of-threads-limits.patch
  * 0003-rt-tests-hackbench-Add-error-checking-to-connect-and.patch
  * 0004-rt-tests-hwlatdetect-Update-to-integer-division.patch
- Use %autosetup (not having to add -p1 for patches)</changelog>
  <changelog author="mpluskal@suse.com" date="1669377600">- Use sources which are actually published</changelog>
  <changelog author="mpluskal@suse.com" date="1681819200">- Update to version 2.5:
  https://lore.kernel.org/linux-rt-users/20230120205220.26218-1-jkacur@redhat.com/T/#u
- Drop upstreamed patches:
  * 0001-cyclictest-Fix-threads-being-affined-even-when-a-isn.patch
  * 0002-rt-tests-Remove-arbitrary-num-of-threads-limits.patch
  * 0003-rt-tests-hackbench-Add-error-checking-to-connect-and.patch
  * 0004-rt-tests-hwlatdetect-Update-to-integer-division.patch</changelog>
  <changelog author="andrea.manzini@suse.com" date="1706702400">- Update to version 2.6:
  https://lore.kernel.org/linux-rt-users/20231006200345.53658-1-jkacur@redhat.com/</changelog>
  <changelog author="pvorel@suse.cz" date="1720353600">- Update to version 2.7:
  https://lore.kernel.org/linux-rt-users/20240507144229.42909-1-jkacur@redhat.com/
- Start using xz tarball (instead of gz)</changelog>
  <changelog author="pvorel@suse.cz" date="1721736000">- Fix archive URL</changelog>
  <changelog author="pvorel@suse.cz" date="1736337600">- Revert back to tar.gz from git.kernel.org (2.7 was moved to "older" subfolder
  in https://mirrors.kernel.org, it shows it's not stable URL).</changelog>
  <changelog author="pvorel@suse.cz" date="1736337601">- Update to version 2.8:
  https://lore.kernel.org/linux-rt-users/20241128215059.40116-1-jkacur@redhat.com/</changelog>
</package>
<package pkgid="4eb1e8a31e3395d8084c2a4bd2a8dc7b18a5773dc53b0ea5eef1260598883d05337cbe8c3a9d90d412a11deeae0a91eb5863119a31cec96fcb0f973f0b32bc58" name="runc" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="160000.1.1"/>
  <changelog author="asarai@suse.com" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="asarai@suse.com" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="asarai@suse.com" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="asarai@suse.com" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="asarai@suse.com" date="1764331200">- Update to runc v1.3.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.4&gt;. bsc#1254362</changelog>
</package>
<package pkgid="5b3162ed9e54ee603edc98a87a0ecfeeb766f764885951889456145dcc6fcc7b2d06eac507ad43f29954fe3ba7416712e11ea0fc3931b069dbe34f4de4abbbd6" name="rust-keylime" arch="x86_64">
  <version epoch="0" ver="0.2.9+8" rel="160000.1.1"/>
  <changelog author="aplanas@suse.com" date="1725278400">- Update vendored crates (bsc#1229952, bsc#1230029, CVE-2024-43806)
  * rustix 0.37.25
  * rustix 0.38.34
  * shlex  1.3.0
- Update to version 0.2.6+13:
  * Enable test functional/iak-idevid-persisted-and-protected
  * build(deps): bump uuid from 1.7.0 to 1.10.0
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * keylime-agent/src/revocation: Fix comment indentation
  * keylime/crypto: Fix indentation of documentation comment
  * build(deps): bump thiserror from 1.0.59 to 1.0.63
  * build(deps): bump serde_json from 1.0.116 to 1.0.120
  * dependabot: Extend to also monitor workflow actions
  * ci: Disable Packit CI on CentOS Stream 9
  * ci: use CODECOV_TOKEN when submitting coverage data
  * revocation: Use into() for unfallible transformation
  * secure_mount: Fix possible infinite loop
  * error: Rename enum variants to avoid clippy warning</changelog>
  <changelog author="aplanas@suse.com" date="1737979200">- Update to version 0.2.7+1:
  * dist: Enable logging for keylime library in the service
  * Bump version to 0.2.7
  * scripts: Download coverage data from Testing Farm directly
  * main: Remove unnecessary lifetime
  * cargo: Bump pretty_env_logger to version 0.5.0
  * scripts: Fix regex in download_packit_coverage.sh
  * cargo: Bump clap crate to version 4.5.23
  * cargo: Bump base64 crate to version 0.22.1
  * build(deps): bump log from 0.4.22 to 0.4.25
  * build(deps): bump serde_json from 1.0.133 to 1.0.135
  * cargo: Bump tokio crate to version 1.42.0
  * packit: Fix RPM builds on copr
  * cargo: Bump thiserror crate to version 0.2.9
  * cargo: Update reqwest to version 0.12.12
  * build(deps): bump libc from 0.2.168 to 0.2.169
  * build(deps): bump glob from 0.3.1 to 0.3.2
  * version: Implement API version validation and ordering
  * main: Support using multiple API versions for registration
  * keylime: Introduce the registrar_client module
  * Provide endpoints under multiple API versions
  * Move 'serialization' module to the keylime library
  * Drop unnecessary dependency on common::API_VERSION
  * keylime-agent.conf: Bump version to 2.3
  * build(deps): bump serde from 1.0.210 to 1.0.217
  * build(deps): bump pest_derive from 2.7.14 to 2.7.15
  * build(deps): bump pest from 2.7.14 to 2.7.15
  * build(deps): bump libc from 0.2.167 to 0.2.168
  * config: Make IAK and IDevID certificates optional
  * Fix warnings reported by clippy
  * workflows: Run job in the CI container directly
  * tests: Add unit test for device ID builder
  * main: Move IAK/IDevID related code to dedicated module
  * tests: Add script to generate IAK and IDevID certificates
  * build(deps): bump openssl from 0.10.66 to 0.10.68
  * build(deps): bump uuid from 1.10.0 to 1.11.0
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * build(deps): bump actix-web from 4.5.1 to 4.9.0
  * build(deps): bump reqwest from 0.12.7 to 0.12.9
  * tests/setup_swtpm.sh: Add script to setup temporary TPM
  * Use a single TPM context and avoid race conditions during tests
  * config: Enable passing a hostname instead of IP
  * build(deps): bump clap from 4.3.11 to 4.5.21
  * build(deps): bump tempfile from 3.10.1 to 3.14.0
  * build(deps): bump pest_derive from 2.7.6 to 2.7.14
  * build(deps): bump pest from 2.7.6 to 2.7.14
  * build(deps): bump codecov/codecov-action from 4 to 5
  * workflows: Submit the coverage for merged PR from Fedora 41
  * tests: Use Fedora 41 to generate code coverage
  * api: Make API configuration modular
  * agent_handler: Move the /agent scope configuration
  * notifications_handler: Move the /notifications scope configuration
  * quotes_handler: Move the /quotes scope configuration to quotes_handler
  * keys_handler: Move /keys scope configuration to keys_handler
  * Use ${DESTDIR} for config
  * Fix showing wrong UUID
  * build(deps): bump actix-rt from 2.9.0 to 2.10.0
  * config: Refactor AgentConfig Source trait implementation
  * build(deps): bump log from 0.4.21 to 0.4.22
  * build(deps): bump serde_json from 1.0.120 to 1.0.128
  * tpm: check if EK certificate has valid ASN.1 DER encoding
  * build(deps): bump futures from 0.3.27 to 0.3.31
  * cargo: Bump reqwest to version 0.12.7
  * build(deps): bump serde from 1.0.203 to 1.0.210
  * tests: Add more tests to Packit CI
  * build(deps): bump docker/build-push-action from 5 to 6
  * tests: apply workarounds to known bugs</changelog>
  <changelog author="aplanas@suse.com" date="1749124800">- Update vendored crates (bsc#1243861, CVE-2024-12224)
  * idna 1.0.3
- Add Cargo_lock.patch to adjust versions that will allow the
  compilation of mbox crate
- Update to version 0.2.7+70:
  * build(deps): bump wiremock from 0.6.2 to 0.6.3
  * build(deps): bump uuid from 1.16.0 to 1.17.0
  * lib: Introduce AgentIdentity structure
  * gitignore: Add *.swp and *.orig to be ignored
  * build(deps): bump clap from 4.5.38 to 4.5.39
  * build(deps): bump tokio from 1.45.0 to 1.45.1
  * Unify Push Model structures time formats to UTC (#1016)
  * Add Quote related structures to Keylime library
  * Remove configuration file trailing whitespaces (#1012)
  * keylime-agent.conf: add all accepted TPM encryption algs
  * tpm: add policy auth for EK to activate crendential
  * Enable non standard key sizes and curves for EK and AK
  * config: Use next_back() instead of last() for iterators
  * Update to tss-esapi v7.6.0
  * Avoid duplicated call to ctx.create_ek
  * build(deps): bump clap from 4.5.23 to 4.5.38
  * Add registration for Push Model client
  * build(deps): bump tokio from 1.44.2 to 1.45.0
  * build(deps): bump chrono from 0.4.40 to 0.4.41
  * build(deps): bump tempfile from 3.17.1 to 3.20.0
  * Refactor code: move error, registration to lib
  * Move structure filling and URL selection code (#999)
  * build(deps): bump pest_derive from 2.7.15 to 2.8.0
  * build(deps): bump pest from 2.7.15 to 2.8.0
  * build(deps): bump libc from 0.2.169 to 0.2.172
  * Add Evidence/Authentication messages to prototype
  * build(deps): bump uuid from 1.15.1 to 1.16.0
  * build(deps): bump thiserror from 2.0.11 to 2.0.12
  * build(deps): bump signal-hook from 0.3.17 to 0.3.18
  * build(deps): bump log from 0.4.25 to 0.4.27
  * build(deps): bump assert_cmd from 2.0.16 to 2.0.17
  * build(deps): bump actix-web from 4.9.0 to 4.10.2
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * build(deps): bump serde from 1.0.217 to 1.0.219
  * Add unit tests for sessions.rs structures
  * Add auth(sessions) structures
  * Fix minor README.md issue (#988)
  * Define EvidenceHandling structures (#971)
  * Add mockoon test scenario
  * Add client certificates to push-attestation prototype
  * Cargo: bump url crate to version 2.5.4
  * Add logging to the push attestation prototype
  * Do not use certificate on insecure mode
  * common: Move the EncryptedData structure from common to the library
  * common: Move AuthTag from common to the library
  * build(deps): bump openssl from 0.10.71 to 0.10.72
  * common: Move Symmkey to library as crypto::symmkey
  * common: Remove unused constants and static values
  * build(deps): bump tokio from 1.43.0 to 1.44.2
  * Refactor code: Include AgentIdentity structure
  * Push model prototype
  * Add support for ek certificate chain, stored in TPM NVRAM.
  * Recover key_class field and set it as "asymmetric"
  * Update push model structures to latest values
  * build(deps): bump serde_json from 1.0.138 to 1.0.140
  * packit: Add identifier for each copr_build job
  * keylime-agent.conf: only mention ecdsa and rsassa for signing
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump uuid from 1.13.2 to 1.15.1
  * Add capabilities_negotiation structures
  * packit: Add compatibility/api_version_compatibility test
  * build(deps): bump uuid from 1.11.0 to 1.13.2
  * build(deps): bump serde_json from 1.0.135 to 1.0.138
  * build(deps): bump thiserror from 2.0.9 to 2.0.11
  * build(deps): bump tempfile from 3.14.0 to 3.17.1
  * Allow agent to start as non-root
  * scripts: Fix coverage information downloading script
  * build(deps): bump openssl from 0.10.68 to 0.10.70
  * build(deps): bump tokio from 1.42.0 to 1.43.0</changelog>
  <changelog author="aplanas@suse.com" date="1752494400">- Update vendored crates (bsc#1242623, CVE-2025-3416)
  * openssl 0.10.73
- Update to version 0.2.7+117:
  * Increase coverage in evidence handling structure
  * Add Capabilities Negotiations resp. missing fields
  * Fix UEFI test to check file access in all cases
  * context_info_handler: Do not assume /var/lib/keylime exists
  * Fix clippy warnings about uninlined format arguments
  * attestation: Allow unwrap() in tests
  * Increase coverage (groom code, extend unit tests)
  * Include IMA/UEFI logs in Evidence Handling request
  * Include method to get all IMA entries as string
  * Send correct list of pcr banks and sign algorithms
  * Try to fix TPM tests related issues
  * Define attestation perform asynchronous
  * Perform attestation in push model agent binary
  * Refactor code to use new attestation.rs
  * Create attestation.rs for Attestation stuff
  * Move ContextInfo management to its own handler
  * Adjust context_info.rs after rebase
  * Add attestation function to ContextInfo structure
  * Add prohibited signing algorithms, avoid ecschnorr
  * keylime/config: Use macro to implement PushModelConfigTrait
  * Introduce keylime-macros and define_view_trait
  * config: Remove KeylimeConfig structure
  * config: Remove unnecessary options and lazy initialization
  * Fix pcr_bank function to send all possible slots
  * Send Content-Type:application/json on request (#1039)
  * Send correct 'key_algorithm' in certification_keys (#1035)
  * Push Model: Persist Attestation Key to file
  * Add Keylime push model binary to root GNUmakefile
  * Use singleton to avoid multiple Context allocation
  * tests: Do not assume `/var/lib/keylime` exists (#1030)
  * lib/cert: Fix race condition due to use of same file path
  * payloads: Fix race condition in tests
  * Add uefi_log_handler.rs to parse UEFI binary
  * Use IMA log parser to send correct entry count
  * Add IMA log parser
  * build(deps): bump once_cell from 1.19.0 to 1.21.3
  * lib/config/base.rs: Add more unit tests
  * lib/permissions: Add unit tests
  * keylime-agent: move JsonWrapper from common.rs to the library
  * lib/agent_data: Move agent_data related tests from common
  * common: Replace APIVersion with the library Version structure
  * keylime_agent: Move secure_mount.rs to the library
  * lib: Rename keylime_error.rs as error.rs
  * config: Move config to keylime library
  * config: Rename push_model_config to push_model
  * lib: Move permissions.rs from keylime-agent to the lib
  * Extract Capabilities Negotiation info from TPM (#1014)</changelog>
  <changelog author="aplanas@suse.com" date="1754568000">- Update vendored crates (bsc#1247193, CVE-2025-58266)
  * shlex 1.3.0
- Rebase keylime-agent.conf.diff for current configuration
- Drop Cargo_lock.patch patch, already present in Cargo.lock
- Update to version 0.2.7+141:
  * service: Use WantedBy=multi-user.target
  * rpm: Add subpackage for push-attestation agent
  * push-model: implement continuous attestation with configurable intervals
  * Retry registration forever in the state machine
  * Add Verifier URL to configuration
  * Align exp.backoff to current configuration format
  * Increase coverage of state machine (using Context)
  * Increase coverage of struct_filler.rs
  * Groom code (remove dead code)
  * Fix exponential backoff (10secs, 4xx accepted)
  * test: Add documentation test to tests/run.sh
  * tpm: Avoid running code example during documentation tests
  * state_machine: Always start the agent from the Unregistered state
  * Add fixes for the URL construction
  * Refactor evidences collection in push attestation agent
  * push-model: refactor attestation logic into a state machine
  * Fix body sending by allowing serializing strings (#1057)
  * Log ResilientClient errors/response status codes (#1055)
  * Add AK signing scheme and hash algorithm to negotiation
  * tpm: Add method to extract signing scheme and hash algorithm from AK
  * Allow custom content-type/accept headers
  * Integrate exponential backoff to registration (#1052)
  * keylime/structures: Rename ShaValues to PcrBanks
  * Add resilient_client for exponential backoff (#1048)</changelog>
  <changelog author="aplanas@suse.com" date="1755691200">- Update vendored crates (bsc#1248006, CVE-2025-55159)
  * slab 0.4.11
- Add Cargo_lock.patch patch to update slab and other dependencies
- Update to version 0.2.8+12:
  * build(deps): bump actions/checkout from 4 to 5
  * build(deps): bump cfg-if from 1.0.0 to 1.0.1
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump clap from 4.5.39 to 4.5.45
  * build(deps): bump pest from 2.8.0 to 2.8.1
  * Fix clippy warnings
  * Use verifier-provided interval for continuous attestation timing
  * Add meta object with seconds_to_next_attestation to evidence response
  * Fix boot time retrieval
  * Fix IMA log format (it must be ['text/plain']) (#1073)
  * Remove unnecessary configuration fields
  * cargo: Bump retry-policies to version 0.4.0
  * Bump version to 0.2.8</changelog>
  <changelog author="aplanas@suse.com" date="1767787200">- Use tmpfiles.d for /var directories (PED-14736)
  + tmpfiles.keylime renamed to rust-keylime.conf and extended
- Update to version 0.2.8+96:
  * build(deps): bump wiremock from 0.6.4 to 0.6.5
  * build(deps): bump actions/checkout from 5 to 6
  * build(deps): bump chrono from 0.4.41 to 0.4.42
  * packit: Get coverage from Fedora 43 runs
  * Fix issues pointed out by clippy
  * Replace mutex unwraps with proper error handling in TPM library
  * Remove unused session request methods from StructureFiller
  * Fix config panic on missing ek_handle in push model agent
  * build(deps): bump tempfile from 3.21.0 to 3.23.0
  * build(deps): bump actions/upload-artifact from 4 to 6 (#1163)
  * Fix clippy warnings project-wide
  * Add KEYLIME_DIR support for verifier TLS certificates in push model agent
  * Thread privileged resources and use MeasurementList for IMA reading
  * Add privileged resource initialization and privilege dropping to push model agent
  * Fix privilege dropping order in run_as()
  * add documentation on FQDN hostnames
  * Remove confusing logs for push mode agent
  * Set correct default Verifier port (8891-&gt;8881) (#1159)
  * Add verifier_url to reference configuration file (#1158)
  * Add TLS support for Registrar communication (#1139)
  * Fix agent handling of 403 registration responses (#1154)
  * Add minor README.md rephrasing (#1151)
  * build(deps): bump actions/checkout from 5 to 6 (#1153)
  * ci: update spec files for packit COPR build
  * docs: improve challenge encoding and async TPM documentation
  * refactor: improve middleware and error handling
  * feat: add authentication client with middleware integration
  * docker: Include keylime_push_model_agent binary
  * Include attestation_interval configuration (#1146)
  * Persist payload keys to avoid attestation failure on restart
  * crypto: Implement the load or generate pattern for keys
  * Use simple algorithm specifiers in certification_keys object (#1140)
  * tests: Enable more tests in CI
  * Fix RSA2048 algorithm reporting in keylime agent
  * Remove disabled_signing_algorithms configuration
  * rpm: Fix metadata patches to apply to current code
  * workflows/rpm.yml: Use more strict patching
  * build(deps): bump uuid from 1.17.0 to 1.18.1
  * Fix ECC algorithm selection and reporting for keylime agent
  * Improve logging consistency and coherency
  * Implement minimal RFC compliance for Location header and URI parsing (#1125)
  * Use separate keys for payload mechanism and mTLS
  * docker: update rust to 1.81 for distroless Dockerfile
  * Ensure UEFI log capabilities are set to false
  * build(deps): bump http from 1.1.0 to 1.3.1
  * build(deps): bump log from 0.4.27 to 0.4.28
  * build(deps): bump cfg-if from 1.0.1 to 1.0.3
  * build(deps): bump actix-rt from 2.10.0 to 2.11.0
  * build(deps): bump async-trait from 0.1.88 to 0.1.89
  * build(deps): bump trybuild from 1.0.105 to 1.0.110
  * Accept evidence handling structures null entries
  * workflows: Add test to check if RPM patches still apply
  * CI: Enable test add-agent-with-malformed-ek-cert
  * config: Fix singleton tests
  * FSM: Remove needless lifetime annotations (#1105)
  * rpm: Do not remove wiremock which is now available in Fedora
  * Use latest Fedora httpdate version (1.0.3)
  * Enhance coverage with parse_retry_after test
  * Fix issues reported by CI regarding unwrap() calls
  * Reuse max retries indicated to the ResilientClient
  * Include limit of retries to 5 for Retry-After
  * Add policy to handle Retry-After response headers
  * build(deps): bump wiremock from 0.6.3 to 0.6.4
  * build(deps): bump serde_json from 1.0.140 to 1.0.143
  * build(deps): bump pest_derive from 2.8.0 to 2.8.1
  * build(deps): bump syn from 2.0.90 to 2.0.106
  * build(deps): bump tempfile from 3.20.0 to 3.21.0
  * build(deps): bump thiserror from 2.0.12 to 2.0.16
  * rpm: Fix patches to apply to current master code
  * build(deps): bump anyhow from 1.0.98 to 1.0.99
  * state_machine: Automatically clean config override during tests
  * config: Implement singleton and factory pattern
  * testing: Support overriding configuration during tests
  * feat: implement standalone challenge-response authentication module
  * structures: rename session structs for clarity and fix typos
  * tpm: refactor certify_credential_with_iak() into a more generic function
  * Add Push Model Agent Mermaid FSM chart (#1095)
  * Add state to avoid exiting on wrong attestation (#1093)
  * Add 6 alphanumeric lowercase X-Request-ID header
  * Enhance Evidence Handling response parsing
  * build(deps): bump quote from 1.0.35 to 1.0.40
  * build(deps): bump libc from 0.2.172 to 0.2.175
  * build(deps): bump glob from 0.3.2 to 0.3.3
  * build(deps): bump actix-web from 4.10.2 to 4.11.0</changelog>
  <changelog author="aplanas@suse.com" date="1770638400">- Update vendored crates (bsc#1257908, CVE-2026-25727)
  * time 0.3.47
- Update to version 0.2.8+116:
  * build(deps): bump bytes from 1.7.2 to 1.11.1
  * api: Modify /version endpoint output in version 2.5
  * Add API v2.5 with backward-compatible /v2.5/quotes/integrity
  * tests: add unit test for resolve_agent_id (#1182)
  * (pull-model): enable retry logic for registration
  * rpm: Update specfiles to apply on master
  * workflows: Add test to detect unused crates
  * lib: Drop unused crates
  * push-model: Drop unused crates
  * keylime-agent: Drop unused crates
  * build(deps): bump uuid from 1.18.1 to 1.19.0
  * Update reqwest-retry to 0.8, retry-policies to 0.5
  * rpm: Fix cargo_build macro usage on CentOS Stream
  * fix(push-model): resolve hash_ek uuid to actual EK hash
  * build(deps): bump thiserror from 2.0.16 to 2.0.17
  * workflows: Separate upstream test suite from e2e coverage
  * Send UEFI measured boot logs as raw bytes (#1173)
  * auth: Add unit tests for SecretToken implementation
  * packit: Enable push-attestation tests
  * resilient_client: Prevent authentication token leakage in logs</changelog>
  <changelog author="aplanas@suse.com" date="1774008000">- Update to version 0.2.9+8:
  * build(deps): bump thiserror from 2.0.17 to 2.0.18
  * build(deps): bump docker/login-action from 3 to 4
  * build(deps): bump docker/metadata-action from 5 to 6
  * Remove generate-bindings feature from tss-esapi
  * Use port constants instead of hardcoded values in tests
  * push-attestation: Use registrar TLS port when TLS is enabled
  * build(deps): bump docker/build-push-action from 6 to 7
  * build(deps): bump actions/upload-artifact from 6 to 7
  * dist: Make the services to conflict with each other
  * Bump version to 0.2.9
  * build(deps): bump mockoon/cli-action from 2 to 3
  * cargo: Bump tracing_subscriber to version 0.3.20
  * cargo: Bump time to version 0.3.47
  * build(deps): bump http from 1.3.1 to 1.4.0
  * Update reqwest from 0.12 to 0.13
  * build(deps): bump serde from 1.0.219 to 1.0.228
  * auth: Load CA certificate in authentication client
  * packit: Add missing e2e tests
  * registrar: Rename insecure option to disable_tls
  * push-attestation: Drop self-signed mTLS certificate generation
  * config: Add missing config options to keylime-agent.conf
  * config: Add support for "default" in registrar_api_versions option
  * config: Add support for "default" in registrar_tls_ca_cert option
  * config: Drop unused config options and constants
  * push-attestation: Drop support for mTLS to registrar
  * push-attestation: Drop mTLS support and require PoP authentication
  * build(deps): bump clap from 4.5.45 to 4.5.54
  * build(deps): bump actix-web from 4.11.0 to 4.12.1
  * auth: Reuse existing ContextInfo to avoid duplicate TPM objects
  * resilient_client: Reauthenticate if a 403 error is received</changelog>
  <changelog author="aplanas@suse.com" date="1774008001">- Suggests only the IMA policy package, and keep it as example (bsc#1259963)
- Add Cargo_toml.patch to re-generate TSS bindings</changelog>
</package>
<package pkgid="1c95afa9fe6f4b7ae22cfd87e605f010e6db3f8aec564275a68970f355abcad904627eb77c97fb74a6c6bb71491c862b19772124b73b36f49cbe6db33889a268" name="salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="160000.4.1"/>
  <changelog author="yeray.gutierrez@suse.com" date="1722600000">- Fix rich rule comparison in firewalld module (bsc#1222684)
- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Make auth.pam more robust with Salt Bundle and fix tests
- Fix performance of user.list_groups with many remote groups
- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Skip certain tests if necessary for some OSes and set flaky ones
- Add a timer to delete old env post update for venv-minion
- Several fixes for tests to avoid errors and failures in some OSes
- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Make "man" a recommended package instead of required
- Added:
  * provide-systemd-timer-unit.patch
  * make-logging-calls-lighter.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * improve-broken-events-catching-and-reporting.patch
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * several-fixes-for-tests-to-avoid-errors-and-failures.patch
  * fix-user.list_groups-omits-remote-groups.patch
  * some-more-small-tests-fixes-enhancements-661.patch
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch
  * firewalld-normalize-new-rich-rules-before-comparing-.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1727870400">- Fix failing x509 tests with OpenSSL &lt; 1.1
- Avoid explicit reading of /etc/salt/minion (bsc#1220357)
- Allow NamedLoaderContexts to be returned from loader
- Revert the change making reactor less blocking (bsc#1230322)
- Use --cachedir for extension_modules in salt-call (bsc#1226141)
- Prevent using SyncWrapper with no reason
- Fix the SELinux context for Salt Minion service (bsc#1219041)
- Set contextvars as a build requirement for package
- Increase warn_until_date date for code we still support
- The test_debian test now uses port 80 for ubuntu keyserver
- Fix too frequent systemd service restart in test_system test
- Avoid crash on wrong output of systemctl version (bsc#1229539)
- Improve error handling with different OpenSSL versions
- Remove redundant run_func from salt.master.MWorker._handle_aes
- Fix cloud minion configuration for multiple masters (bsc#1229109)
- Use Pygit2 id instead of deprecated oid in gitfs
- Fix few failing tests to work with both Salt and Salt bundle
- Skip testing unsupported OpenSSL crypto algorithms
- Added:
  * skip-more-tests-related-to-old-openssl-algorithms.patch
  * fix-the-selinux-context-for-salt-minion-service-bsc-.patch
  * allow-namedloadercontexts-to-be-returned-from-loader.patch
  * join-masters-if-it-is-a-list-671.patch
  * remove-redundant-run_func-from-salt.master.mworker._.patch
  * prevent-using-syncwrapper-with-no-reason.patch
  * fix-test_debian-to-work-in-our-infrastructure-676.patch
  * fix-x509-test-fails-on-old-openssl-systems-682.patch
  * make-tests-compatible-with-venv-bundle.patch
  * avoid-crash-on-wrong-output-of-systemctl-version-bsc.patch
  * revert-the-change-making-reactor-less-blocking-bsc-1.patch
  * avoid-explicit-reading-of-etc-salt-minion-bsc-122035.patch
  * improve-error-handling-with-different-openssl-versio.patch
  * replace-use-of-pygit2-deprecated-and-removed-1.15.0-.patch
  * fix-test_system-flaky-setup_teardown-fn.patch
  * use-cachedir-for-extension_modules-in-salt-call-bsc-.patch
  * fix-deprecated-code-677.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1742385600">- Fix aptpkg 'NoneType object has no attribute split' error
- Detect openEuler as RedHat family OS
- Ensure the correct crypt module is loaded
- Implement multiple inventory for ansible.targets
- Make x509 module compatible with M2Crypto 0.44.0
- Remove deprecated code from x509.certificate_managed test mode
- Move logrotate config to /usr/etc/logrotate.d where possible
- Add DEB822 apt repository format support
- Make Salt-SSH work with all SSH passwords (bsc#1215484)
- Fix issue of using update-alternatives with alts (#105)
- Fix virt_query outputter and add support for block devices
- Make _auth calls visible with master stats
- Repair mount.fstab_present always returning pending changes
- Set virtual grain in Podman systemd container
- Fix crash due wrong client reference on `SaltMakoTemplateLookup`
- Enhace batch async and fix some detected issues
- Enhacement of Salt packaging
  * Use update-alternatives for all salt scripts
  * Use flexible dependencies for the subpackages
  * Make salt-minion to require flavored zypp-plugin
  * Make zyppnotify to use update-alternatives
  * Drop unused yumnotify plugin
  * Add dependency to python3-dnf-plugins-core for RHEL based
- Fix tests failures after "repo.saltproject.io" deprecation
- Fix error to stat '/root/.gitconfig' on gitfs
  (bsc#1230944) (bsc#1234881) (bsc#1220905)
- Adapt to removal of hex attribute in pygit2 v1.15.0 (bsc#1230642)
- Enhance smart JSON parsing when garbage is present (bsc#1231605)
- Fix virtual grains for VMs running on Nutanix AHV (bsc#1234022)
- Fix issues running on Python 3.12 and 3.13
- Revert setting SELinux context for minion service (bsc#1233667)
- Remove System V init support
  * Make systemd the only supported init system by removing System V init
  and insserv references
  * Ensure package builds with no init system dependencies if built
  without systemd (for example for use in containers)
  * Apply some spec-cleaner suggestions (update copyright year, sort
  requirements, adjust spacing)
- Fix the condition of alternatives for Tumbleweed and Leap 16
- Use update-alternatives for salt-call and fix builing on EL8
- Build all python bindings for all flavors
- Make minion reconnecting on changing master IP (bsc#1228182)
- Handle logger exception when flushing already closed file
- Include passlib as a recommended dependency
- Make Salt Bundle more tolerant to long running jobs (bsc#1228690)
- Fix additional x509 tests and test_suse tests for SLE12
- Added:
  * fix-deb822-nonetype-object-has-no-attribute-split-71.patch
  * detect-openeuler-as-redhat-family-os.patch
  * ensure-the-correct-crypt-module-is-loaded.patch
  * implement-multiple-inventory-for-ansible.targets.patch
  * make-x509-module-compatible-with-m2crypto-0.44.0.patch
  * remove-deprecated-code-from-x509.certificate_managed.patch
  * add-deb822-apt-source-format-support-692.patch
  * remove-password-from-shell-after-functional-text-mat.patch
  * repair-virt_query-outputter-655.patch
  * make-_auth-calls-visible-with-master-stats-696.patch
  * repair-fstab_present-test-mode-702.patch
  * set-virtual-grain-in-podman-systemd-container-703.patch
  * fixed-file-client-private-attribute-reference-on-sal.patch
  * backport-batch-async-fixes-and-improvements-701.patch
  * fix-tests-failures-after-repo.saltproject.io-depreca.patch
  * fix-failed-to-stat-root-.gitconfig-issue-on-gitfs-bs.patch
  * update-for-deprecation-of-hex-in-pygit2-1.15.0-and-a.patch
  * enhance-find_json-garbage-filtering-bsc-1231605-688.patch
  * fix-virtual-grains-for-vms-running-on-nutanix-ahv-bs.patch
  * fix-issues-that-break-salt-in-python-3.12-and-3.13-6.patch
  * revert-setting-selinux-context-for-minion-service-bs.patch
  * make-minion-reconnecting-on-changing-master-ip-bsc-1.patch
  * handle-logger-flushing-already-closed-file-686.patch
  * enhance-cleanup-mechanism-after-salt-bundle-upgrade-.patch
  * fix-x509-private-key-tests-and-test_suse-on-sle12-68.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1751371200">- Prevent tests failures when pygit2 is not present
- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Fix Ubuntu 24.04 edge-case test failures
- Fix broken tests for Ubuntu 24.04
- Fix refresh of osrelease and related grains on Python 3.10+
- Make "salt" package to obsolete "python3-salt" package on SLE15SP7+
- Fix issue requiring proper Python flavor for dependencies and recommended package
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch
  * several-fixes-for-security-issues.patch
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch
  * fix-ubuntu-24.04-specific-failures-716.patch
  * fix-debian-tests-715.patch
  * fix-refresh-of-osrelease-and-related-grains-on-pytho.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762344000">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)
- Use versioned python interpreter for salt-ssh
- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Set python-CherryPy as required for python-salt-testsuite (#115)
- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- This reverts commit aa40615dcf7a15325ef71bbc09a5423ce512491d.
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch
  * use-versioned-python-interpreter-for-salt-ssh.patch
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Builds with py &gt;=3.13 require python-legacy-cgi
- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="alexander.graul@suse.com" date="1764158400">- Add minimum_auth_version to enforce security (CVE-2025-62349)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- Junos module yaml loader fix (CVE-2025-62348)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Extend warn_until period to 2027
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
</package>
<package pkgid="0b9be6877587ecd072c63d48415c1c72bfb796e42ee9a6731c228402851f760199381554eeb5c05e495efdc2dc1d66f5c1371854a24e1b3a23d9ea1d7b10eb68" name="salt-master" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="160000.4.1"/>
  <changelog author="yeray.gutierrez@suse.com" date="1722600000">- Fix rich rule comparison in firewalld module (bsc#1222684)
- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Make auth.pam more robust with Salt Bundle and fix tests
- Fix performance of user.list_groups with many remote groups
- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Skip certain tests if necessary for some OSes and set flaky ones
- Add a timer to delete old env post update for venv-minion
- Several fixes for tests to avoid errors and failures in some OSes
- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Make "man" a recommended package instead of required
- Added:
  * provide-systemd-timer-unit.patch
  * make-logging-calls-lighter.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * improve-broken-events-catching-and-reporting.patch
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * several-fixes-for-tests-to-avoid-errors-and-failures.patch
  * fix-user.list_groups-omits-remote-groups.patch
  * some-more-small-tests-fixes-enhancements-661.patch
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch
  * firewalld-normalize-new-rich-rules-before-comparing-.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1727870400">- Fix failing x509 tests with OpenSSL &lt; 1.1
- Avoid explicit reading of /etc/salt/minion (bsc#1220357)
- Allow NamedLoaderContexts to be returned from loader
- Revert the change making reactor less blocking (bsc#1230322)
- Use --cachedir for extension_modules in salt-call (bsc#1226141)
- Prevent using SyncWrapper with no reason
- Fix the SELinux context for Salt Minion service (bsc#1219041)
- Set contextvars as a build requirement for package
- Increase warn_until_date date for code we still support
- The test_debian test now uses port 80 for ubuntu keyserver
- Fix too frequent systemd service restart in test_system test
- Avoid crash on wrong output of systemctl version (bsc#1229539)
- Improve error handling with different OpenSSL versions
- Remove redundant run_func from salt.master.MWorker._handle_aes
- Fix cloud minion configuration for multiple masters (bsc#1229109)
- Use Pygit2 id instead of deprecated oid in gitfs
- Fix few failing tests to work with both Salt and Salt bundle
- Skip testing unsupported OpenSSL crypto algorithms
- Added:
  * skip-more-tests-related-to-old-openssl-algorithms.patch
  * fix-the-selinux-context-for-salt-minion-service-bsc-.patch
  * allow-namedloadercontexts-to-be-returned-from-loader.patch
  * join-masters-if-it-is-a-list-671.patch
  * remove-redundant-run_func-from-salt.master.mworker._.patch
  * prevent-using-syncwrapper-with-no-reason.patch
  * fix-test_debian-to-work-in-our-infrastructure-676.patch
  * fix-x509-test-fails-on-old-openssl-systems-682.patch
  * make-tests-compatible-with-venv-bundle.patch
  * avoid-crash-on-wrong-output-of-systemctl-version-bsc.patch
  * revert-the-change-making-reactor-less-blocking-bsc-1.patch
  * avoid-explicit-reading-of-etc-salt-minion-bsc-122035.patch
  * improve-error-handling-with-different-openssl-versio.patch
  * replace-use-of-pygit2-deprecated-and-removed-1.15.0-.patch
  * fix-test_system-flaky-setup_teardown-fn.patch
  * use-cachedir-for-extension_modules-in-salt-call-bsc-.patch
  * fix-deprecated-code-677.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1742385600">- Fix aptpkg 'NoneType object has no attribute split' error
- Detect openEuler as RedHat family OS
- Ensure the correct crypt module is loaded
- Implement multiple inventory for ansible.targets
- Make x509 module compatible with M2Crypto 0.44.0
- Remove deprecated code from x509.certificate_managed test mode
- Move logrotate config to /usr/etc/logrotate.d where possible
- Add DEB822 apt repository format support
- Make Salt-SSH work with all SSH passwords (bsc#1215484)
- Fix issue of using update-alternatives with alts (#105)
- Fix virt_query outputter and add support for block devices
- Make _auth calls visible with master stats
- Repair mount.fstab_present always returning pending changes
- Set virtual grain in Podman systemd container
- Fix crash due wrong client reference on `SaltMakoTemplateLookup`
- Enhace batch async and fix some detected issues
- Enhacement of Salt packaging
  * Use update-alternatives for all salt scripts
  * Use flexible dependencies for the subpackages
  * Make salt-minion to require flavored zypp-plugin
  * Make zyppnotify to use update-alternatives
  * Drop unused yumnotify plugin
  * Add dependency to python3-dnf-plugins-core for RHEL based
- Fix tests failures after "repo.saltproject.io" deprecation
- Fix error to stat '/root/.gitconfig' on gitfs
  (bsc#1230944) (bsc#1234881) (bsc#1220905)
- Adapt to removal of hex attribute in pygit2 v1.15.0 (bsc#1230642)
- Enhance smart JSON parsing when garbage is present (bsc#1231605)
- Fix virtual grains for VMs running on Nutanix AHV (bsc#1234022)
- Fix issues running on Python 3.12 and 3.13
- Revert setting SELinux context for minion service (bsc#1233667)
- Remove System V init support
  * Make systemd the only supported init system by removing System V init
  and insserv references
  * Ensure package builds with no init system dependencies if built
  without systemd (for example for use in containers)
  * Apply some spec-cleaner suggestions (update copyright year, sort
  requirements, adjust spacing)
- Fix the condition of alternatives for Tumbleweed and Leap 16
- Use update-alternatives for salt-call and fix builing on EL8
- Build all python bindings for all flavors
- Make minion reconnecting on changing master IP (bsc#1228182)
- Handle logger exception when flushing already closed file
- Include passlib as a recommended dependency
- Make Salt Bundle more tolerant to long running jobs (bsc#1228690)
- Fix additional x509 tests and test_suse tests for SLE12
- Added:
  * fix-deb822-nonetype-object-has-no-attribute-split-71.patch
  * detect-openeuler-as-redhat-family-os.patch
  * ensure-the-correct-crypt-module-is-loaded.patch
  * implement-multiple-inventory-for-ansible.targets.patch
  * make-x509-module-compatible-with-m2crypto-0.44.0.patch
  * remove-deprecated-code-from-x509.certificate_managed.patch
  * add-deb822-apt-source-format-support-692.patch
  * remove-password-from-shell-after-functional-text-mat.patch
  * repair-virt_query-outputter-655.patch
  * make-_auth-calls-visible-with-master-stats-696.patch
  * repair-fstab_present-test-mode-702.patch
  * set-virtual-grain-in-podman-systemd-container-703.patch
  * fixed-file-client-private-attribute-reference-on-sal.patch
  * backport-batch-async-fixes-and-improvements-701.patch
  * fix-tests-failures-after-repo.saltproject.io-depreca.patch
  * fix-failed-to-stat-root-.gitconfig-issue-on-gitfs-bs.patch
  * update-for-deprecation-of-hex-in-pygit2-1.15.0-and-a.patch
  * enhance-find_json-garbage-filtering-bsc-1231605-688.patch
  * fix-virtual-grains-for-vms-running-on-nutanix-ahv-bs.patch
  * fix-issues-that-break-salt-in-python-3.12-and-3.13-6.patch
  * revert-setting-selinux-context-for-minion-service-bs.patch
  * make-minion-reconnecting-on-changing-master-ip-bsc-1.patch
  * handle-logger-flushing-already-closed-file-686.patch
  * enhance-cleanup-mechanism-after-salt-bundle-upgrade-.patch
  * fix-x509-private-key-tests-and-test_suse-on-sle12-68.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1751371200">- Prevent tests failures when pygit2 is not present
- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Fix Ubuntu 24.04 edge-case test failures
- Fix broken tests for Ubuntu 24.04
- Fix refresh of osrelease and related grains on Python 3.10+
- Make "salt" package to obsolete "python3-salt" package on SLE15SP7+
- Fix issue requiring proper Python flavor for dependencies and recommended package
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch
  * several-fixes-for-security-issues.patch
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch
  * fix-ubuntu-24.04-specific-failures-716.patch
  * fix-debian-tests-715.patch
  * fix-refresh-of-osrelease-and-related-grains-on-pytho.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762344000">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)
- Use versioned python interpreter for salt-ssh
- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Set python-CherryPy as required for python-salt-testsuite (#115)
- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- This reverts commit aa40615dcf7a15325ef71bbc09a5423ce512491d.
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch
  * use-versioned-python-interpreter-for-salt-ssh.patch
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Builds with py &gt;=3.13 require python-legacy-cgi
- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="alexander.graul@suse.com" date="1764158400">- Add minimum_auth_version to enforce security (CVE-2025-62349)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- Junos module yaml loader fix (CVE-2025-62348)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Extend warn_until period to 2027
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
</package>
<package pkgid="edf0c3c9d5cb87e92dae27e72275d84630a3746e766e24419e2fd1adc916aa6c84ad31dd13d3a7189a042bf1e051bd4537b67e28050890f9717b668be84f7ac1" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="160000.4.1"/>
  <changelog author="yeray.gutierrez@suse.com" date="1722600000">- Fix rich rule comparison in firewalld module (bsc#1222684)
- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Make auth.pam more robust with Salt Bundle and fix tests
- Fix performance of user.list_groups with many remote groups
- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Skip certain tests if necessary for some OSes and set flaky ones
- Add a timer to delete old env post update for venv-minion
- Several fixes for tests to avoid errors and failures in some OSes
- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Make "man" a recommended package instead of required
- Added:
  * provide-systemd-timer-unit.patch
  * make-logging-calls-lighter.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * improve-broken-events-catching-and-reporting.patch
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * several-fixes-for-tests-to-avoid-errors-and-failures.patch
  * fix-user.list_groups-omits-remote-groups.patch
  * some-more-small-tests-fixes-enhancements-661.patch
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch
  * firewalld-normalize-new-rich-rules-before-comparing-.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1727870400">- Fix failing x509 tests with OpenSSL &lt; 1.1
- Avoid explicit reading of /etc/salt/minion (bsc#1220357)
- Allow NamedLoaderContexts to be returned from loader
- Revert the change making reactor less blocking (bsc#1230322)
- Use --cachedir for extension_modules in salt-call (bsc#1226141)
- Prevent using SyncWrapper with no reason
- Fix the SELinux context for Salt Minion service (bsc#1219041)
- Set contextvars as a build requirement for package
- Increase warn_until_date date for code we still support
- The test_debian test now uses port 80 for ubuntu keyserver
- Fix too frequent systemd service restart in test_system test
- Avoid crash on wrong output of systemctl version (bsc#1229539)
- Improve error handling with different OpenSSL versions
- Remove redundant run_func from salt.master.MWorker._handle_aes
- Fix cloud minion configuration for multiple masters (bsc#1229109)
- Use Pygit2 id instead of deprecated oid in gitfs
- Fix few failing tests to work with both Salt and Salt bundle
- Skip testing unsupported OpenSSL crypto algorithms
- Added:
  * skip-more-tests-related-to-old-openssl-algorithms.patch
  * fix-the-selinux-context-for-salt-minion-service-bsc-.patch
  * allow-namedloadercontexts-to-be-returned-from-loader.patch
  * join-masters-if-it-is-a-list-671.patch
  * remove-redundant-run_func-from-salt.master.mworker._.patch
  * prevent-using-syncwrapper-with-no-reason.patch
  * fix-test_debian-to-work-in-our-infrastructure-676.patch
  * fix-x509-test-fails-on-old-openssl-systems-682.patch
  * make-tests-compatible-with-venv-bundle.patch
  * avoid-crash-on-wrong-output-of-systemctl-version-bsc.patch
  * revert-the-change-making-reactor-less-blocking-bsc-1.patch
  * avoid-explicit-reading-of-etc-salt-minion-bsc-122035.patch
  * improve-error-handling-with-different-openssl-versio.patch
  * replace-use-of-pygit2-deprecated-and-removed-1.15.0-.patch
  * fix-test_system-flaky-setup_teardown-fn.patch
  * use-cachedir-for-extension_modules-in-salt-call-bsc-.patch
  * fix-deprecated-code-677.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1742385600">- Fix aptpkg 'NoneType object has no attribute split' error
- Detect openEuler as RedHat family OS
- Ensure the correct crypt module is loaded
- Implement multiple inventory for ansible.targets
- Make x509 module compatible with M2Crypto 0.44.0
- Remove deprecated code from x509.certificate_managed test mode
- Move logrotate config to /usr/etc/logrotate.d where possible
- Add DEB822 apt repository format support
- Make Salt-SSH work with all SSH passwords (bsc#1215484)
- Fix issue of using update-alternatives with alts (#105)
- Fix virt_query outputter and add support for block devices
- Make _auth calls visible with master stats
- Repair mount.fstab_present always returning pending changes
- Set virtual grain in Podman systemd container
- Fix crash due wrong client reference on `SaltMakoTemplateLookup`
- Enhace batch async and fix some detected issues
- Enhacement of Salt packaging
  * Use update-alternatives for all salt scripts
  * Use flexible dependencies for the subpackages
  * Make salt-minion to require flavored zypp-plugin
  * Make zyppnotify to use update-alternatives
  * Drop unused yumnotify plugin
  * Add dependency to python3-dnf-plugins-core for RHEL based
- Fix tests failures after "repo.saltproject.io" deprecation
- Fix error to stat '/root/.gitconfig' on gitfs
  (bsc#1230944) (bsc#1234881) (bsc#1220905)
- Adapt to removal of hex attribute in pygit2 v1.15.0 (bsc#1230642)
- Enhance smart JSON parsing when garbage is present (bsc#1231605)
- Fix virtual grains for VMs running on Nutanix AHV (bsc#1234022)
- Fix issues running on Python 3.12 and 3.13
- Revert setting SELinux context for minion service (bsc#1233667)
- Remove System V init support
  * Make systemd the only supported init system by removing System V init
  and insserv references
  * Ensure package builds with no init system dependencies if built
  without systemd (for example for use in containers)
  * Apply some spec-cleaner suggestions (update copyright year, sort
  requirements, adjust spacing)
- Fix the condition of alternatives for Tumbleweed and Leap 16
- Use update-alternatives for salt-call and fix builing on EL8
- Build all python bindings for all flavors
- Make minion reconnecting on changing master IP (bsc#1228182)
- Handle logger exception when flushing already closed file
- Include passlib as a recommended dependency
- Make Salt Bundle more tolerant to long running jobs (bsc#1228690)
- Fix additional x509 tests and test_suse tests for SLE12
- Added:
  * fix-deb822-nonetype-object-has-no-attribute-split-71.patch
  * detect-openeuler-as-redhat-family-os.patch
  * ensure-the-correct-crypt-module-is-loaded.patch
  * implement-multiple-inventory-for-ansible.targets.patch
  * make-x509-module-compatible-with-m2crypto-0.44.0.patch
  * remove-deprecated-code-from-x509.certificate_managed.patch
  * add-deb822-apt-source-format-support-692.patch
  * remove-password-from-shell-after-functional-text-mat.patch
  * repair-virt_query-outputter-655.patch
  * make-_auth-calls-visible-with-master-stats-696.patch
  * repair-fstab_present-test-mode-702.patch
  * set-virtual-grain-in-podman-systemd-container-703.patch
  * fixed-file-client-private-attribute-reference-on-sal.patch
  * backport-batch-async-fixes-and-improvements-701.patch
  * fix-tests-failures-after-repo.saltproject.io-depreca.patch
  * fix-failed-to-stat-root-.gitconfig-issue-on-gitfs-bs.patch
  * update-for-deprecation-of-hex-in-pygit2-1.15.0-and-a.patch
  * enhance-find_json-garbage-filtering-bsc-1231605-688.patch
  * fix-virtual-grains-for-vms-running-on-nutanix-ahv-bs.patch
  * fix-issues-that-break-salt-in-python-3.12-and-3.13-6.patch
  * revert-setting-selinux-context-for-minion-service-bs.patch
  * make-minion-reconnecting-on-changing-master-ip-bsc-1.patch
  * handle-logger-flushing-already-closed-file-686.patch
  * enhance-cleanup-mechanism-after-salt-bundle-upgrade-.patch
  * fix-x509-private-key-tests-and-test_suse-on-sle12-68.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1751371200">- Prevent tests failures when pygit2 is not present
- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Fix Ubuntu 24.04 edge-case test failures
- Fix broken tests for Ubuntu 24.04
- Fix refresh of osrelease and related grains on Python 3.10+
- Make "salt" package to obsolete "python3-salt" package on SLE15SP7+
- Fix issue requiring proper Python flavor for dependencies and recommended package
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch
  * several-fixes-for-security-issues.patch
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch
  * fix-ubuntu-24.04-specific-failures-716.patch
  * fix-debian-tests-715.patch
  * fix-refresh-of-osrelease-and-related-grains-on-pytho.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762344000">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)
- Use versioned python interpreter for salt-ssh
- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Set python-CherryPy as required for python-salt-testsuite (#115)
- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- This reverts commit aa40615dcf7a15325ef71bbc09a5423ce512491d.
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch
  * use-versioned-python-interpreter-for-salt-ssh.patch
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Builds with py &gt;=3.13 require python-legacy-cgi
- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="alexander.graul@suse.com" date="1764158400">- Add minimum_auth_version to enforce security (CVE-2025-62349)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- Junos module yaml loader fix (CVE-2025-62348)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Extend warn_until period to 2027
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
</package>
<package pkgid="ced4fc35350dddd324f798722a7bed619c7fc7e4bfc7a2034b20d6514ea2d99106ce449a26d384daeb09f8a912e3d08e92d158852d3182df0cc4942637ba82eb" name="salt-transactional-update" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="160000.4.1"/>
  <changelog author="yeray.gutierrez@suse.com" date="1722600000">- Fix rich rule comparison in firewalld module (bsc#1222684)
- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Make auth.pam more robust with Salt Bundle and fix tests
- Fix performance of user.list_groups with many remote groups
- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Skip certain tests if necessary for some OSes and set flaky ones
- Add a timer to delete old env post update for venv-minion
- Several fixes for tests to avoid errors and failures in some OSes
- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Make "man" a recommended package instead of required
- Added:
  * provide-systemd-timer-unit.patch
  * make-logging-calls-lighter.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * improve-broken-events-catching-and-reporting.patch
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * several-fixes-for-tests-to-avoid-errors-and-failures.patch
  * fix-user.list_groups-omits-remote-groups.patch
  * some-more-small-tests-fixes-enhancements-661.patch
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch
  * firewalld-normalize-new-rich-rules-before-comparing-.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1727870400">- Fix failing x509 tests with OpenSSL &lt; 1.1
- Avoid explicit reading of /etc/salt/minion (bsc#1220357)
- Allow NamedLoaderContexts to be returned from loader
- Revert the change making reactor less blocking (bsc#1230322)
- Use --cachedir for extension_modules in salt-call (bsc#1226141)
- Prevent using SyncWrapper with no reason
- Fix the SELinux context for Salt Minion service (bsc#1219041)
- Set contextvars as a build requirement for package
- Increase warn_until_date date for code we still support
- The test_debian test now uses port 80 for ubuntu keyserver
- Fix too frequent systemd service restart in test_system test
- Avoid crash on wrong output of systemctl version (bsc#1229539)
- Improve error handling with different OpenSSL versions
- Remove redundant run_func from salt.master.MWorker._handle_aes
- Fix cloud minion configuration for multiple masters (bsc#1229109)
- Use Pygit2 id instead of deprecated oid in gitfs
- Fix few failing tests to work with both Salt and Salt bundle
- Skip testing unsupported OpenSSL crypto algorithms
- Added:
  * skip-more-tests-related-to-old-openssl-algorithms.patch
  * fix-the-selinux-context-for-salt-minion-service-bsc-.patch
  * allow-namedloadercontexts-to-be-returned-from-loader.patch
  * join-masters-if-it-is-a-list-671.patch
  * remove-redundant-run_func-from-salt.master.mworker._.patch
  * prevent-using-syncwrapper-with-no-reason.patch
  * fix-test_debian-to-work-in-our-infrastructure-676.patch
  * fix-x509-test-fails-on-old-openssl-systems-682.patch
  * make-tests-compatible-with-venv-bundle.patch
  * avoid-crash-on-wrong-output-of-systemctl-version-bsc.patch
  * revert-the-change-making-reactor-less-blocking-bsc-1.patch
  * avoid-explicit-reading-of-etc-salt-minion-bsc-122035.patch
  * improve-error-handling-with-different-openssl-versio.patch
  * replace-use-of-pygit2-deprecated-and-removed-1.15.0-.patch
  * fix-test_system-flaky-setup_teardown-fn.patch
  * use-cachedir-for-extension_modules-in-salt-call-bsc-.patch
  * fix-deprecated-code-677.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1742385600">- Fix aptpkg 'NoneType object has no attribute split' error
- Detect openEuler as RedHat family OS
- Ensure the correct crypt module is loaded
- Implement multiple inventory for ansible.targets
- Make x509 module compatible with M2Crypto 0.44.0
- Remove deprecated code from x509.certificate_managed test mode
- Move logrotate config to /usr/etc/logrotate.d where possible
- Add DEB822 apt repository format support
- Make Salt-SSH work with all SSH passwords (bsc#1215484)
- Fix issue of using update-alternatives with alts (#105)
- Fix virt_query outputter and add support for block devices
- Make _auth calls visible with master stats
- Repair mount.fstab_present always returning pending changes
- Set virtual grain in Podman systemd container
- Fix crash due wrong client reference on `SaltMakoTemplateLookup`
- Enhace batch async and fix some detected issues
- Enhacement of Salt packaging
  * Use update-alternatives for all salt scripts
  * Use flexible dependencies for the subpackages
  * Make salt-minion to require flavored zypp-plugin
  * Make zyppnotify to use update-alternatives
  * Drop unused yumnotify plugin
  * Add dependency to python3-dnf-plugins-core for RHEL based
- Fix tests failures after "repo.saltproject.io" deprecation
- Fix error to stat '/root/.gitconfig' on gitfs
  (bsc#1230944) (bsc#1234881) (bsc#1220905)
- Adapt to removal of hex attribute in pygit2 v1.15.0 (bsc#1230642)
- Enhance smart JSON parsing when garbage is present (bsc#1231605)
- Fix virtual grains for VMs running on Nutanix AHV (bsc#1234022)
- Fix issues running on Python 3.12 and 3.13
- Revert setting SELinux context for minion service (bsc#1233667)
- Remove System V init support
  * Make systemd the only supported init system by removing System V init
  and insserv references
  * Ensure package builds with no init system dependencies if built
  without systemd (for example for use in containers)
  * Apply some spec-cleaner suggestions (update copyright year, sort
  requirements, adjust spacing)
- Fix the condition of alternatives for Tumbleweed and Leap 16
- Use update-alternatives for salt-call and fix builing on EL8
- Build all python bindings for all flavors
- Make minion reconnecting on changing master IP (bsc#1228182)
- Handle logger exception when flushing already closed file
- Include passlib as a recommended dependency
- Make Salt Bundle more tolerant to long running jobs (bsc#1228690)
- Fix additional x509 tests and test_suse tests for SLE12
- Added:
  * fix-deb822-nonetype-object-has-no-attribute-split-71.patch
  * detect-openeuler-as-redhat-family-os.patch
  * ensure-the-correct-crypt-module-is-loaded.patch
  * implement-multiple-inventory-for-ansible.targets.patch
  * make-x509-module-compatible-with-m2crypto-0.44.0.patch
  * remove-deprecated-code-from-x509.certificate_managed.patch
  * add-deb822-apt-source-format-support-692.patch
  * remove-password-from-shell-after-functional-text-mat.patch
  * repair-virt_query-outputter-655.patch
  * make-_auth-calls-visible-with-master-stats-696.patch
  * repair-fstab_present-test-mode-702.patch
  * set-virtual-grain-in-podman-systemd-container-703.patch
  * fixed-file-client-private-attribute-reference-on-sal.patch
  * backport-batch-async-fixes-and-improvements-701.patch
  * fix-tests-failures-after-repo.saltproject.io-depreca.patch
  * fix-failed-to-stat-root-.gitconfig-issue-on-gitfs-bs.patch
  * update-for-deprecation-of-hex-in-pygit2-1.15.0-and-a.patch
  * enhance-find_json-garbage-filtering-bsc-1231605-688.patch
  * fix-virtual-grains-for-vms-running-on-nutanix-ahv-bs.patch
  * fix-issues-that-break-salt-in-python-3.12-and-3.13-6.patch
  * revert-setting-selinux-context-for-minion-service-bs.patch
  * make-minion-reconnecting-on-changing-master-ip-bsc-1.patch
  * handle-logger-flushing-already-closed-file-686.patch
  * enhance-cleanup-mechanism-after-salt-bundle-upgrade-.patch
  * fix-x509-private-key-tests-and-test_suse-on-sle12-68.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1751371200">- Prevent tests failures when pygit2 is not present
- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Fix Ubuntu 24.04 edge-case test failures
- Fix broken tests for Ubuntu 24.04
- Fix refresh of osrelease and related grains on Python 3.10+
- Make "salt" package to obsolete "python3-salt" package on SLE15SP7+
- Fix issue requiring proper Python flavor for dependencies and recommended package
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch
  * several-fixes-for-security-issues.patch
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch
  * fix-ubuntu-24.04-specific-failures-716.patch
  * fix-debian-tests-715.patch
  * fix-refresh-of-osrelease-and-related-grains-on-pytho.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762344000">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)
- Use versioned python interpreter for salt-ssh
- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Set python-CherryPy as required for python-salt-testsuite (#115)
- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- This reverts commit aa40615dcf7a15325ef71bbc09a5423ce512491d.
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch
  * use-versioned-python-interpreter-for-salt-ssh.patch
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Builds with py &gt;=3.13 require python-legacy-cgi
- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="alexander.graul@suse.com" date="1764158400">- Add minimum_auth_version to enforce security (CVE-2025-62349)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- Junos module yaml loader fix (CVE-2025-62348)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Extend warn_until period to 2027
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
</package>
<package pkgid="5d2ac7fcd6b7f349f687d72c3604662fdf06404b08cc7ecea6cb9bb4f151aa12f8f10ebba9e530ccfdb71f14159209a50ccbdec16223d3befe05f6c3de1eb36b" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.22.7+git.460.b680c782b85" rel="160000.1.1"/>
  <changelog author="noel.power@suse.com" date="1758801600">- Disable timeouts for smb.service so that possibly slow running
  ExecStartPre script 'update-samba-security-profile' doesn't
  cause service start to fail due to timeouts;(bsc#1249181).</changelog>
  <changelog author="scabrero@suse.de" date="1759320000">- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
  to a recommends. They are only required if utilizing certificate
  auto enrollment (bsc#1249087).</changelog>
  <changelog author="noel.power@suse.com" date="1760529600">- Update to 4.22.5
  * CVE-2025-10230: Command injection via WINS server hook
    script (bso#15903); (bsc#1251280).
  * CVE-2025-9640: uninitialized memory disclosure via
    vfs_streams_xattr; (bso#15885); (bsc#1251279).</changelog>
  <changelog author="nopower@suse.com" date="1761048000">- Update to 4.22.6
  * macOS Finder client DFS broken on 4.22.0; (bso#15843).
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Spotlight search restriction for shares incomplete and
    default search searches in too many attributes; (bso#15927).
  * rpcd_mdssvc may crash because name mangling is not
    initialized; (bso#15931).
  * Only increment lease epoch if a lease was granted;
    (bso#15933).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).</changelog>
  <changelog author="noel.power@suse.com" date="1761912000">- Update [printers] location to /var/samba/spool; (bsc#1249179).</changelog>
  <changelog author="nopower@suse.com" date="1765972800">-  Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="nopower@suse.com" date="1766059200">- Adjust README.SUSE to reflect the new preferred location for
  '[printers]' share; (bsc#1254665).</changelog>
  <changelog author="scabrero@suse.de" date="1767787200">- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
  (bso#15790); (bsc#1249058).</changelog>
  <changelog author="noel.power@suse.com" date="1768824000">- Update to 4.22.7
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Searching for numbers doesn't work with Spotlight;
    (bso#15930).
  * mdssvc doesn't support $time.iso dates before 1970;
    (bso#15947).
  * Fix winbind cache consistency; (bso#15963).
  * vfs_recycle does not update mtime; (bso#15940).
  * Assert failed: (dirfd != -1) || (smb_fname-&gt;base_name[0] ==
    '/') in vfswrap_openat; (bso#15897).
  * ctdb can crash with inconsistent cluster lock configuration;
    (bso#15950).
  * samba-bgqd: rework man page; (bso#15809).
  * samba-bgqd can't find [printers] share; (bso#15936); (bsc#1254586).
  * Winbind can hang forever in gssapi if there are network
    issues; (bso#15955).
  * libldb requires linking libreplace on Linux; (bso#15961).
  * Crash in ctdbd on failed updateip; (bso#15935).</changelog>
  <changelog author="nopower@suse.com" date="1768996800">- Fix mistake in README.SUSE /var/spool/samba =&gt; /var/samba/spool
  (bsc#1254665).</changelog>
</package>
<package pkgid="46ba65c1294a4143f4982a2a297551300f1e9f5b8e3b373b2d5f5855efb977025662637695da305e04e3704169906a4d5c7bd3316bc7dbe4f455d0494cbe792e" name="sed" arch="x86_64">
  <version epoch="0" ver="4.9" rel="160000.2.2"/>
  <changelog author="bwiedemann@suse.com" date="1523707200">- Make package build reproducible (boo#1040589)</changelog>
  <changelog author="mpluskal@suse.com" date="1545307200">- Update to version 4.6:
  * sed now prints a clear error message when r/R/w/W (and s///w)
    commands are missing a filename.
  * sed now uses fully-buffered output (instead of line-buffered)
    when writing to files.
  * sed no longer accesses invalid memory (heap overflow) when
    given invalid backreferences in 's' command
  * sed no longer adds extraneous NUL when given s/$//n command.
  * sed no longer accesses invalid memory (heap overflow) with
    s/$//n regexes.
  * New option, --debug: print the input sed script in canonical
    form and annotate program execution.
- Refresh sed-dont_close_twice.patch</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- GNU sed 4.7:
  * Fix some fails with \b in the C locale and with the DFA matcher
  - ------------------------------------------------------------------</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="mliska@suse.cz" date="1574251200">- Add disable-null-ptr-argument.patch in order to fix
  boo#1157218.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1579435200">- GNU sed 4.8:
  * "sed -i" now creates temporary files with correct umask
  (limited to u=rwx), to avoid prolems with fuse-like file systems
  * improved DFA performance through gnulib update
- drop disable-null-ptr-argument.patch, upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- sed.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1667822400">- GNU sed 4.9:
  * 'sed --follow-symlinks -i' no longer loops forever when its
    operand is a symbolic link cycle.
  * a program with an execution line longer than 2GB can no longer
    trigger an out-of-bounds memory write.
  * using the R command to read an input line of length longer than
    2GB can no longer trigger an out-of-bounds memory read.
  * In locales using UTF-8 encoding, the regular expression '.' no
    longer sometimes fails to match Unicode characters U+D400
    through U+D7FF (some Hangul Syllables, and Hangul Jamo
    Extended-B) and Unicode characters U+108000 through U+10FFFF
    (half of Supplemental Private Use Area plane B).
  * I/O errors involving temp files no longer confuse sed into
    using a FILE * pointer after fclosing it, which has undefined
    behavior in C.
  * New: The 'r' command now accepts address 0, allowing inserting
    a file before the first line.
  * Sed now prints the less-surprising variant in a corner case of
    POSIX-unspecified behavior.  Before, this would print "n".
    Now, it prints "X":
    printf n | sed 'sn\nnXn'; echo
- drop patches now upstream:
  * gnulib-test-avoid-FP-perror-strerror.patch
  * sed-dont_close_twice.patch
- disable profile guided optimization in build due to what seems to
  be a bug in gnulib</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="edfd7d8c95a8d8855e855acf9024e076b95a0e312b4d5fceb47d4de4effdf0ed94a3808b127f9a37c12523e91c424b1a27b0dfb1568430b066f566c297aae749" name="selinux-autorelabel" arch="x86_64">
  <version epoch="0" ver="4.0+git16" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1727265600">- Update to version 2.21+git16:
  * selinux: Avoid parameter duplication
  * 98selinux-microos: Use a single thread for relabelling /etc
  * Use all cores for SELinux restorecon (related to jsc#SMO-382)
- _service: Omit +git0 suffix in versions</changelog>
  <changelog author="fvogt@suse.com" date="1728302400">- Update to version 4.0:
  * Release version 4.0
  * Have the autorelabel hook propagate failure from relabelling
  * Split SELinux relabelling code into separate package
  * Make 98selinux-microos usable on non-transactional systems
  * selinux-autorelabel-generator: Don't hardcode mountpoints
  * Consistently use tabs in selinux-autorelabel-generator
  * Add automated testing of SELinux relabelling functionality
  * Fix OBS workflow for pushes to master</changelog>
  <changelog author="fvogt@suse.com" date="1729166400">- Update to version 4.0+git1:
  * Regenerate initrd after selinux-autorelabel installation</changelog>
  <changelog author="fvogt@suse.com" date="1730203200">- Update to version 4.0+git2:
  * Add RemainAfterExit=true to autorelabel services</changelog>
  <changelog author="fvogt@suse.com" date="1731585600">- Update to version 4.0+git6:
  * test: Check for AVC denials in the journal
  * test: More reliable output of combustion-validate
  * test: Remove workaround for boo#1230912
  * Label /sys before selinux-autorelabel units run (bsc#1232709)</changelog>
  <changelog author="fvogt@suse.com" date="1740657600">- Update to version 4.0+git7:
  * Only autorelabel local filesystems with SELinux support (boo#1237202)</changelog>
  <changelog author="kukuk@suse.com" date="1741953600">- Update to version 4.0+git10:
  * Remove setup-systemd-proxy, now part of aaa_base
  * Drop wtmpdb SELinux AVC workaround in test suite
  * test: Wait for sshd.service before checking labels in /etc</changelog>
  <changelog author="kukuk@suse.com" date="1742904000">- Update to version 4.0+git11:
  * Only parse section with at minimum two arguments (#42)</changelog>
  <changelog author="fvogt@suse.com" date="1746532800">- Update to version 4.0+git14:
  * test: Test with Minimal-VM as well
  * test: Add some missing SYSTEMD_IGNORE_CHROOT=1 to poweroff calls
  * selinux-autorelabel: Fix check for relabelling only specific filesystems</changelog>
  <changelog author="kukuk@suse.com" date="1746792000">- Update to version 4.0+git16:
  * man-online: fetch product specific manual pages
  * Add import-pubring: create gpg file from rpmdb</changelog>
</package>
<package pkgid="eedea2638658a8d97970afe55682def5548ed8a70d83417a0c4db6fd62dd5c53dcd4a78ba256410da3da149fd7390ecb7af7007ea7c908afb809bbad08d6759f" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="20250627+git363.7b84cc7fb" rel="160000.1.1"/>
  <changelog author="cathy.hu@suse.com" date="1765540800">- Update to version 20250627+git341.4beeb2d65:
  * Allow virtlogd_t dac_override (bsc#1253389)
  * Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  * Allow virtqemud_t to read/write device_t (bsc#1251789)
  * update support for polkit agent helper (bsc#1251931)
  * Allow system_mail_t read apache system content conditionally
  * Allow login_userdomain read lastlog
  * Allow sshd-net read and write to sshd vsock socket
  * Update ktls policy
  * Add comprehensive SELinux policy module for bwrap thumbnail generation
  * Revert "Allow thumb_t create permission in the user namespace"
  * Allow systemd-machined read svirt process state
  * Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  * Allow sysadm access to TPM
  * Allow tlp get the attributes of the pidfs filesystem
  * Allow kmscon to read netlink_kobject_uevent_socket
  * Allow systemd-ssh-issue read kernel sysctls
  * fix: bz2279215 Allow speech-dispatcher access to user home/cache files
  * Allow create kerberos files in postgresql db home
  * Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  * Allow shell comamnds in locate systemd service (bsc#1246559)
  * Introduce initrc_nnp_daemon_domain interface
  * Label /var/lib/cosmic-greeter with xdm_var_lib_t
  * Allow setroubleshoot-fixit get attributes of xattr fs
  * Allow insights-client manage /etc symlinks
  * Allow insights-client get attributes of the rpm executable
  * Allow nfsidmapd search virt lib directories
  * Allow iotop stream connect to systemd-userdbd
  * Allow snapper_sdbootutil_plugin_t manage unlabeled_t files,dirs,symlinks (bsc#1252993)
  * Allow gnome-remote-desktop read sssd public files
  * Allow thumb_t stream connect to systemd-userdbd
  * Add auth_nnp_domtrans_chkpwd()
  * Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  * Allow bluez dbus API passing unix domain sockets
  * Allow bluez dbus api pass sockets over dbus
  * Dontaudit systemd-generator connect to sssd over a unix stream socket
  * Allow init watch/watch_reads systemd-machined user ptys
  * Introduce sap_service_transition_to_unconfined_user boolean
  * allow init to read sap symlinks
  * Allow SAP domain to relocation text in all files</changelog>
  <changelog author="cathy.hu@suse.com" date="1765972800">- Update to version 20250627+git343.b66ec7135:
  * Allow snapper_tu_etc_plugin_t to connect to machined varlink socket (bsc#1254889)</changelog>
  <changelog author="cathy.hu@suse.com" date="1767787200">- Update to version 20250627+git345.3965b24b0:
  * Allow 'mysql-systemd-helper upgrade' to work correctly (bsc#1255024)</changelog>
  <changelog author="rfrohl@suse.com" date="1770120000">- Update to version 20250627+git347.b8926451e:
  * Add support for 'mariadb@.service' (bsc#1255024).</changelog>
  <changelog author="rfrohl@suse.com" date="1771502400">- Update to version 20250627+git351.529352149:
  * Allow syslog_t access ISC dhcpd /dev/log socket (bsc#1255725)
  * privoxy: account for openSUSE chroot configuration (bsc#1237375)</changelog>
  <changelog author="rfrohl@suse.com" date="1774008000">- Update to version 20250627+git355.5249ba7d5:
  * Revert "Define file equivalency for /var/opt" (bsc#1259704)
  * Make stalld stalld_var_run_t labeling rules more generic (bsc#1259438)</changelog>
  <changelog author="cathy.hu@suse.com" date="1775822400">- Update to version 20250627+git363.7b84cc7fb:
  * Add missing Nextcloud file contexts (bsc#1261535)
  * openSUSE uses /var/lib/php8 (bsc#1239177)
  * /srv/www/htdocs is DocumentRoot of apache (bsc#1261535)
  * Allow snapper sdbootutil plugin read kernel modules (bsc#1259867)
  * Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)</changelog>
  <changelog author="cathy.hu@suse.com" date="1776254400">- Add OrderWithRequires for openssh-server as workaround
  to unblock the product increment bsc#1262083 until a proper fix is developed</changelog>
  <changelog author="cathy.hu@suse.com" date="1776340800">- Add OrderWithRequires for systemd as workaround (bsc#1262083)
  to unblock the product increment bsc#1262083 until a proper fix is developed</changelog>
  <changelog author="cathy.hu@suse.com" date="1776340801">- Revert OrderWithRequires for openssh-server and systemd
  and move %postInstall to %post as fix until zypper moves to
  rpm single transaction backend by default (bsc#1262083)</changelog>
</package>
<package pkgid="fbdaeb62c3599773078d96600c583d5e04e4e32837b5ba493c8d2926b759340a64aeee9c10eba43199b2874cf6a2fa8317da61c88ee362163fcd5dfe3843adbe" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="20250627+git363.7b84cc7fb" rel="160000.1.1"/>
  <changelog author="cathy.hu@suse.com" date="1765540800">- Update to version 20250627+git341.4beeb2d65:
  * Allow virtlogd_t dac_override (bsc#1253389)
  * Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  * Allow virtqemud_t to read/write device_t (bsc#1251789)
  * update support for polkit agent helper (bsc#1251931)
  * Allow system_mail_t read apache system content conditionally
  * Allow login_userdomain read lastlog
  * Allow sshd-net read and write to sshd vsock socket
  * Update ktls policy
  * Add comprehensive SELinux policy module for bwrap thumbnail generation
  * Revert "Allow thumb_t create permission in the user namespace"
  * Allow systemd-machined read svirt process state
  * Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  * Allow sysadm access to TPM
  * Allow tlp get the attributes of the pidfs filesystem
  * Allow kmscon to read netlink_kobject_uevent_socket
  * Allow systemd-ssh-issue read kernel sysctls
  * fix: bz2279215 Allow speech-dispatcher access to user home/cache files
  * Allow create kerberos files in postgresql db home
  * Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  * Allow shell comamnds in locate systemd service (bsc#1246559)
  * Introduce initrc_nnp_daemon_domain interface
  * Label /var/lib/cosmic-greeter with xdm_var_lib_t
  * Allow setroubleshoot-fixit get attributes of xattr fs
  * Allow insights-client manage /etc symlinks
  * Allow insights-client get attributes of the rpm executable
  * Allow nfsidmapd search virt lib directories
  * Allow iotop stream connect to systemd-userdbd
  * Allow snapper_sdbootutil_plugin_t manage unlabeled_t files,dirs,symlinks (bsc#1252993)
  * Allow gnome-remote-desktop read sssd public files
  * Allow thumb_t stream connect to systemd-userdbd
  * Add auth_nnp_domtrans_chkpwd()
  * Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  * Allow bluez dbus API passing unix domain sockets
  * Allow bluez dbus api pass sockets over dbus
  * Dontaudit systemd-generator connect to sssd over a unix stream socket
  * Allow init watch/watch_reads systemd-machined user ptys
  * Introduce sap_service_transition_to_unconfined_user boolean
  * allow init to read sap symlinks
  * Allow SAP domain to relocation text in all files</changelog>
  <changelog author="cathy.hu@suse.com" date="1765972800">- Update to version 20250627+git343.b66ec7135:
  * Allow snapper_tu_etc_plugin_t to connect to machined varlink socket (bsc#1254889)</changelog>
  <changelog author="cathy.hu@suse.com" date="1767787200">- Update to version 20250627+git345.3965b24b0:
  * Allow 'mysql-systemd-helper upgrade' to work correctly (bsc#1255024)</changelog>
  <changelog author="rfrohl@suse.com" date="1770120000">- Update to version 20250627+git347.b8926451e:
  * Add support for 'mariadb@.service' (bsc#1255024).</changelog>
  <changelog author="rfrohl@suse.com" date="1771502400">- Update to version 20250627+git351.529352149:
  * Allow syslog_t access ISC dhcpd /dev/log socket (bsc#1255725)
  * privoxy: account for openSUSE chroot configuration (bsc#1237375)</changelog>
  <changelog author="rfrohl@suse.com" date="1774008000">- Update to version 20250627+git355.5249ba7d5:
  * Revert "Define file equivalency for /var/opt" (bsc#1259704)
  * Make stalld stalld_var_run_t labeling rules more generic (bsc#1259438)</changelog>
  <changelog author="cathy.hu@suse.com" date="1775822400">- Update to version 20250627+git363.7b84cc7fb:
  * Add missing Nextcloud file contexts (bsc#1261535)
  * openSUSE uses /var/lib/php8 (bsc#1239177)
  * /srv/www/htdocs is DocumentRoot of apache (bsc#1261535)
  * Allow snapper sdbootutil plugin read kernel modules (bsc#1259867)
  * Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)</changelog>
  <changelog author="cathy.hu@suse.com" date="1776254400">- Add OrderWithRequires for openssh-server as workaround
  to unblock the product increment bsc#1262083 until a proper fix is developed</changelog>
  <changelog author="cathy.hu@suse.com" date="1776340800">- Add OrderWithRequires for systemd as workaround (bsc#1262083)
  to unblock the product increment bsc#1262083 until a proper fix is developed</changelog>
  <changelog author="cathy.hu@suse.com" date="1776340801">- Revert OrderWithRequires for openssh-server and systemd
  and move %postInstall to %post as fix until zypper moves to
  rpm single transaction backend by default (bsc#1262083)</changelog>
</package>
<package pkgid="14cc3791486494c21b868c0f5744d42608b6b33189ef8f2fa3f33b552f6ffe20b06d21544ff21dd26ddfdea429153134b1eb66ee64623152994f7635f3324972" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="20250627+git363.7b84cc7fb" rel="160000.1.1"/>
  <changelog author="cathy.hu@suse.com" date="1765540800">- Update to version 20250627+git341.4beeb2d65:
  * Allow virtlogd_t dac_override (bsc#1253389)
  * Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  * Allow virtqemud_t to read/write device_t (bsc#1251789)
  * update support for polkit agent helper (bsc#1251931)
  * Allow system_mail_t read apache system content conditionally
  * Allow login_userdomain read lastlog
  * Allow sshd-net read and write to sshd vsock socket
  * Update ktls policy
  * Add comprehensive SELinux policy module for bwrap thumbnail generation
  * Revert "Allow thumb_t create permission in the user namespace"
  * Allow systemd-machined read svirt process state
  * Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  * Allow sysadm access to TPM
  * Allow tlp get the attributes of the pidfs filesystem
  * Allow kmscon to read netlink_kobject_uevent_socket
  * Allow systemd-ssh-issue read kernel sysctls
  * fix: bz2279215 Allow speech-dispatcher access to user home/cache files
  * Allow create kerberos files in postgresql db home
  * Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  * Allow shell comamnds in locate systemd service (bsc#1246559)
  * Introduce initrc_nnp_daemon_domain interface
  * Label /var/lib/cosmic-greeter with xdm_var_lib_t
  * Allow setroubleshoot-fixit get attributes of xattr fs
  * Allow insights-client manage /etc symlinks
  * Allow insights-client get attributes of the rpm executable
  * Allow nfsidmapd search virt lib directories
  * Allow iotop stream connect to systemd-userdbd
  * Allow snapper_sdbootutil_plugin_t manage unlabeled_t files,dirs,symlinks (bsc#1252993)
  * Allow gnome-remote-desktop read sssd public files
  * Allow thumb_t stream connect to systemd-userdbd
  * Add auth_nnp_domtrans_chkpwd()
  * Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  * Allow bluez dbus API passing unix domain sockets
  * Allow bluez dbus api pass sockets over dbus
  * Dontaudit systemd-generator connect to sssd over a unix stream socket
  * Allow init watch/watch_reads systemd-machined user ptys
  * Introduce sap_service_transition_to_unconfined_user boolean
  * allow init to read sap symlinks
  * Allow SAP domain to relocation text in all files</changelog>
  <changelog author="cathy.hu@suse.com" date="1765972800">- Update to version 20250627+git343.b66ec7135:
  * Allow snapper_tu_etc_plugin_t to connect to machined varlink socket (bsc#1254889)</changelog>
  <changelog author="cathy.hu@suse.com" date="1767787200">- Update to version 20250627+git345.3965b24b0:
  * Allow 'mysql-systemd-helper upgrade' to work correctly (bsc#1255024)</changelog>
  <changelog author="rfrohl@suse.com" date="1770120000">- Update to version 20250627+git347.b8926451e:
  * Add support for 'mariadb@.service' (bsc#1255024).</changelog>
  <changelog author="rfrohl@suse.com" date="1771502400">- Update to version 20250627+git351.529352149:
  * Allow syslog_t access ISC dhcpd /dev/log socket (bsc#1255725)
  * privoxy: account for openSUSE chroot configuration (bsc#1237375)</changelog>
  <changelog author="rfrohl@suse.com" date="1774008000">- Update to version 20250627+git355.5249ba7d5:
  * Revert "Define file equivalency for /var/opt" (bsc#1259704)
  * Make stalld stalld_var_run_t labeling rules more generic (bsc#1259438)</changelog>
  <changelog author="cathy.hu@suse.com" date="1775822400">- Update to version 20250627+git363.7b84cc7fb:
  * Add missing Nextcloud file contexts (bsc#1261535)
  * openSUSE uses /var/lib/php8 (bsc#1239177)
  * /srv/www/htdocs is DocumentRoot of apache (bsc#1261535)
  * Allow snapper sdbootutil plugin read kernel modules (bsc#1259867)
  * Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)</changelog>
  <changelog author="cathy.hu@suse.com" date="1776254400">- Add OrderWithRequires for openssh-server as workaround
  to unblock the product increment bsc#1262083 until a proper fix is developed</changelog>
  <changelog author="cathy.hu@suse.com" date="1776340800">- Add OrderWithRequires for systemd as workaround (bsc#1262083)
  to unblock the product increment bsc#1262083 until a proper fix is developed</changelog>
  <changelog author="cathy.hu@suse.com" date="1776340801">- Revert OrderWithRequires for openssh-server and systemd
  and move %postInstall to %post as fix until zypper moves to
  rpm single transaction backend by default (bsc#1262083)</changelog>
</package>
<package pkgid="0897449305d59e082cd2b80e68b943222a8be3ca3d37cc88b5b9d87d629afe0c4300108b9fca1b16158e7f0f25b9d85e498fc1b2ee2d7bdfa75484692254ba8d" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="20250627+git363.7b84cc7fb" rel="160000.1.1"/>
  <changelog author="cathy.hu@suse.com" date="1765540800">- Update to version 20250627+git341.4beeb2d65:
  * Allow virtlogd_t dac_override (bsc#1253389)
  * Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  * Allow virtqemud_t to read/write device_t (bsc#1251789)
  * update support for polkit agent helper (bsc#1251931)
  * Allow system_mail_t read apache system content conditionally
  * Allow login_userdomain read lastlog
  * Allow sshd-net read and write to sshd vsock socket
  * Update ktls policy
  * Add comprehensive SELinux policy module for bwrap thumbnail generation
  * Revert "Allow thumb_t create permission in the user namespace"
  * Allow systemd-machined read svirt process state
  * Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  * Allow sysadm access to TPM
  * Allow tlp get the attributes of the pidfs filesystem
  * Allow kmscon to read netlink_kobject_uevent_socket
  * Allow systemd-ssh-issue read kernel sysctls
  * fix: bz2279215 Allow speech-dispatcher access to user home/cache files
  * Allow create kerberos files in postgresql db home
  * Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  * Allow shell comamnds in locate systemd service (bsc#1246559)
  * Introduce initrc_nnp_daemon_domain interface
  * Label /var/lib/cosmic-greeter with xdm_var_lib_t
  * Allow setroubleshoot-fixit get attributes of xattr fs
  * Allow insights-client manage /etc symlinks
  * Allow insights-client get attributes of the rpm executable
  * Allow nfsidmapd search virt lib directories
  * Allow iotop stream connect to systemd-userdbd
  * Allow snapper_sdbootutil_plugin_t manage unlabeled_t files,dirs,symlinks (bsc#1252993)
  * Allow gnome-remote-desktop read sssd public files
  * Allow thumb_t stream connect to systemd-userdbd
  * Add auth_nnp_domtrans_chkpwd()
  * Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  * Allow bluez dbus API passing unix domain sockets
  * Allow bluez dbus api pass sockets over dbus
  * Dontaudit systemd-generator connect to sssd over a unix stream socket
  * Allow init watch/watch_reads systemd-machined user ptys
  * Introduce sap_service_transition_to_unconfined_user boolean
  * allow init to read sap symlinks
  * Allow SAP domain to relocation text in all files</changelog>
  <changelog author="cathy.hu@suse.com" date="1765972800">- Update to version 20250627+git343.b66ec7135:
  * Allow snapper_tu_etc_plugin_t to connect to machined varlink socket (bsc#1254889)</changelog>
  <changelog author="cathy.hu@suse.com" date="1767787200">- Update to version 20250627+git345.3965b24b0:
  * Allow 'mysql-systemd-helper upgrade' to work correctly (bsc#1255024)</changelog>
  <changelog author="rfrohl@suse.com" date="1770120000">- Update to version 20250627+git347.b8926451e:
  * Add support for 'mariadb@.service' (bsc#1255024).</changelog>
  <changelog author="rfrohl@suse.com" date="1771502400">- Update to version 20250627+git351.529352149:
  * Allow syslog_t access ISC dhcpd /dev/log socket (bsc#1255725)
  * privoxy: account for openSUSE chroot configuration (bsc#1237375)</changelog>
  <changelog author="rfrohl@suse.com" date="1774008000">- Update to version 20250627+git355.5249ba7d5:
  * Revert "Define file equivalency for /var/opt" (bsc#1259704)
  * Make stalld stalld_var_run_t labeling rules more generic (bsc#1259438)</changelog>
  <changelog author="cathy.hu@suse.com" date="1775822400">- Update to version 20250627+git363.7b84cc7fb:
  * Add missing Nextcloud file contexts (bsc#1261535)
  * openSUSE uses /var/lib/php8 (bsc#1239177)
  * /srv/www/htdocs is DocumentRoot of apache (bsc#1261535)
  * Allow snapper sdbootutil plugin read kernel modules (bsc#1259867)
  * Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)</changelog>
  <changelog author="cathy.hu@suse.com" date="1776254400">- Add OrderWithRequires for openssh-server as workaround
  to unblock the product increment bsc#1262083 until a proper fix is developed</changelog>
  <changelog author="cathy.hu@suse.com" date="1776340800">- Add OrderWithRequires for systemd as workaround (bsc#1262083)
  to unblock the product increment bsc#1262083 until a proper fix is developed</changelog>
  <changelog author="cathy.hu@suse.com" date="1776340801">- Revert OrderWithRequires for openssh-server and systemd
  and move %postInstall to %post as fix until zypper moves to
  rpm single transaction backend by default (bsc#1262083)</changelog>
</package>
<package pkgid="ee52cee5d0e2d6d3a2c8d3febd03c60da89d463a727848d8f0f7d4aa53ea743ada96bbfe2e37419d8af24e1dc9fa45bd5d7eb74d075474e907c26952c899f84b" name="selinux-tools" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="mcepl@suse.com" date="1691150400">- (bsc#1212618) Divide libselinux and libselinux-bindings again.
  libselinux itself is in Ring0 so it has to have absolutely
  minimal dependencies, so it is better to separate
  libselinux-bindings into a separate pacakge.</changelog>
  <changelog author="dimstar@opensuse.org" date="1691496000">- Do not BuildRequire swig and ruby-devel in the main build phase:
  those are only needed for the bindings.</changelog>
  <changelog author="georg.pfuetzenreuter@suse.com" date="1696161600">- Repair initrd libselinux check in selinux-ready</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * libselinux: performance optimization for duplicate detection
  * Introduce getpolicyload - a helper binary to print the number of policy reloads on the running system
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes
  * libselinux/utils/selabel_digest: drop unsupported option -d
  * libselinux/utils: improve compute_av output
  * libselinux: fail selabel_open(3) on invalid option
  * Improved man pages
  * Improvements
  * libselinux, libsepol: Add CFLAGS and LDFLAGS to Makefile checks
  * libselinux: enable usage with pedantic UB sanitizers
  * libselinux: support huge passwd/group entries
  * Bugfixes:
  * libselinux/utils/selabel_digest: avoid buffer overflow
  * libselinux: avoid pointer dereference before check
  * libselinux/utils/selabel_digest: pass BASEONLY only for file backend
  * libselinux: free empty scandir(3) result
  * libselinux: free data on selabel open failure
  * libselinux: use reentrant strtok_r(3)</changelog>
  <changelog author="cathy.hu@suse.com" date="1720699200">- Fix segfault caused by upstream changes in selabel_open():
  libselinux-set-free-d-data-to-NULL.patch
  Can be removed once it is upstream.</changelog>
  <changelog author="cathy.hu@suse.com" date="1730980800">- Drop check_runlevel from selinux-ready script and remove restorecond
  from check_packages as we don't require it to be selinux-ready.</changelog>
  <changelog author="jsegitz@suse.com" date="1737720000">- Update selinux-ready to clarify that kernel options aren't necessary
  on newer (open)SUSE versions</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * libselinux: deprecate security_disable(3)
  * libselinux/utils: introduce selabel_compare
  * improved selabel_lookup performance
  * libselinux: support parallel usage of selabel_lookup(3)
  * Improved man pages
  * Always build for LFS mode on 32-bit archs.
  * Binary fcontext files format changed, files using old format are ignored
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- Drop libselinux-set-free-d-data-to-NULL.patch: included upstream
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
</package>
<package pkgid="ceef9d2e0a127c216ec3d5a8ff9b3673ac91779a902988db926dca98e951a48a1589d73f86db6310f4c3220197f6c70de70c71971ea05e1d685a4d719fb5b5a6" name="setroubleshoot-plugins" arch="noarch">
  <version epoch="0" ver="3.3.15" rel="160000.2.2"/>
  <changelog author="prusnak@suse.cz" date="1244635200">- initial version 2.0.16
  * based on Fedora package</changelog>
  <changelog author="prusnak@suse.cz" date="1267099200">- updated to 2.1.40</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Rebase to 3.3.9</changelog>
  <changelog author="predivan@mts.rs" date="1615809600">-  Update to 3.3.12
  Summary of the changes from 3.3.10 to 3.3.12
  * Use get_package_nvr* functions instead of get_rpm_nvr*
  * Add plugin which analyzes execmem denials
  * Update qemu_blk_image and qemu_file_image
  * Update "xen_image" plugin
  * update "file" plugin
  * Handle no "allowed_target_types" properly
  * bind_ports: Do not use when there are no allowed_target_types
  * Fix summary and "if" text for AVCs with unknown target path</changelog>
  <changelog author="lnussel@suse.de" date="1621339200">- Don't call dbus-send in %post as that would auto launch the server</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 3.3.14:
  * Update translations
  * Add 'fur' into shipped locales
  * Update translations</changelog>
  <changelog author="fcrozat@suse.com" date="1674561600">- Update project url.</changelog>
  <changelog author="dmueller@suse.com" date="1732363200">- add 9e54f6a661330070ad25a0e86f197b3530bfc5c7.patch: fixes
  build with python 3.13+</changelog>
  <changelog author="daniel.garcia@suse.com" date="1741348800">- Fix license tag, it's GPL-3.0-or-later.</changelog>
  <changelog author="zkubala@suse.cz" date="1743768000">- Update to 3.3.15
  * restorecon.py: exclude more paths
  * Improve disable_ipv6 plugin then_text
  * Update generated configuration files
  * Update translations
- patch 9e54f6a661330070ad25a0e86f197b3530bfc5c7.patch removed since
  it is not needeed anymore</changelog>
</package>
<package pkgid="067aac8490a920a4bb59a0e6a579b12121cba55a9cebf76081fb1f95472d30949ce92222b0f66308df1e6987f81447ab0c59658d76c79d4a7163f2a824d9c5fb" name="setroubleshoot-server" arch="x86_64">
  <version epoch="0" ver="3.3.35" rel="160000.2.2"/>
  <changelog author="zkubala@suse.cz" date="1669809600">- Fix dbus conf file location to /usr/share/dbus-1</changelog>
  <changelog author="zkubala@suse.cz" date="1670500800">- Small adjustments in a spec file for dirs and files
- Add documentation to be build in setroubleshoot-doc</changelog>
  <changelog author="fcrozat@suse.com" date="1674561600">- Update to version 3.3.31:
  * Add a screen reader label to the icon
  * seapplet: avoid ValueError when parsing sealert.conf
  * doc: Document performance related changes
  * Decrease setroubleshootd priority and limit RAM utilization to 1GB
- Add python3-setuptools and python3-pip to BuildRequires.</changelog>
  <changelog author="zkubala@suse.cz" date="1686139200">- Add patch remove-pip-from-makefile.patch to temp fix build error
  caused by invoking `-m pip install` within build process by
  return to `setup.py install` - we do not allow network
  connection in secure build mode in OBS</changelog>
  <changelog author="fcrozat@suse.com" date="1699617600">- Update to version 3.3.32:
  * Rename session bus name to org.fedoraproject.sealert
  * seapplet: wrap SEApplet() to try except
  * util.py: Add doctext test for build_module_type_cache()
  * Update translations
- Add explicit dependency on python3-six for server subpackage.
- Remove buildrequires on gtk2-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="zkubala@suse.cz" date="1712836800">- Add patch disable-send-bug-report-button.patch to remove
  "Submit bug report" button from the gui browser. For now it returns
  white page since reporting into Bugzilla is not working and also
  requires an account or api access for the user.</changelog>
  <changelog author="zkubala@suse.cz" date="1722254400">- Add libreport-gtk and python3-libreport into requirements for TW
  (fixes boo#1217042)</changelog>
  <changelog author="zkubala@suse.cz" date="1741262400">- Fix in spec file (correct sysemctl command to reload auditd on
  install/uninstall) (bsc#1237388)
- Update to version 3.35
  * Mon Mar 03 2025 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-4
  - Update tmpfiles.d config (bz#2346971)
  * Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 3.3.35-3
  - Drop call to %sysusers_create_compat
  * Tue Nov 26 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.35-1
  - Do not hardcode /var/lib/selinux as store_root
  * Fri Nov 15 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-2
  - Do not hardcode /var/lib/selinux as store_root
  - Fix icon file name (bz#2300369)
  * Mon Nov 04 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.34-1
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  * Wed Aug 21 2024 Michal Srb &lt;michal@redhat.com&gt; - 3.3.33-6
  - Disable bug reporting, if libreport is not available
  - Resolves: RHEL-52902
  * Mon Jun 03 2024 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.33-2
  - Ship with contemporary app icon
  * Wed Jan 31 2024 Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.3.33-1
  - Check that SELinux is enabled before running (rhbz#2178950)
  - Improve limiting RAM utilization
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-7
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  * Tue Jul 25 2023 Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.3.32-6
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  * Fri May 26 2023 Miro Hrončok &lt;mhroncok@redhat.com&gt; - 3.3.32-3
  - Fix build with pip 23.1.2+
  - Fixes: rhbz#2209022</changelog>
  <changelog author="zkubala@suse.cz" date="1743768000">- bumb version to 3.35 for SL Micro 6.2 which fixes bsc#1240428</changelog>
</package>
<package pkgid="626811dadbdf84d296e061736d69a812c533e8dbdb90ba4b4cadfa6234d9cf8b95eac9aec070cefee0ec4c81de7cbcbc11bac01e61ec00faf262a0cc1858b047" name="sevctl" arch="x86_64">
  <version epoch="0" ver="0.6.2" rel="160000.2.2"/>
  <changelog author="jfehlig@suse.com" date="1675166400">- Update to v0.3.2 + git commit e37c4d6
    src/main: Remove README portion of main.rs
    .github: Remove cargo readme CI test
    docs: Add a generable man page
    ci: Add asciidoctor as a build dependency
    ok: Add Genoa processor identifying
    ok: Rewrite processor generation querying
    secret: Add docs and update README.md
    Add `secret build` subcommand
    measurement: rework some functions for use with `secret build`
    main: Improve error printing on exit
    measurement: Add docs and update README.md
    measurement: Comment why we aren't using sev crate
    Change `measurement build` output to measurement+nonce
    Add `measurement build --launch-measure-blob`
    Add `measurement build --vmsa-cpu0, --vmsa-cpu1, --num-cpus`
    Add `measurement build --firmware --kernel --initrd --cmdline`
    Add `measurement build --outfile PATH`
    Let `measurement build --tk` accept path or base64 string
    Let `measurement build` accept int values as hex too
    Add `measurement build` subcommand
    Update version to 0.3.2
    Update sev crate to 1.0.1
    Update to 0.3.1
    Update to 0.3.1
    build(deps): bump httparse from 1.7.1 to 1.8.0
    Add CODEOWNERS file
    CI: Drop rust 1.51.0 testing
    Fix clippy warnings with rust nightly
    ok: Show if Page flush MSR is enabled/disabled
    ok: Change TestResult.name to String
    Replace error.rs with anyhow crate
    ok: Expand coverage for all AMD CPU model numbers</changelog>
  <changelog author="caleb.crane@suse.com" date="1675857600">- Set cargo_vendor update param to false to bypass upstream semvar issues</changelog>
  <changelog author="caleb.crane@suse.com" date="1678795200">- Update to v0.3.2 + git commit 255d370
    dependency: Enable vendored feature for openssl
    Add show commands for identifier, SNP status and VCEK URL.
    readme: Add some basic provisioning instructions
    Update sev library to version 1.1.0
    ok: Find singular model and family on processor ID</changelog>
  <changelog author="dimstar@opensuse.org" date="1681905600">- BuildRequire rubygem(asciidoctor) instead of %{rubygem
  asciidoctor}" the %rubygem} macro expands to all ruby versions,
  wheras we are perfectly fine with getting only one version for
  asciidoctor into the buildroot.</changelog>
  <changelog author="caleb.crane@suse.com" date="1694606400">- Update to sevctl v0.4.3 (jsc#4981)
  - Add show commands for identifier and VCEK URL
  - Improve processor identification
  - Add 'sevctl measurement build'
  - Expand coverage for all AMD CPU model numbers
  - Adjust to use sev VMSA result changes
  - Add vmsa show command
  - Implement vmsa update subcommand
  - Implement vmsa build subcommand
  - Detect and use host arch's CPU generation
  - Support HTTP/HTTPS proxies
- Spec: Upgrade vendored dependencies
- Spec: Utilize upstream git tags</changelog>
  <changelog author="caleb.crane@suse.com" date="1706097600">- Fix CVE-2023-50711: vmm-sys-util: out of bounds memory accesses (bsc#1218502, bsc#1218499)
  - Upgrade vendored dependencies, namely vmm-sys-utils &gt; 0.12.0
- spec: Switch back to greedy cargo updates of vendored dependencies. This CVE was multiple
  levels deep in the dependency tree and only fixed with the more agressive cargo update strategy</changelog>
  <changelog author="caleb.crane@suse.com" date="1726228800">- Update vendored dependencies and re-enable cargo update obs service (bsc#1229953)
- Service: Remove deprecated cargo_config and cargo_audit services, both
  are now handled by the cargo_vendor services</changelog>
  <changelog author="caleb.crane@suse.com" date="1727956800">- Spec: Add direct dependency on cargo in addition to cargo-packaging.
    This fixes build errors on 15SP7 where the inherited version of Rust
    is too old
- Service: Remove deprecated cargo_config and cargo_audit services, both
    are now handled by the cargo_vendor service</changelog>
  <changelog author="caleb.crane@suse.com" date="1729684800">- Update to version 0.6.0:
  * Update to 0.6.0
  * session: Use anyhow macro for error return
  * Update sev crate to 4.0.0
  * secret: Use From::from conversion
  * Add Cargo.lock
  * show: Patching bug from clap migration
  * build(deps): update reqwest requirement from 0.11.18 to 0.12.4
  * build(deps): update bitfield requirement from 0.14.0 to 0.15.0</changelog>
  <changelog author="caleb.crane@suse.com" date="1748606400">- Update to version 0.6.2:
  * Bump version to 0.6.2
  * Update sev dependency to 6.0.0
  * build: use io::Error::other to make clippy happy
  * Fix ownership in flags loop
  * validate: change parameters, now accept a full cert chain
  * Updated Ok to include support for all current proccessors. (#204)
  * Update to 0.6.0
  * session: Use anyhow macro for error return
  * Update sev crate to 4.0.0
  * secret: Use From::from conversion</changelog>
</package>
<package pkgid="1fe7a026cb8d3142c2c3bd38db56b38a598115648cd852c9051396e614849f0d3f150dd3c7784a41917070187ef151b1a52993ce3f5b25ec8253dcf44e5e8e03" name="sg3_utils" arch="x86_64">
  <version epoch="0" ver="1.48~20221101+5.c6a1f6b8" rel="160000.1.1"/>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option; sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1773144000">- Update to version 1.48~20221101+5.c6a1f6b8:
  * rescan-scsi-bus.sh: Fix invocation of udevadm (boo#1258664)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
    without -u (bsc#1215720, bsc#1216355)</changelog>
</package>
<package pkgid="af48efb62e3e92b584dd2279b5ed2fc3afd7c8df75d4badeaa7df15384d47c40e3d757ea19f11dbc7256319264621ab56334192afb2cd55660c3eafe66206a13" name="shadow" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="160000.2.2"/>
  <changelog author="mvetter@suse.com" date="1711281600">- Update to 4.15.1:
  * Fix a bug that caused spurious error messages about unknown
    login.defs configuration options #967
  * Adding checks for fd omission #964
  * Use temporary stat buffer #974
  * Fix wrong french translation #975
- Drop shadow-4.15.0-fix-definition.patch</changelog>
  <changelog author="mvetter@suse.com" date="1718798400">- Update to 4.16.0:
  * The shadow implementations of id(1) and groups(1) are deprecated
    in favor of the GNU coreutils and binutils versions.
    They will be removed in 4.17.0.
  * The rlogind implementation has been removed.
  * The libsubid major version has been bumped, since it now requires
    specification of the module's free() implementation.
- Update shadow-login_defs-suse.patch
- Add shadow-4.16.0-econf.patch:
  Replace deprecated econf_readDirs with econf_readConfig</changelog>
  <changelog author="mvetter@suse.com" date="1719230400">- bsc#1226850: Drop incorrect econf patch (until time to fix it)
  Drop shadow-4.16.0-econf.patch</changelog>
  <changelog author="scabrero@suse.de" date="1720440000">- Disable flushing sssd caches. The sssd's files provider is no
  longer available.</changelog>
  <changelog author="mvetter@suse.com" date="1733486400">- Update to 4.17.0 RC1:
  Pre-release without changelog</changelog>
  <changelog author="mvetter@suse.com" date="1735300800">- Update to 4.17.0:
  * Fix the lower part of the domain of csrand_uniform()
  * Fix use of volatile pointer
  * Use 'dist-hook' to clean up &lt;tests/unit/Makefile&gt;
  * Use str2[u]l() instead of atoi(3)
  * Use a2i() in various places
  * Fix const correctness
  * Use uid_t for holding UIDs (and GIDs)
  * Move all sprintf(3)-like APIs to a subdirectory
  * Move all copying APIs to a subdirectory
  * Fix forever loop on ENOMEM
  * Fix REALLOC() nmemb calculation
  * Remove id(1)
  * Remove groups(1)
  * Use local time for human-readable dates
  * Use %F instead of %Y-%m-%d with strftime(3)
  * is_valid{user,group}_name(): Set errno to distinguish the reasons
  * Recommend --badname only if it is useful
  * Add fmkomstemp() to fix mode of &lt;/etc/default/useradd&gt;
  * Fix use-after-free bug in sgetgrent()
  * Update Catalan translation
  * Remove references to cppw, cpgr
  * groupadd, groupmod: Update gshadow file with -U
  * Added option -a for listing active users only, optimized using if aflg,return
  * Added information in lastlog man page for new option '-a'
  * Plenty of code cleanup and clarifications</changelog>
  <changelog author="mvetter@suse.com" date="1735646400">- Update to 4.17.1:
  * Fix `su -` regression #1163</changelog>
  <changelog author="mvetter@suse.com" date="1736596800">- Update to 4.17.2:
  * src/login_nopam.c: Fix compiler warnings #1170
  * lib/chkname.c: Put limits for LOGIN_NAME_MAX and sysconf(_SC_LOGIN_NAME_MAX) #1169
  * Use HTTPS in link to Wikipedia article on password strength #1164
  * lib/attr.h: use C23 attributes only with gcc &gt;= 10 #1172
  * login: Fix no-pam authorization regression #1174
  * man: Add Portuguese translation #1178
  * Update French translation #1177
  * Add cheap defense mechanisms #1171
  * Add Romanian translation #1176</changelog>
  <changelog author="mvetter@suse.com" date="1737374400">- bsc#1235453: Set SYS_{UID,GID}_MIN to 201:
  After repeated similar requests to change the ID ranges we set the
  above mentioned value to 201. The max value will stay at 499.
  This range should be sufficient and will give us leeway for the
  future.
  It's not straightforward to find out which static UIDs/GIDs are
  used in all packages.
  Update shadow-login_defs-suse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1744200000">- shadow-util-linux.patch: util-linux-2.41 introduced new variable:
  LOGIN_ENV_SAFELIST. Recognize it and update dependencies. The
  patch includes gh/shadow-maint/shadow/pull#1248.
- shadow-login_defs-check-login_defs.lst: Make the util-linux.spec
  multibuild file compatible with quilt. Make it working with new
  quilt.</changelog>
</package>
<package pkgid="0bfaacc3608c5c7e5e1ba81e095a0878c225aad0bbb999c89ff69cc0cc06b8d08f2721722974220dd136ab54a903c7399dd38adfa2ae1a44625da3a4883975fa" name="shared-mime-info" arch="x86_64">
  <version epoch="0" ver="2.4" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1609934400">- Update to version 2.1:
  + Adapt to xdgmime behaviour change: in case of multiple glob
    matches, and the magic match is unrelated to all of them,
    ignore the magic and pick one of the glob matches. xdgmime was
    actually deviating from the spec on this.
  + Improve text/vnd.trolltech.linguist magic to reduce false
    positives for MPEG TS files.
  + audio/mpeg: add layer 2, 2.5, and 1 protected magics.
  + Add many aliases for image/x-tga.
  + audio/x-mod: improve magic for 669 Composer files.
  + Add mime-type image/ktx2 (Khronos image texture format
    version 2).
  + application/oxps: differentiate from /vnd.ms-xpsdocument.
  + Make image/g3fax the canonical name for image/fax-g3.
  + Make text/vnd.trolltech.linguist the canonical name for
    text/vnd.qt.linguist.
  + Make application/vnd.smaf the canonical name for
    application/x-smaf,
  + Make application/vnd.apple.keynote the canonical name for
    application/x-iwork-keynote-sffkey.
  + Add mime-type image/astc (Adaptive Scalable Texture Compression
    files).
  + Add mime-type for SageMath script files (*.sage).
  + Add mime-type for Kaitai Struct.
  + Remove application/x-dc-rom.
  + Add mime-type for MAME compressed hard disk image
    (application/x-mame-chd).
  + Add mime-types application/nintendo-3ds-executable,
    application/x-nintendo-3ds-rom.
  + Add mime-types application/x-dreamcast-rom,
    application/x-gd-rom-cue, application/x-discjuggler-cd-image.
  + Add mime-type application/x-compressed-iso (*.cso).
  + Remove image/avif-sequence.
  + Fix application/x-sharedlib vs application/x-executable
    confusion for PIE executables.
- Drop smi-Fix-pkg-config-installation-path.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Do not ghost own %{_datadir}/mime/[a-ms-vxX]*: as those
  files/directories do not exist during build, RPM can't expand the
  glob and adds it literally to the file list, not having any
  effect in the end. A cleanup of the directory structure would not
  work anyway, as there are also files generated inside.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Add fix-build-meson-0_60.patch: Fix build with meson 0.60 and
  newer.
- Add drop-itstool-dep.patch: Drop itstool as it is no longer
  needed, upstream was missing this in the patch. Following this:
  drop itstool BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1648468800">- Update to 2.2:
  * model/3mf: new type
  * Match shared libraries with version suffix
  * model/obj: add mtllib and Blender comment based magic
  * model/mtl: add Blender comment magic, increase newmtl range
  * model/obj, model/mtl: new types
  * Add Electron Archive Format type application/x-asar
  * text/x-qml: Lower match priority to avoid conflicts with Python
  * Move '*.blend' to top of Blender glob list
  * Adding SPARQL media types
  * application/zip: Add `*.zipx` glob and test fixture
  * Added DSD mime type
  * Differentiate comic book archives
  * FITS: Add missing `application/fits` and legacy globs
  * Add Godot engine files
  * Add FlashForge "xgcode" mime-type
  * text/x-objc++src: new type
  * image/heif: test .hif extension too
  * image/hif: add *.hif glob
  * image/heif: add another test case
  * image/heif: add magics
  * Add a build-tools option to allow installing only the mime data
  * Add compressed SVG glob pattern `*.svg.gz`
  * Add Apple Wallet pass type application/vnd.apple.pkpass
  * migrate from custom itstool to builtin msgfmt for creating
    translated XML
  * Make the remaining plain text types subclasses of text/plain
  * audio/mobile-xmf: separate from audio/x-xmf
  * Adding ZIM file
  * Make text/x-mrml a subclass of application/xml
  * image/avif: move acronym and expansion to separate fields from
    comment
  * freedesktop_generate.sh: Don't hardcode ninja
  * Add text/x-mpl2
  * application/x-apple-systemprofiler+xml: require
    _SPCommandLineArguments in plist
  * image/jpeg: add test case with embedded property list XML
  * audio/vnd.dts.hd: include parent type magic in magic match
  * model/gltf+json: new type
  * model/gltf-binary: new type
  * application/x-object: add *.mod and a test case
  * application/x-mod: add some ProTracker magics and a test case
  * image/jxl: include test files in test list
  * tests: add trailing linefeed to mime-detection list
  * Make application/x-mswinurl a subclass of text/plain
  * Change description for *.desktop files to "desktop entry"
  * application/x-x509-ca-cert: add magics and test cases
  * application/pkix-cert: add BEGIN/END X509 CERTIFICATE magic
  * application/pkix-crl: add magic and test case
  * application/pkix-cert: add magic and test case
  * image/jxl: new type
  * Added .sc filename extension for Scala source code, as it is
    occasionally used
  * application/schema+json: new type
  * Add text/x-crystal
  * application/x-krita: remove stray period from comment
  * adding org-mode
  * Add Elixir source code mime type
  * Add two new offsets for .kra and .krz
  * text/x-python3: add *.pyi glob (Python stub files)
  * image/x-canon-cr3: new type
  * image/x-xpixmap: make XPM3 magic more specific
  * image/x-xpixmap: add XPM2 magic
  * application/x-troff-man: add *.[1-9] glob
  * application/toml: new type
  * Lower priority of "BEGIN {" for perl, awk uses that too
  * Add Smacker video type video/vnd.radgamettools.smacker
  * Clarify database license
  * meson: make xmlto optional, build spec only if found
  * application/x-7z-compressed: add *.7z.001 glob
  * Add Bink video type video/vnd.radgamettools.bink
  * image/x-nikon-nrw: add test case
  * image/x-nikon-nrw: new type
  * application/x-vhdx-disk: improve acronym and its expansion
  * application/ovf: new type
  * application/x-qed-disk: new type
  * application/x-vdi-disk: new type
  * application/x-vmdk-disk: new type
  * application/x-vhd-disk, /x-vhdx-disk: new types
  * application/vnd.apple.numbers, .pages: add older magics and
    test cases
  * Add text/x-dart
  * application/vnd.apple.numbers, /vnd.apple.pages: new types
  * xdgmime: configure as submodule
- Drop obsolete patches:
  * fix-build-meson-0_60.patch
  * drop-itstool-dep.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1680091200">- Filter out dependency on /usr/bin/pkg-config: this package is
  installed on basically all systems, but it also contains a .pc
  file. Splitting this into a -devel package seems not reasonable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697198400">- Update to version 2.3:
  * Add DOS/Windows batch file type
  * Add Gerber and Excellon drill files
  * Add JPEG XR mime type
  * Add Modrinth modpack
  * Add OpenVPN profile
  * Add Portable Font Resource application/font-tdpfr.
  * Add TAK audio mime type
  * Add application/vnd.microsoft.windows.thumbnail-cache
  * Add application/vnd.ms-officetheme
  * Add application/x-bzip for bzip2's deprecated predecessor bzip
  * Add application/x-bzip3
  * Add application/x-fishscript and application/x-nuscript
  * Add application/x-ms-pdb
  * Add application/x-zpaq
  * Add definition and test file for StuffIt X archives.
  * Add image/apng
  * Add mime type for Typst files
  * Add mimetype application/x-lmdb
  * Add mimetype for Blueprint source code
  * Add mimetype for CBOR
  * Add mimetype for Devicetree source code
  * Add mimetype for ERIS link files
  * Add mimetype for Flattened Devicetree (binary)
  * Add mimetype for Quite OK Image Format (QOI)
  * Add perf data file type
  * Add subclass information for .ppt and .xls
  * Add support for newer AAXC Audible Audiobook format
  * Add text/julia for Julia source code
  * Add text/x-nim and text/x-nimscript
  * Add todo.txt mime type
  * Add two new languages
  * Avoid meson errors when 'build-tools' is set to false
  * Bump magic priority for application/ovf
  * CI: Use dnf5 instead of dnf
  * Change descriptions to say LibreOffice rather than OpenOffice
  * Don't install man page on Windows
  * Fix description for audio/x-xi
  * Give application/x-raw-floppy-disk-image the floppy media icon
  * Give generic optical disk images the optical media icon
  * Identify .pdb files without a signature match as
    application/vnd.palm
  * Improve matching for message/rfc822
  * Lengthen image/png magic
  * Make application/pgp-* not inherit from text/plain
  * Make application/vnd.squashfs a subclass of
    application/vnd.efi.img
  * Make update-mime-database compatible with MSVC (by porting it
    to C++)
  * Prefer application/java-archive to application/x-java-archive
  * Prefer application/vnd.efi.img over
    application/x-raw-disk-image
  * Prefer application/vnd.efi.iso over application/x-cd-image
  * Prefer audio/vnd.wave over audio/x-wav
  * Prefer video/vnd.avi over video/x-msvideo
  * Remove "##" magic for matlab files
  * Rename application/x-bzip to application/x-bzip2
  * Revert "use Title Case for mime type description"
  * Update application/sieve.
  * Updated to latest xdgmime
  * add tiled map editor map and tileset files
  * application/javascript: Rename to text/javascript
  * application/vnd.dart: use IANA registered type
  * application/vnd.dbf: use IANA registered type
  * application/yaml: use IANA registered type
  * audio/x-wav: Add missing sub-class relationship with
    application/x-riff
  * buildsystem - add options for building tests and translations
  * ci: Use ci-templates to build image
  * ci: Use detached pipelines
  * icons for 3d model formats
  * spec: Clarify that namespaceURI can be empty
  * text/markdown: add x-office-document generic-icon
  * text/vnd.familysearch.gedcom: use IANA registered type
  * use Sentence case for mime type descriptions
  * use Title Case for mime type description
  * video/vnd.youtube.yt: add magic
  * video/vnd.youtube.yt: use IANA registered type
- Add generic c++_compiler BuildRequires: shared-mime-info now
  depends on a c++ compiler.</changelog>
  <changelog author="christophe@krop.fr" date="1699790400">- Update to 2.4
  * Restore mimetype name for *.bz2 and *.tar.bz2
  * Improve detection of application/mac-binhex40
  * Add application/x-msdownload and subtypes
  * Add Windows app store types
  * Give Windows Installer packages the package icon
  * Lower priority for text/x-mpsub's magic, so it doesn't match
    pcb-drillFile.drl
  * Add application/x-powershell
  * Add application/wasm
  * Change comment of text/x-mpsub
  * Change comment of text/x-mpl2
  * Add text/x-component
  * Give higher priority to the more specific image/apng magic
  * Recognize *.jfif as image/jpeg
  * Add application/its+xml
  * Add text/x-vb
  * Add text/x-basic
  * Add new group "chemical" in update-mime-database
  * Add mimetype for Protein Data Bank (pdb) files
  * Remove too generic magic from application/x-pak
  * Add application/json5
  * Add text/vbscript.encode
  * Add text/jscript.encode
  * Add text/jscript as synonym of text/javascript
  * Fix backwards relationship between text/javascript and
    application/ecmascript
  * Add application/vnd.cups-ppd
  * Add application/x-ms-shortcut
  * Give application/x-mswinurl the link icon</changelog>
  <changelog author="mgorse@suse.com" date="1707739200">- Explicitly use gcc 13 on SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Uninstall silently if update-mime-database is not present
  (bsc#1231463).</changelog>
</package>
<package pkgid="8020378756f2df8c3116fd91cdefb559b1d761b02d7ba385c2821e1538000879efe6486ef6f886a4653b46bde16d83f62984afde177df298ff14e781d6403747" name="shim" arch="x86_64">
  <version epoch="0" ver="16.1" rel="160000.1.1"/>
  <changelog author="glin@suse.com" date="1689249600">- Upgrade shim-install to support TPM 2.0 Key File
  b540061 Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector</changelog>
  <changelog author="glin@suse.com" date="1695211200">- Update shim-install to fix boot failure of ext4 root file system
  on RAID10 (bsc#1205855)
  226c94ca5cfca  Use hint in looking for root if possible
- Adopt the macros from fde-tpm-helper-macros to update the
  signature in the sealed key after a bootloader upgrade</changelog>
  <changelog author="glin@suse.com" date="1710417600">- Update shim-install to set the SRK algorithm for the grub2
  TPM2 key protector (bsc#1213945)
  92d0f4305df73  Set the SRK algorithm for the TPM2 protector
- Add the missing BuildRequires: update-bootloader-rpm-macros
  for the update_bootloader_* macros in %post and %posttrans</changelog>
  <changelog author="dennis.tseng@suse.com" date="1716120000">-- Update to version 15.8
  - Various CVE fixes are already merged into this version
    mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
    avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
    Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
    Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
    pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
    pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)
  - remove shim-Enable-the-NX-compatibility-flag-by-default.patch
    The codes in this patch are already existing in shim-15.8
    The NX flag is disable which is same as the default value of shim-15.8,
    hence, not need to enable it by this patch now.
  - Patches (git log --oneline --reverse 15.7..15.8)
    657b248 Make sbat_var.S parse right with buggy gcc/binutils
    7c76425 Enable the NX compatibility flag by default.
    89972ae CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc wrapper
    c7b3051 pe: Align section size up to page size for mem attrs
    e4f40ae pe: Add IS_PAGE_ALIGNED macro
    f23883c Don't loop forever in load_certs() with buggy firmware
    1f38cb3 Optionally allow to keep shim protocol installed
    102a658 Drop invalid calls to `CRYPTO_set_mem_functions`
    aae3df0 test-sbat: Fix exit code
    cca3933 Block Debian grub binaries with SBAT &lt; 4
    cf59f34 Further improve load_certs() for non-compliant drivers/firmwares
    0601f44 SBAT-related documents formatting and spelling
    0640e13 Add a security contact email address in README.md
    0bfc397 Work around malformed path delimiters in file paths from DHCP
    a8b0b60 pe: only process RelocDir-&gt;Size of reloc section
    f7a4338 Skip testing msleep()
    549d346 Rename 'msecs' to 'usecs' to avoid potential confusion
    908c388 Change type of fallback_verbose_wait from int to unsigned long
    05eae92 Add SbatLevel_Variable.txt to document the various revocations
    243f125 Use -Wno-unused-but-set-variable for Cryptlib and OpenSSL
    89d25a1 Add a make rule for compile_commands.json
    118ff87 Add gnu-stack notes
    f132655 test: Make our fake dprintf be a statement.
    be00279 Remove CentOS 7 test builds.
    9964960 Split pe.c up even more.
    569270d Test (and fix) ImageAddress()
    61e9894 Verify signature before verifying sbat levels
    1578b55 Add libFuzzer support for csv.c
    a0673e3 Fix a 1-byte memory leak in .sbat parsing.
    e246812 Add libFuzzer support to the .sbat parser.
    fd43eda Work around ImageAddress() usage mistake
    1e985a3 Correctly free memory allocated in handle_image()
    dbbe3c8 mok: Avoid underflow in maximum variable size calculation
    04111d4 Make some of the static analysis tools a little easier to run
    7ba7440 compile_commands.json: remove stuff clang doesn't like
    66e6579 CVE-2023-40546 mok: fix LogError() invocation
    f271826 Add primitives for overflow-checked arithmetic operations.
    8372147 pe-relocate: Add a fuzzer for read_header()
    5a5147d CVE-2023-40551: pe-relocate: Fix bounds check for MZ binaries
    e912071 pe-relocate: make read_header() use checked arithmetic operations.
    93ce255 CVE-2023-40550 pe: Fix an out-of-bound read in verify_buffer_sbat()
    e7f5fdf pe-relocate: Ensure nothing else implements CVE-2023-40550
    afdc503 CVE-2023-40549 Authenticode: verify that the signature header is in bounds.
    96dccc2 CVE-2023-40548 Fix integer overflow on SBAT section size on 32-bit system
    dae82f6 Further mitigations against CVE-2023-40546 as a class
    ea0f9df Allow SbatLevel data from external binary
    b078ef2 Always clear SbatLevel when Secure Boot is disabled
    7dfb687 BS Variables for bootmgr revocations
    a967c0e shim should not self revoke
    577cedd Print message when refusing to apply SbatLevel
    e801b0d sbat revocations: check the full section name
    0226b56 CVE-2023-40547 - avoid incorrectly trusting HTTP headers
    6f0c8d2 Print errors when setting/clearing memory attrs
    57c0eed Updated Revocations for January 2024 CVEs
    49c6d95 Fix some minor ia32 build issues.
    be8ff7c post-process-pe: Don't set the NX_COMPAT flag by default after all.
    13abd9f pe-relocate: Avoid __builtin_add_overflow() on GCC &lt; 5
    c46c975 Suppress "Failed to open &lt;..&gt;\revocations.efi" when file does not exist
    30a4f37 Rename "previous" revocations to "automatic"
    6f395c2 Build time selectable automatic SBATLevel revocations
    a23e2f0 netboot read_image() should not hardcode DEFAULT_LOADER
    993a345 Try to load revocations.efi even if directory read fails
    1770a03 gitmodules: use shim-15.8 for gnu-efi branch
    5914984 (HEAD -&gt; main, tag: latest-release, tag: 15.8, origin/main, origin/HEAD) Bump version to 15.8</changelog>
  <changelog author="glin@suse.com" date="1726488000">- Update shim-install to use the 'removable' way for SL-Micro
  (bsc#1230316)
  * 433cc4e Always use the removable way for SL-Micro</changelog>
  <changelog author="glin@suse.com" date="1726747200">- Update shim-install to limit the scope of the 'removable'
  SL-Micro to the image booting with TPM2 unsealing (bsc#1210382)
  * 769e41d Limit the removable option to encrypted SL-Micro</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1745323200">- Undefine %_enable_debug_packages to fix building with rpm-4.20
  (backport of the fix from Factory in SR#1232808)
- Fix build with rpm 4.20 by copying the extracted directories
  explicitly</changelog>
  <changelog author="jlee@suse.com" date="1765540800">- Update to 16.1
  - RPMs
    shim-16.1-150300.4.31.1.x86_64.rpm
    shim-debuginfo-16.1-150300.4.31.1.x86_64.rpm
    shim-debugsource-16.1-150300.4.31.1.x86_64.rpm
    shim-16.1-150300.4.31.1.aarch64.rpm
    shim-debuginfo-16.1-150300.4.31.1.aarch64.rpm
    shim-debugsource-16.1-150300.4.31.1.aarch64.rpm
  - submitreq: https://build.suse.de/request/show/395247
  - repo: https://build.suse.de/package/show/SUSE:Maintenance:39913/shim.SUSE_SLE-15-SP3_Update
  - Patches (git log --oneline --reverse 16.0..16.1)
    4040ec4 shim_start_image(): fix guid/handle pairing when uninstalling protocols
    39c0aa1 str2ip6(): parsing of "uncompressed" ipv6 addresses
    3133d19 test-mock-variables: make our filter list entries safer.
    d44405e mock-variables: remove unused variable
    0e8459f Update CI to use ubuntu-24.04 instead of ubuntu-20.04
    d16a5a6 SbatLevel_Variable.txt: minor typo fix.
    32804cf Realloc() needs one more byte for sprintf()
    431d370 IPv6: Add more check to avoid multiple double colon and illegal char
    5e4d93c Loader Proto: make freeing of bprop.buffer conditional.
    33deac2 Prepare to move things from shim.c to verify.c
    030e7df Move a bunch of stuff from shim.c to verify.c
    f3ddda7 handle_image(): make verification conditional
    774f226 Cache sections of a loaded image and sub-images from them.
    eb0d20b loader-protocol: handle sub-section loading for UKIs
    2f64bb9 loader-protocol: add workaround for EDK2 2025.02 page fault on FreePages
    1abc7ca loader-protocol: NULL output variable in load_image on failure
    fb77b44 Generate Authenticode for the entire PE file
    b86b909 README: mention new loader protocol and interaction with UKIs
    8522612 ci: add mkosi configuration and CI
    9ebab84 mkosi workflow: fix the branch name for main.
    72a4c41 shim: change automatically enable MOK_POLICY_REQUIRE_NX
    a2f0dfa This is an organizational patch to move some things around in mok.c
    54b9946 Update to the shim-16.1 branch of gnu-efi to get AsciiSPrint()
    a5a6922 get_max_var_sz(): add more debugging for apple platforms
    77a2922 Add a "VariableInfo" variable to mok-variables.
    efc71c9 build: Avoid passing *FLAGS to sub-make
    7670932 Fixes for 'make TOPDIR=... clean'
    13ab598 add SbatLevel entry 2025051000 for PSA-2025-00012-1
    617aed5 Update version to 16.1~rc1
    d316ba8 format_variable_info(): fix wrong size test.
    f5fad0e _do_sha256_sum(): Fix missing error check.
    3a9734d doc: add howto for running mkosi locally
    ced5f71 mkosi: remove spurious slashes from script
    0076155 ci: update mkosi commit
    5481105 fix http boot
    121cddf loader-protocol: Handle UnloadImage after StartImage properly
    6a1d1a9 loader-protocol: Fix memory leaks
    27a5d22 gitignore: add more mkosi dirs and vscode dir
    346ed15 mkosi: disable repository key check on Fedora
    afc4955 Update version to 16.1
  - 16.1 release note https://github.com/rhboot/shim/releases
    shim_start_image(): fix guid/handle pairing when uninstalling protocols by @vathpela in #738
    Fix uncompressed ipv6 netboot by @hrvach in #742
    fix test segfaults caused by uninitialized memory by @Fabian-Gruenbichler in #739
    Update CI to use ubuntu-24.04 instead of ubuntu-20.04 by @vathpela in #749
    SbatLevel_Variable.txt: minor typo fix. by @vathpela in #751
    Realloc() needs to allocate one more byte for sprintf() by @dennis-tseng99 in #746
    IPv6: Add more check to avoid multiple double colon and illegal char by @dennis-tseng99 in #753
    Loader proto v2 by @vathpela in #748
    loader-protocol: add workaround for EDK2 2025.02 page fault on FreePages by @bluca in #750
    Generate Authenticode for the entire PE file by @esnowberg in #604
    README: mention new loader protocol and interaction with UKIs by @bluca in #755
    ci: add mkosi configuration and CI by @bluca in #764
    shim: change automatically enable MOK_POLICY_REQUIRE_NX by @vathpela in #761
    Save var info by @vathpela in #763
    build: Avoid passing *FLAGS to sub-make by @rosslagerwall in #758
    Fixes for 'make TOPDIR=... clean' by @bluca in #762
    add SbatLevel entry 2025051000 for PSA-2025-00012-1 by @Fabian-Gruenbichler in #766
    Coverity fixes 20250804 by @vathpela in #767
    ci: fixlets and docs for mkosi workflow by @bluca in #768
    fix http boot by @jsetje in #770
    Fix double free and leak in the loader protocol by @rosslagerwall in #769
    gitignore: add more mkosi dirs and vscode dir by @bluca in #771
  - Drop upstreamed patch:
    The following patches are merged to 16.1
  - shim-alloc-one-more-byte-for-sprintf.patch
  - 32804cf5d9 Realloc() needs one more byte for sprintf()    [16.1]
  - shim-change-automatically-enable-MOK_POLICY_REQUIRE_NX.patch (bsc#1205588)
  - 72a4c41877 shim: change automatically enable MOK_POLICY_REQUIRE_NX [16.1]
- Building MokManager.efi and fallback.efi with POST_PROCESS_PE_FLAGS=-n (bsc#1205588)
- Building with the latest version of gcc in the codebase:
  - The gcc13 can workaround dxe_get_mem_attrs() hsi_status problem
  - We prefer that building shim with the latest version of gcc in codebase.
  - Set the minimum version is gcc-13.
  (bsc#1247432)
- SLE shim should includes vendor-dbx-sles.esl instead of
  vendor-dbx-opensuse.esl. Fixed it in shim.spec.</changelog>
  <changelog author="jlee@suse.com" date="1765800000">- Add DER format certificate files for the pretrans script to verify
  that the necessary certificate is in the UEFI db
  - openSUSE Secure Boot CA, 2013-2035
    openSUSE_Secure_Boot_CA_2013.crt
  - SUSE Linux Enterprise Secure Boot CA, 2013-2035
    SUSE_Linux_Enterprise_Secure_Boot_CA_2013.crt
  - Microsoft Corporation UEFI CA 2011, 2011-2026
    Microsoft_Corporation_UEFI_CA_2011.crt
  - Microsoft UEFI CA 2023, 2023-2038
    Microsoft_UEFI_CA_2023.crt
- shim.spec: Add a pretrans script to verify that the necessary certificate
  is in the UEFI db.
- Always put SUSE Linux Enterprise Secure Boot CA to target array.
  (bsc#1254679)</changelog>
  <changelog author="jlee@suse.com" date="1765886400">- shim-install: Add ca_string for SL Micro to update fallback loader
  The fallback loader, /boot/efi/EFI/BOOT/bootaa64.efi or bootx64.efi,
  cannot be upgraded by shim-install on SL Micro. The issue case is
  SL Micro 6.0. It causes that system gets regression bug because it's
  fallback to a old shim. So this patch adds ca_string to SL Micro.
  (bsc#1254336)</changelog>
</package>
<package pkgid="92861042b1b833bad5afc78818601162ec0111db1393f38383418e2b945313032b505c243b5972e9f17a3bdf0d3b2b2fea286fbac11707d431d8724c78667216" name="skopeo" arch="x86_64">
  <version epoch="0" ver="1.18.0" rel="160000.2.2"/>
  <changelog author="danish.prakash@suse.com" date="1696939200">- Bump go version to 1.21 (bsc#1215611)</changelog>
  <changelog author="danish.prakash@suse.com" date="1700740800">- Update to version 1.14.0:
  * Bump to v1.14.0
  * fix(deps): update module github.com/containers/common to v0.57.0
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update module github.com/containers/image/v5 to v5.29.0
  * Add documentation and smoke tests for the new --compat-auth-file options
  * Update c/image and c/common to latest
  * fix(deps): update module github.com/containers/storage to v1.51.0
  * fix(deps): update module golang.org/x/term to v0.14.0
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * fix(deps): update github.com/containers/common digest to 3e5caa0
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.9
  * Update github.com/klauspost/compress to v1.17.2
  * chore(deps): update module github.com/docker/docker to v24.0.7+incompatible [security]
  * Fix ENTRYPOINT documentation, drop others.
  * Remove unused environment variables in Cirrus
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * chore(deps): update dependency containers/automation_images to v20231004
  * chore(deps): update module golang.org/x/net to v0.17.0 [security]
  * copy: Note support for `zstd:chunked`
  * fix(deps): update module golang.org/x/term to v0.13.0
  * fix(deps): update module github.com/docker/distribution to v2.8.3+incompatible
  * fix(deps): update github.com/containers/common digest to 745eaa4
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * Packit: tag @lsm5 on copr build failures
  * vendor of containers/common
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * fix(deps): update module github.com/containers/common to v0.56.0
  * Cirrus: Remove multi-arch skopeo image builds
  * fix(deps): update module github.com/containers/image/v5 to v5.28.0
  * Increase the golangci-lint timeout
  * fix(deps): update module github.com/containers/storage to v1.50.2
  * fix(deps): update module github.com/containers/storage to v1.50.1
  * fix(deps): update golang.org/x/exp digest to 9212866
  * Fix a man page link
  * fix(deps): update github.com/containers/image/v5 digest to 58d5eb6
  * GHA: Closed issue/PR comment-lock test
  * fix(deps): update module github.com/containers/common to v0.55.4
  * fix(deps): update module github.com/containers/storage to v1.49.0
  * rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to v1.54.2
  * chore(deps): update dependency containers/automation_images to v20230816
  * Packit: set eln target correctly
  * packit: Build PRs into default packit COPRs
  * DOCS: Update Go version requirement info
  * DOCS: Add information about the cross-build
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.8
  * fix(deps): update module github.com/containers/common to v0.55.3
  * Update c/image after https://github.com/containers/image/pull/2070
  * chore(deps): update dependency golangci/golangci-lint to v1.54.1
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update golang.org/x/exp digest to 352e893
  * chore(deps): update dependency containers/automation_images to v20230807
  * Update to Go 1.19
  * fix(deps): update module golang.org/x/term to v0.11.0
  * Update c/image for golang.org/x/exp
  * RPM: define gobuild macro for rhel/centos stream
  * Fix handling the unexpected return value combination from IsRunningImageAllowed
  * Close the PolicyContext, as required by the API
  * Use globalOptions.getPolicyContext instead of an image-targeted SystemContext
  * Packit: remove pre-sync action
  * fix(deps): update module github.com/containers/common to v0.55.2
  * proxy: Change the imgid to uint64
  * [CI:BUILD] Packit: install golist before updating downstream spec
  * Update module golang.org/x/term to v0.10.0
  * Bump to v1.14.0-dev
  * Bump to v1.13.0</changelog>
  <changelog author="dcermak@suse.com" date="1705924800">- Update to version 1.14.1:
  * Bump to v1.14.1
  * fix(deps): update module github.com/containers/common to v0.57.2
  * fix(deps): update module github.com/containers/image/v5 to v5.29.1
  * chore(deps): update dependency containers/automation_images to v20240102
  * Fix libsubid detection
  * fix(deps): update module golang.org/x/term to v0.16.0
  * fix(deps): update golang.org/x/exp digest to 02704c9
  * chore(deps): update dependency containers/automation_images to v20231208
  * [skip-ci] Update actions/stale action to v9
  * fix(deps): update module github.com/containers/common to v0.57.1
  * fix(deps): update golang.org/x/exp digest to 6522937
  * DOCS: add Gentoo in install.md
  * DOCS: Update to add Arch Linux in install.md
  * fix(deps): update module golang.org/x/term to v0.15.0
  * Bump to v1.14.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1707134400">- Update to version 1.14.2:
  * [release-1.14] Bump Skopeo to v1.14.2
  * [release-1.14] Bump c/image to v5.29.2, c/common to v0.57.3 (fixes bsc#1219563)</changelog>
  <changelog author="dcermak@suse.com" date="1710504000">- Update to version 1.15.0:
  * Bump to v1.15.0
  * chore(deps): update module google.golang.org/protobuf to v1.33.0 [security]
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
  * chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
  * [CI:DOCS] Migrate skopeo container image
  * fix(deps): update module github.com/containers/common to v0.58.0
  * fix(deps): update module github.com/containers/image/v5 to v5.30.0
  * fix(deps): update module github.com/containers/storage to v1.53.0
  * fix(deps): update module golang.org/x/term to v0.18.0
  * fix(deps): update github.com/containers/image/v5 digest to faa4f4f
  * Move a go.mod dependency entry to the right section
  * Avoid a warning by gopls / VSCode
  * fix typo
  * update docs based on review
  * docs: make sure that CGO_ENABLED='1'
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1
  * Update c/image after https://github.com/containers/image/pull/2273
  * Also change the MIME type in manifest when decompressing a layer
  * Replace decompress-dirs.sh with Go code
  * Split decompressDir from runDecompressDirs
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.0
  * fix(deps): update module github.com/containers/common to v0.57.4
  * fix(deps): update golang.org/x/exp digest to 1b97071
  * fix(deps): update module github.com/containers/common to v0.57.3
  * Update github.com/containers/image/v5 to post-v5.29.2 main
  * Run codespell on code
  * fix(deps): update module github.com/containers/storage to v1.52.0
  * add kubasobon:semver changes
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
  * Bump to v1.15.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1716206400">- Update to version 1.15.1:
  * [release-1.15] Bump to v1.15.1
  * [release-1.15] Freeze the fedora-minimal image reference
  * [release-1.15] CVE-2024-3727 (bsc#1224123)</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1730203200">- Add patch for CVE-2024-9676 (bsc#1231698)
  * 0001-Use-securejoin.SecureJoin-when-forming-userns-paths.patch</changelog>
  <changelog author="dcermak@suse.com" date="1738843200">- Add patches for CVE-2024-6104 &amp; CVE-2023-45288
  Add patches:
  * 0001-http2-close-connections-when-receiving-too-many-head.patch (CVE-2023-45288, bsc#1236483)
  * 0002-Switch-hashicorp-go-retryablehttp-to-the-SUSE-fork.patch (CVE-2024-6104, bsc#1227056)
  Remove patch:
  * 0001-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
    Skopeo is not affected by the CVE-2024-9676, thus this patch is not necessary</changelog>
  <changelog author="dcermak@suse.com" date="1740744000">- Add patch for CVE-2025-27144 (bsc#1237613)
  Add patch:
  * 0003-Don-t-allow-unbounded-amounts-of-splits-https-github.patch
  Rebase patches:
  * 0001-http2-close-connections-when-receiving-too-many-head.patch
  * 0002-Switch-hashicorp-go-retryablehttp-to-the-SUSE-fork.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1747310400">- Add patch:
  * 0001-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
- Remove patch:
  * 0001-http2-close-connections-when-receiving-too-many-head.patch
  * 0002-Switch-hashicorp-go-retryablehttp-to-the-SUSE-fork.patch
  * 0003-Don-t-allow-unbounded-amounts-of-splits-https-github.patch
- Update to version 1.18.0:
  * Bump Skopeo to v1.18.0
  * Switch to the CNCF Code of Conduct
  * fix(deps): update module golang.org/x/term to v0.29.0
  * fix(deps): update module github.com/containers/common to v0.62.0
  * chore(deps): update dependency containers/automation_images to v20250131
  * fix(deps): update module github.com/spf13/pflag to v1.0.6
  * fix(deps): update module github.com/containers/image/v5 to v5.34.0
  * RPM: include check section to silence rpmlint
  * RPM: cleanup gobuild macro for CentOS Stream
  * fix(deps): update module github.com/containers/storage to v1.57.1
  * fix(deps): update module github.com/containers/storage to v1.57.0
  * feat: Add `--retry-delay` Option
  * fix(deps): update module github.com/containers/common to v0.61.1
  * fix(deps): update module github.com/containers/image/v5 to v5.33.1
  * fix(deps): update module github.com/containers/storage to v1.56.1
  * systemtest: update quay.io registry image
  * chore(deps): update dependency containers/automation_images to v20250107 (#2488)
  * fix(deps): update module golang.org/x/term to v0.28.0
  * chore(deps): update dependency golangci/golangci-lint to v1.63.4
  * chore(deps): update dependency golangci/golangci-lint to v1.63.3
  * chore(deps): update dependency golangci/golangci-lint to v1.63.2
  * fix(deps): update golang.org/x/exp digest to b2144cd
  * chore(deps): update module golang.org/x/net to v0.33.0 [security]
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.1
  * fix(deps): update module golang.org/x/term to v0.27.0
  * Fix handling of errorShouldDisplayUsage
  * fix(deps): update golang.org/x/exp digest to 2d47ceb
  * Packit: remove rhel (epel) jobs
  * Packit: switch fedora copr targets to fedora-all
  * fix(deps): update module github.com/stretchr/testify to v1.10.0
  * chore(deps): update dependency golangci/golangci-lint to v1.62.2
  * Update an expected error message
  * fix(deps): update module github.com/masterminds/semver/v3 to v3.3.1
  * chore(deps): update dependency golangci/golangci-lint to v1.62.0
  * fix(deps): update module github.com/moby/sys/capability to v0.4.0
  * Bump to c/Skopeo v1.18.0-dev
  * Bump to c/Skopeo v1.17.0
  * Bump c/common to v0.60.0
  * fix(deps): update module github.com/containers/image/v5 to v5.33.0
  * Trigger a rebuild of the ostree-rs-ext container
  * Update contrib/cirrus/ostree_ext.dockerfile for DNF 5
  * update CI images to f41
  * cirrus: use dnf remove over erase
  * fix(deps): update golang.org/x/exp digest to f66d83c
  * fix(deps): update module github.com/containers/storage to v1.55.1
  * Fix format string inconsistency causing a build failure
  * proxy: Add various debug logging
  * chore(deps): update dependency containers/automation_images to v20241010
  * * Added option to create digest file for syncing images. * Digest file output would have docker reference of source and sha of of the mainfest sync'd with the target. This file would not be created if dry-run flag is enabled * improved the sync document to include the correct output for manifest file. * added new line for the manifest file once all images are sync'd * Ensuring we log on manifest digest if the copy operation was successful. * Check for errors if any once sync process is complete. * Ensure to capture the failure when closing the manifest file. * Ensure we are not writing manifest sha for failed copy of imagesand aborting the process in case write to file fails
  * Packit: constrain downstream koji job to fedora package
  * fix(deps): update module golang.org/x/term to v0.25.0
  * fix(deps): update module github.com/containers/common to v0.60.4
  * fix(deps): update golang.org/x/exp digest to 701f63a
  * vendor: switch to moby/sys/capability (#2428)
  * Document that zstd:chunked is downgraded to zstd when encrypting
  * fix(deps): update module github.com/containers/common to v0.60.3
  * Packit: split out ELN jobs and reuse fedora downstream targets
  * Packit: Enable sidetags for bodhi updates
  * chore(deps): update dependency golangci/golangci-lint to v1.61.0
  * fix(deps): update module golang.org/x/term to v0.24.0
  * Use a range expression
  * Update to Go 1.22
  * Restrict Packit targets to those that support Go 1.22
  * fix(deps): update golang.org/x/exp digest to 9b4947d
  * chore(deps): update dependency containers/automation_images to v20240821
  * Update skopeo-generate-sigstore-key.1.md
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
  * fix(deps): update module github.com/masterminds/semver/v3 to v3.3.0
  * fix(deps): update module github.com/containers/common to v0.60.2
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
  * fix(deps): update module github.com/containers/image/v5 to v5.32.2
  * Replace egrep with grep -E
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.1
  * fix(deps): update module github.com/containers/common to v0.60.1
  * fix(deps): update module github.com/containers/image/v5 to v5.32.1
  * fix(deps): update module golang.org/x/term to v0.23.0
  * The fakeroot package doesn't exist in RHEL.
  * Bump Skopeo to v1.17.0-dev
  * Bump Skopeo to v1.16.0
  * fix(deps): update module github.com/containers/common to v0.60.0
  * Drop the toolchain back to 1.21.0
  * fix(deps): update module github.com/containers/image/v5 to v5.32.0
  * fix(deps): update module github.com/containers/storage to v1.55.0
  * chore(deps): update module google.golang.org/grpc to v1.64.1 [security]
  * fix(deps): update module github.com/containers/common to v0.59.2
  * [skip-ci] RPM: spec file cleanup
  * fix(deps): update module golang.org/x/term to v0.22.0
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.0
  * fix(deps): update golang.org/x/exp digest to 7f521ea
  * Bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7
  * fix(deps): update module github.com/containers/image/v5 to v5.31.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.1
  * Refer to registry.k8s.io instead of k8s.gcr.io
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.59.1
  * fix(deps): update module golang.org/x/term to v0.21.0
  * fix(deps): update module github.com/containers/common to v0.59.1
  * Execute cross-build task using PW pool
  * fix(deps): update golang.org/x/exp digest to fd00a4e
  * CI: bump VMs
  * Don't offer the tarball: transport in completions
  * [skip-ci] Packit: `packages: [skopeo-fedora]` for podman-next jobs
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.59.0
  * fix(deps): update module github.com/containers/common to v0.59.0
  * Stop using the exclude_graphdriver_devicemapper build tag
  * fix(deps): update module github.com/containers/image/v5 to v5.31.0
  * Update for changed c/image error texts
  * Update c/image after https://github.com/containers/image/pull/2408
  * fix(deps): update module github.com/containers/common to v0.58.3
  * hack: Support picking cc and cpp via environment variables.
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1
  * [skip-ci] RPM: bats requirement only on Fedora
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842
  * [skip-ci] Packit: enable c10s downstream sync
  * [skip-ci] Packit: delete EL8 jobs
  * fix(deps): update module golang.org/x/term to v0.20.0
  * Add info on Skopeo image to README.md
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.0
  * fix summaries for standalone-sign and standalone-verify
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
  * CI VMs: bump to new versions with tmpfs /tmp
  * chore(deps): update module golang.org/x/net to v0.23.0 [security]
  * Use "slices" from the standard library
  * Update to Go 1.21
  * chore: fix function names
  * Center logo in README.md
  * fix(deps): update module github.com/containers/common to v0.58.2
  * Hard-code the device-mapper graph driver to disabled
  * Fix issue/pr lock workflow
  * feat: add `--image-parallel-copies` flag
  * Use strings.CutSuffix
  * Use strings.CutPrefix
  * Update to Go 1.20
  * fix(deps): update module golang.org/x/term to v0.19.0
  * Freeze the fedora-minimal image reference at Fedora 38
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2
  * fix(deps): update module github.com/containers/common to v0.58.1
  * [CI:DOCS] Add golang 1.21 update warning
  * chore(deps): update dependency containers/automation_images to v20240320
  * main: return exit code `2` when an input is not found
  * chore(deps): update module github.com/docker/docker to v25.0.5+incompatible [security]
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0
  * [skip-ci] rpm: use macro supported vendoring
  * Bump to v1.16.0-dev</changelog>
</package>
<package pkgid="2c34ea3a3a1227be6ac54755d61a20fc30caf8a072a0e24d5a87853e32bc312f67fd8f2d6770ab0052d4624f6207e777ecce589d30bc5d7327a06cc4467fd731" name="snapper" arch="x86_64">
  <version epoch="0" ver="0.12.1" rel="160000.2.2"/>
  <changelog author="aschnell@suse.com" date="1713355200">- reverted some parts of PR#884 to fix build in obs</changelog>
  <changelog author="aschnell@suse.com" date="1713441600">- async cleanup of stale btrfs qgroups (bsc#1222847)
- version 0.11.0</changelog>
  <changelog author="aschnell@suse.com" date="1716379200">- fixed error message (gh#openSUSE/snapper#907)</changelog>
  <changelog author="aschnell@suse.com" date="1720180800">- handle content-length of stomp in zypper plugin
  (gh#openSUSE/snapper#918)
- version 0.11.1</changelog>
  <changelog author="aschnell@suse.com" date="1724932800">- use .snapshots dir for 'btrfs qgroup clear-stale' (bsc#1229904)
- version 0.11.2</changelog>
  <changelog author="aschnell@suse.com" date="1728648000">- generate dsc file for Ubuntu 24.10</changelog>
  <changelog author="aschnell@suse.com" date="1729857600">- support creating empty snapshots (gh#openSUSE/snapper#944)</changelog>
  <changelog author="aschnell@suse.com" date="1730808000">- provide backup program for btrfs snapshots
- version 0.12.0</changelog>
  <changelog author="aschnell@suse.com" date="1733140800">- added new workflow using only two steps to installation-helper
  (gh#openSUSE/snapper#944)</changelog>
  <changelog author="aschnell@suse.com" date="1734436800">- make some binary paths used in snbk configurable
  (gh#openSUSE/snapper#970)
- version 0.12.1</changelog>
</package>
<package pkgid="8dc426124ca90e222fe287a8ee604d10dd728e100d99d8d4c8aec036410f41c3999919aeab9160747115ad363a0fbf68012a1e4aac737c7f548167268742aeec" name="snmp-mibs" arch="x86_64">
  <version epoch="0" ver="5.9.4" rel="160000.3.1"/>
  <changelog author="schubi@suse.com" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="abergmann@suse.com" date="1656936000">- update to 5.9.2 (bsc#1201103):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
- Refactor two patches to work with version number 5.9.2:
  delete:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  add:
  * net-snmp-5.9.2-pie.patch
  * net-snmp-5.9.2-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1657627200">- Rename libsnmp40 subpackage to libsnmp39: the libraries are all
  having soversion 39.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="abergmann@suse.com" date="1663761600">- update to 5.9.3:
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.</changelog>
  <changelog author="abergmann@suse.com" date="1664280000">- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1664798400">- change egrep/fgrep to grep -E/-F to avoid warnings boo#1203096
  add net-snmp-5.9.3-grep.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).
- Use new MFD rewrites of mib modules, where available.
- Disable legacy DES encryption and MD5 authentication protocols.</changelog>
  <changelog author="abergmann@suse.com" date="1731585600">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  * net-snmp-5.9.3-grep.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.2-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.2-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
- logrotate should use reload instead of restart (bsc#1232030)</changelog>
  <changelog author="abergmann@suse.com" date="1768219200">- Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).
  Add net-snmp-5.9.4-fix-out-of-bounds-trapOid-access.patch</changelog>
</package>
<package pkgid="4c5e7712234c776eb7a46c9cfcad09c5933dac3d50dd4d71919cc98759c06a18a3127613ed97bca3e3d90d9c6a2ad268b4ba8eb80f8cd20218f6519431ac32a4" name="socat" arch="x86_64">
  <version epoch="0" ver="1.8.0.2" rel="160000.2.3"/>
  <changelog author="meissner@suse.com" date="1580817600">- socat-common-fixes.patch: include tcpd.h where needed to fix
  - fno-common bsc#1160293</changelog>
  <changelog author="mpluskal@suse.com" date="1587124800">- Update to version 1.7.3.4:
  * bugfix release, see the CHANGES file for all changes
- Refresh patches:
  * socat-common-fixes.patch
  * socat-ignore-tests-failure-boo1078346.patch</changelog>
  <changelog author="dmueller@suse.com" date="1610366400">- update to 1.7.4.1:
  Security:
  * Buffer size option (-b) is internally doubled for CR-CRLF conversion,
    but not checked for integer overflow. This could lead to heap based buffer
    overflow, assuming the attacker could provide this parameter.
  * Many further bugfixes and new features, see the CHANGES file</changelog>
  <changelog author="mardnh@gmx.de" date="1635768000">- Update to version 1.7.4.2:
  * Fixes a lot of bugs, e.g., for options -r and -R.
  * Further bugfixes, see the CHANGES file</changelog>
  <changelog author="dmueller@suse.com" date="1642852800">- update to 1.7.4.3:
  * fixes the TCP_INFO issue that broke building on non-Linux platforms.
  * building on AIX works again.
  * A few more corrections and improvements have been added</changelog>
  <changelog author="mliska@suse.cz" date="1649851200">- Use autosetup
- Add socat-fix-asan-error.patch that is offered to upstream
  and that fixes an ASAN error seen for 'test 313 NESTEDOVFL'.</changelog>
  <changelog author="info@paolostivanin.com" date="1670328000">- Update to 1.7.4.4:
  * FIX: In error.c msg2() there was a stack overflow on long messages: The
    terminating \0 Byte was written behind the last position.
  * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets
    arrived.
  * FIX: a couple of weaknesses and errors when accessing invalid or
   incompatible file system entries with UNIX domain, file, and generic
    addresses.
  * FIX: bad parser error message on "socat /tmp/x\"x/x -"
- Drop socat-fix-asan-error.patch</changelog>
  <changelog author="mail+rpm@georg-pfuetzenreuter.net" date="1714564800">- Update to 1.8.0.0:
  * Support for network namespaces (option netns)
  * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success
  * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following)
  * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL
  * New script socat-mux.sh allows n-to-1 / 1-to-n communications
  * New script socat-broker.sh allows group communications
  * Experimental socks5 client feature
  * Address ACCEPT-FD for systemd "inetd" mode
  * UDP-Lite and DCCP address types
  * Addresses SOCKETPAIR and SHELL
  * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes
  * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets
  * Simple statistics output with Socat option --statistics and with SIGUSR1
  * A couple of new options, many fixes and corrections, see file CHANGES
- Drop socat-common-fixes.patch (no longer necessary)
- Refactor socat-ignore-tests-failure-boo1078346.patch (test suite no longer exits at this stage)
- Add socat-test-dhparam fixture (reduce build load and time)
- Add socat-test-without-tty.patch for testing without tty.
- Note: This version introduces "socat1", linking to "socat"
- Note: This version introduces additional shell scripts, those are shipped in a new "socat-extra" subpackage</changelog>
  <changelog author="meissner@suse.com" date="1718712000">- 0004-udp-listen-bind4.patch: fixed a UDP listen error (bsc#1226459)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1733918400">- Update to 1.8.0.2:
  - Security fix for readline.sh: arbitrary file overwrite via predictable /tmp
    directory (bsc#1225462 CVE-2024-54661)
- Update to 1.8.0.1:
  - Bug fixes
  - UDP-SENDTO, UDPLITE-SENDTO, and IP-SENDTO addresses now select an IPv4
    address in case the server name resolves to both IPv4 and IPv6 addresses.
  - Guard applyopts_termios_value() with WITH_TERMIOS.
  - In some situations xioclose() was called nested what could cause hanging
    of OpenSSL in pthread_rwlock_wrlock().
  - socat 1.8.0.0 with addresses of type RECVFROM and option fork, where the
    second address failed to connect/open in the child process, entered a
    fork loop that was only stopped by FD exhaustion caused by FD leak.
  - socat 1.8.0.0 had an FD leak with addresses of type RECVFROM with fork.
  - With version 1.8.0.0, options ipv6-join-group and ipv6-join-source-group
    did not work.
  - IP-SENDTO and option pf (protocol-family) with protocol name (vs.numeric
    argument) failed with message: E retropts_int(): trailing garbage in
    numerical arg of option "protocol-family".
  - Fixed a possible buffer overrun with long log lines. In fact it does not
    write beyond end of buffer but lets pass excessive data to the write()
    function.
  - Reworked domain name resolution, centralized IPv4/IPv6 sorting.
  - Print warning about not checking CRLs in OpenSSL only in the first child
    process.
  - Features
  - Total inactivity timeout option -T 0 now means 0.0 seconds;
  - Changed socat-chain.sh, socat-mux.sh, and socat-broker.sh to work with
    older Socat versions.
  - socat-mux.sh and socat-broker.sh, when run as root, now internally use
    low (512..1023) UDP ports to increase security.
  - Added option ai-all (sets AI_ALL flag of getaddrinfo() resolver)
  - Socks5 now also allows syntax without socks port, and supports option
    socksport.
- Removed 0004-udp-listen-bind4.patch (fixed by upstream socat-1.8.0.1).
- Refreshed socat-test-without-tty.patch to match socat-1.8.0.1.</changelog>
</package>
<package pkgid="2492d4ca62e2d4e8b749d2fa8ac441b066b8a628e4b78101710b3608e14e81a7c3d71525fb0ed6983ad124a2e5e5a7809df1d35479b4b2502cfe9532943e6f58" name="squashfs" arch="x86_64">
  <version epoch="0" ver="4.6.1" rel="160000.2.2"/>
  <changelog author="p.seiler@linuxmail.org" date="1559736000">-  Add -offset function to skip n bytes at the beginning of the squashfs…
  https://github.com/plougher/squashfs-tools/commit/5a498ad24dcfeac9f3d747e894f22901f3ac10
  (0003-Add-offset-function-to-skip-n-bytes.patch)</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1571659200">- Version 4.4 - 2019-08-29:
  * Reproducible builds, new compressors,
  CVE fixes, security hardening and new options
  for Mksquashfs/Unsquashfs.
- Overall improvements:
  * Mksquashfs now generates reproducible images by default.
  * Mkfs time and file timestamps can also be specified.
  * Support for the Zstandard (ZSTD) compression algorithm.
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
- Mksquashfs improvements and major bug fixes:
  * Pseudo files now support symbolic links.
  * New -mkfs-time option.
  * New -all-time option.
  * New -root-mode option.
  * New -quiet option.
  * New -noId option.
  * New -offset option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, don't allow "/" pseudo filenames.
  * Bug fix, allow quoting of pseudo files, to
  better handle filenames with spaces.
  * Fix compilation with glibc 2.25+.
- Unsquashfs improvements and major bug fixes:
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
  * Unsquashfs has been further hardened against corrupted
  filestems.
  * Unsquashfs is now more strict about error handling.
  * New -ignore-errors option.
  * New -strict-errors option.
  * New -lln[umeric] option.
  * New -lc option.
  * New -llc option.
  * New -mkfs-time option.
  * New -UTC option.
  * New -offset option.
  * New -quiet option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, fatal and non-fatal errors now set the exit
  code to 1.
  * Bug fix, fix time setting for symlinks.
  * Bug fix, try to set sticky-bit when running as a
  user process.
  * Fix compilation with glibc 2.25+.
- build changes:
  * re-created patches to fit squashfs 4.4
  * removed 0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  (new version includes this change)
  * removed 0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch
  (new version includes this change)
  * removed 0003-Add-offset-function-to-skip-n-bytes.patch
  (new version includes this change)
  * removed sysmacros.patch
  (new version includes this change)</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon in order to fix boo#1160294.</changelog>
  <changelog author="bjoernv@arcor.de" date="1598961600">- enabled ZSTD compression support for openSUSE &gt;= 15.1</changelog>
  <changelog author="dmueller@suse.com" date="1639224000">- update to 4.5:
  * Mksquashfs now supports "Actions".
  * New sqfstar command which will create a Squashfs image from a tar archive.
  * Tar style handling of source pathnames in Mksquashfs.
  * Cpio style handling of source pathnames in Mksquashfs.
  * New option to throttle the amount of CPU and I/O.
  * Mksquashfs now allows no source directory to be specified.
  * New Pseudo file "R" definition which allows a Regular file
    o be created with data stored within the Pseudo file.
  * Symbolic links are now followed in extract files
  * Unsquashfs now supports "exclude" files.
  * Max depth traversal option added.
  * Unsquashfs can now output a "Pseudo file" representing the
    input Squashfs filesystem.
  * New -one-file-system option in Mksquashfs.
  * New -no-hardlinks option in Mksquashfs.
  * Exit code in Unsquashfs changed to distinguish between
    non-fatal errors (exit 2), and fatal errors (exit 1).
  * Xattr id count added in Unsquashfs "-stat" output.
  * Unsquashfs "write outside directory" exploit fixed.
  * Error handling in Unsquashfs writer thread fixed.
  * Fix failure to truncate destination if appending aborted.
  * Prevent Mksquashfs reading the destination file.</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 4.5.1 (bsc#1190531, CVE-2021-41072):
  * This release adds Manpages for Mksquashfs(1), Unsquashfs(1),
    Sqfstar(1) and Sqfscat(1).
  * The -help text output from the utilities has been improved
    and extended as well (but the Manpages are now more
    comprehensive).
  * CVE-2021-41072 which is a writing outside of destination
    exploit, has been fixed.
  * The number of hard-links in the filesystem is now also
    displayed by Mksquashfs in the output summary.
  * The number of hard-links written by Unsquashfs is now
    also displayed in the output summary.
  * Unsquashfs will now write to a pre-existing destination
    directory, rather than aborting.
  * Unsquashfs now allows "." to used as the destination, to
    extract to the current directory.
  * The Unsquashfs progress bar now tracks empty files and
    hardlinks, in addition to data blocks.
  * -no-hardlinks option has been implemented for Sqfstar.
  * More sanity checking for "corrupted" filesystems, including
    checks for multiply linked directories and directory loops.
  * Options that may cause filesystems to be unmountable have
    been moved into a new "experts" category in the Mksquashfs
    help text (and Manpage).
  * Maximum cpiostyle filename limited to PATH_MAX.  This
    prevents attempts to overflow the stack, or cause system
    calls to fail with a too long pathname.
  * Don't always use "max open file limit" when calculating
    length of queues, as a very large file limit can cause
    Unsquashfs to abort.  Instead use the smaller of max open
    file limit and cache size.
  * Fix Mksquashfs silently ignoring Pseudo file definitions
    when appending.
  * Don't abort if no XATTR support has been built in, and
    there's XATTRs in the filesystem.  This is a regression
    introduced in 2019 in Version 4.4.
  * Fix duplicate check when the last file block is sparse.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1652011200">- set LZMA_XZ_SUPPORT=1 so you can (un)squash -comp lzma images</changelog>
  <changelog author="duwe@suse.com" date="1665748800">- Do not repeat openSUSE / SLE version tests
- Actually format and package the man pages</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 4.6.1:
  * Race condition which can cause corruption of the "fragment
    table" fixed.  This is a regression introduced in August 2022,
    and it has been seen when tailend packing is used (-tailends option).
  * Fix build failure when the tools are being built without
    extended attribute (XATTRs) support.
  * Fix XATTR error message when an unrecognised prefix is
    found
  * Fix incorrect free of pointer when an unrecognised XATTR
    prefix is found.
  * Major improvements in extended attribute handling,
    pseudo file handling, and miscellaneous new options and
    improvements
  * Extended attribute handling improved in Mksquashfs and
    Sqfstar
  * New Pseudo file xattr definition to add extended
    attributes to files.
  * New xattrs-add Action to add extended attributes to files
  * Extended attribute handling improved in Unsquashfs
  * Other major improvements
  * Unsquashfs can now output Pseudo files to standard out.
  * Mksquashfs can now input Pseudo files from standard in.
  * Squashfs filesystems can now be converted (different
    block size compression etc) without unpacking to an
    intermediate filesystem or mounting, by piping the output of
    Unsquashfs to Mksquashfs.
  * Pseudo files are now supported by Sqfstar.
  * "Non-anchored" excludes are now supported by Unsquashfs.</changelog>
  <changelog author="duwe@suse.com" date="1688385600">- For reference: previous updates fixed
  * CVE-2021-40153 (bsc#1189936)
  * CVE-2015-4645, CVE-2015-4646 (bsc#935380)</changelog>
</package>
<package pkgid="c4d5454be468a4025bf01eb29e0580a41ac699203c0a84c3e9c5523e768f93cbe0cfceab3569ba6bca1ff68d70346ea3ff263657208e8861a5cb7f18d7fbe74d" name="ssh-pairing" arch="x86_64">
  <version epoch="0" ver="0.2" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1705579200">- Initial commit</changelog>
  <changelog author="fvogt@suse.com" date="1706270400">- Update to version 0.1+git11:
  * Document ssh-pairing tool
  * Make it clear that the client message is important
  * No bogus output
  * Make shellcheck happy
  * Add ssh-pairing tool
  * Add a usage message
  * Shorten status message sent to the client
  * Print received keys immediately
  * Some README.md improvements
  * Fix indentation
  * Use NI_MAXHOST</changelog>
  <changelog author="fvogt@suse.com" date="1706270401">- Update to version 0.1+git12:
  * Avoid unnecessary strlcpy</changelog>
  <changelog author="fvogt@suse.com" date="1707912000">- Update to version 0.1+git18:
  * Add Security Considerations section to README.md
  * Mention ssh-pairing prefix also in README.md
  * Add ssh-pairing prefix to the client success message
  * Clarify comment
  * Show ssh-pairing-server stderr on failure
  * Fail if kbd-interactive does not complete</changelog>
  <changelog author="fvogt@suse.com" date="1712923200">- Update to version 0.2:
  * Ask for key import individually
  * Use SSH_STRING_FREE_CHAR instead of plain free
- Use mode="manual" in _service</changelog>
</package>
<package pkgid="4962534abb80f998828cc6c9a54a4fed9d65f057e6d5f800c0e62fca61866f15e08ad09cd165310ebbf85fdfc4d7c093c962023f2d6acc0c7eb6485c7ecc97c7" name="sssd" arch="x86_64">
  <version epoch="0" ver="2.9.5" rel="160000.3.1"/>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1742904000">- Add python3-setuptools build dependency
- Drop nscd build dependency</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="fbe50eae04dd1084c609139571840f61354528607cb9ac69d0b00d7cefe33737e9762eb14488dc79985f6fdd32511534ae1868c8cfb7f066ddc2ae5f97daa3bf" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="2.9.5" rel="160000.3.1"/>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1742904000">- Add python3-setuptools build dependency
- Drop nscd build dependency</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="6b1b6bb803102522ca7d602a9537aac8618786f5b68629daf172f2b47626490837f07a6bc4b0cff2724f21d54c5f035e3bab56dc3817cc78025bed2fa042a615" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="2.9.5" rel="160000.3.1"/>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1742904000">- Add python3-setuptools build dependency
- Drop nscd build dependency</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="e1c698295e3bc34a0208a255a32a395dca49863de5a27cb637e849b78a8fb88a1fd5240a8637a5ea88ecd7e3ede475b5150de0f2a4ac61e466e6bb41f23f012e" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="2.9.5" rel="160000.3.1"/>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1742904000">- Add python3-setuptools build dependency
- Drop nscd build dependency</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="1ee6cd38d310bab391e469797b65c29cc29aa51d5eae500461e12def420f5138d06ea8bf353147746ef169326335fda15fc7a8abdfa72ff02cb0bf755ab0c96d" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="2.9.5" rel="160000.3.1"/>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1742904000">- Add python3-setuptools build dependency
- Drop nscd build dependency</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="16400c6a41138ceae7fb46231f1815c725e528786a1392a6a295e4a3589833fc245b64cce67c36739759c15158d347d5df4202370c75061222e191614762b8f1" name="strace" arch="x86_64">
  <version epoch="0" ver="6.14" rel="160000.2.2"/>
  <changelog author="schwab@linux-m68k.org" date="1706529600">- Update to strace 6.7
  * Implemented -kk/--stack-traces=source option for libdw-based stack tracing.
  * Implemented decoding of futex_wake, futex_wait, and sys_futex_requeue
    syscalls.
  * Updated lists of BPF_*, BTRFS_*, IORING_*, KVM_*, LANDLOCK_*, PR_*,
    and TCP_* constants.
  * Updated lists of ioctl commands from Linux 6.7.
  * Fix strace -r during the first second after booting to show correct relative
    timestamps.
  * Fix strace -f entering deadlock on exit if there are tracee processes
    spawned using vfork semantics.</changelog>
  <changelog author="cathy.hu@suse.com" date="1706788800">- Enable SELinux Context Printing (--secontext).</changelog>
  <changelog author="schwab@suse.de" date="1710936000">- Update to strace 6.8
  * Renamed --stack-traces to --stack-trace for consistency.
    Old option is retained for backwards compatibility.
  * Implemented --stack-trace-frame-limit=N option for configuring the limit
    of the number of printed backtrace frames.
  * Implemented decoding of statmount, listmount, lsm_get_self_attr,
    lsm_set_self_attr, and lsm_list_modules syscalls.
  * Implemented decoding of setsockopt(TCP_AO_ADD_KEY).
  * Updated decoding of landlock_create_ruleset and landlock_add_rule syscalls.
  * Updated decoding of SMC_DIAG_DMBINFO netlink attribute.
  * Updated decoding of UBI_IOCATT ioctl command.
  * Enhanced decoding of mount attributes of fsmount and mount_setattr syscalls.
  * Updated lists of BPF_*, KEXEC_*, KVM_*, PERF_*, SOL_*, STATX_*, UFFD_*,
    and V4L2_* constants.
  * Updated lists of ioctl commands from Linux 6.8.</changelog>
  <changelog author="schwab@suse.de" date="1715774400">- Update to strace 6.9
  * Implemented --always-show-pid option.
  * The --user|-u option has learned to recognize numeric UID:GID pair, allowing
    e.g. statically-built strace to be used without invoking nss plugins.
  * Implemented decoding of IORING_REGISTER_SYNC_CANCEL,
    IORING_REGISTER_FILE_ALLOC_RANGE, IORING_REGISTER_PBUF_STATUS,
    IORING_REGISTER_NAPI, and IORING_UNREGISTER_NAPI opcodes of
    io_uring_register syscall.
  * Implemented decoding of BPF_TOKEN_CREATE bpf syscall command.
  * Updated decoding of io_uring_register and pidfd_send_signal syscalls.
  * Updated lists of BPF_*, CAN_*, IORING_*, KEY_*, LSM_*, MPOL_*, NT_*, RWF_*,
    PIDFD_*, PTP_*, TCP_*, and *_MAGIC constants.
  * Updated lists of ioctl commands from Linux 6.9.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1721563200">- Update to strace 6.10
  * Implemented --decode-fds=eventfd option to retrieve eventfd object details
    associated with eventfd file descriptors.
  * Implemented decoding of NETLINK_GENERIC nlctrl protocol.
  * Implemented decoding of F_DUPFD_QUERY fcntl.
  * Implemented decoding of mseal syscall.
  * Updated decoding of statx and prctl syscalls.
  * Updated decoding of BPF_RAW_TRACEPOINT_OPEN bpf command.
  * Updated lists of BPF_*, IORING_*, KEXEC_*, KEY_*, LANDLOCK_*, PR_*, STATX_*,
    TCP_*, TEE_*, V4L2_*, and *_MAGIC constants.
  * Updated lists of ioctl commands from Linux 6.10.
  * Worked around a bug introduced in Linux 6.5 that affected system call
    tampering on riscv64.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1721822400">- Update License tag (boo#1228216)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1726401600">- Update to strace 6.11
  * Implemented decoding of uretprobe syscall.
  * Implemented decoding of WDIOC_GETSUPPORT and WDIOC_SETOPTIONS ioctl
    commands.
  * Enhanced decoding of unknown ioctl commands in non-abbreviated mode
    by printing the contents of the ioctl argument buffer in hexadecimal format.
  * Updated decoding of listmount, statmount, and statx syscalls.
  * Updated lists of ETHTOOL_*, IORING_*, IPPROTO_*, RWF_*, STATX_*, and V4L2_*
    constants.
  * Updated lists of ioctl commands from Linux 6.11.</changelog>
  <changelog author="schwab@suse.de" date="1731931200">- Update to strace 6.12
  * Implemented decoding of EPIOCGPARAMS and EPIOCSPARAMS ioctl commands.
  * Implemented decoding of NS_GET_MNTNS_ID, NS_GET_PID_FROM_PIDNS,
    NS_GET_TGID_FROM_PIDNS, NS_GET_PID_IN_PIDNS, NS_GET_TGID_IN_PIDNS,
    NS_MNT_GET_INFO, NS_MNT_GET_NEXT, and NS_MNT_GET_PREV ioctl commands.
  * Implemented decoding of FRA_DSCP netlink attribute.
  * Implemented decoding of IORING_REGISTER_CLOCK and
    IORING_REGISTER_CLONE_BUFFERS opcodes of io_uring_register syscall.
  * Updated decoding of struct landlock_ruleset_attr.
  * Updated lists of AUDIT_*, ETHTOOL_*, F_*, IORING_*, LSM_*, MAP_*, MSG_*,
    NT_*, SCHED_*, SCM_*, SO_*, and V4L2_* constants.
  * Updated lists of ioctl commands from Linux 6.12.
  * Fix the syscall name printed by strace when PTRACE_GET_SYSCALL_INFO
    is in use and a syscall is restarted by a just attached tracee using
    restart_syscall mechanism.</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- Update to strace 6.13
  * Implemented decoding of getxattrat, setxattrat, listxattrat,
    and removexattrat syscalls.
  * Updated decoding of struct io_uring_clone_buffers, struct io_uring_napi,
    and struct perf_event_attr.
  * Updated decoding of crypto_user_alg netlink attributes of NETLINK_CRYPTO.
  * Implemented decoding of IFLA_MCTP_PHYS_BINDING netlink attribute.
  * Updated lists of AT_*, BPF_*, FAN_*, IORING_*, MADV_*, NT_*, and SCM_*
    constants.
  * Updated lists of ioctl commands from Linux 6.13.</changelog>
  <changelog author="schwab@suse.de" date="1742904000">- Update to strace 6.14
  * Added -e namespace=new option for printing the namespaces entered
    by the tracee.
  * Implemented decoding of FRA_FLOWLABEL and FRA_FLOWLABEL_MASK netlink
    attributes of RTM_{NEW,DEL,GET}RULE NETLINK_ROUTE messages.
  * Implemented decoding of RTM_{NEW,DEL}MULTICAST and RTM_{NEW,DEL}ANYCAST
    NETLINK_ROUTE messages.
  * Updated decoding of statx syscall.
  * Updated lists of AT_*, AUDIT_*, ETHTOOL_*, FAN_*, IORING_*, IPPROTO_*,
    KEY_*, NL80211_*, RWF_*, and SECBIT_* constants.
  * Updated lists of ioctl commands from Linux 6.14.</changelog>
</package>
<package pkgid="202c19537b98227b617b50980fdf57792502dac78963609084915bfde05762136cfe6c560bbdb437f64c50fc05c3c7ed8f8bd2a0a626d940bbe6c80089189515" name="sudo" arch="x86_64">
  <version epoch="0" ver="1.9.17p1" rel="160000.3.1"/>
  <changelog author="lnussel@suse.com" date="1695211200">- Introduce optional wheel and sudo group policies as separate packages
  (bsc#1203978, jsc#PED-260)</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Package/ship empty /etc/sudoers.d directory for admins to
  discover where to put their won config.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Update to 1.9.15p2:
  * Fixed a bug on BSD systems where sudo would not restore the
    terminal settings on exit if the terminal had parity enabled.
    GitHub issue #326.
- Update to 1.9.15p1:
  * Fixed a bug introduced in sudo 1.9.15 that prevented LDAP-based
    sudoers from being able to read the ldap.conf file.
    GitHub issue #325.
- Update to 1.9.15:
  * Fixed an undefined symbol problem on older versions of macOS
    when "intercept" or "log_subcmds" are enabled in sudoers.
    GitHub issue #276.
  * Fixed "make check" failure related to getpwent(3) wrapping
    on NetBSD.
  * Fixed the warning message for "sudo -l command" when the command
    is not permitted.  There was a missing space between "list" and
    the actual command due to changes in sudo 1.9.14.
  * Fixed a bug where output could go to the wrong terminal if
    "use_pty" is enabled (the default) and the standard input, output
    or error is redirected to a different terminal.  Bug #1056.
  * The visudo utility will no longer create an empty file when the
    specified sudoers file does not exist and the user exits the
    editor without making any changes.  GitHub issue #294.
  * The AIX and Solaris sudo packages on www.sudo.ws now support
    "log_subcmds" and "intercept" with both 32-bit and 64-bit
    binaries.  Previously, they only worked when running binaries
    with the same word size as the sudo binary.  GitHub issue #289.
  * The sudoers source is now logged in the JSON event log.  This
    makes it possible to tell which rule resulted in a match.
  * Running "sudo -ll command" now produces verbose output that
    includes matching rule as well as the path to the sudoers file
    the matching rule came from.  For LDAP sudoers, the name of the
    matching sudoRole is printed instead.
  * The embedded copy of zlib has been updated to version 1.3.
  * The sudoers plugin has been modified to make it more resilient
    to ROWHAMMER attacks on authentication and policy matching.
    This addresses CVE-2023-42465.
  * The sudoers plugin now constructs the user time stamp file path
    name using the user-ID instead of the user name.  This avoids a
    potential problem with user names that contain a path separator
    ('/') being interpreted as part of the path name.  A similar
    issue in sudo-rs has been assigned CVE-2023-42456.
  * A path separator ('/') in a user, group or host name is now
    replaced with an underbar character ('_') when expanding escapes
    in @include and @includedir directives as well as the "iolog_file"
    and "iolog_dir" sudoers Default settings.
  * The "intercept_verify" sudoers option is now only applied when
    the "intercept" option is set in sudoers.  Previously, it was
    also applied when "log_subcmds" was enabled.  Sudo 1.9.14
    contained an incorrect fix for this.  Bug #1058.
  * Changes to terminal settings are now performed atomically, where
    possible.  If the command is being run in a pseudo-terminal and
    the user's terminal is already in raw mode, sudo will not change
    the user's terminal settings.  This prevents concurrent sudo
    processes from restoring the terminal settings to the wrong values.
    GitHub issue #312.
  * Reverted a change from sudo 1.9.4 that resulted in PAM session
    modules being called with the environment of the command to be
    run instead of the environment of the invoking user.
    GitHub issue #318.
  * New Indonesian translation from translationproject.org.
  * The sudo_logsrvd server will now raise its open file descriptor
    limit to the maximum allowed value when it starts up.  Each
    connection can require up to nine open file descriptors so the
    default soft limit may be too low.
  * Better log message when rejecting a command if the "intercept"
    option is enabled and the "intercept_allow_setid" option is
    disabled.  Previously, "command not allowed" would be logged and
    the user had no way of knowing what the actual problem was.
  * Sudo will now log the invoking user's environment as "submitenv"
    in the JSON logs.  The command's environment ("runenv") is no
    longer logged for commands rejected by the sudoers file or an
    approval plugin.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702900800">- Update to 1.9.15p4:
  * Fixed a bug introduced in sudo 1.9.15 that could prevent a user’s
    privileges from being listed by sudo -l if the sudoers entry
    in /etc/nsswitch.conf contains [SUCCESS=return]. This did not affect the
    ability to run commands via sudo. Bug #1063.
- Update to 1.9.15p3:
  * Always disable core dumps when sudo sends itself a fatal signal. Fixes a
    problem where sudo could potentially dump core dump when it re-sends the
    fatal signal to itself. This is only an issue if the command   * received
    a signal that would normally result in a core dump but the command did
    not actually dump core.
  * Fixed a bug matching a command with a relative path name when the sudoers
    rule uses shell globbing rules for the path name. Bug #1062.
  * Permit visudo to be run even if the local host name is not set. GitHub
    issue #332.
  * Fixed an editing error introduced in sudo 1.9.15 that could prevent
    sudoreplay from replaying sessions correctly. GitHub issue #334.
  * Fixed a bug introduced in sudo 1.9.15 where sudo -l &gt; /dev/null could hang
    on Linux systems. GitHub issue #335.
  * Fixed a bug introduced in sudo 1.9.15 where Solaris privileges specified
    in sudoers were not applied to the command being run.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702900801">- For existing products (SLE15-SP* and older) keep using /etc and don't
  switch to /usr/etc. So only SLES16/ALP, Tumbleweed and newer products
  will use both /etc and /usr/etc locations.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1704196800">- Update to 1.9.15p5:
  * Fixed evaluation of the lecture, listpw, verifypw, and fdexec sudoers
    Defaults settings when used without an explicit value. Previously, if
    specified without a value they were evaluated as boolean false, even when
    the negation operator ('!') was not present.
  * Fixed a bug introduced in sudo 1.9.14 that prevented LDAP netgroup queries
    using the NETGROUP_BASE setting from being performed.
  * Sudo will now transparently rename a user's lecture file from the older
    name-based path to the newer user-ID-based path. GitHub issue #342.
  * Fixed a bug introduced in sudo 1.9.15 that could cause a memory allocation
    failure if sysconf(_SC_LOGIN_NAME_MAX) fails. Bug #1066.</changelog>
  <changelog author="sflees@suse.de" date="1722254400">- A quick note that bsc#1227574 is expected behavior in this
  version of sudo. It was a regression in 15.6 which doesn't have
  the /etc/ split for pam.d yet.</changelog>
  <changelog author="sflees@suse.de" date="1744804800">- Update to 1.9.16p2:
  * Sudo now passes the terminal device number to the policy plugin
  even if it cannot resolve it to a path name. This allows sudo to
  run without warnings in a chroot jail when the terminal device
  files are not present. GitHub issue #421.
  * On Linux systems, sudo will now attempt to use the symbolic links
  in /proc/self/fd/{0,1,2} when resolving the terminal device number.
  This can allow sudo to map a terminal device to its path name even
  when /dev/pts is not mounted in a chroot jail.
  * Fixed compilation errors with gcc and clang in C23 mode. C23 no
  longer supports functions with unspecified arguments. GitHub issue
  [#420].
  * Fixed the test for cross-compiling when checking for C99 snprintf().
  The changes made to the test in sudo 1.9.16 resulted in a different
  problem. GitHub issue #386.
  * Fixed the date used by the exit record in sudo-format log files.
  This was a regression introduced in sudo 1.9.16 and only affected
  file-based logs, not syslog. GitHub issue #405.
  * Fixed the root cause of the “unable to find terminal name for device”
  message when running sudo on AIX when no terminal is present. In
  sudo 1.9.16 this was turned from a debug message into a warning.
  GitHub issue #408.
  * When a duplicate alias is found in the sudoers file, the warning
  message now includes the file and line number of the previous
  definition.
  * Added support for the --with-secure-path-value=no configure option
  to allow packagers to ship the default sudoers file with the secure
  path line commented out.
  * Sudo no longer sends mail when a user runs sudo -nv or sudo -nl,
  even if mail_badpass or mail_always are set. Sudo already avoids
  logging to a file or syslog in this case. Bug #1072.
  * Added the cmddenial_message sudoers option to provide additional
  information to the user when a command is denied by the sudoers
  policy. The default message is still displayed.
  * The time stamp used for file-based logs is now more consistent
  with the time stamp produced by syslog. GitHub issue #327.
  * Sudo will now warn the user if it can detect the user’s terminal but
  cannot determine the path to the terminal device. The sudoers time
  stamp file will now use the terminal device number directly.
  GitHub issue #329.
  * The embedded copy of zlib has been updated to version 1.3.1.
  * Improved error handling if generating the list of signals and signal
  names fails at build time.
  * Fixed a compilation issue on Linux systems without process_vm_readv().
  * Fixed cross-compilation with WolfSSL.
  * Added a json_compact value for the sudoers log_format option which can
  be used when logging to a file. The existing json value has been aliased
  to json_pretty. In a future release, json will be an alias for
  json_compact. GitHub issue #357.
  * A new pam_silent sudoers option has been added which may be negated to
  avoid suppressing output from PAM authentication modules. GitHub issue #216.
  * Fixed several cvtsudoers JSON output problems. GitHub issues #369, #370,
  [#371], #373, #381.
  * When sudo runs a command in a pseudo-terminal and the user’s terminal is
  revoked, the pseudo-terminal’s foreground process group will now receive
  SIGHUP before the terminal is revoked. This emulates the behavior of the
  session leader exiting and is consistent with what happens when,
  for example, an ssh session is closed. GitHub issue #367.
  * Fixed make test with Python 3.12. GitHub issue #374.
  * In schema.ActiveDirectory, fixed the quoting in the example command.
  GitHub issue #376.
  * Paths specified via a Chdir_Spec or Chroot_Spec in sudoers may now
  be double-quoted.
  * Sudo insults are now included by default, but disabled unless the
  - -with-insults configure option is specified or the insults sudoers
  option is enabled.
  * The default sudoers file now enables the secure_path option by
  default and preserves the EDITOR, VISUAL, and SUDO_EDITOR environment
  variables when running visudo. The new --with-secure-path-value
  configure option can be used to set the value of secure_path in
  the default sudoers file. GitHub issue #387.
  * A sudoers schema for IBM Directory Server (aka IBM Tivoli Directory
  Server, IBM Security Directory Server, and IBM Security Verify
  Directory) is now included.
  * When cross-compiling sudo, the configure script now assumes that
  the snprintf() function is C99-compliant if the C compiler
  supports the C99 standard. Previously, configure would use sudo’s
  own snprintf() when cross-compiling. GitHub issue #386.</changelog>
  <changelog author="sflees@suse.de" date="1751284800">- Update to 1.9.17p1
  * Fix a possible local privilege escalation via the --host option
    [bsc#1245274, CVE-2025-32462]
  * Fix a possible local privilege Escalation via chroot option
    [bsc#1245275, CVE-2025-32463]
- Update to 1.9.17
  * Sudo now uses the NODEV macro consistently. Bug #1074.
    Fixed a bug where the ALL command in a sudoers rule would
    override a previous NOSETENV tag. Command tags are inherited from
    previous Cmnds in a Cmnd_Spec_List. There is a special case for
    the SETENV tag with the ALL command, where SETENV is implied if
    no explicit SETENV or NOSETENV tag is specified. This special
    case did not take into account that a NOSETENV tag that was inherited
    should override this behavior.
  * If sudo is run via ssh without a terminal and a password is required,
    it now suggest using ssh’s -t option.
  * Fixed the display of timeout values in the sudo -V output on systems
    without a C99-compliant snprintf() function.
  * Quieted a number of minor Coverity warnings.
  * Fixed a problem running sudo from a serial console on Linux when the
    command is run in a pseudo-terminal (the default).
  * Fixed a crash in sudo which could occur if there was a fatal error
    after the user was validated but before the command was actually run.
  * Fixed a number of man page style warnings. The “lint” make target in
    the docs directory will now run groff with warnings enabled if it is
    available. Bug #1075.
  * The ignore_dot sudoers setting is now on by default. There is now a
  - -disable-ignore-dot configure option to disable it. The
  - -with-ignore-dot configure option has been deprecated.
  * Fixed a problem with the pwfeedback option where an initial backspace
    would reduce the maximum length allowed for the password.
    GitHub issue #439.
  * Fixed minor grammar and spelling problems in the man pages.
  * Fixed a bug where a user could avoid entering a password for sudo -l
    command if they specified their own user or group name via the -u or
  - g options.
  * Avoid potential password guessing based on timing attacks on the
    strcmp() function on systems without PAM or a crypt() function where
    plaintext passwords are stored in the shadow password file.
  * Fixed a potential information leak where sudo -l command could be used
    to determine whether an executable exists in a directory that they do
    not have search access to.
  * Sudo uses TCSAFLUSH, not TCSADRAIN, when disabling echo once again.
    A long time ago sudo changed from using TCSAFLUSH to TCSADRAIN due
    to some systems having bugs related to TCSAFLUSH. That should no longer
    be a concern. Using TCSAFLUSH ensures that password input that has been
    received by the kernel, but not yet read by sudo, will be discarded and
    not echoed.
  * Added the SUDO_TTY environment variable if the user has a terminal.
    This can be used to find the user’s original tty device when sudo runs
    the command in its own pseudo-terminal. GitHub issue #447.
  * New Cantonese translation for sudo.</changelog>
  <changelog author="sflees@suse.de" date="1775563200">- CVE-2026-35535: potential privilege escalation when running
  the mailer (bsc#1261420)
  * fix-CVE-2026-35535.patch</changelog>
</package>
<package pkgid="4dd132c877fcc5fd7ce03bb45effa44f56fe210d9982e76dd6ad883ab6d9d4447aac9df73e30468b43ab86f7d35822c65dc17752f874c00641b330763962580e" name="supermin" arch="x86_64">
  <version epoch="0" ver="5.3.5" rel="160000.2.2"/>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Include sysconfig-netconfig only until SLE15, newer versions
  don't use it anymore [jsc#PED-1734]</changelog>
  <changelog author="schwab@suse.de" date="1672142400">- Enable build on riscv64</changelog>
  <changelog author="carnold@suse.com" date="1704369600">- Update to version 5.3.3 (jsc#PED-6305)
  * initrd: Support ztd-compressed modules
  * pacman: Recognise Artix, an Arch derivative
  * Add a separate variable to store link flags, and use that to
    supply
  * Add appropriate globs for arm based kernels. The file names end
    in -arm64 but the architecture is named aarch64.
  * Add support for OCaml 5.0
  * Add LFS support for fts functions
  * Numerous bug fixes
- Upstream bug fixes and features
  001-Improved-debugging-of-the-supermin-if-newer-calculation.patch
  002-Fix-if-newer-copy-kernel.patch
  003-Fix-kernel-filtering-for-aarch64-architecture.patch
  004-Use-output-complete-exe-instead-of-custom.patch
  005-Only-supply-output-complete-exe-to-final-link.patch
  006-Rename-function-file-kernel.patch
  007-Uncompress-kernel-on-RISC-V.patch
  008-Fix-link-to-renamed-kernel-documentation.patch
  009-New-mailing-list-email-address.patch
- Dropped initrd_support_ztd-compressed_modules.patch</changelog>
  <changelog author="carnold@suse.com" date="1714996800">- Supermin uses mke2fs. Add Requires e2fsprogs for this command.
  supermin.spec</changelog>
  <changelog author="carnold@suse.com" date="1720612800">- Update to version 5.3.4 (jsc#PED-8910)
  * Add support for OCaml 5
  * Add kylinsecos support
  * rpm: Detect dnf5 and omit missing options
  * ocamlc: Use -output-complete-exe instead of -custom
  * Fix kernel filtering for aarch64 architecture
  * Uncompress kernel on RISC-V
- Drop patches contained in new tarball
  001-Improved-debugging-of-the-supermin-if-newer-calculation.patch
  002-Fix-if-newer-copy-kernel.patch
  003-Fix-kernel-filtering-for-aarch64-architecture.patch
  004-Use-output-complete-exe-instead-of-custom.patch
  005-Only-supply-output-complete-exe-to-final-link.patch
  006-Rename-function-file-kernel.patch
  007-Uncompress-kernel-on-RISC-V.patch
  008-Fix-link-to-renamed-kernel-documentation.patch
  009-New-mailing-list-email-address.patch</changelog>
  <changelog author="carnold@suse.com" date="1722254400">- bsc#1228373 - supermin regression in Tumbleweed / Factory causes
  virt-inspector to fail
  add-rpm-database-location.patch
- Drop disable-test-if-newer-ext2.patch</changelog>
  <changelog author="carnold@suse.com" date="1725451200">- Update to version 5.3.5 (jsc#PED-8910)
  * Fix qemu-kvm example command</changelog>
  <changelog author="carnold@suse.com" date="1729512000">- Detect the correct kernel on aarch64 (jsc#PED-10545)
  detect-aarch64-kernel.patch</changelog>
  <changelog author="carnold@suse.com" date="1744286400">- Update Copyright year
- Exclude the Requires on sysconfig-netconfig for SLES16 and newer</changelog>
</package>
<package pkgid="4e0a4281a52709d87c36c69fcf996fdd26fa8dbe4296c1acbfc63d35d0076cbbb66434edf6d27528d39d8b3da90832a0f7f58514751b791621646cd3020d948a" name="supportutils" arch="noarch">
  <version epoch="0" ver="3.2.12.2" rel="160000.1.1"/>
  <changelog author="jason.record@suse.com" date="1704974400">- Changes to version 3.2.5
  + Fixed smart disk error (bsc#1218282)
  + Fixed ipvsadm logic error (bsc#1218324)
  + Correctly detects Xen Dom0 (bsc#1218201)</changelog>
  <changelog author="jason.record@suse.com" date="1705665600">- Changes to version 3.2.6
  + Corrected podman .ID error (bsc#1218812)
  + Remove duplicate non-root podman users (bsc#1218814)</changelog>
  <changelog author="jason.record@suse.com" date="1707739200">- Changes to version 3.1.29
  + Extended scaling for performance (bsc#1214713)
  + Fixed kdumptool output error (bsc#1218632)
  + Corrected podman ID errors (bsc#1218812)
  + Duplicate non root podman entries removed (bsc#1218814)
  + Corrected get_sles_ver for SLE Micro (bsc#1219241)
  + Check nvidida-persistenced state (bsc#1219639)</changelog>
  <changelog author="jason.record@suse.com" date="1707912000">- Changes to version 3.2.7
  + Extended scaling for performance (bsc#1214713)
  + Corrected get_sles_ver for SLE Micro (bsc#1219241)
  + Check nvidida-persistenced state (bsc#1219639)</changelog>
  <changelog author="jason.record@suse.com" date="1713182400">- Changes in version 3.1.30
  + Added -V key:value pair option (bsc#1222021, PED-8211)
  + Avoid getting duplicate kernel verifications in boot.text (pr#193)
  + Suppress file descriptor leak warnings from lvm commands (pr#192, bsc#1220082)
  + Includes container log timestamps (pr#197)</changelog>
  <changelog author="jesse.chandler@suse.com" date="1722513600">- Changes to version 3.2.8
  + Avoid getting duplicate kernel verifications in boot.text (pr#190)
  + lvm: suppress file descriptor leak warnings from lvm commands (pr#191)
  + docker_info: Add timestamps to container logs (pr#196)
  + Key value pairs and container log timestamps (bsc#1222021 PED-8211, pr#198)
  + Update supportconfig get pam.d sorted (pr#199)
  + yast_files: Exclude .zcat (pr#201)
  + Sanitize grub bootloader (bsc#1227127, pr#203)
  + Sanitize regcodes (pr#204)
  + Improve product detection (pr#205)
  + Add read_values for s390x (bsc#1228265, pr#206)
  + hardware_info: Remove old alsa ver check (pr#209)
  + drbd_info: Fix incorrect escape of quotes (pr#210)</changelog>
  <changelog author="jason.record@suse.com" date="1733227200">- Changes to version 3.2.9
  + Map running PIDs to RPM package owner aiding BPF program detection (bsc#1222896, bsc#1213291, PED-8221)
  + Supportconfig available in current distro (PED-7131)
  + Corrected display issues (bsc#1231396)
  + NFS takes too long, showmount times out (bsc#1231423)
  + Merged sle15 and master branches (bsc#1233726, PED-11669)</changelog>
  <changelog author="jason.record@suse.com" date="1742472000">- Changes to version 3.2.10
  + network.txt collect all firewalld zones (pr#233)
  + Collects gfs2 info (PED-11853, pr#235, pr#236)
  + Ignore tasks/threads to prevent collecting duplicate fd data in open_files (bsc#1230371, pr#237)
  + Added openldap2_5 support for SLES (pr#238)
  + Collects additional hawk details (pr#239)
  + Optimized filtering D/Z processes (pr#241)
  + Collect firewalld permanent configuration (pr#243)
  + ldap_info: support for multiple DBs and sanitize olcRootPW (bsc#1231838, pr#247)
  + Added dbus_info for dbus.txt (bsc#1222650, pr#248)</changelog>
  <changelog author="jason.record@suse.com" date="1751371200">- Changes to version 3.2.11
  + Collect rsyslog frule files (bsc#1244003, pr#257)
  + Remove proxy passwords (bsc#1244011, pr#257)
  + Missing NetworkManager information (bsc#1241284, pr#257)
  + Include agama logs bsc#1244937, pr#256)
  + Additional NFS conf files (pr#253)
  + New fadump sysfs files (pr#252)
  + Fixed change log dates</changelog>
  <changelog author="jason.record@suse.com" date="1765540800">- Changes to version 3.2.12
  + Optimized lsof usage and honors OPTION_OFILES (bsc#1232351, PR#274)
  + Run in containers without errors (bsc#1245667, PR#272)
  + Removed pmap PID from memory.txt (bsc#1246011, PR#263)
  + Added missing /proc/pagetypeinfo to memory.txt (bsc#1246025, PR#264)
  + Improved database perforce with kGraft patching (bsc#1249657, PR#273)
  + Using last boot for journalctl for optimization (bsc#1250224, PR#287)
  + Fixed extraction failures (bsc#1252318, PR#275)
  + Update supportconfig.conf path in docs (bsc#1254425, PR#281)
  + drm_sub_info: Catch error when dir doesn't exist (PR#265)
  + Replace remaining `egrep` with `grep -E` (PR#261, PR#266)
  + Add process affinity to slert logs (PR#269)
  + Reintroduce cgroup statistics (and v2) (PR#270)
  + Minor changes to basic-health-check: improve information level (PR#271)
  + Collect important machine health counters (PR#276)
  + powerpc: collect hot-pluggable PCI and PHB slots (PR#278)
  + podman: collect podman disk usage (PR#279)
  + Exclude binary files in crondir (PR#282)
  + kexec/kdump: collect everything under /sys/kernel/kexec dir (PR#284)
  + Use short-iso for journalctl (PR#288)</changelog>
</package>
<package pkgid="1636852db54c3022b17d20a93e24fe665b39a0a7add28caeb10f0aaba92d1a818781e5d843112d19cc2e3d1335e19c04c753d6439510954093fbec824cea6219" name="supportutils-plugin-suse-public-cloud" arch="noarch">
  <version epoch="0" ver="1.0.9" rel="160000.2.2"/>
  <changelog author="rjschwei@suse.com" date="1470052800">- Update to verion 1.0.1 (bsc#990887, bsc#990888)
  + Include information about instance initialization generated by
    the initialization code in the log</changelog>
  <changelog author="rjschwei@suse.com" date="1503489600">- Update to version 1.0.2 (bsc#1053737, bsc#1053738)
  + Add additional package to the framework specific package queries</changelog>
  <changelog author="jgleissner@suse.com" date="1596196800">- Update to version 1.0.3 (bsc#1174618, bsc#1170475, bsc#1170476)
  + Drop rc file name extension from rpm lists
  + Sanatize data
  + Use updated azuremetadata
  + Add /etc/os-release data
  + Check update infrastructure is reachable</changelog>
  <changelog author="jgleissner@suse.com" date="1596283200">- Update to version 1.0.4
  + Fix output redirection in registration info query</changelog>
  <changelog author="rjschwei@suse.com" date="1597406400">- Update to version 1.0.5 (bsc#1175250, bsc#1175251)
  + Query for new GCE initialization code packages</changelog>
  <changelog author="rjschwei@suse.com" date="1643112000">- Update to version 1.0.6 (bsc#1195095, bsc#1195096)
  + Include cloud-init logs whenever they are present
  + Update the packages we track in AWS, Azure, and Google
  + Include the ecs logs for AWS ECS instances</changelog>
  <changelog author="rjschwei@suse.com" date="1681819200">- Update to version 1.0.7 (bsc#1209026)
  + Include information about the cached registration data
  + Collect the data that is sent to the update infrastructure during
    registration</changelog>
  <changelog author="jgleissner@suse.com" date="1691064000">- Update to version 1.0.8 (bsc#1213951)
  + Capture CSP billing adapter config and log (issue#13)
  + Accept upper case Amazon string in DMI table (issue#12)</changelog>
  <changelog author="gyribeiro@suse.com" date="1701086400">- %changelog section needs to be present in the spec file</changelog>
  <changelog author="rjschwei@suse.com" date="1705406400">- Update to version 1.0.9 (bsc#1218762, bsc#1218763)
  + Remove duplicate data collection for the plugin itself
  + Collect archive metering data when available
  + Query billing flavor status</changelog>
</package>
<package pkgid="cb5584b23472547dd2c357e27f6b440cda6c15243ec4e96c60dd3c01359ef93ebbbd6e778589b9e16858eaf7935d825de6ec464c8bb8a6bdfe4662b6652f695c" name="suse-module-tools" arch="x86_64">
  <version epoch="0" ver="16.0.64" rel="160000.1.1"/>
  <changelog author="mwilck@suse.com" date="1736769600">* regenerate-initrd-posttrans: return error if regenerating all
    initrds fails (bsc#1234308)</changelog>
  <changelog author="mwilck@suse.com" date="1737115200">- Update to version 16.0.56:
  * rpm-script: create /boot/vmlinuz and /boot/initrd in kiwi environment
    (bsc#1234275, bsc#1234759)</changelog>
  <changelog author="mwilck@suse.com" date="1737460800">* Fix "initrd: file not found" error in sd-boot setup
    (gh#openSUSE/suse-module-tools#113, gh#openSUSE/sdbootutil#122)</changelog>
  <changelog author="mwilck@suse.com" date="1741867200">- Update to version 16.0.58:
  * mkosi-initrd: build initrds directly to /boot
  (gh#openSUSE/suse-module-tools#115)</changelog>
  <changelog author="mwilck@suse.com" date="1741867201">- Update to version 16.0.59:
  * inkmp-script: fix "bad array subscript" error (bsc#1239550)</changelog>
  <changelog author="mwilck@suse.com" date="1747310400">- Update to version 16.0.60:
  * spec file: add missing util-linux requirement (bsc#1241465)
  * kernel-scriptlets: enable tracing with KERNEL_PACKAGE_SCRIPT_TRACE=1</changelog>
  <changelog author="mwilck@suse.com" date="1759838400">- Update to version 16.0.61:
  * weak-modules2: skip livepatch dir when checking for unresolved symbols
    (bsc#1250655)</changelog>
  <changelog author="mwilck@suse.com" date="1762171200">- Update to version 16.0.62:
  * spec file: remove %udev_rules_update call (bsc#1250664)</changelog>
  <changelog author="mwilck@suse.com" date="1764244800">- Update to version 16.0.63:
  * 80-hotplug-cpu-mem.rules: remount tmpfs on "online" uevents
  (bsc#1254264)
  * udev: use systemd service to remount tmpfs (bsc#1253679)</changelog>
  <changelog author="mwilck@suse.com" date="1765800000">- Update to version 16.0.64:
  * udev rules: write block queue attributes only if necessary
  (bsc#1254928)</changelog>
</package>
<package pkgid="5f3d7096898bb19e6b0f0e3047af78b0bcc908841174ced10a8f25328a2cbcb9abd391a7f924e7de546e1d8194fd1b1cb38508f07093713ddaff8fb8b57ee556" name="suse-module-tools-scriptlets" arch="x86_64">
  <version epoch="0" ver="16.0.64" rel="160000.1.1"/>
  <changelog author="mwilck@suse.com" date="1736769600">* regenerate-initrd-posttrans: return error if regenerating all
    initrds fails (bsc#1234308)</changelog>
  <changelog author="mwilck@suse.com" date="1737115200">- Update to version 16.0.56:
  * rpm-script: create /boot/vmlinuz and /boot/initrd in kiwi environment
    (bsc#1234275, bsc#1234759)</changelog>
  <changelog author="mwilck@suse.com" date="1737460800">* Fix "initrd: file not found" error in sd-boot setup
    (gh#openSUSE/suse-module-tools#113, gh#openSUSE/sdbootutil#122)</changelog>
  <changelog author="mwilck@suse.com" date="1741867200">- Update to version 16.0.58:
  * mkosi-initrd: build initrds directly to /boot
  (gh#openSUSE/suse-module-tools#115)</changelog>
  <changelog author="mwilck@suse.com" date="1741867201">- Update to version 16.0.59:
  * inkmp-script: fix "bad array subscript" error (bsc#1239550)</changelog>
  <changelog author="mwilck@suse.com" date="1747310400">- Update to version 16.0.60:
  * spec file: add missing util-linux requirement (bsc#1241465)
  * kernel-scriptlets: enable tracing with KERNEL_PACKAGE_SCRIPT_TRACE=1</changelog>
  <changelog author="mwilck@suse.com" date="1759838400">- Update to version 16.0.61:
  * weak-modules2: skip livepatch dir when checking for unresolved symbols
    (bsc#1250655)</changelog>
  <changelog author="mwilck@suse.com" date="1762171200">- Update to version 16.0.62:
  * spec file: remove %udev_rules_update call (bsc#1250664)</changelog>
  <changelog author="mwilck@suse.com" date="1764244800">- Update to version 16.0.63:
  * 80-hotplug-cpu-mem.rules: remount tmpfs on "online" uevents
  (bsc#1254264)
  * udev: use systemd service to remount tmpfs (bsc#1253679)</changelog>
  <changelog author="mwilck@suse.com" date="1765800000">- Update to version 16.0.64:
  * udev rules: write block queue attributes only if necessary
  (bsc#1254928)</changelog>
</package>
<package pkgid="386317d29f9348d3be1382821c434b1cdc45198bb020b7731692c13472d1751e9726abeb9cdc3a3ef2ec7d038a127dbee940d488eb72dbe01bbb67197a6f4edf" name="suseconnect-ng" arch="x86_64">
  <version epoch="0" ver="1.13.0" rel="160000.2.2"/>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
  <changelog author="tschmidt@suse.com" date="1705579200">- Update to version 1.6.0
  * Disable EULA display for addons (bsc#1218649 and bsc#1217961)</changelog>
  <changelog author="fschnizlein@suse.com" date="1707912000">- Update to version 1.7.0
  * Allow SUSEConnect on read write transactional systems (bsc#1219425)</changelog>
  <changelog author="1josegomezr@gmail.com" date="1710331200">- Update to version 1.8.0
  * Allow "--rollback" flag to run on readonly filesystem (bsc#1220679)</changelog>
  <changelog author="tschmidt@suse.com" date="1715083200">- Update to version 1.9.0
  * Fix certificate import for Yast when using a registration proxy with
    self-signed SSL certificate (bsc#1223107)</changelog>
  <changelog author="fschnizlein@suse.com" date="1716465600">- Update version to 1.10.0
  * Build zypper-migration and zypper-packages-search as standalone
    binaries rather then one single binary
  * Add --gpg-auto-import-keys flag before action in zypper command (bsc#1219004)
  * Include /etc/products.d in directories whose content are backed
    up and restored if a zypper-migration rollback happens. (bsc#1219004)
  * Add the ability to upload the system uptime logs, produced by the
    suse-uptime-tracker daemon, to SCC/RMT as part of keepalive report.
    (jsc#PED-7982) (jsc#PED-8018)
  * Add support for third party packages in SUSEConnect
  * Refactor existing system information collection implementation</changelog>
  <changelog author="msabate@suse.com" date="1720612800">- Update version to 1.11
  - Added uname as collector
  - Added SAP workload detection
  - Added detection of container runtimes
  - Multiple fixes on ARM64 detection
  - Use `read_values` for the CPU collector on Z
  - Fixed data collection for ppc64le
  - Grab the home directory from /etc/passwd if needed (bsc#1226128)</changelog>
  <changelog author="msabate@suse.com" date="1726228800">- Update version to 1.12:
  - Set the filesystem root on zypper when given (bsc#1230229,bsc#1229014)</changelog>
  <changelog author="msabate@suse.com" date="1731585600">- Update version to 1.13:
  - Integrating uptime-tracker
  - Honor auto-import-gpg-keys flag on migration (bsc#1231328)
  - Only send labels if targetting SCC
  - Skip the docker auth generation on RMT (bsc#1231185)
  - Add --set-labels to register command to set labels at registration time on SCC
  - Add a new function to display suse-uptime-tracker version
  - Integrate with uptime-tracker ( https://github.com/SUSE/uptime-tracker/ )
  - Add a command to show the info being gathered</changelog>
  <changelog author="dmueller@suse.com" date="1751544000">- switch to go1.24-openssl for SL16/SLE15</changelog>
</package>
<package pkgid="22f635dbf1e1f447ad2c5ddfb9ede01b580e43dd9d6e4d93145e82f71b0e229715036d22e787a7f10e895c24fb0e183b7cbf8db68efeeebeae92cf784403e512" name="swtpm" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1678104000">- Drop trousers requirement</changelog>
  <changelog author="meissner@suse.com" date="1679400000">- swtpm-fix-build.patch: disable -Wstack-protector, it fails on s390x
  bsc#1209117</changelog>
  <changelog author="meissner@suse.com" date="1683028800">- remove python3 dependency, no longer needed after rewrite (bsc#1211010)</changelog>
  <changelog author="manfred.h@gmx.net" date="1686916800">- Make selinux optional to allow building this package for Leap, too.</changelog>
  <changelog author="meissner@suse.com" date="1694865600">- Update to version 0.8.1:
  - swtpm:
  - Restore logging to stderr on log open failure
  - swtpm_setup:
  - Exit with '0' upon --version rather than '1'.
  - Initialized @argv in get_swtpm_capabilities()
  - swtpm_localca:
  - Add missing NULL option to end of array
  - SELinux:
  - Add rules for user_tpm_t:sockfile to allow unlink
  - Add rules for sock_file on user_tmp_t</changelog>
  <changelog author="william.brown@suse.com" date="1697716800">- Add missing requires for certtool</changelog>
  <changelog author="rrahl0@opensuse.org" date="1722513600">- update to 0.9.0:
  - fixes: boo#1226398
  - swtpm:
  - Use umask() to create/truncated state file rather than fchmod()
  - Use fchmod to set mode bits provided by user
  - Replace mkstemp with g_mkstemp_full (Coverity)
  - fix typo in help message
  - cuse: Fix Coverity complaints regarding locks
  - Fix double free in error path
  - Close fd after main loop
  - Restore logging to stderr on log open failure
  - swtpm_setup:
  - Fail --pcr-banks without --tpm2
  - Fail --decryption or --allow-signing without --tpm2
  - Initialized argv in get_swtpm_capabilities()
  - Flush spk after persisting to create room for another key
  - Refactor duplicate code into swtpm_tpm2_write_cert_nvram
  - Move persisting of certificate into tpm2_persist_certificate
  - Pass key_type to function creating filename for key
  - Add scheme parameter before curveid to createprimary_ecc
  - Rename is_ek to preserve for future extension
  - Mask-out EK and plaform certificate flags and set cert_flags
  - Move common code into new function read_certificate_file()
  - Exit with '0' upon --version rather than '1'
  - Close file descriptors passed to swtpm process on parent side
  - Make stdout unbuffered
  - Use medium duration on TSC_PhysicalPresence to avoid timeouts
  - Add poll() after write() and before read() to detect errors
  - swtpm_localca:
  - Add support for up to 20 bytes serial numbers
  - Introduce --key as more generic alias for --ek
  - Add missing NULL option to end of array
  - Make stdout unbuffered
  - swtpm_cert:
  - Add support for serial numbers up to 20 bytes long
  - swtpm_ioctl:
  - Separate return code from flags
  - Repeatedly call PTM_GET_INFO for long responses
  - selinux:
  - Re-add rule for svirt_tcg_t and user_tmp_t:sock_file (virt-install)
  - New SELinux policy that requires Fedora 40 or later
  - tests:
  - Fixed occurrences of stray '' before '-'
  - Rearrange order of test cases to run some also as 'root'
  - Add tests for command line options and combinations of options
  - Add softhsm_setup to shellcheck'ed files and fix issues
  - Add missing 'exit 1' on unexpected file size on --reconfigure
  - Add test cases for swtpm_cert with max serial number
  - Fix spelling mistakes
  - reformat regexs for easier readability and extension
  - ibmtss2: Add patch to disable x509 test with older libtpms
  - Upgrade to ibmtss2 v2.0.1
  - Fixed several issues detected by shellcheck
  - build-sys:
  - Add support for --disable-tests to disable tests
  - Display GMP_LIBS and GMP_CFLAGS
  - Only display warning if pkg-config for gmp fails
  - Add gmp library and devel package as dependency
  - use PKG_CHECK_MODULES to check libtpms version</changelog>
  <changelog author="cathy.hu@suse.com" date="1726747200">- Fix swtpm custom module (bsc#1229131)
  - Add patch: 1229131-fix-swtpm-selinux-policy-mismatch.patch
  - this can be removed once swtpm upstream sorts out their custom selinux module.
    see: https://github.com/stefanberger/swtpm/issues/885
    there were a couple changes in the selinux-policy libvirt handling
    which causes the logfile in /var/log/swtpm/libvirt/qemu/*.log to be labeled
    virt_log_t instead of var_log_t. this patch allows swtpm_t to open the virt_log_t</changelog>
  <changelog author="aplanas@suse.com" date="1733313600">- Update to 0.10.0:
  + swtpm:
  * Requires libtpms v0.10.0
  * Display tpmstate-opt-lock as a new capability
  * Add support for lock option parameter to tpmstate option
  * nvstore_linear: Add support for file-backend locking
  * Remove broken logic to check for neither dir nor file backend
  * Use ptm_cap_n to build PTM_GET_CAPABILITY response
  * Define a structure to return PTM_GET_CAPABILITY result
  * Implement --print-info to run TPMLIB_GetInfo with flags
  * Support --profile fd= to read profile from file descriptor
  * Support --profile file= to read profile from file
  * Ignore remove-disabled parameter on non-'custom' profile
  * Check for good entropy source in chroot environment
  * Implement a check for HMAC+sha1 for testing future restriction
  * Implement function to check whether a crypto algorithm is
    disabled
  * Print cmdarg-print-profiles as part of capabilities
  * Check whether SHA1 signature support is disabled in profile
  * Use TPMLIB_WasManufactured to check whether profile was applied
  * Determine whether OpenSSL needs to be configured (FIPs, SHA1
    signature)
  * Add support for --print-profiles option
  * Print profile names as part of capabilities JSON
  * Display new capability to allow setting a profile
  * Add support for --profile option to set a profile on TPM 2
  + swtpm_setup:
  * Comment flags for storage primary key and deprecate --create-spk
  * Implement --print-profiles to display all profile
  * Add profile entries to swtpm_setup.conf written by swtpm_setup
  * Add support for --profile-name option
  * Accept profiles with name starting with 'custom:'
  * Support default profile from file in swtpm_setup.conf
  * Support --profile-file-fd to read profile from file descriptor
  * Support --profile-file to read profile from file
  * Always log the active profile
  * Implement --profile-remove-fips-disabled option
  * Read default profile from swtpm_setup.conf
  * Print profile names as part of capabilities JSON
  * Add support for --profile parameter
  * Get default rsa keysize from setup_setup.conf if not given
  + swtpm_ioctl:
  * Use ptm_cap_n for non-CUSE PTM_GET_CAPABILITY response
  + selinux:
  * Change write to append for appending to log
  * Add rule for logging to svirt_image_t labeled files from swtpm_t
  + tests:
  * Update IBMTSS2 test suite to v2.4.0
  * Test activation of PCR banks when not all are available
  * Enable SWTPM_TEST_PROFILE for running test_tpm2_ibmtss2 with
    profile
  * Add a check for OPENSSL_ENABLE_SHA1_SIGNATURES in log file
  * Consolidate custom profile test cases and check for
    StateFormatLevel
  * Convert test_samples_create_tpmca to run installed
  * Mention test_tpm2_libtpms_versions_profiles requiring
    env. variables
  * allow running ibmtss2 tests against installed version
  * Derive support for CUSE from SWTPM_EXE help screen
  * Set OPENSSL_ENABLE_SHA1_SIGNATURES=1 for IBMTSS2 test
  * Extend test case testing across libtpms versions
  * Add test case for testing profiles across libtpms versions
  * Test the --profile option of swtpm_setup and swtpm
  * teach them to run installed
  * add installed-runner.sh
  * install tests on the system
  * lookup system binaries if INSTALLED is set
  + build-sys:
  * enable 64-bit file API on 32-bit systems
  * Add -Wshadow to the CFLAGS
  * Require that libtpms v0.10 is available for TPMLIB_SetProfile</changelog>
  <changelog author="bwiedemann@suse.com" date="1733572800">- Fix build without %check (boo#1227364)</changelog>
</package>
<package pkgid="c5621f2484435ea948386130624b94c88a6cc13e92d4e81ee44b0e5d32b83aa8bfcca100e751a9ad3dceed8f3dc50538441c138368ae2409d95906f0f2ee46fa" name="swtpm-selinux" arch="noarch">
  <version epoch="0" ver="0.10.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1678104000">- Drop trousers requirement</changelog>
  <changelog author="meissner@suse.com" date="1679400000">- swtpm-fix-build.patch: disable -Wstack-protector, it fails on s390x
  bsc#1209117</changelog>
  <changelog author="meissner@suse.com" date="1683028800">- remove python3 dependency, no longer needed after rewrite (bsc#1211010)</changelog>
  <changelog author="manfred.h@gmx.net" date="1686916800">- Make selinux optional to allow building this package for Leap, too.</changelog>
  <changelog author="meissner@suse.com" date="1694865600">- Update to version 0.8.1:
  - swtpm:
  - Restore logging to stderr on log open failure
  - swtpm_setup:
  - Exit with '0' upon --version rather than '1'.
  - Initialized @argv in get_swtpm_capabilities()
  - swtpm_localca:
  - Add missing NULL option to end of array
  - SELinux:
  - Add rules for user_tpm_t:sockfile to allow unlink
  - Add rules for sock_file on user_tmp_t</changelog>
  <changelog author="william.brown@suse.com" date="1697716800">- Add missing requires for certtool</changelog>
  <changelog author="rrahl0@opensuse.org" date="1722513600">- update to 0.9.0:
  - fixes: boo#1226398
  - swtpm:
  - Use umask() to create/truncated state file rather than fchmod()
  - Use fchmod to set mode bits provided by user
  - Replace mkstemp with g_mkstemp_full (Coverity)
  - fix typo in help message
  - cuse: Fix Coverity complaints regarding locks
  - Fix double free in error path
  - Close fd after main loop
  - Restore logging to stderr on log open failure
  - swtpm_setup:
  - Fail --pcr-banks without --tpm2
  - Fail --decryption or --allow-signing without --tpm2
  - Initialized argv in get_swtpm_capabilities()
  - Flush spk after persisting to create room for another key
  - Refactor duplicate code into swtpm_tpm2_write_cert_nvram
  - Move persisting of certificate into tpm2_persist_certificate
  - Pass key_type to function creating filename for key
  - Add scheme parameter before curveid to createprimary_ecc
  - Rename is_ek to preserve for future extension
  - Mask-out EK and plaform certificate flags and set cert_flags
  - Move common code into new function read_certificate_file()
  - Exit with '0' upon --version rather than '1'
  - Close file descriptors passed to swtpm process on parent side
  - Make stdout unbuffered
  - Use medium duration on TSC_PhysicalPresence to avoid timeouts
  - Add poll() after write() and before read() to detect errors
  - swtpm_localca:
  - Add support for up to 20 bytes serial numbers
  - Introduce --key as more generic alias for --ek
  - Add missing NULL option to end of array
  - Make stdout unbuffered
  - swtpm_cert:
  - Add support for serial numbers up to 20 bytes long
  - swtpm_ioctl:
  - Separate return code from flags
  - Repeatedly call PTM_GET_INFO for long responses
  - selinux:
  - Re-add rule for svirt_tcg_t and user_tmp_t:sock_file (virt-install)
  - New SELinux policy that requires Fedora 40 or later
  - tests:
  - Fixed occurrences of stray '' before '-'
  - Rearrange order of test cases to run some also as 'root'
  - Add tests for command line options and combinations of options
  - Add softhsm_setup to shellcheck'ed files and fix issues
  - Add missing 'exit 1' on unexpected file size on --reconfigure
  - Add test cases for swtpm_cert with max serial number
  - Fix spelling mistakes
  - reformat regexs for easier readability and extension
  - ibmtss2: Add patch to disable x509 test with older libtpms
  - Upgrade to ibmtss2 v2.0.1
  - Fixed several issues detected by shellcheck
  - build-sys:
  - Add support for --disable-tests to disable tests
  - Display GMP_LIBS and GMP_CFLAGS
  - Only display warning if pkg-config for gmp fails
  - Add gmp library and devel package as dependency
  - use PKG_CHECK_MODULES to check libtpms version</changelog>
  <changelog author="cathy.hu@suse.com" date="1726747200">- Fix swtpm custom module (bsc#1229131)
  - Add patch: 1229131-fix-swtpm-selinux-policy-mismatch.patch
  - this can be removed once swtpm upstream sorts out their custom selinux module.
    see: https://github.com/stefanberger/swtpm/issues/885
    there were a couple changes in the selinux-policy libvirt handling
    which causes the logfile in /var/log/swtpm/libvirt/qemu/*.log to be labeled
    virt_log_t instead of var_log_t. this patch allows swtpm_t to open the virt_log_t</changelog>
  <changelog author="aplanas@suse.com" date="1733313600">- Update to 0.10.0:
  + swtpm:
  * Requires libtpms v0.10.0
  * Display tpmstate-opt-lock as a new capability
  * Add support for lock option parameter to tpmstate option
  * nvstore_linear: Add support for file-backend locking
  * Remove broken logic to check for neither dir nor file backend
  * Use ptm_cap_n to build PTM_GET_CAPABILITY response
  * Define a structure to return PTM_GET_CAPABILITY result
  * Implement --print-info to run TPMLIB_GetInfo with flags
  * Support --profile fd= to read profile from file descriptor
  * Support --profile file= to read profile from file
  * Ignore remove-disabled parameter on non-'custom' profile
  * Check for good entropy source in chroot environment
  * Implement a check for HMAC+sha1 for testing future restriction
  * Implement function to check whether a crypto algorithm is
    disabled
  * Print cmdarg-print-profiles as part of capabilities
  * Check whether SHA1 signature support is disabled in profile
  * Use TPMLIB_WasManufactured to check whether profile was applied
  * Determine whether OpenSSL needs to be configured (FIPs, SHA1
    signature)
  * Add support for --print-profiles option
  * Print profile names as part of capabilities JSON
  * Display new capability to allow setting a profile
  * Add support for --profile option to set a profile on TPM 2
  + swtpm_setup:
  * Comment flags for storage primary key and deprecate --create-spk
  * Implement --print-profiles to display all profile
  * Add profile entries to swtpm_setup.conf written by swtpm_setup
  * Add support for --profile-name option
  * Accept profiles with name starting with 'custom:'
  * Support default profile from file in swtpm_setup.conf
  * Support --profile-file-fd to read profile from file descriptor
  * Support --profile-file to read profile from file
  * Always log the active profile
  * Implement --profile-remove-fips-disabled option
  * Read default profile from swtpm_setup.conf
  * Print profile names as part of capabilities JSON
  * Add support for --profile parameter
  * Get default rsa keysize from setup_setup.conf if not given
  + swtpm_ioctl:
  * Use ptm_cap_n for non-CUSE PTM_GET_CAPABILITY response
  + selinux:
  * Change write to append for appending to log
  * Add rule for logging to svirt_image_t labeled files from swtpm_t
  + tests:
  * Update IBMTSS2 test suite to v2.4.0
  * Test activation of PCR banks when not all are available
  * Enable SWTPM_TEST_PROFILE for running test_tpm2_ibmtss2 with
    profile
  * Add a check for OPENSSL_ENABLE_SHA1_SIGNATURES in log file
  * Consolidate custom profile test cases and check for
    StateFormatLevel
  * Convert test_samples_create_tpmca to run installed
  * Mention test_tpm2_libtpms_versions_profiles requiring
    env. variables
  * allow running ibmtss2 tests against installed version
  * Derive support for CUSE from SWTPM_EXE help screen
  * Set OPENSSL_ENABLE_SHA1_SIGNATURES=1 for IBMTSS2 test
  * Extend test case testing across libtpms versions
  * Add test case for testing profiles across libtpms versions
  * Test the --profile option of swtpm_setup and swtpm
  * teach them to run installed
  * add installed-runner.sh
  * install tests on the system
  * lookup system binaries if INSTALLED is set
  + build-sys:
  * enable 64-bit file API on 32-bit systems
  * Add -Wshadow to the CFLAGS
  * Require that libtpms v0.10 is available for TPMLIB_SetProfile</changelog>
  <changelog author="bwiedemann@suse.com" date="1733572800">- Fix build without %check (boo#1227364)</changelog>
</package>
<package pkgid="32c776a5fcf3a58b42de5bc6fac6fcfcdc4f7b0ab764ce558e06f8fa113c0671b3308868004a01a59e3bb9e5ba27dd80a847ee01ee3b8a01faed142580b27984" name="syslinux" arch="x86_64">
  <version epoch="0" ver="4.04" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1533556800">- sysmacros.patch: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mliska@suse.cz" date="1543406400">- Add remove-note-gnu-section.patch: strip a newly added section
  in order to fulfil ELF size limits expected.</changelog>
  <changelog author="snwint@suse.com" date="1550491200">- syslinux-4.04-lzo.diff: fix lzo memory aliasing issue (bsc#1125616)</changelog>
  <changelog author="snwint@suse.com" date="1584619200">- syslinux-4.04-gcc10.diff: fix gcc10 related issues (bsc#1166605)
  * -fno-common is now the default
  * provide missing strlen() implementation</changelog>
  <changelog author="bwiedemann@suse.com" date="1612353600">- Add syslinux-4.04-reproducible-isohybrid.patch to allow for
  deterministic iso image creation (boo#1062303)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link all binaries as Position Independent Executables (bsc#1184124).
  + syslinux-4.04-pie.diff</changelog>
  <changelog author="meissner@suse.com" date="1685102400">- Build the system installable binaries with RPM_OPT_FLAGS, to allow
  utilization of stack-protector and FORTIFY_SOURCE. (bsc#1211640)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.
- Normalize all patches to apply as -p1
  + Rebased remove-note-gnu-section.patch
  + Rebased sysmacros.patch
- Rename all *.diff files to *.patch, aligning one a common suffix:
  + syslinux-4.04-align.diff -&gt; syslinux-4.04-align.patch
  + syslinux-4.04-cache_fix.diff -&gt; syslinux-4.04-cache_fix.patch
  + syslinux-4.04-cwd.diff -&gt; syslinux-4.04-cwd.patch
  + syslinux-4.04-gcc10.diff -&gt; syslinux-4.04-gcc10.patch
  + syslinux-4.04-gcc47.diff -&gt; syslinux-4.04-gcc47.patch
  + syslinux-4.04-geometry.diff -&gt; syslinux-4.04-geometry.patch
  + syslinux-4.04-iso9660.diff -&gt; syslinux-4.04-iso9660.patch
  + syslinux-4.04-isohybrid_efi.diff -&gt; syslinux-4.04-isohybrid_efi.patch
  + syslinux-4.04-isohybrid_efi_optional.diff -&gt; syslinux-4.04-isohybrid_efi_optional.patch
  + syslinux-4.04-isohybrid_mbr.diff -&gt; syslinux-4.04-isohybrid_mbr.patch
  + syslinux-4.04-libext2fs.diff -&gt; syslinux-4.04-libext2fs.patch
  + syslinux-4.04-localboot.diff -&gt; syslinux-4.04-localboot.patch
  + syslinux-4.04-lzo.diff -&gt; syslinux-4.04-lzo.patch
  + syslinux-4.04-mboot_bootif.diff -&gt; syslinux-4.04-mboot_bootif.patch
  + syslinux-4.04-md5pass.diff -&gt; syslinux-4.04-md5pass.patch
  + syslinux-4.04-miniacc.diff -&gt; syslinux-4.04-miniacc.patch
  + syslinux-4.04-mtime.diff -&gt; syslinux-4.04-mtime.patch
  + syslinux-4.04-noinitrd.diff -&gt; syslinux-4.04-noinitrd.patch
  + syslinux-4.04-nostrip.diff -&gt; syslinux-4.04-nostrip.patch
  + syslinux-4.04-pie.diff -&gt; syslinux-4.04-pie.patch
  + syslinux-4.04-python3.diff -&gt; syslinux-4.04-python3.patch
  + syslinux-4.04-timeout.diff -&gt; syslinux-4.04-timeout.patch</changelog>
  <changelog author="hsk17@mail.de" date="1746360000">- Add syslinux-4.04-gpxe-gcc15.patch to fix gcc-15 compile time
  errors during (re-)build of gpxelinux.0</changelog>
  <changelog author="mvetter@suse.com" date="1769688000">- bsc#1257495: NASM (3.00+) requires explicit size hints
  Add syslinux-4.04-size.patch</changelog>
</package>
<package pkgid="2ea0c410c0daafbbced0926dac50d8f7bbb0783232ff391d7ead35765851282bd671efca16275d1a9e66cb20a1f30ea909339aba05168ac29c6de0e4efd8d836" name="sysstat" arch="x86_64">
  <version epoch="0" ver="12.7.5" rel="160000.2.2"/>
  <changelog author="david.anes@suse.com" date="1647000000">- fix changelog typos.
- update to 12.4.5:
  * sar/sadf: Make sure that datafiles with unknown activities can
    be read by sar and sadf.
  * sar/sadf: Don't reallocate buffers for activities not present
    in file.
  * sar: Make sure that all buffers are copied in copy_structures()
    function.</changelog>
  <changelog author="david.anes@suse.com" date="1653912000">- Rebased patches:
  * sysstat-8.1.6-sa1sa2lock.diff
- Update to 12.6.0:
  * sar: Fix maximum value for A_IRQ activity.
  * sar/sadf: A_NET_SOFT: Add new metric softnet network backlog.
  * sadc: A_NET_SOFT: Use CPU id from /proc/net/softnet_stat.
  * Update DTD and XSD documents (softnet backlog).
  * sar/sadf: Convert 64-bit time value to time_t as needed.
  * sadf: Add basic colorization to sadf's output.
  * sadf: Add sanity checks on values read from file.
  * sadf: PCP: Fix multiple metrics name problems.
  * sa_common.c: Remove unneeded variable assignment.
  * Take into account LDFLAGS passer to configure script.
  * Various janitorial fixes and updated.
  * Update FAQ.
  * Update sar manual page.
  * Update NLS translations.
  * Update non regression tests..</changelog>
  <changelog author="david.anes@suse.com" date="1663243200">- Add support for PCP (Performance Co-Pilot). [bsc#1203065]</changelog>
  <changelog author="david.anes@suse.com" date="1668168000">- Update to version 12.6.1:
  * Fix possible overflow in sa_common.c
    (CVE-2022-39377, GHSL-2022-074, boo#1205224)
  * sa_conv.c: Make size of statistics structures from older sysstat
    versions immutable.
  * Declare sadc dependency on libsyscom.a.
  * Fix gcc v11.2 warnings.
  * Various cosmetic fixes.
    sar: Remove `-I int_list` from man-page and help.
  * Consolidate systemctl commands in README file.
  * Remove whitespace characters at the end of lines.</changelog>
  <changelog author="david.anes@suse.com" date="1681473600">- Update to version 12.6.2:
  * sadf: PCP: Fix pmiID used for two USB metrics.
  * sadc: Add another overflow check.</changelog>
  <changelog author="david.anes@suse.com" date="1684843200">- Security fix: (CVE-2023-33204, bsc#1211507)
  * Fix an overflow which is still possible for some values.
  * Added patch sysstat-CVE-2023-33204.patch</changelog>
  <changelog author="fbui@suse.com" date="1689681600">- Drop the build dependency on systemd. This was not really necessary and it
  decreases the number of build deps from 207 to 189.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1717761600">- version update to 12.7.5
  2023/12/17: Version 12.7.5 - Sebastien Godard (sysstat &lt;at&gt; orange.fr)
  * [Quan quan Cao]: sar/sadc: Add new metrics pgprom/s and pgdem/s.
  * sar: Remove %vmeff metric.
  * sadf: Update various output formats to take into account metrics
  that have been added or removed.
  * Update DTD and XSD documents.
  * Update sar manual page.
  * sar: Add a cron entry and a new systemd service and timer to rotate
  daily data file at midnight.
  * Option -V with sysstat commands also displays environment contents.
  * [Sam Morris]: Use correct encoding to produce hyphen-minus when
  rendering man pages.
  * Add UMASK variable definition to sysstat(5) manual page.
  * Update non regression tests.
  * Add --getenv option to commands that didn't have it.
  * Update README file for Debian-based distros.
  * Update link to my personal web page in README and manual pages.
  * NLS: Translations updated.
  2023/06/18: Version 12.7.4 - Sebastien Godard (sysstat &lt;at&gt; orange.fr)
  * Makefile.in: Fix installation error.
  * Makefile.in: Remove gcc warning displayed in LTO mode.
  2023/06/16: Version 12.7.3 - Sebastien Godard (sysstat &lt;at&gt; orange.fr)
  * sar: Add new option '-x' used to display extended reports.
  * [Pavel Kopylov]: Fix an overflow which is still possible for
  some values.
  * [Jan Kurik]: Fix export of PSI metrics to a PCP archive.
  * [Lukáš Zaoral]: Tools that take `--dec=X` option should only accept
  digits.
  * common.c: Fix an overflow which was still possible for some values.
  * iostat: Try to avoid displaying negative values.
  * Free pointer if realloc() fails.
  * Don't check if unsigned expressions are less than zero.
  * Declare parameters with "const" when possible.
  * Remove conditions which are always true.
  * Reduce variables scope when relevant.
  * Don't assign values that are never used.
  * Fix types used in format strings.
  * Split large functions into smaller ones.
  * Specify field width when using sscanf() function.
  * search_list_item(): Return position in list instead of a boolean.
  * add_list_item(): Also return item position in list.
  * svg_stats.c: Ignore negative values for fields position.
  * svg_stats.c: Reuse buffers pointers definition.
  * svg_stats.c: Reuse intermediate calculations.
  * svg_stats.c: Don't repeat test on DISPLAY_CPU_DEF().
  * sa_common.c: Don't use (void *) pointer in calculation.
  * iostat.c: Clarify calculation precedence for '+' and '?'.
  * sar/sadf: Refactor buffer allocation functions.
  * sar/sadf: Add a check on file's records header data.
  * sar/sadf: Stop when invalid data are read in records header.
  * sar/sadf: Check upper bounds of value read from file.
  * sadf_misc.c: Fix indentation in code.
  * activity.c: Init item_list even for other commands than sadf.
  * sa_conv.c: Reallocate buffers only when needed.
  * sa_conv.c: Fix untrusted allocation size.
  * pr_stats.c: Remove some dead code.
  * sar.c: Make sure buffer is null terminated.
  * do_test: Add several new options.
  * do_test: Don't strip binaries when in TEST mode.
  * Update non regression tests.
  * simtest: Change default _unix_time value.
  * Makefile.in: Simplify dependencies.
  * Makefile_in: Small update made to copyyear target.
  * sadf: XML: Update DTD and XSD documents.
  * sadf: XML: Remove references to my personal web site.
  * Restore mode for iconfig file.
  * Fix typo in sar's manual page. Sar manual page updated.
  * Other manual pages updated.
  2023/01/29: Version 12.7.2 - Sebastien Godard (sysstat &lt;at&gt; orange.fr)
  * All commands: Avoid displaying healthy metrics values in "red".
  * sar/sadf: Add new activity: Battery statistics (A_PWR_BAT).
  * [Kevin Stubbings]: Add CodeQL workflow.
  * sar: Make sure timestamps are always displayed in local time.
  * sar/sadf: Starting and ending times used with options -s/-e can now
  be entered as a number of seconds since the epoch.
  * sar/sadf: Strengthen tests made on arguments given to options -s/-e.
  * sadf: PCP: Fix pmiID used for two USB metrics [12.6.2].
  * [Nathanael P Wilson]: sadf: Fix extra space when no TZ printed.
  * sadc: Add another overflow check [12.6.2].
  * DTD and XSD documents updated.
  * Makefile: Fix dependencies.
  * NLS translations updated. New Belarusian translation added.
  * Remove LGTM links from README file.
  * Manual pages updated.
  * Non regression tests updated.
  2022/11/06: Version 12.7.1 - Sebastien Godard (sysstat &lt;at&gt; orange.fr)
  * Fix possible overflow in sa_common.c (GHSL-2022-074) [12.6.1].
  * sadf: Add support for option -t with SVG output to make it possible
  to display timestamps in the same locale as that of the file creator.
  * sadf: Print timezone instead of UTC in true time mode. Timezone is
  also displayed in local time.
  * sadf: PCP: Fix timestamps written to PCP archive file.
  * sar: Add new environment variable S_REPEAT_HEADER.
  * pidstat: Return exit code of the process that was monitored with option
  - e.
  * mpstat: Add option -H to handle vCPU physical hotplug.
  * Add local, xlocal and debug targets to iconfig script.
  * Turn off gcc's tree-slp-vectorize option which was making sadf crash
  in some situations.
  * sa_conv.c: Make size of statistics structures from older sysstat
  versions immutable [12.6.1].
  * [Bernhard M. Wiedemann]: Declare sadc dependency on libsyscom.a
  [12.6.1].
  * [Steve Kay]: Fix gcc v11.2 warnings [12.6.1].
  * [Steve Kay]: Various cosmetic fixes [12.6.1].
  * [Jan Christoph Uhde]: sar: Remove `-I int_list` from man-page and
  help [12.6.1].
  * [Frank Dana]: Consolidate systemctl commands in README file [12.6.1].
  * [Rong Tao]: Remove whitespace characters at the end of lines
  [12.6.1].
  * Update configure file to deal with newer autoconf version. configure.in
  file is renamed to configure.ac.
  * Update DTD and XSD documents.
  * sar and sysstat manual pages updated.
  * NLS updated. Add new Georgian translation.
  * Non regression tests updated.
- modified patches
  % sysstat-8.0.4-pagesize.diff (refreshed)
  % sysstat-8.1.6-sa1sa2lock.diff (refreshed)
- deleted patches
  - sysstat-CVE-2023-33204.patch (upstreamed)</changelog>
  <changelog author="jsegitz@suse.com" date="1723118400">- Updated sysstat-8.1.6-sa1sa2lock.diff to use flock to create the
  lockfile. Using lockfile would require additional SELinux permissions.
  Require util-linux instead of procmail for this (bsc#1228246)</changelog>
</package>
<package pkgid="651e984a2aacea346df8728e919923f205b68d4ff387191f44f05f9b4492db6a18285c7ca867ee1e0483abf5c6915b9a2f161e1b13d09a4683beeda1599bb541" name="system-group-audit" arch="noarch">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Move rules-related files into new subpackage `audit-rules':
  * Files moved:
  - /sbin/auditctl, /sbin/augenrules,
  /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules}
  - manpages for auditctl, augenrules, and audit.rules
  - /etc/audit is now owned by `audit-rules' as well
  * Add new file /usr/lib/systemd/system/audit-rules.service
  * Remove in-house create-augenrules-service.patch that generated
    augenrules.service systemd unit service
  * Remove ownership of /usr/share/audit
  * Create /usr/share/audit-rules directory on %install
  * Remove audit-userspace-517-compat.patch (fixed upstream)
  * Remove libev-werror.patch (fixed upstream)
  * Remove audit-allow-manual-stop.patch (fixed upstream)
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Remove autrace and auvirt references (upstream)
  * Replace README with README.md
- Drop `--enable-systemd' from %configure as SysV-style scripts
  aren't supported in upstream since
  113ae191758c ("Drop support for SysVinit")</changelog>
  <changelog author="ematsumiya@suse.com" date="1727352000">- Update audit-secondary.spec:
  * Add "Requires: audit-rules" for audit package
  * Remove preun/postun handling of audit-rules.service</changelog>
  <changelog author="ematsumiya@suse.com" date="1727784000">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1727870400">- Readd audit-allow-manual-stop.patch (removed by mistake)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec (bsc#1231236):
  * add requirement for 'awk' package
  * move some %post logic from audit to audit-rules</changelog>
</package>
<package pkgid="f5df36a540c7e5ad1652b17d1e27ebd885526f8b2a2b2f883f580e120871045e04d877f179bda96678b2ff90b8d16f1a89a43c8c68b5579cab46f703ad801186" name="system-group-hardware" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="90952b8d16b23fc08e22381ce31071b8b768e584a0cb27053691b5fdcbd1e0832cc1d570e685005e49c023ab1ec511c17888247a4668e393bbbcae71c3daef4c" name="system-group-kvm" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="ff3e2fad892a3f042432e8a80f6b2698eed0da7551d634742e6d937f5dd85cc559c97aecb200286c824bdc4ad3fe6495161c34a94ef54b6653455824780796ef" name="system-group-libvirt" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="52fc8db828e2704271795c85772d1ec68e4e09e5dd5aca5b406f97807298be03d2d55529472f8ca2b9c13e256addf9a62fa1ec03a6637f72c81301681fa72ab9" name="system-group-wheel" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="8c0d9cf4fe6f4028f323349563b9ea5ed9d751f3dfebd105f58b331d01e36f14d8f578576fa0fd06bbd6e2eec5eaf2d5418f88a139d211ec7aa67f9f233894b0" name="system-user-bin" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="2bde217d001d89df586a9671429d784c3aa826c5d727a51155554a40f9795abb8b2ed898122b9c1e0564a30dd24fcb5ebb180dc68e744f489894101b5eb95e66" name="system-user-daemon" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="b29aaaece707e56a9eef5aed660b79a5f1d7868574d5702b6d6c66dcbb1d78189794a8bb0f99c6dc3e2f604f3362650da51c046bcca2c33b9604ee607db72899" name="system-user-libvirt-dbus" arch="noarch">
  <version epoch="0" ver="1.4.1" rel="160000.3.2"/>
  <changelog author="lnussel@suse.de" date="1592395200">- initial package version 1.4.0</changelog>
  <changelog author="jfehlig@suse.com" date="1594123200">- spec: Switch from explicitly adding user:group to sysuser
  mechanism</changelog>
  <changelog author="lnussel@suse.de" date="1601899200">- Actually require sysuser package
- Backport patch from git to autostart dbus interface using systemd
  (libvirt-dbus-systemd.diff)</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- Fix syntax errors in system-user-libvirt-dbus.conf
  boo#1178530</changelog>
  <changelog author="jfehlig@suse.com" date="1622030400">- Add libvirtdbus user to libvirt group
  boo#1182538</changelog>
  <changelog author="jfehlig@suse.com" date="1647000000">- Update to version 1.4.1:
  * Release of libvirt-dbus 1.4.1
  * tests: allow running our tests against installed libvirt-dbus
  * tests: report proper error if `abs_top_builddir` is not defined
  * gitlab: use --fatal-meson-warnings in builds
  * meson: add git_werror option and only set if -Dwerror is not set
  * meson: honour meson warning_level setting
  * gitlab: adapt to use meson for libvirt-glib build
  * ci: refresh containers for CentOS-8 PowerTools repo rename
  * gitlab: replace "libvirt-" prefix with "ci-" in dockerfiles
  * gitlab: refresh containers with lcitool for fully minimized base
  * Dropped patches: libvirt-dbus-systemd.diff
- Add source service file
- Change system-user-libvirt-dbus subpackage to noarch
- Require libvirt group in system-user-libvirt-dbus subpackage
  bsc#1196968</changelog>
  <changelog author="gmbr3@opensuse.org" date="1647000001">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1647777600">- Avoid self cycle due to user</changelog>
</package>
<package pkgid="dae78924a3d00ca836696ce5a3ab73bd0169dccc2f64d17c74382db6272e58bdd4376cc14ebdf62c1a2f7635c353588b09bd2303a27905f300eaa71dbec2a8c1" name="system-user-lp" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="e9302ddbdbdd9ca5f7136dbfca3d7337201b388564463e09b631824218e9430285ead53ce971c32811e9f3e7c97faed1f4684a39d835ab92fead8c33c5315ab4" name="system-user-mail" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="32a83b63937c0679633ce05db31a98bf46f84b6772d07e5f77df195cf093124a1d7f8d04aac445e57f3c6e3d687838ddb067c95dcc5bffa24a8d1850cbe7a224" name="system-user-man" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="9385d4eab41245d1cb7a53dd09e19ecd82bf45c614c4c049258bdeb6197d52576a48ccf494385e5cdfedcd748c9f0acd4586981701655b5e356532625d58be11" name="system-user-nobody" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="0277ffdd3fca5873e214733ed0ddfc6b625ad73099c1f8e30b71b25a7a01ad0398a3e3318ec6a0e1f6e61055c028ae86da80129518ed8b04d8aec5f60b7f8838" name="system-user-qemu" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="f254a48fc60baffcfe358fc082c46da91922f8fde895370bec423d1e876b9c676bdf3eba3154a5705e4f55954478fe1858e561164e646a4644c1d597c00fb989" name="system-user-root" arch="noarch">
  <version epoch="0" ver="20190513" rel="160000.2.2"/>
  <changelog author="kukuk@suse.de" date="1497700800">- New package, splitted from system-users</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Add group trusted [bsc#1044014]</changelog>
  <changelog author="kukuk@suse.de" date="1498046400">- Add some BuildIgnores for bootstrapping</changelog>
  <changelog author="fvogt@suse.com" date="1557748800">- Bump to version 20190513:
  * Invalidate root password by default (bsc#1134524)</changelog>
  <changelog author="kukuk@suse.com" date="1643976000">- Add /bin/bash as shell for root to sysusers.d config
- Add trusted group to sysusers.d config, too.</changelog>
</package>
<package pkgid="ddec0d1e475376ab55551e7bd9a9a5ca4ee2b2db32ea09a39f300aa3291001ff8cbde6ca16d72901a43512f9b6ed50049cec2c41c5695363a19bf6f96b28855e" name="system-user-tftp" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="6baa832387a95ffc3b09a02de176838f7d5824f0030f39e2506c32d123200c9ba0bc37401ab79974f7cf7b13fdebfc6b599cffee7a2f11a1bb8e1c85e293dc61" name="system-user-tss" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="32d8c0b4757900e32c5f46a394810212550cd3264bb00e68644c852827339d92b5fb99298553f580e5b1fbf46495b090dd6d4a088f8e06075c7a8b7a247eff22" name="system-user-uuidd" arch="noarch">
  <version epoch="0" ver="20170617" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1609070400">- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory</changelog>
  <changelog author="mardnh@gmx.de" date="1610107200">- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory</changelog>
  <changelog author="kukuk@suse.com" date="1610625600">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf</changelog>
  <changelog author="max@suse.com" date="1613131200">- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.</changelog>
  <changelog author="kukuk@suse.com" date="1623067200">- Add third argument to sysusers_generate_pre calls to allow
  admin overrides with systemd-sysusers</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices (bsc#1190572).</changelog>
  <changelog author="kukuk@suse.com" date="1631102400">- Set shell for nobody in sysusers.d config</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- system-group-hardware: remove group lp, we have system-user-lp</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.</changelog>
  <changelog author="kukuk@suse.com" date="1741780800">- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)</changelog>
</package>
<package pkgid="27a04d76ab8f933557151232f410ef88a5bb438648ec5c6add9bff50202409c1514a2931f340ef514bb6db4e8a346b9e88c014d9342ab507d528cb8df12eecc4" name="system-user-velociraptor" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.2.2"/>
  <changelog author="antonio.teixeira@suse.com" date="1720008000">- Update to version 0.7.0.4.git97.675e45f9:
  * kafka-humio-gateway: update go version and dependency list
  * kafka-humio-gateway: specific mTLS cert paths in config.yml
  * docker-compose: set kafka replication factor and min ISRs
  * kafka-humio-gateway: add http post retry mechanism
  * kafka-humio-gateway: add pprof debugging option
  * kafka-humio-gateway: format with gofmt
  * kafka-humio-gateway: fix go-staticcheck issues
  * kafka-humio-gateway: fix sendEvents() never exiting
  * Kafka.Events.Client: Update to use new artifactset type
  * docker-compose: add optional Kafka cluser
  * kafka-humio-gateway: add mTLS support
  * contrib/kafka-humio-gateway: add new debug option for noisy events
  * contrib/kafka-humio-gateway: backoff and retry for metadata
  * kafka-humio-gateway: add sample config file
  * kafka-humio-gateway: update sarama and dependencies
  * Add Kafka-Humio Gateway [Depends on PR#10] (#8)
  * vql/server/kafka: connect sarama logging to velociraptor logging
  * vql/server/kafka: add exponential backoff (limited to 30s) for metadata retries
  * vql/server/kafka: set appropriate ClientID
  * Add a Kafka export plugin
- Use llvm17 when available</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723464000">- Move system-user-velociraptor to the client flavor build in order
  to build it on all architectures.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1724068800">- Update node modules with security fixes.
  * Fixes CVE-2024-39338 (bsc#1229424)
  * Remove CVE-2024-28849-follow-redirects-drop-proxy-authorization.patch
    as the update is included.</changelog>
  <changelog author="doreilly@suse.com" date="1736856000">- Update to version 0.7.0.4.git126.27cfbe1:
  * bpf: fix plugins not stopping when context cancelled
  * tcpsnoop: move parsing to its own function
  * bpf plugins: remove depreciated libbpfgo calls
  * bpf plugins: add context to error logs
  * chattrsnoop: fix files not getting closed
  * chattrsnoop: move hashing from plugin to artifact
  * RPM artifact: start checks immediately on artifact load
  * rpm plugin: fix ndb magic error
  * audit s390x: fix arch filter rules errors
  * github: fix deprecated upload artifact
  * tcpsnoop: fix ipv6 local and remote addresses order
  * tcpsnoop: fix missing ipv6 outbound connections
  * Linux.Events.ProcessExecutions: remove parent cmdline
  * audit: reduce FileBufferLeaseSize to ease GC overhead
  * audit: fix auditBuf allocation and go vet warnings
  * audit: fix plugin shutdown race condition
  * audit: fix audit client data races
  * audit: fix race in subscriber
  * audit: prevent Windows loading audit package
  * sdjournal: fix package causing test failures
  * github: run linux unit tests</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1737115200">- Update to version 0.7.0.4.git142.862ef23:
  * github: fix deprecated upload artifact again
  * Update npm packages
    Includes fixes for the following vulnerabilities:
    CVE-2023-45133
    CVE-2023-46234
    CVE-2024-55565
    CVE-2024-45296
    CVE-2023-44270
    CVE-2024-47068
    CVE-2024-23331
    CVE-2024-31207
    CVE-2024-45812
    CVE-2024-45811
  * Update go dependencies
    Includes fixes for the following vulnerabilities:
    CVE-2024-45338
    CVE-2024-37298
    CVE-2024-24786
    CVE-2023-45683 (bsc#1216310)
    CVE-2023-1732
  * Update jwt to 4.5.1
    Fixes CVE-2024-51744 (bsc#1232944)
  * Update go-retryablehttp to 0.7.7
    Fixes CVE-2024-6104 (bsc#1227061)
  * Update go-oidc and go-jose
    Fixes CVE-2024-28180 (bsc#1235168)
  * Update dompurify to 3.1.3
    Fixes CVE-2024-47875 (bsc#1231574)
  * Update package-lock.json
  * Update micromatch to 4.0.8
    Partial fix for CVE-2024-4067 (bsc#1224367)
    Partial fix for CVE-2024-4068 (bsc#1224296)
  * Update axios to 1.7.9
    Fixes CVE-2024-39338 (bsc#1229424)
  * Update cross-spawn to 7.0.6
    Fixes CVE-2024-21538 (bsc#1233845)
  * Update elliptic to 6.6.1
    Update contains fixes for:
    CVE-2024-48949 (bsc#1231558)
    CVE-2024-48948 (bsc#1231685)
    CVE-2024-42459 (bsc#1232543)
    CVE-2024-42460 (bsc#1232543)
    CVE-2024-42461 (bsc#1232543)
  * Update follow-redirects to 1.15.6
    Fixes CVE-2024-28849 (bsc#1221456)
  * fix: gui/velociraptor/package.json to reduce vulnerabilities
    Fixes CVE-2022-25883 (bsc#1212572)
- Drop CVE-2022-25883-npm-watch-semver-deps.patch
  * Fix was included upstream</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1737115201">- Reorganize llvm dependency version conditionals
- Use llvm17 for Leap 15.5</changelog>
  <changelog author="doreilly@suse.com" date="1737979200">- Don't try to build or use system-user-velociraptor on SLE12</changelog>
  <changelog author="doreilly@suse.com" date="1738065600">- Use llvm17 for SLE15SP6+</changelog>
  <changelog author="doreilly@suse.com" date="1739793600">- Use the latest llvm/clang on tumbleweed</changelog>
  <changelog author="doreilly@suse.com" date="1742558400">- Update to version 0.7.0.4.git152.fb24dfd:
  * audit: fix watch rules in artifacts
  * audit: update go-libaudit dependency for pcc64le arch filter fix
  * Use execsnoop plugin in artifacts when possible
  * Add execsnoop plugin to capture execve system calls
  * github-actions: update ubuntu runners to 22.04
  * Fix failing tls unit test on new go versions</changelog>
</package>
<package pkgid="25252aec5d293bb59dc200631fe6f6ae7424f39acf33f8b8d91cb887940e7c4563a984bd554a203286b72b107a70f8bde2ed207475805f606402e05fcd881d90" name="systemd" arch="x86_64">
  <version epoch="0" ver="257.13" rel="160000.1.1"/>
  <changelog author="fbui@suse.com" date="1767787200">- Drop %filetriggers build flag. It was introduced to ease backport of
  Base:System to SLE distros where file-triggers were unreliable but that is no
  longer the case on the latest SLE distros.</changelog>
  <changelog author="fbui@suse.com" date="1767960000">- Drop most of the workarounds contained in the fixlets.
  These workarounds were hold to address old issues that no longer exist in
  recent versions of systemd. For systems upgrading to this version, we assume
  these issues have already been fixed by the fixlet scripts still shipped by
  the previous distribution.
  Only the logig warning users about the deprecated usage of the main
  configuration files (favoring drop-in files) is preserved.</changelog>
  <changelog author="fbui@suse.com" date="1767960001">- systemd.spec: don't reexecute PID1 on transactional updates.</changelog>
  <changelog author="fbui@suse.com" date="1767960002">- systemd-update-helper: clean up the flags immediately after they have been
  consumed (no functional changes).</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1770206400">- Import commit fb9d92682b2469aa205d4df3ffea61e4806ed0e9
  fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)
  80ec26cee0 core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1770292800">- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853)
  This was originally intended to ensure these paths had a designated package
  owner. However the existing list was neither exhaustive nor up to date. To
  better support immutable images, we are removing these entries and will now
  keep only /var/lib/systemd as owned by the systemd package. Maintaining the
  broader list provided little value due to its ongoing inconsistency anyways.</changelog>
  <changelog author="fbui@suse.com" date="1772107200">- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)</changelog>
  <changelog author="fbui@suse.com" date="1772452800">- Import commit 3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654 (merge of v257.11)
  This merge includes the following fix:
  54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/358010e6e90269570025c598b1430afa1e2ff6ca...3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654</changelog>
  <changelog author="fbui@suse.com" date="1773662400">- Import commit d349fc5cd4f9ee2b7884c2610647e92806d14b28 (merge of v257.13)
  This merge includes the following fix:
  6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28</changelog>
</package>
<package pkgid="3040c983d3d5575ada907c7906cea160b0b6e28b1ff9131d08de1a8fe21b23af23a42e1f5abf53633692f7710627fa271d511392b2dea3e8bd70609898f8cfa4" name="systemd-container" arch="x86_64">
  <version epoch="0" ver="257.13" rel="160000.1.1"/>
  <changelog author="fbui@suse.com" date="1767787200">- Drop %filetriggers build flag. It was introduced to ease backport of
  Base:System to SLE distros where file-triggers were unreliable but that is no
  longer the case on the latest SLE distros.</changelog>
  <changelog author="fbui@suse.com" date="1767960000">- Drop most of the workarounds contained in the fixlets.
  These workarounds were hold to address old issues that no longer exist in
  recent versions of systemd. For systems upgrading to this version, we assume
  these issues have already been fixed by the fixlet scripts still shipped by
  the previous distribution.
  Only the logig warning users about the deprecated usage of the main
  configuration files (favoring drop-in files) is preserved.</changelog>
  <changelog author="fbui@suse.com" date="1767960001">- systemd.spec: don't reexecute PID1 on transactional updates.</changelog>
  <changelog author="fbui@suse.com" date="1767960002">- systemd-update-helper: clean up the flags immediately after they have been
  consumed (no functional changes).</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1770206400">- Import commit fb9d92682b2469aa205d4df3ffea61e4806ed0e9
  fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)
  80ec26cee0 core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1770292800">- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853)
  This was originally intended to ensure these paths had a designated package
  owner. However the existing list was neither exhaustive nor up to date. To
  better support immutable images, we are removing these entries and will now
  keep only /var/lib/systemd as owned by the systemd package. Maintaining the
  broader list provided little value due to its ongoing inconsistency anyways.</changelog>
  <changelog author="fbui@suse.com" date="1772107200">- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)</changelog>
  <changelog author="fbui@suse.com" date="1772452800">- Import commit 3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654 (merge of v257.11)
  This merge includes the following fix:
  54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/358010e6e90269570025c598b1430afa1e2ff6ca...3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654</changelog>
  <changelog author="fbui@suse.com" date="1773662400">- Import commit d349fc5cd4f9ee2b7884c2610647e92806d14b28 (merge of v257.13)
  This merge includes the following fix:
  6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28</changelog>
</package>
<package pkgid="14242cab62cd3eb1cd210f18ebd0ac826ae30023b26d871184673a9645ac208b35561cf79a6739c1551d7a2371edde3251e870dbf90d087ab524a59320be02ab" name="systemd-default-settings" arch="noarch">
  <version epoch="0" ver="0.10" rel="160000.2.2"/>
  <changelog author="fbui@suse.com" date="1605787200">- Import 0.5
  0c5e241 SLE: turn off RemoveIPC by default for logind (fate#320125)
  cb6914f SLE: restore ProtectHostname=no for udevd (bsc#1178374)
  7e332a6 Add a header in all each drop-ins
  465e1c7 Makefile: simplify 'archive' target</changelog>
  <changelog author="fbui@suse.com" date="1605787201">- Issue a daemon-reload in %post of the main package</changelog>
  <changelog author="fbui@suse.com" date="1606392000">- Fix typo introduced by the previous change (bsc#1179183)</changelog>
  <changelog author="fbui@suse.com" date="1613563200">- Import 0.6
  d3fab7c Introduce SLE-Micro branding</changelog>
  <changelog author="fbui@suse.com" date="1613995200">- Import 0.7
  2a61f77 Convert our configuration file dropins into 'early' ones</changelog>
  <changelog author="fbui@suse.com" date="1632225600">- Import commit 6b8dde1d4f867aff713af6d6830510a84fad58d2
  6b8dde1 Convert more drop-ins into early ones</changelog>
  <changelog author="fbui@suse.com" date="1697716800">- Import 0.8
  f34372f User priority '26' for SLE-Micro
  c8b6f0a Revert "Convert more drop-ins into early ones"</changelog>
  <changelog author="fbui@suse.com" date="1697803200">- The usage of drop-ins is now the official way for configuring systemd and its
  various daemons on Factory/ALP. Hence the early drop-ins SUSE specific
  "feature" has been abandoned.</changelog>
  <changelog author="fbui@suse.com" date="1711627200">- Import 0.9
  bb859bf user@.service: Disable controllers by default (jsc#PED-2276)</changelog>
  <changelog author="fbui@suse.com" date="1712750400">- Import 0.10
  5088997 SLE: Disable pids controller limit under user instances (jsc#SLE-10123)</changelog>
</package>
<package pkgid="64637bc500afe6f3d4f8dbd1a8fee257f9e6985302f94af040be1e8f93a15494497f597d0444c4443499b3bef85d7d50a071c4b586fc1ee9b146879ae156c9d5" name="systemd-default-settings-branding-SLE-Micro" arch="noarch">
  <version epoch="0" ver="0.10" rel="160000.2.2"/>
  <changelog author="fbui@suse.com" date="1605787200">- Import 0.5
  0c5e241 SLE: turn off RemoveIPC by default for logind (fate#320125)
  cb6914f SLE: restore ProtectHostname=no for udevd (bsc#1178374)
  7e332a6 Add a header in all each drop-ins
  465e1c7 Makefile: simplify 'archive' target</changelog>
  <changelog author="fbui@suse.com" date="1605787201">- Issue a daemon-reload in %post of the main package</changelog>
  <changelog author="fbui@suse.com" date="1606392000">- Fix typo introduced by the previous change (bsc#1179183)</changelog>
  <changelog author="fbui@suse.com" date="1613563200">- Import 0.6
  d3fab7c Introduce SLE-Micro branding</changelog>
  <changelog author="fbui@suse.com" date="1613995200">- Import 0.7
  2a61f77 Convert our configuration file dropins into 'early' ones</changelog>
  <changelog author="fbui@suse.com" date="1632225600">- Import commit 6b8dde1d4f867aff713af6d6830510a84fad58d2
  6b8dde1 Convert more drop-ins into early ones</changelog>
  <changelog author="fbui@suse.com" date="1697716800">- Import 0.8
  f34372f User priority '26' for SLE-Micro
  c8b6f0a Revert "Convert more drop-ins into early ones"</changelog>
  <changelog author="fbui@suse.com" date="1697803200">- The usage of drop-ins is now the official way for configuring systemd and its
  various daemons on Factory/ALP. Hence the early drop-ins SUSE specific
  "feature" has been abandoned.</changelog>
  <changelog author="fbui@suse.com" date="1711627200">- Import 0.9
  bb859bf user@.service: Disable controllers by default (jsc#PED-2276)</changelog>
  <changelog author="fbui@suse.com" date="1712750400">- Import 0.10
  5088997 SLE: Disable pids controller limit under user instances (jsc#SLE-10123)</changelog>
</package>
<package pkgid="686ef1628c787a77a0c7a8a7d75b4691f5e22d5536b92e2a5a4e31fc0cfd4b04d5878a3f307f46c64de5ad1503651f08e65a6959a2b78934f5c8b40ec96ae7f5" name="systemd-default-settings-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="0.10" rel="160000.2.2"/>
  <changelog author="fbui@suse.com" date="1605787200">- Import 0.5
  0c5e241 SLE: turn off RemoveIPC by default for logind (fate#320125)
  cb6914f SLE: restore ProtectHostname=no for udevd (bsc#1178374)
  7e332a6 Add a header in all each drop-ins
  465e1c7 Makefile: simplify 'archive' target</changelog>
  <changelog author="fbui@suse.com" date="1605787201">- Issue a daemon-reload in %post of the main package</changelog>
  <changelog author="fbui@suse.com" date="1606392000">- Fix typo introduced by the previous change (bsc#1179183)</changelog>
  <changelog author="fbui@suse.com" date="1613563200">- Import 0.6
  d3fab7c Introduce SLE-Micro branding</changelog>
  <changelog author="fbui@suse.com" date="1613995200">- Import 0.7
  2a61f77 Convert our configuration file dropins into 'early' ones</changelog>
  <changelog author="fbui@suse.com" date="1632225600">- Import commit 6b8dde1d4f867aff713af6d6830510a84fad58d2
  6b8dde1 Convert more drop-ins into early ones</changelog>
  <changelog author="fbui@suse.com" date="1697716800">- Import 0.8
  f34372f User priority '26' for SLE-Micro
  c8b6f0a Revert "Convert more drop-ins into early ones"</changelog>
  <changelog author="fbui@suse.com" date="1697803200">- The usage of drop-ins is now the official way for configuring systemd and its
  various daemons on Factory/ALP. Hence the early drop-ins SUSE specific
  "feature" has been abandoned.</changelog>
  <changelog author="fbui@suse.com" date="1711627200">- Import 0.9
  bb859bf user@.service: Disable controllers by default (jsc#PED-2276)</changelog>
  <changelog author="fbui@suse.com" date="1712750400">- Import 0.10
  5088997 SLE: Disable pids controller limit under user instances (jsc#SLE-10123)</changelog>
</package>
<package pkgid="022ba53dc6dbe3949a324c0a3a8201752c10a94c5412f724c7302d0a67ec0bf591e623d9966309698995a0ecd6cab1bf1247a2b1905d54ab3708d2d196c8c80c" name="systemd-experimental" arch="x86_64">
  <version epoch="0" ver="257.13" rel="160000.1.1"/>
  <changelog author="fbui@suse.com" date="1767787200">- Drop %filetriggers build flag. It was introduced to ease backport of
  Base:System to SLE distros where file-triggers were unreliable but that is no
  longer the case on the latest SLE distros.</changelog>
  <changelog author="fbui@suse.com" date="1767960000">- Drop most of the workarounds contained in the fixlets.
  These workarounds were hold to address old issues that no longer exist in
  recent versions of systemd. For systems upgrading to this version, we assume
  these issues have already been fixed by the fixlet scripts still shipped by
  the previous distribution.
  Only the logig warning users about the deprecated usage of the main
  configuration files (favoring drop-in files) is preserved.</changelog>
  <changelog author="fbui@suse.com" date="1767960001">- systemd.spec: don't reexecute PID1 on transactional updates.</changelog>
  <changelog author="fbui@suse.com" date="1767960002">- systemd-update-helper: clean up the flags immediately after they have been
  consumed (no functional changes).</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1770206400">- Import commit fb9d92682b2469aa205d4df3ffea61e4806ed0e9
  fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)
  80ec26cee0 core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1770292800">- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853)
  This was originally intended to ensure these paths had a designated package
  owner. However the existing list was neither exhaustive nor up to date. To
  better support immutable images, we are removing these entries and will now
  keep only /var/lib/systemd as owned by the systemd package. Maintaining the
  broader list provided little value due to its ongoing inconsistency anyways.</changelog>
  <changelog author="fbui@suse.com" date="1772107200">- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)</changelog>
  <changelog author="fbui@suse.com" date="1772452800">- Import commit 3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654 (merge of v257.11)
  This merge includes the following fix:
  54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/358010e6e90269570025c598b1430afa1e2ff6ca...3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654</changelog>
  <changelog author="fbui@suse.com" date="1773662400">- Import commit d349fc5cd4f9ee2b7884c2610647e92806d14b28 (merge of v257.13)
  This merge includes the following fix:
  6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28</changelog>
</package>
<package pkgid="2f650d534168623d6b76074b9db77d1db1e0960c4a6ad6ee6ae8af83fdb969b5164c556ef19a81080efd61207961e598fd73dd063647b453d3ea372a844a3e53" name="systemd-journal-remote" arch="x86_64">
  <version epoch="0" ver="257.13" rel="160000.1.1"/>
  <changelog author="fbui@suse.com" date="1767787200">- Drop %filetriggers build flag. It was introduced to ease backport of
  Base:System to SLE distros where file-triggers were unreliable but that is no
  longer the case on the latest SLE distros.</changelog>
  <changelog author="fbui@suse.com" date="1767960000">- Drop most of the workarounds contained in the fixlets.
  These workarounds were hold to address old issues that no longer exist in
  recent versions of systemd. For systems upgrading to this version, we assume
  these issues have already been fixed by the fixlet scripts still shipped by
  the previous distribution.
  Only the logig warning users about the deprecated usage of the main
  configuration files (favoring drop-in files) is preserved.</changelog>
  <changelog author="fbui@suse.com" date="1767960001">- systemd.spec: don't reexecute PID1 on transactional updates.</changelog>
  <changelog author="fbui@suse.com" date="1767960002">- systemd-update-helper: clean up the flags immediately after they have been
  consumed (no functional changes).</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1770206400">- Import commit fb9d92682b2469aa205d4df3ffea61e4806ed0e9
  fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)
  80ec26cee0 core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1770292800">- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853)
  This was originally intended to ensure these paths had a designated package
  owner. However the existing list was neither exhaustive nor up to date. To
  better support immutable images, we are removing these entries and will now
  keep only /var/lib/systemd as owned by the systemd package. Maintaining the
  broader list provided little value due to its ongoing inconsistency anyways.</changelog>
  <changelog author="fbui@suse.com" date="1772107200">- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)</changelog>
  <changelog author="fbui@suse.com" date="1772452800">- Import commit 3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654 (merge of v257.11)
  This merge includes the following fix:
  54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/358010e6e90269570025c598b1430afa1e2ff6ca...3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654</changelog>
  <changelog author="fbui@suse.com" date="1773662400">- Import commit d349fc5cd4f9ee2b7884c2610647e92806d14b28 (merge of v257.13)
  This merge includes the following fix:
  6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28</changelog>
</package>
<package pkgid="5db9217640e339db4f3c2a77ef15bfafc3c9e3be07de078d6c10237ce79ce96bd642cfac9d43736f804264a450d4206b44d0575924c420c87629a473f49127e0" name="systemd-portable" arch="x86_64">
  <version epoch="0" ver="257.13" rel="160000.1.1"/>
  <changelog author="fbui@suse.com" date="1767787200">- Drop %filetriggers build flag. It was introduced to ease backport of
  Base:System to SLE distros where file-triggers were unreliable but that is no
  longer the case on the latest SLE distros.</changelog>
  <changelog author="fbui@suse.com" date="1767960000">- Drop most of the workarounds contained in the fixlets.
  These workarounds were hold to address old issues that no longer exist in
  recent versions of systemd. For systems upgrading to this version, we assume
  these issues have already been fixed by the fixlet scripts still shipped by
  the previous distribution.
  Only the logig warning users about the deprecated usage of the main
  configuration files (favoring drop-in files) is preserved.</changelog>
  <changelog author="fbui@suse.com" date="1767960001">- systemd.spec: don't reexecute PID1 on transactional updates.</changelog>
  <changelog author="fbui@suse.com" date="1767960002">- systemd-update-helper: clean up the flags immediately after they have been
  consumed (no functional changes).</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1770206400">- Import commit fb9d92682b2469aa205d4df3ffea61e4806ed0e9
  fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)
  80ec26cee0 core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1770292800">- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853)
  This was originally intended to ensure these paths had a designated package
  owner. However the existing list was neither exhaustive nor up to date. To
  better support immutable images, we are removing these entries and will now
  keep only /var/lib/systemd as owned by the systemd package. Maintaining the
  broader list provided little value due to its ongoing inconsistency anyways.</changelog>
  <changelog author="fbui@suse.com" date="1772107200">- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)</changelog>
  <changelog author="fbui@suse.com" date="1772452800">- Import commit 3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654 (merge of v257.11)
  This merge includes the following fix:
  54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/358010e6e90269570025c598b1430afa1e2ff6ca...3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654</changelog>
  <changelog author="fbui@suse.com" date="1773662400">- Import commit d349fc5cd4f9ee2b7884c2610647e92806d14b28 (merge of v257.13)
  This merge includes the following fix:
  6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28</changelog>
</package>
<package pkgid="9f524eeae6a2b004941da45aba110bd0fc32664e804f345b4fc4139115d39734a44eeb76078ae75ca4f2e8c7875f0c275401a329c6b16d40d7997ec5cb677da8" name="systemd-presets-branding-ALP-transactional" arch="noarch">
  <version epoch="0" ver="20230214" rel="160000.3.1"/>
  <changelog author="jsrain@suse.com" date="1684152000">- initial version based on openSUSE MicroOS</changelog>
  <changelog author="fcrozat@suse.com" date="1697716800">- No longer depends on systemd-presets-branding-openSUSE.</changelog>
  <changelog author="kukuk@suse.com" date="1702641600">- Enable rollback.service to restore registration in rollback case.</changelog>
  <changelog author="jsrain@suse.com" date="1705492800">- rename package to -transactional</changelog>
  <changelog author="jfehlig@suse.com" date="1707998400">- Enable the various libvirt modular daemons (bsc#1218093)</changelog>
  <changelog author="iforster@suse.com" date="1713096000">- On a transactional system make sure that /var and /etc are
  mounted on a soft-reboot, the system may hang otherwise.
  Implemented in prepare-nextroot-for-softreboot.service</changelog>
  <changelog author="jsrain@suse.com" date="1762171200">- disable cockpit.socket (to override SUSE default) (bsc#1252729)</changelog>
</package>
<package pkgid="fc9b67e9336b002b05f8bcc5eb82c1f43c0b462ce254ee61eb148adb549db3aaba8ba67bd2e64c5463340670382c5cc6c4e186395c7183e55abde5828bd71b9f" name="systemd-presets-common-SUSE" arch="noarch">
  <version epoch="0" ver="15" rel="160000.2.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1697716800">- nvme-cli: enable nvmf-autoconnect.service for improved user experience
  (bsc#1216369).</changelog>
  <changelog author="msuchanek@suse.com" date="1706788800">- Split hcn-init.service to hcn-init-NetworkManager and hcn-init-wicked
  (bsc#1200731 ltc#198485 https://github.com/ibm-power-utilities/powerpc-utils/pull/84)
  Support both the old and new service to avoid complex version interdependency.</changelog>
  <changelog author="sflees@suse.de" date="1714046400">- Add presets to enable dbus-broker.service for both system and user
  due to naming socket activation doesn't work directly.
- Order .presets file alphabetically via service.</changelog>
  <changelog author="kukuk@suse.com" date="1724673600">- Enable soft-reboot-cleanup.service to make soft-reboot possible
  with container and/or firewalld.</changelog>
  <changelog author="dimstar@opensuse.org" date="1727784000">- Enable audit-rules: audit-rules has been split form audit with
  version 4.0 in order to be able to load rules earlier.
  From audit changelog: One of the main features is the separation
  of loading rules and logging events into separate services,
  audit-rules.service and auditd.service.</changelog>
  <changelog author="kukuk@suse.com" date="1736251200">- Remove enable nscd, nscd doesn't work anymore with systemd 257
  [bsc#1234904]</changelog>
  <changelog author="kukuk@suse.com" date="1738065600">- Enable wtmpdbd.socket to start wtmpdbd via socket activation.
  A seperate daemon for wtmpdb access is required to solve
  https://sourceware.org/bugzilla/show_bug.cgi?id=24492</changelog>
  <changelog author="gmbr3@opensuse.org" date="1742904000">- Change display-manager.service to display-manager-legacy.service
  (rename for future systemd control of display manager choice)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1745841600">- Create devel subpackage:
  * Add RPM macros file
  * Package to be used to develop preset packages
    (distro, display manager etc.)
- Move specfile scriptlets to the ones in macros.systemd-preset</changelog>
  <changelog author="alice.brooks@suse.com" date="1752148800">- Add cockpit.socket to improve user experience as it is replacing
  YaST (jsc#PED-13228)</changelog>
</package>
<package pkgid="0d6ab8bc01b4ed4bab554580800f8ba461a9a6a7568fb587081f15c02176bc8c9cb670f405c5417a6ce237ea29aa512b793284be28bc7b7fb9923821e1472d95" name="systemd-rpm-macros" arch="noarch">
  <version epoch="0" ver="26" rel="160000.2.2"/>
  <changelog author="fbui@suse.com" date="1686916800">- Restore the check that prevents systemd-tmpfiles to run during transactional updates
  The check has been mistakenly dropped during the switch to file-triggers.</changelog>
  <changelog author="fbui@suse.com" date="1686916801">- Bump to version 23</changelog>
  <changelog author="fbui@suse.com" date="1687262400">- Unlike systemd-tmpfiles call in %tmpfiles_create_package(), systemd-sysusers
  must always be called by %sysusers_create_package() even on transactional
  systems since it's part of the macro contract. Writing to /etc is not
  recommended on such systems but it has to work anyways.</changelog>
  <changelog author="fbui@suse.com" date="1687262401">- Drop %sysusers_create_inline
  It's deprecated and the only user of this macro is being converted to
  %sysusers_create_package. So drop it now before the deprecated macro attracts
  more users.</changelog>
  <changelog author="fbui@suse.com" date="1687262402">- Drop %tmpfiles_create_package
  It can't work during transactional updates because the paths that
  systemd-tmpfiles usually operates on (such as /var) can't be changed. It
  appears that the only user of this macro doesn't really need this macro so
  let's drop it.</changelog>
  <changelog author="fbui@suse.com" date="1687262403">- Bump to version 24</changelog>
  <changelog author="fbui@suse.com" date="1687608000">- Turn %tmpfiles_create/%sysusers_create into NOPs
  The 2 following macros have also been converted into NOPs since we moved to
  file triggers. Some packages might have assumed that their effects were
  effective as soon as the macros return. However such assumption on tmpfiles
  can't work on transactional systems anyways where changes must take place on
  reboot.
  When a system user/group needs to be created in %%pre, so proper ownership are
  used when package's files are installed, "sysusers_create_package()" should be
  used.</changelog>
  <changelog author="fbui@suse.com" date="1687608001">- Bump to version 25</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- Introduce %udev_trigger_with_reload() for packages that need to trigger events
  in theirs scriplets. The new macro automatically triggers a reload of the udev
  rule files as this step is often overlooked by packages (bsc#1237143).</changelog>
  <changelog author="fbui@suse.com" date="1751976000">- Bump version to 26</changelog>
</package>
<package pkgid="26348b499df0aeacaf5ecbd9884cadda3cbd2d3d3966315223db28787d8c7c0dcba51e98142024c2ccfd38dfb358ec6bd3aaa166fbc5b2f35be02e8b4224372c" name="systemd-status-mail" arch="noarch">
  <version epoch="0" ver="1.21+git.20241206" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1700827200">- Update to version 1.14
  - Fix check if rebootmgrctl is installed</changelog>
  <changelog author="georg.pfuetzenreuter@suse.com" date="1704456000">- Do not overwrite os-update.conf on Leap</changelog>
  <changelog author="kukuk@suse.com" date="1705579200">- Update to version 1.15
  - Add systemd generator for systemd-status-mail
  - Add own user for status-mail service</changelog>
  <changelog author="kukuk@suse.com" date="1710158400">- Update to version 1.16
  - Enhance logging for soft-reboot tracking</changelog>
  <changelog author="kukuk@suse.com" date="1715169600">- Update to version 1.17
  - Implement soft-reboot support for non restartable services</changelog>
  <changelog author="kukuk@suse.com" date="1728302400">- Update to version 1.17+git.20241007:
  * Refresh before dup
  * Always refresh</changelog>
  <changelog author="kukuk@suse.com" date="1730894400">- Update to version 1.18+git.20241106:
  * Release version 1.18
  * Move vendor config to /usr/share/os-update
  * Unify indentation style</changelog>
  <changelog author="kukuk@suse.com" date="1731326400">- Update to version 1.19+git.20241111:
  * Release version 1.19
  * Only provide application defaults as comments
  * Don't try to restart dbus-broker, use soft-reboot
  * Don't hardcode path of rebootmgrctl</changelog>
  <changelog author="kukuk@suse.com" date="1733313600">- Update to version 1.20+git.20241204:
  * Release version 1.20
  * Switch from pandoc to go-md2man
  * Add option to ignore services at all</changelog>
  <changelog author="kukuk@suse.com" date="1733486400">- Update to version 1.21+git.20241206:
  * Release version 1.21
  * Fix check for service restarts</changelog>
</package>
<package pkgid="ae3a348a8611dfd19983deea41be912a826962ebef7877c180e70463c729fedffd052adff4c1c32e694532ade450e562c45a63ce54e01a4d078ecd63003f046c" name="sysuser-shadow" arch="noarch">
  <version epoch="0" ver="3.3" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1722600000">- UID:GID: don't create group with GID if it does not exist</changelog>
  <changelog author="kukuk@suse.com" date="1722686400">- Disable UID:GID support for now</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Implement UID:GID support for busybox
- Reenable UID:GID support</changelog>
  <changelog author="kukuk@suse.com" date="1723032000">- usermod: revert renamed arguments</changelog>
  <changelog author="kukuk@suse.com" date="1723032001">- Remove check for .buildenv to see failures in OBS</changelog>
  <changelog author="kukuk@suse.com" date="1733745600">- sysuser-shadow: remove systemd 238 dependency, this does not
  work in a single RPM transaction [bsc#1234277]. Call
  systemd-sysuser instead again without --replace.</changelog>
  <changelog author="kukuk@suse.com" date="1733745601">- Drop SLE15 support and remove disable-systemd-sysusers.patch</changelog>
  <changelog author="kukuk@suse.com" date="1733918400">- Directly check return value of systemd-sysusers</changelog>
  <changelog author="kukuk@suse.com" date="1737979200">- Add support for "u!" with useradd (shadow). busybox has no
  support for account/password expiration</changelog>
  <changelog author="meissner@suse.com" date="1753272000">- disable the buildroot virus scanning, as it needs the vscan user
  this package provides. (bsc#1246878)</changelog>
</package>
<package pkgid="4576f08d13ef2af7ce8e3dfdd24ea74fd1d3af98819b36cfb7fc8396fb688a10a852af3e1ad130bb85189ccc153107b9ca53ec05481cd871d7eb20b33ce1fe3a" name="sysvinit-tools" arch="x86_64">
  <version epoch="0" ver="3.14" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- split package from powerd. powerd patches that were never
  part of sysvinit but need to be mentioned to pass the bot checks:
  * powerd-2.0.2-getaddrinfo.patch
  * powerd-2.0.2.dif</changelog>
  <changelog author="werner@suse.de" date="1683892800">- Update to sysvinit 3.07
  * Fixed killall5 so that processes in the omit list are
    not sent any signals, including SIGSTOP.
  * Fixed usage message for killall5 to be more accurate.
  * pidof was not returning PIDs of programs which were launched
    using a symbolic link. (ie /tmp/sleep when /tmp/sleep links to /usr/bin/sleep).
    This is now fixed as we check both the realpath and symbolic path for processes.
    In other words, "pidof /tmp/sleep" and "pidof /usr/bin/sleep" will return
    the same PIDs when /tmp/sleep is a symbolic link to /usr/bin/sleep.
  * Fixed memory initialization error in pidof. Fix provided by Markus Fischer.
  * Accepted patch from Mark Hindley  which avoids clearing realpath information
    in pidof when trying to find matching executables.
  * Mark Hindley fixed typo in es.po
  * Mark Hindley cleaned up translation code in src/Makefile.
  * Drop sulogin from Debian build. Removed libcrypt-dev dependency.
  * Fixed pt translation pages which were failing due to mis-matched
    open/close tags.
  * Makefile now respects ROOT prefix when setting up pidof-to-killall5
    symbolic link.
  * Removed redundant translation files from man directory.
  * Makefile now respects DESTDIR. User can specify either ROOT= or DESTDIR=
    to set install prefix.
  * Helge Kreutzmann provided updated Makefile for
    translation of manual pages. This has been added
    to the man directory.
  * Added sys/sysmacros.h include in mountpoint.c to fix
    compiler errors on systems where major/minor macros were not defined.
  * Applied patches from Mark Hindley to clean up man page
    Makefile, translations and installs of new man pages.
  * Remove reliance on linux/fs.h as it conflicts with glibc 2.36.
    Patch provided by lucascars.
  * Mark Hindley supplied patch to make bootlogd compile
    on GNU Hurd systems. Was missing major/minor macro.
  * Fixed formatting in init.8 man page.
    Patch provided by Mark Hindley.
  * Added q and Q flags to synopsis in shutdown manual page.
  * Applied fixes for markup and spacing in manual pages.
    Patch provided by Mario Blattermann.
  * Added translation framework (po4a) from Mario Blttermann.
  * Added Makefile for man/ directory. Will handle translations
    and substitutions.
  * Applied new translations for multiple languages from Mario Blattermann.
  * Added ability to use "@" symbol in command named in the inittab file. This
    treats commands as literal and does not launch a shell to interpret them.
  * Updated inittab manual page to include overview of symbols which trigger
    a shell interpretor and how to disable them using the @ symbol.
  * Introduced change which adds error checking in bootlogd when performing
    chdir(). - Provided by Alexander Vickberg
  * Add check for console using TIOCGDEV on Linux systems in bootlogd to
    make finding console more robust. - Provided by Alexander Vickberg
  * Default to showing processes in the uninterruptable state (D).
    The -z flag no longer affects whether processes in D state are shown.
    The -z flag does still toggle whether zombie (Z) processes are shown.
  * Removed unnecessary check which is always true from init tab parsing.
- Port patches
  * sysvinit-2.88dsf-suse.patch
  * sysvinit-2.90-no-kill.patch
  * sysvinit-2.90.dif
- Add keyring as well as signature for source tar ball of sysvinit</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Update to sysvinit 3.08
  * For OpenSUSE only cosmetic change which is support of kexec
    for SysVinit reboot (not installed at all)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="werner@suse.de" date="1723550400">- Update to sysvinit 3.10
  * When the user executes "machinectl stop", systemd sends SIGRTMIN+4 to PID 1
    in the container, and expects that to initiate a graceful shutdown (power-off).
    SysV init now catches this signal and initiates a shutdown (shutdown -hP now).
  - floppym provided patch to accomplish this.
  * Fix issue in bootlogd which could cause the service to enter an endless loop
    (and use too much CPU) when it is able to open a device for writing, but not actually
    able to write to it. This resulted in bootlogd closing and re-opening the device over
    and over. Now bootlogd should simply fail gracefully when it cannot write to an open
    file/device.
  * Fix formatting in shutdown.8 manual page. Cleaned up whitespace and special characters.
  * Patch for man/Makefile to fix the clean recipe.
    Provided by Lucas Nussabaum and Mark Hindley
  * On Linux systems, allow reboot command to pass a message
    to the system firmware during the restart. This is
    accomplished with the -m flag.
  * Patch from kraj which allows hddown to compile
    when musl is the C library.</changelog>
  <changelog author="werner@suse.de" date="1723550401">- Add patch killproc-2.23.dif
  * Fix shell command in Makefile to get detection statx declaration correct</changelog>
  <changelog author="werner@suse.de" date="1729598400">- Update to sysvinit 3.11
  * Some escape characters were included in the inittab manual page,
    but not displayed by the "man" command because they were not
    (ironically) properly escaped. This has been fixed.
  * Enabled chaining commands together in the inittab file. This
    allows the admin to run commands like
    "task1 &amp;&amp; task2" or "task2 || task2" from the inittab file.
  * Fix typoes in halt manual page. Fixes provided by Bjarni Ingi Gislason.
  * Fix typos/markdown in fstab-decode manual page.
    Patch provided by Bjarni Ingi Gislason.</changelog>
  <changelog author="werner@suse.de" date="1736424000">- Update to sysvinit 3.13
  * Adjusted manual page install location. Patch provided
    by Mark Hindley.
  sysvinit (3.12) released; urgency=low
  * There were instances of the ctime() function being called in multiple files without
    checking the return value (can be NULL) and without checking the length of the
    returned information. While there _should_ never be a case where ctime() fails
    assuming success and length of returned string isn't ideal (or future-proof).
    We now check the return value of ctime() in bootlogd, dowall, last, logsave, and
    shutdown. Where no valid value is returned we supply a dummy value (usually a
    space in place of the expected time stamp). We also no longer assume returned string
    is at least 11-16 characters.
  * Re-commit flexible Makefile for GoboLinux.
  * Make sure pty.h and sys/sysmacros.h are included when building bootlogd on
    systems with glibc.
  * Fixed typos and syntax in manual page for init.8.
    Edits provided by : Bjarni Ingi Gislason.
  * Allow setting of location of the /usr directory in src/Makefile.
    This is handled by the usrdir variable.
  * Make sure src/Makefile uses sysconfdir (/etc by default) when installing
    configuration files.
  * Fix typos and syntax in pidof manual page.
- Port patches
  * sysvinit-2.88dsf-suse.patch
  * sysvinit-2.90.dif</changelog>
  <changelog author="werner@suse.de" date="1739188800">- Update to sysvinit 3.14
  * Re-introduced DESTDIR flag in src/Makefile to assist building on Arch.
  * Fixed typo in init.8 manual page.
  * Expand process length in inittab to allow a command line 253 characters
    (up from 127). Expand child process structure to accomidate 253
    and some buffer room for newline/NULL.
  * Clear buffer when reading long lines from inittab, avoids garbage left
    over from old lines with long commands or comments.
  * Drop lines which are too long from inttab conf and log warning rather
    than truncate.</changelog>
</package>
<package pkgid="e3de0159e81a231b5488f99a34e680b695b100dd0c29b202729daf542bfc98803bbcb016e7f4e7aec463f8caa86ac0b5488e3e2d55e9551cb42ecd1dbe2e73bd" name="tar" arch="x86_64">
  <version epoch="0" ver="1.35" rel="160000.3.1"/>
  <changelog author="sflees@suse.de" date="1660737600">- bsc1200657.patch was previously incomplete leading to deadlocks
  * bsc#1202436
  * bsc1200657.patch updated</changelog>
  <changelog author="dmueller@suse.com" date="1660996800">- drop tar-recursive--files-from.patch (causes bsc#918487)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666872000">- Fix unexpected inconsistency when making directory, bsc#1203600
  * tar-avoid-overflow-in-symlinks-tests.patch
  * tar-fix-extract-unlink.patch
- Update race condition fix, bsc#1200657
  * tar-fix-race-condition.patch
- Refresh bsc1200657.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676376000">- Fix CVE-2022-48303, tar has a one-byte out-of-bounds read that
  results in use of uninitialized memory for a conditional jump
  (CVE-2022-48303, bsc#1207753)
  * fix-CVE-2022-48303.patch
- Fix hang when unpacking test tarball, bsc#1202436
  * bsc1202436.patch
  * bsc1202436-1.patch
  * bsc1202436-2.patch
  * go-testsuite-test-hang.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1689854400">- Update tests-skip-time01-on-32bit-time_t.patch to not run test
  on armv6 either</changelog>
  <changelog author="schwab@suse.de" date="1690286400">- Run testsuite also on qemu build</changelog>
  <changelog author="jsmithfpv@gmail.com" date="1701864000">- GNU tar 1.34:
  * Fail when building GNU tar if the platform supports 64-bit
    time_t but the build only uses 32-bit time_t.
  * Leave the devmajor and devminor fields empty (rather than
    zero) for non-special files, as this is more compatible with
    traditional tar.
  Fixes:
  * Fix interaction of --update with --wildcards.
  * When extracting archives into an empty directory, do not create
    hard links to files outside that directory.
  * Handle partial reads from regular files.
  * Warn file changed as we read it less often. Formerly, tar
    warned if the file's size or ctime changed. However, this
    generated a false positive if tar read a file while another
    process hard-linked to it, changing its ctime. Now, tar warns
    if the file's size, mtime, user ID, group ID, or mode changes.
    Although neither heuristic is perfect, the new one should work
    better in practice.
  * Fix --ignore-failed-read to ignore file-changed read errors
    as far as exit status is concerned. You can now suppress
    file-changed issues entirely with --ignore-failed-read
  - -warning=no-file-changed.
  * Fix --remove-files to not remove a file that changed while we
    read it.
  * Fix --atime-preserve=replace to not fail if there was no need
    to replace, either because we did not read the file, or the
    atime did not change.
  * Fix race when creating a parent directory while another process
    is also doing so.
  * Fix handling of prefix keywords not followed by "." in pax
    headers.
  * Fix handling of out-of-range sparse entries in pax headers.
  * Fix handling of --transform='s/s/@/2'.
  * Fix treatment of options ending in slash in files-from list.
  * Fix crash on tar --checkpoint-action exec=\".
  * Fix low-memory crash when reading incremental dumps.
  * Fix --exclude-vcs-ignores memory allocation misuse.
- Added patch:
  * add_forgotten-tests.patch: added 2 tests that upstream forgot in the release.
- Update patch:
  * tar-backup-spec-fix-paths.patch: upstream fixed 2/3rd of paths
  * tar-fix-extract-unlink.patch
    some of this is overwritten by bsc1202436-1 and some was fixed
    upstream
  * add_readme-tests.patch as Makefile.in no longer exists
- Removed:
  * tar-fix-race-condition.patch
  * tar-avoid-overflow-in-symlinks-tests.patch
  * bsc1200657.patch
  * bsc1202436-2.patch
  * bsc1202436-1.patch
- Fix CVE-2023-39804, Incorrectly handled extension attributes in PAX
  archives can lead to a crash, bsc#1217969</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1720612800">- Updated tar-fix-extract-unlink.patch
  * Replace patch with an equivalent upstreamed commit
  * Fixes bsc#1225407</changelog>
  <changelog author="martin.schreiner@suse.com" date="1774267200">- Fix bsc#1246399 / CVE-2025-45582.
- Fix bsc#1246607.
- Add patch:
  * CVE-2025-45582.patch
  * tar-fix-deletion-from-archive.patch
- Refresh patch:
  * tar-fix-extract-unlink.patch</changelog>
</package>
<package pkgid="d55805a5ea5c6d567076bbabba81de91de22ae0a353e06c95305a95c78abc2fd37e4e111b9f67bdadbf8c1d777bcbe0ec59f3c538c015d98835dfa65f2e9a1d2" name="terminfo-base" arch="x86_64">
  <version epoch="0" ver="6.5.20250531" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Add a further sclp entry for qemu s390 based systems</changelog>
  <changelog author="werner@suse.de" date="1744632000">- Add ncurses patch 20250412
  + add pangoterm -TD
  + add kf1 to kf5 to sclp (report by Werner Fink)
  + add vt100+pf1-pf4 -TD
- Modify patch ncurses-5.9-ibm327x.dif
  * Skip the further entry as now aprt of the common `sclp' entry
  * Add ansi.sys entry to ibm327x for coloring support</changelog>
  <changelog author="werner@suse.de" date="1745841600">- Add ncurses patch 20250426
  + expand note on extensions in curs_addch.3x
  + add illumos, sun-16color, sun-256color, sun-direct -TD
  + add wyse+cvis -TD
- Add ncurses patch 20250419
  + add note on scrolling and lower-right corner to waddch and wadd_wch
    manual pages.
- Modify patch ncurses-5.9-ibm327x.dif
  * sclp term: more missed features like home/end/pageup/pagedown keys</changelog>
  <changelog author="werner@suse.de" date="1746014400">- Modify patch ncurses-5.9-ibm327x.dif
  * sclp term: use ASCII Console key mapping and support home
  * ibm327x term: can do color and drawings but no cursor</changelog>
  <changelog author="werner@suse.de" date="1746446400">- Add ncurses patch 20250503
  + update/correct some of the rv/xr strings, checked with tack -TD
  + use ansi+rca in sclp -TD
  + use vt220+pcedit in sclp (Werner Fink)
  + move some building blocks from illumos to sun-color, based on
    illumos source-history -TD
  + improve use-clauses: ansi+cup, ansi+idl1, ansi+rca, ansi+rca2,
    ansi+sgrso, ansi+sgrul -TD
  + add ecma+standout, ecma+underline -TD
  + add rv code for alacritty -TD
  + add rv/xr codes for contour, ghostty, iterm2, kitty, konsole,
    vscode, vte, wezterm -TD
- Modify patch ncurses-5.9-ibm327x.dif
  * Reflect upstream added changes
- Port patch ncurses-6.4.dif</changelog>
  <changelog author="werner@suse.de" date="1747051200">- Add ncurses patch 20250510
  + add rv/xr codes for domterm, mintty, mlterm -TD
  + add xr code for putty -TD
  + update teraterm to 5.0 -TD
  + add rlogin-color -TD</changelog>
  <changelog author="bwiedemann@suse.com" date="1747310400">- Avoid expanding %jobs in comment (boo#1237231)</changelog>
  <changelog author="werner@suse.de" date="1747656000">- Add ncurses patch 20250517
  + initial changes for some ABI 7 features:
    + disable wgetch-events
    + add feature for extending mouse-buttons
    + add feature for extending direct-color support
  + use bracketed+paste in nsterm, rlogin-color, screen, terminology -TD
- First steps to support ABI 7
- Update to tack-1.11-20250503
  * 2025/04/29 Add checks for RV/rv and XR/xr</changelog>
  <changelog author="werner@suse.de" date="1748260800">- Add ncurses patch 20250524
  + correct option-name used in configure script, which resulted in size
    change for cchar_t (cf: 20250517).</changelog>
  <changelog author="werner@suse.de" date="1748865600">- Add ncurses patch 20250531
  + improve logic in misc/run_tic.in for constructing symbolic link
    when $DESTDIR is set.</changelog>
</package>
<package pkgid="857ff4b146134c8bc7a7490a1dc20b966e93321e8daf30e356d7caea6cdf99d02f27085297d8f9dab1063e44de6be8a54004daa98505db35bad3c6dde5cf28c5" name="tftp" arch="x86_64">
  <version epoch="0" ver="5.2" rel="160000.2.2"/>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1562846400">- Remove SuSEfirewall2 service, since SuSEfirewall2 has been
  replaced by firewalld (which already provides a tftp service).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571054400">- Add tftp.socket requirement to the service unit section [bsc#1153625]</changelog>
  <changelog author="tchvatal@suse.com" date="1578484800">- Pass fcommon to cflags wrt bsc#1160297</changelog>
  <changelog author="olaf@aepfle.de" date="1598961600">- Remove bogus comment about directory assumptions
  in.tftpd assumes nothing, exactly one directory must be specified
  when option -s is used
- Reorder command line options
  Optional admin options come before the final directory option</changelog>
  <changelog author="jengelh@inai.de" date="1602590400">- Do not suppress errors from useradd.
- Replace some old specfile constructs. To that end, patches were
  refreshed: tftp-hpa-0.43_include_sys_params.patch,
  tftp-hpa-0.46_colon_check.patch, tftp-hpa-0.48-macros-crash.patch,
  tftp-hpa-0.48-macros-v6mapped.patch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625227200">- Use systemd-sysusers external package</changelog>
  <changelog author="dmueller@suse.com" date="1627473600">- correct source url to new location</changelog>
  <changelog author="jsegitz@suse.com" date="1637755200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * tftp.service</changelog>
  <changelog author="meissner@suse.com" date="1670414400">- source url -&gt; https</changelog>
</package>
<package pkgid="d85787cb0caf0ab7aba2c9b3011a0e8908d0af98b68f82742ea3a8fb1ace84e8c301a7eec9bd9ebcd1522fda483e1e954a25814187af4215e8039c14da4bc948" name="thin-provisioning-tools" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1702900800">- Update to version 1.0.9:
  * Update Cargo.lock
  * [build] Check Cargo.lock while it is updated
  * Bump version to 1.0.9
  * [build] Sync dependencies versions between Cargo.lock and Cargo.toml
  * [thin_check] Extend the --clear-needs-check-flag option to have auto-repair caps
  * [build] Require that Cargo.lock is up to date
  * [all] Fix clippy lints for Rust 1.74.0
  * Update cargo.lock
  * bump version nr to 1.0.8
  * [sync io engine] Stop reusing the same gap buffer.
  * [tests] Fix extra arguments for IO tests</changelog>
  <changelog author="mpluskal@suse.com" date="1706097600">- Update to version 1.0.10:
  * Bump version to 1.0.10
  * [build] Update dependencies
  * [all] Fix clippy lints and typos
  * [space_map] Allow non-zero values in unused index block entries
  * [thin_repair] Fix child keys checking on the node with a zero key
  * [thin_check] Tweak the logs to avoid confusion with node errors
  * [thin_check] Support overriding the details tree root
  * [tests] Update expected help text for _pack and _unpack
  * [all] Fix clippy lints on optional targets
  * [build] Simplify the pre-commit hooks by checking all the targets at once
  * [thin_metadata_unpack] Allow long format for input and output
  * [space map] Fix incorrect index_entry.nr_free while expansion
  * thin_metadata_pack: Allow long format for input and output</changelog>
  <changelog author="mpluskal@suse.com" date="1707825600">- Update to version 1.0.11:
  * Bump version nr to 1.0.11
  * [thin/cache_check] Print suggestive hints for improving error resolution
  * [tests] Fix a typo in command name
  * [cache_check] Fix boundary check on the bitset for cached blocks</changelog>
  <changelog author="mpluskal@suse.com" date="1708948800">- Update to version 1.0.12:
  * [thin_dump] Do not print error messages on BrokenPipe (EPIPE)
  * Bump version to 1.0.12
  * [build] Update dependencies
  * [commands] Fix version string compatibility issue with LVM
  * [thin_dump] Do not print error messages on BrokenPipe (EPIPE)
  * [build] Update license to SPDX identifier</changelog>
  <changelog author="mpluskal@suse.com" date="1711108800">- Enable test execution during build
- Modernise cargo packaging usage in spec file</changelog>
  <changelog author="mpluskal@suse.com" date="1713873600">- Update vendored dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1721649600">- Update to version 1.0.13:
  * bump version to 1.0.13
  * [io_engine] Remove duplicate code in tests
  * [build] Update quick-xml to v0.36
  * [build] Update dependencies
  * [doc] Update CHANGES
  * [thin_check] Correct the number of devices to check in logs
  * [doc] Update TODO list
  * [man] Update man page for thin_ls
  * [io_engine] Add test cases for SyncIoEngine::write_many()
  * [io_engine] Enlarge the batch size for SyncIoEngine to do vectored write
  * [io_engine] Use vectored write in sync io
  * [tests] Use sha256sum to avoid collision
  * [all] Fix clippy lints
  * [tests] Fix thin snapshot xml generator
  * [tests] Fix the mapped_blocks for thins in generated xml
  * [thin_check] Log the number of exclusive devices in metadata snapshot
  * [devtools] Fix parsing subcommands through symlinks
  * deps: bump libc from 0.2.153 to 0.2.155
  * [thin_repair] Support repairing device details tree
  * [tests] Replace duplicate code with utility functions
  * [thin_repair] Remove unused code
  * [thin_repair] Preserve the timestamp of stale superblock if needed
  * [thin_explore] Fix missing version option
  * Add a nix flake to provide a dev env
  * [thin_delta] Update comments
  * [tests] Test cache_check --auto-repair and --clear-needs-check-flag
  * [tests] Introduce cache_generate_damage
  * [tests] Add broken pipe tests for cache_dump and era_dump
  * [cache_check] Extend the --clear-needs-check-flag option to have auto-repair caps
  * [thin_ls] Support listing the highest mapped block
  * [btree] Remove unused imports
  * [btree] Add BTreeIterator type
  * [*_dump] Simplify the handling of error context
  * [cache/era_dump] Do not print error messages on BrokenPipe (EPIPE)
  * [tests] Explicitly set the fifo capacity for triggering EPIPE
  * [tests] Support leaving TestDir undeleted for debugging failed commands
  * [tests] Ensure thin_dump's output in broken pipe tests
  * [tests] Fix closing the pipe fd twice
  * [tests] Explicitly set the pipe capacity for triggering EPIPE</changelog>
  <changelog author="mpluskal@suse.com" date="1724846400">- Update to version 1.1.0:
  * Bump version to 1.1.0
  * [doc] Update CHANGES
  * [build] Update dependencies
  * [thin_migrate] Tweak the checking routines
  * [thin_migrate] Enforce that the source device be read-only
  * [thin_migrate] Do not open the source device exclusively
  * [man] Update thin_migrate man page
  * [man] Update thin_dump man page
  * v1.0.14
  * [doc] Update CHANGES
  * [build] Update Makefile to install thin_migrate
  * [build] Update dependencies
  * [thin_migrate] Check file type of the output device
  * [thin_migrate] Fix suspicious open options suggested by clippy
  * [doc] Update links in GPLv3
  * [file_utils] Remove unexpected target_arch 'powerpc64le'
  * [man] Fix the buffer size descriptions for cache_writeback
  * [doc] Update TODO list
  * [doc] Fix typos
  * [man] Fix man page formatting
  * [man] Add man page for thin_migrate
  * [thin_migrate] Fix file size check on the output file
  * [thin_migrate] Add progress bar
  * [copier] Make the ProgressReporter reusable
  * [thin_migrate] Update devicemapper-rs registry
  * [thin_migrate] Hide unimplemented delta-id option and related code
  * [thin_migrate] Remove unused code
  * [thin_migrate] Hide unused --zero-dest option
  * [thin_migrate] Tweak the value names in help text
  * [thin_migrate] Fix buffer size settings for the copier
  * [thin_migrate] Use direct io for better performance and error handling
  * [copier] Factor out common code
  * [space_map] Improve error tolerance of ref counting
  * [thin_check] Fix overriding roots not working if the original one broke
  * [thin_migrate] Apply cargo fmt, and fix clippy lints
  * [thin_migrate] Remove unused functions and fields
  * [thin_migrate] Fix copier parameters
  * [thin_migrate] Fix mapping stream outputs
  * [thin_migrate] Fix getting block device file size
  * [thin_migrate] Temporarily skip progress display
  * [thin_migrate] Fix opening pool metadata exclusively
  * Builds but not tested yet
  * wip
  * [thin_migrate] wip
  * [thin_migrate] work in progress
  * [btree] add lookup function
  * [thin_migrate] wip</changelog>
  <changelog author="glass.su@suse.com" date="1739188800">- thin-provisioning-tools lacks symlinks and related man pages (boo#1236800)
  * Call make install to generate symbolic links of comamnds
  * Update %files section to include above symbolic links and man</changelog>
  <changelog author="mpluskal@suse.com" date="1739880000">- Enable internal testsuite
- Refresh vendored dependencies</changelog>
</package>
<package pkgid="d6d1afcd35c5f16b4618f8956d85a4f54ec593de4f7049d708749dfccc85dff6c1c63affee3de2e4a0f1ce2f9112c65433a305c748794a43ec2c496b63f56aae" name="timezone" arch="x86_64">
  <version epoch="0" ver="2025b" rel="160000.2.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1680091200">- timezone update 2023c:
  * Reverts changes for 2023 Lebanon DST change to 2023a data</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 2023d:
  * Ittoqqortoormiit, Greenland changes time zones on
    2024-03-31.
  * Vostok, Antarctica changed time zones on 2023-12-18.
  * Casey, Antarctica changed time zones five times since
    2020.
  * Code and data fixes for Palestine timestamps starting in
    2072.
  * A new data file zonenow.tab for timestamps starting now.
  * Fix predictions for DST transitions in Palestine in
    2072-2075, correcting a typo introduced in 2023a.
  * Vostok, Antarctica changed to +05 on 2023-12-18.  It had
    been at +07 (not +06) for years.
  * Change data for Casey, Antarctica to agree with
    timeanddate.com, by adding five time zone changes since 2020.
    Casey is now at +08 instead of +11.
  * Much of Greenland, represented by America/Nuuk, changed
    its standard time from -03 to -02 on 2023-03-25, not on
    2023-10-28.
  * localtime.c no longer mishandles TZif files that contain
    a single transition into a DST regime.  Previously,
    it incorrectly assumed DST was in effect before the transition
    too.
  * tzselect no longer creates temporary files.
  * tzselect no longer mishandles the following:
  * Spaces and most other special characters in BUGEMAIL,
    PACKAGE, TZDIR, and VERSION.
  * TZ strings when using mawk 1.4.3, which mishandles
    regular expressions of the form /X{2,}/.
  * ISO 6709 coordinates when using an awk that lacks the
    GNU extension of newlines in -v option-arguments.
  * Non UTF-8 locales when using an iconv command that
    lacks the GNU //TRANSLIT extension.
  * zic no longer mishandles data for Palestine after the
    year 2075.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1706788800">- Update to 2024a:
  * Kazakhstan unifies on UTC+5 beginning 2024-03-01
  * Palestine springs forward a week later after Ramadan
  * zic no longer pretends to support indefinite-past DST
  * localtime no longer mishandles Ciudad Juárez in 2422</changelog>
  <changelog author="martin.schreiner@suse.com" date="1710417600">- Drop the timezone-java (bsc#1213470).
  After thorough consideration of possible problems that arise from
  having a timezone package specifically for the Java ecosystem,
  Fridrich Strba and I have decided to drop the package altogether.
  Doing so means the JDK will use its built-in timezone data that is
  updated quarterly, when refreshed JDK versions are released.
  While this does mean there could be situations where there is a bit
  of a mismatch between the 'timezone' package's data, and the data
  that is used by JDK, in practice the difference will be minimal and
  short-lived.
  So we've established this to be the best course of action.
- Remove _multibuild, not longer required.</changelog>
  <changelog author="lnussel@suse.com" date="1710763200">- Use /bin/sh for tzselect. Used to require bash for the 'select'
  builtin but has a fallback meanwhile so no need for explicit bash
  anymore.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1711022400">- Unify SLE-15-SP6 and Factory packages (PED#8158).
  This is still related to bsc#1213470. We're applying this fix for
  SLE-15-SP6 too.  This changelog entry is meant to bring over the SLE
  information, so the same package can be used for both code streams.
- This patch has long been removed on Factory but was never mentioned
  explicitly, it was related to ticket bsc#1202310, a minor update to
  reflect Chile's DST change back in 2022.
  * bsc1202310.patch</changelog>
  <changelog author="dcermak@suse.com" date="1725278400">- Split tzselect script into a subpackage to prevent awk getting into minimal
  containers and recommend tzselect by the main package
  Fixes bsc#1230054</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142400">- Update to 2024b:
  * Improve historical data for Mexico, Mongolia, and Portugal.
  * System V names are now obsolescent.
  * The main data form now uses %z.
  * The code now conforms to RFC 8536 for early timestamps.
  * Support POSIX.1-2024, which removes asctime_r and ctime_r.
  * Assume POSIX.2-1992 or later for shell scripts.
  * SUPPORT_C89 now defaults to 1.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1737028800">- Update to 2025a:
  * Paraguay adopts permanent -03 starting spring 2024
  * Improve pre-1991 data for the Philippines
  * Etc/Unknown is now reserved</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742731200">- Update to 2025b:
  * New zone for Aysén Region in Chile (America/Coyhaique) which
    moves from -04/-03 to -03</changelog>
</package>
<package pkgid="accaf030b94b0eba448dc99cbeb8771f19a62b434b72532e18664838cd7e8434fb24afa4d433f871b07cd76bf931d992c546b81ddfe42a9a63f0ec2a9c5cafd3" name="toolbox" arch="noarch">
  <version epoch="0" ver="2.4+git20250806.ba48bd3" rel="160000.1.2"/>
  <changelog author="kukuk@suse.com" date="1720094400">- Update to version 2.3+git20240704.84ec25e:
  * toolbox: use correct container state tense in msg</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1727179200">- Update SLE/Leap Micro images from 5.4 to 6.0 (bsc#1227328)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1727438400">- Revert last change and update SLE/Leap Micro images to 5.5 (bsc#1227328)</changelog>
  <changelog author="kukuk@suse.com" date="1729857600">- Update to version 2.3+git20241025.00f69f5:
  * Add manual page</changelog>
  <changelog author="kukuk@suse.com" date="1729857601">- Remove Leap and SLE Micro hacks from spec file, this products
  have to provide correct branding packages.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729857602">- Use go-md2man instead of pandoc to convert a markdown file to
  nroff. The dep chain is just much, much smaller.</changelog>
  <changelog author="kukuk@suse.com" date="1730289600">- Update to version 2.4+git20241030.2ae8421:
  * Adjust md syntax for go-md2man
  * Fix header
  * Sync README with manual page
  * Ignore generated toolbox.1 manual page</changelog>
  <changelog author="kukuk@suse.com" date="1746446400">- Update to version 2.4+git20250429.b335d1b:
  * Support addition podman arguments</changelog>
  <changelog author="kukuk@suse.com" date="1751284800">- Update to version 2.4+git20250630.5e08e45:
  * Forbid --user if running as root</changelog>
  <changelog author="kukuk@suse.com" date="1754481600">- Update to version 2.4+git20250806.ba48bd3:
  * Add SCC credentials if available [bsc#1247491]</changelog>
</package>
<package pkgid="8d72bfc1be7fceb066e50ee80ed91d66e478ff56f9db828c964f284091d6f58ea3be2a993fd0219bac741143206e9d5c0921e553c4cd44014271bfc7bcbbec39" name="tpm-tools" arch="x86_64">
  <version epoch="0" ver="1.3.9.2" rel="160000.2.2"/>
  <changelog author="meissner@suse.com" date="1339502400">- Updated to 1.3.8
  - bugfixes
  - pcr/nvram sealing options</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412251200">- Remove a number of unused build requires, probably copy/paste
  error, never used.</changelog>
  <changelog author="mpluskal@suse.com" date="1427976000">- Cleanup spec file with spec-cleaner
- Remove tpm-tools-rpmlintrc
- Use automake and autoconf as recomended by upstream
- Split library, devel adn pkcs11 package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434715200">- Do not use -Werror.</changelog>
  <changelog author="mailaender@opensuse.org" date="1483272000">- Update to version 1.3.9</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- updated to 1.3.9.1 (FATE#321450)
  - bugfixes after openssl 1.1 porting</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1510228800">- 0001-Fix-build-against-OpenSSL-1.1.0.patch: fix openssl 1.1.0 build in the
  P11 code. Upstream has not reacted to a pull request to fix this for some
  months now. This is my own patch (that doesn't violate C89 declaration rules
  and is backward compatible to openssl. 1.0.x)).
  For comparison see: https://sourceforge.net/p/trousers/tpm-tools/merge-requests/2/</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1614772800">- upgrade to minor version 1.3.9.2:
  - upstream now provide openssl 1.1 compatibility on their own
- dropped 0001-Fix-build-against-OpenSSL-1.1.0.patch since the tarbal is now
  compatible.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1633435200">- fix undefined and binary data being output in the tpm_version command
  (bsc#1114793)
  - add 0001-tpm_version-avoid-outputting-NULL-bytes-from-tpmVend.patch
  - add 0001-tpm_version-avoid-outputting-undefined-data-on-stder.patch</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- changed source url to https</changelog>
</package>
<package pkgid="69737d277190be78d66ce6ce40a0998f65947a8a402de4ea0eea10d09c7c8e7f6c71fc74e3084fe568f02666861d732f3aca91b0b5883ab2cf2cefac013b2854" name="tpm2-0-tss" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="a0d4e7bb136485308bb916294e50919e0ff099dafefc3752069aa197b26ee11b774a06041f0679f99cf0d0bb9276469a3054a045b0a4ede9d8f52430e5abe4cd" name="tpm2-tss-engine" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="160000.2.2"/>
  <changelog author="jsikes@suse.de" date="1551614400">- Update to version 0+git20190222.cef2c43:
  * build: install existing man pages even if pandoc is not available
  * Updated organizational files in preparation for release
  * Add configure switch for unit and integration tests
  * Silence clang warning on field initializers
  * Fix parallel connections to TPM.
  * Fix segfault on non-null auth'd persistent keys.
  * Update tests to also run on physical TPMs
  * build: install aclocal files
  * build: update for ax_code_coverage.m4 version 2019.01.06
  * ECDSA truncation and s_server test</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576843200">- move *.so files into the main package, not -devel. libtpm2tss.so is actually
  the engine library itself, not a symlink. It's needed to actually use the
  package. tpm2tss.so is probably a (backwards) compatiblity symlink. Both are
  not intended for linking and therefore not suitable for the -devel package.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1578398400">- Update to stable upstream version v1.0.1:
  * Release v1.0.1
  * test: use tpm2-tools 3.X
  * Tests: Fix for latest tools
  * Tests: Use long parameters for tpm2-tools
  * test: migrate tpm2_create option from -A to -b
  * build: link against tss2-mu
  * Release v1.0.0
  * Release v1.0.0-rc3
  * Docu: Update Install.md
  * Updates for 1.0.0-rc2
  * TESTS: Add test for client auth
  * Bump required version of tpm2-tss to &gt;=2.2.2
  * Build: Bump required tpm2-tss to 2.2
  * Update for v1.0.0-rc1
  * Dead code removal
- This fixes the build against tpm2-0-tss version &gt;= 2.3 (bsc#1160123)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1578657600">- switch the _service approach from using tar_scm to using download_files. We
  need to use the actual release tarball which contains the generated man
  pages. The reason is that on SLE we can't generate the man pages using
  pandoc, since pandoc is not available on SLE.
- for the same reason make the pandoc BuildRequires conditional for openSUSE
  vs. SLE.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1578657601">- remove the _service file as requested in declined OBS sr#762653.
  download_files seems to work also without the _service file.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1587643200">- remove conditional pandoc BuildRequires for openSUSE. Nothing much is gained
  from rebuilding the man pages. This shall help synchronizing SLE and
  openSUSE package builds. (jsc#SLE-12137).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1614772800">- Update to upstream version 1.1.0:
  * Added:
  - Configure option for ptpm tests
  - Configure script AX_CHECK_ENABLE_DEBUG
  - Option for setting tcti on executable
  - TCTI-env variable used by default
  - Support for parent key passwords
  - openssl.cnf sample file
  * Changed:
  - Fix several build system, autotools and testing related issues
    Now adhere to CFLAGS conventions
  - Include pkg-config dependecy on libtss2-mu in order to work with tpm2-tss 2.3
  - Enables parallel testing of integration tests:
    Make integration tests use TPM simulator; instead of first TPM it finds
    Use of different port numbers for TCP based tests
  - Fix EC param info (using named curve format)
  - Use tpm2-tools 4.X stable branch for integration tests
  - Use libtss2-tctildr.so instead of custom code for tcti setup
  - Fix manpages for -P/--parent option and correct engine name
  - Fix TCTI env variable handling
  - Set parent handle to OWNER</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1614772801">- pass --disable-defaultflags to avoid breakage of our gcc-PIE profile (-&gt;
  resulted in non-position-independent executable) (bsc#1183895).</changelog>
  <changelog author="pmonreal@suse.com" date="1675684800">- Update to upstream version 1.2.0:
  * Fixed:
  - Updated minimal version of tpm2-tss to 2.4.x
  - Fix encoding of emptyauth
  - Fix some memory leaks
  - Parent handle issues with signed representation by switching
    parent handle to BIGNUM.
  - Fixed RSA_NO_PADDING modes with OpenSSL 1.1.1
  - Fixed autogen (bootstrap) call from release package by
    embedding VERSION file.
  * Added:
  - Use of restricted keys for signing
  - StirRandom
  - Run tests using swtpm
  - The ability to import key blobs from things like the
    tpm2-tools project.
  - Compatibility with openssl &gt;=1.1.x
  - Support for ECDH
  - QNX support.
  - Only set -Werror for non-release builds.
  - Additional checks on TPM responses
  - CODE_OF_CONDUCT
  - SECURITY reporting instructions</changelog>
  <changelog author="fcrozat@suse.com" date="1685620800">- Fix download url and add gpg signature for tarball.</changelog>
</package>
<package pkgid="533d627534186308d9d4e61caa3354f6035de2af8a67750478dcd558430a33bde0dabd23255dbc02641a9bbf1516d64d4c83e579f4885101473c3331b2507b75" name="tpm2.0-abrmd" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638187200">- Warp selinux into a bcond</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 2.4.0
  + remover syslog deprecation warning (bsc#1185154)
  + cover update to 2.3.3 (jsc#SLE-17366)
  + contains reload fix (bsc#1166936)
  + fix tcti loading using short / long names (bsc#1159176)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1649073600">- dbus-access.patch: restrict D-Bus access to tpm2-abrmd to members of the tss
  group (bsc#1197532). This prevents arbitrary users from meddling with TPM
  state and thus potential denial-of-service vectors.</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Version 2.4.1
  + Added
    Contributor Covenant Code of Conduct.
  + Fixed
  * superflous warning messages about tcti status.
    WARNING **: 11:00:56.205: tcti_conf before: "(null)"
    WARNING **: 11:00:56.205: tcti_conf after: "mssim"
  * GCC 11 build error: error: argument 2 of __atomic_load’ discards
    'volatile' qualifier
  * Initialize gerror pointer variable to NULL to fix use of
    unitialized memory and segfault.
  * Updated missing defaults in manpage.
  * Port CI to composite actions in tpm2-software/ci.
  + Removed
    Dependency on 'which' utility in configure.ac.
    ubuntu-16.04 from CI.</changelog>
  <changelog author="aplanas@suse.com" date="1670500800">- Version 3.0.0
  + Fixed
  * A bug in special command processing in TPM2_GetCapability when
    an audit session is in use cuased tpm2-abrmd to abort.
  + Added
  * New SELinux interfaces for communication with keylime
  + Changed
  * DBUS permissions in tpm2-abrmd.conf to match the in-kernel RM,
    ie /dev/tpmrm0, permissions. Now users MUST be in the tss group
    to send to tpm2-abrmd over DBUS.
- Drop dbus-access.patch (merged in PR#805)</changelog>
  <changelog author="aplanas@suse.com" date="1684843200">- Cover ALP via the %{suse_version} macro</changelog>
  <changelog author="jsegitz@suse.com" date="1722513600">- Update harden_tpm2-abrmd.service.patch to contain necessary SELinux
  changes (bsc#1209831)</changelog>
  <changelog author="cathy.hu@suse.com" date="1723550400">- Fix SELinux sbin/bin merge (bsc#1229047)
  1229047-fix-bin-sbin-selinux.patch
  Can be dropped once https://github.com/tpm2-software/tpm2-abrmd/pull/846
  is merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1742990400">- also enable SELinux features for SLE-16 (bsc#1240070). On SLE-16 abrmd does
  not work, because the SELinux configuration is missing and thus its
  operations are denied. Include SLE-16 to fix this.</changelog>
</package>
<package pkgid="ab576b1eb998181220c6ac7941a5cd38bbea87480073245e3481946b127fdeac5711a4545f900cfcb905d4acc418c55de54ecc927e3b89036237aa2ac472698c" name="tpm2.0-abrmd-selinux" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1638187200">- Warp selinux into a bcond</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 2.4.0
  + remover syslog deprecation warning (bsc#1185154)
  + cover update to 2.3.3 (jsc#SLE-17366)
  + contains reload fix (bsc#1166936)
  + fix tcti loading using short / long names (bsc#1159176)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1649073600">- dbus-access.patch: restrict D-Bus access to tpm2-abrmd to members of the tss
  group (bsc#1197532). This prevents arbitrary users from meddling with TPM
  state and thus potential denial-of-service vectors.</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Version 2.4.1
  + Added
    Contributor Covenant Code of Conduct.
  + Fixed
  * superflous warning messages about tcti status.
    WARNING **: 11:00:56.205: tcti_conf before: "(null)"
    WARNING **: 11:00:56.205: tcti_conf after: "mssim"
  * GCC 11 build error: error: argument 2 of __atomic_load’ discards
    'volatile' qualifier
  * Initialize gerror pointer variable to NULL to fix use of
    unitialized memory and segfault.
  * Updated missing defaults in manpage.
  * Port CI to composite actions in tpm2-software/ci.
  + Removed
    Dependency on 'which' utility in configure.ac.
    ubuntu-16.04 from CI.</changelog>
  <changelog author="aplanas@suse.com" date="1670500800">- Version 3.0.0
  + Fixed
  * A bug in special command processing in TPM2_GetCapability when
    an audit session is in use cuased tpm2-abrmd to abort.
  + Added
  * New SELinux interfaces for communication with keylime
  + Changed
  * DBUS permissions in tpm2-abrmd.conf to match the in-kernel RM,
    ie /dev/tpmrm0, permissions. Now users MUST be in the tss group
    to send to tpm2-abrmd over DBUS.
- Drop dbus-access.patch (merged in PR#805)</changelog>
  <changelog author="aplanas@suse.com" date="1684843200">- Cover ALP via the %{suse_version} macro</changelog>
  <changelog author="jsegitz@suse.com" date="1722513600">- Update harden_tpm2-abrmd.service.patch to contain necessary SELinux
  changes (bsc#1209831)</changelog>
  <changelog author="cathy.hu@suse.com" date="1723550400">- Fix SELinux sbin/bin merge (bsc#1229047)
  1229047-fix-bin-sbin-selinux.patch
  Can be dropped once https://github.com/tpm2-software/tpm2-abrmd/pull/846
  is merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1742990400">- also enable SELinux features for SLE-16 (bsc#1240070). On SLE-16 abrmd does
  not work, because the SELinux configuration is missing and thus its
  operations are denied. Include SLE-16 to fix this.</changelog>
</package>
<package pkgid="5d1f4078850b68066e9f0909675fc510e38a74c7396be594800955a6bd1fda822f7bff156ba8dd53fa1490ea53da36aa8bc21f0fff5adadc7227e3ce23332e90" name="tpm2.0-tools" arch="x86_64">
  <version epoch="0" ver="5.7" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1657195200">- Disable LTO for 5.2, to fix tpm2_makecredential with "-T none"
  (bsc#1201291)</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Add missing dependencies for testing.
- Add patch to properly skip getekcertificate if curl is missing
  0001-tests-getekcertificate.sh-Skip-the-test-if-curl-is-n.patch</changelog>
  <changelog author="aplanas@suse.com" date="1657713600">- Add patch to fix leakage of TPM simulator process
  add_missing_shut_down_call_on_cleanup.patch
- Add patch to fix fapi-quote-verify[_ecc].sh test
  fix_check_of_qualifying_data.patch
- Enable test execution by default</changelog>
  <changelog author="aplanas@suse.com" date="1657800000">- Disable tests in some architectures (ppc, ppc64, s390x)</changelog>
  <changelog author="aplanas@suse.com" date="1670500800">- Update to version 5.4
  + Added:
  * tpm2_policyrestart: Added option --cphash to output the cpHash
    for the command PM2_CC_PolicyRestart.
  * tpm2_policynvwritten: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyNvWritten.
  * tpm2_policylocality: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyLocality.
  * tpm2_policycountertimer: Added option --cphash to output the
    cpHash for the command TPM2_CC_PolicyCounterTimer.
  * tpm2_policycommandcode: Added option --cphash to output the
    cpHash for the command TPM2_CC_PolicyCommandCode.
  * tpm2_policypassword: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyPassword.
  * tpm2_policyauthvalue: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyAuthValue.
  * tpm2_policyauthorize: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyAuthorize.
  * tpm2_print: Support printing serialized ESYS_TR's
  * tpm2_create: Add a clarifying message to usage of -c when
    TPM2_CreateLoaded is not supported.
  * tpm2_getcap: Add support for vendor agnostic
    capabilites. Requires tpm2-tss version 4.0 and higher to enable.
  * Add a script, check_endorsement_cert.sh, to validate the
    endorsement certificate chain. It takes two inputs - A
    TPM2B_PUBLIC format EKpublic and a PEM format EKcertificate
    specified in that order as arguments.
- Update to version 5.3
  +  Features:
  * lib/tpm2_tool.c: add --help=no-man for tpm2 option. Prior to
    this change the tool parsed no-man as an unrecognized option and
    errored out. Now it lists all the available tool options.
  * tpm2_encodeobject: New tool to encode TPM2 object. It takes
    public and private portions of an object and encode them in a
    combined PEM form called tssprivkey used by tpm2-tss-engine and
    other applications.
  * Support alternative ECC curves for which default EK templates
    exist (NIST_P256, NIST_P384, NIST_P521, and SM2_P256).
  * tools/misc/tpm2_checkquote: add sm2 verification of signature.
  * crypto: support the TPM2_ECC_SM2_P256 curveID.
  * fapi: add new command to enable the use of fapi objects for tpm2
    tools. The new command tss2_gettpm2object was added. With this
    command context files which can be used for tpm2 tool commands
    can be created.
  * Support for sign and verify with sm2 algorithms.
  * tools/tpm2_startauthsession: add sym-algorithm argument for
    supported symmetric algorithm.
  * Attestation (certify, command audit, sessionaudit and quote):
    add scheme argument for supported signature schemes. This also
    enable support for SM signing.
  * tpm2_flushcontext: support all options at a time. Support the
  - t/-l/-s options all at once so folks don't have to call it
    multiple times.
  * tools/tpm2_nvread: add human readable output for NV content
    Enable parsing and YAML-style output for the different NV index
    types.
  * New event types in tpm2_eventlog:
    EV_EFI_PLATFORM_FIRMWARE_BLOB2, EV_EFI_HANDOFF_TABLES2,
    EV_EFI_VARIABLE_BOOT2
  * VERSION: add version file - Generate the version file with
    bootstrap and include in the DIST tarball so endusers can call
    autoreconf on a dist tarball which doesn't have git. This
    alleviates git describe errors on release tarballs in the
    autoreconf case.
  * import: support restricted parents - Support a restricted parent
    with an aes128cfb symmetric parameter.
  * tpm2_load - Added capability to load pem files in
    TSS2-Private-Key format for interoperability with
    tpm2-tss-engine, tpm2-openssl provider tpm2-pkcs11, and
    tpm2-pytss.
  * tpm2_print - Added capability to parse out and print the public
    portion of a TSS Private Key in the PEM format with the arg
    option TSSPRIVKEY_OBJ.
  * tpm2_loadexternal: Added support to tpm2_loadexternal for
    parsing and loading the public portion of a TSS2 Privkey PEM
    file. The path to the PEM file must be specified using the -r
    option while skipping the -G option for key type.
  * Support added for calculating cpHash, rpHash, sessions for
    parameter encryption and auditing in: tpm2_nvwrite,
    tpm2_nvcertify, tpm2_nvincrement, tpm2_nvwritelock,
    tpm2_nvreadlock, tpm2_nvundefine and tpm2_nvreadpublic.
  * Support added for calculating cpHash in: tpm2_clear,
    tpm2_dictionarylockout, tpm2_clearcontrol, tpm2_sign,
    tpm2_setprimarypolicy, tpm2_setclock, tpm2_rsadecrypt,
    tpm2_duplicate, tpm2_clockrateadjust, tpm2_createprimary,
    tpm2_quote, tpm2_policysecret, tpm2_policynv,
    tpm2_policyauthorizenv, tpm2_import, tpm2_hmac,
    tpm2_hierarchycontrol, tpm2_load, tpm2_gettime,
    tpm2_evictcontrol, tpm2_encryptdecrypt, tpm2_getpolicydigest,
    tpm2_loadexternal, tpm2_commit, tpm2_ecdhkeygen, tpm2_ecdhzgen,
    tpm2_ecephemeral, tpm2_geteccparameters, tpm2_flushcontext,
    tpm2_pcrallocate, tpm2_pcrevent, tpm2_pcrreset, tpm2_pcrread.
  * Support for using tcti=none for cpHash calculations to avoid
    invoking checks for active TPM in: tpm2_nvreadpublic,
    tpm2_nvundefine, tpm2_nvreadlock, tpm2_nvwritelock,
    tpm2_nvincrement, tpm2_nvcertify, tpm2_nvdefine, tpm2_nvwrite.
  + Known issue:
  * FAPI tools will not work on 32bit user-static qemu on 64bit host
    because readdir returns NULL. Follow the issue on
    https://gitlab.com/qemu-project/qemu/-/issues/263
  + Bug fixes:
  * tools/tpm2_pcrreset.c: fix build errors in 32bit systems.
  * Fix tssprivkey formatted PEM generation and load errors on 32
    bit systems.
  * CI: Add testing of 32bit systems with multiarch/qemu-user-static
    containers.
  * tools/tpm2_evictcontrol: fix for calls to Esys_TR_Close on bad
    handles.
  * tools/tpm2_nvextend: fix for ESYS_TR handle not being used in
    calculating the object name.
  * tools/tpm2_nvwrite, tools/tpm2_nvread: Policy authorization must
    be re-instantiated on each iteration of the read/ write when
    size exceeds the allowed operating size
    (TPM2_PT_NV_BUFFER_MAX). However, information on the compounded
    policies cannot be retrieved from the only policy digest read
    from the session and hence the session cannot be
    re-instantiated. To avoid this scenario only a single iteration
    is allowed when policy authorization is in use.
  * Fix argument parsing in tpm2_policylocality to fix an issue
    causing almost always to generate PolicyLocality(0). There was a
    logical inversion that caused almost any argument (including
    invalid ones) to be interpreted as zero, except “zero" would be
    interpreted as one.
  * test/fapi/fapi-quote-verify.sh Fix check of qualifying
    data. Because of a bug in Fapi_VerifyQuote the qualifying data
    was not checked correctly. Errors that were not recognized
    before occur now. The order of the tests was cleaned up and for
    every quote and verify quote now the correct combination of the
    qualifying data and quote info containing the nonce is used.
  * tpm2_nvdefine: set TPMA_NV_PLATFORMCREATE when authenticating
    with the platform hierarchy.
  * tools/tpm2_getekcertificate: fixed the url link to
    ekop.intel.com. There were two places where the fix was needed:
    o In the tool source code where a forward slash was always
    appended irrespective of it already being part of the link
    specified by the user and
    o In the integration test where curl tests the link to the
    ekop.intel.com backend. It now requires the full link to
    include the base64 encoded ek pub hash.
  * tools/tpm2_tool.c: Fix an issue where LOG_WARN is always
    displayed Despite setting the 'quiet' flag with -Q.
  * fapi: fix usage of parameter pcrLog for tss2_quote. pcrLog is an
    optional parameter. If pcrLog is not used as parameter currently
    the pcr log is still calculated in Fapi_Quote. To avoid this
    calculation a NULL pointer will be passed to Fapi_Quote if the
    parameter pcrLog is not passed. So tss2_quote can be executed
    for a user which has no access rights to the files with the
    system measurements.
  * import: fix bug on using scheme wherein if scheme is specified
    in the template, the openssl load functions clobber the scheme
    value and set it to TPM2_ALG_NULL.
  * tools/tpm2_sign and tpm2_verifysignature: fix sm2 sign and
    verifysignature bugs : (1.) sm2 sign could not get output
    signature. (2.) sm2 verify tss format signature failed.
  * lib/tpm2.c: added workaround for a system api bug where in the
    flush handle is erroneously placed in the handle area instead of
    the parameter area.
  * nvreadpublic: drop ntoh on attributes The attributes get
    marshalled to correct endianess by libmu and don’t need to be
    changed again.
  * Removing unused '-i' option from tpm2_print
  * tpm2_policyor: fix unallocated policy list The TPML_DIGEST
    policy list was calloc'd for some reason, however it could just
    be statically allocated in the context. The side effect is that
    when no options or arguments were given a NPD occured when
    checking the count of the policy list.
  * tools/tpm2_certify: fix man page for short options and add tests
    The short options for the signing-key-auth and
    certified-key-auth were swapped. The case fix in the man page
    makes it less intuitive but have to go through with the change
    so that we don't break any existing scripts. This change does
    not affect the long options. Tests have been added to ensure the
    functionality.
  + CI:
  * ci: add ubuntu-22.04. This also requires the min tpm2-tss
    version to be at 3.2.0 to support the openSSL major version 3.
  * cirrus.yml: update freebsd version to 13.1
  * .ci/download-deps.sh: update tpm2-abrmd dependency version to
    2.4.1
- Drop 0001-tests-getekcertificate.sh-Skip-the-test-if-curl-is-n.patch
  (merged)
- Drop add_missing_shut_down_call_on_cleanup.patch (merged)
- Drop fix_check_of_qualifying_data.patch (merged)
- Add echo_tcti_call_python3_binary.patch (upstreamed)</changelog>
  <changelog author="aplanas@suse.com" date="1672833600">- Re-disable tests in PPC, PPC64 and S390X and reference issues about
  endianness unsafe API</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Update to version 5.5
  + Added:
  * tpm2_createek: SM2 EK Support
  * misc: SM2 support to internal OSSL format key routines. Fixes
  - -format flags for conversions.
  + Fixed:
  * echo_tcti.py: set to use python3 named executable in shebang.
- Drop already merged patches
  + fix_bogus_warning.patch
  + echo_tcti_call_python3_binary.patch</changelog>
  <changelog author="aplanas@suse.com" date="1684324800">- Disable tests.  Some tests randomly fails, maybe dependening on the
  OBS worker assigned during the build (not confirmed)</changelog>
  <changelog author="aplanas@suse.com" date="1703160000">- Update to version 5.6
  + tpm2_eventlog:
  * add H-CRTM event support
  * add support of efivar versions less than 38
  * Add support to check for efivar/efivar.h manually
  * Minor formatting fixes
  * tpm2_eventlog: add support for replay with different
    StartupLocality
  * Fix pcr extension for EV_NO_ACTION
  * Extend test of yaml string representation
  * Use helper for printing a string dump
  * Fix upper bound on unique data size
  * Fix YAML string formatting
  + tpm2_policy:
  * Add support for parsing forward seal TPM values
  * Use forward seal values in creating policies
  * Move dgst_size in evaluate_populate_pcr_digests()
  * Allow more than 8 PCRs for sealing
  * Move dgst_size in evaluate_populate_pcr_digests
  * Allow more than 8 PCRs for sealing
  * Make __wrap_Esys_PCR_Read() more dynamic to enable testing more
    PCRs
  + tpm2_encryptdecrypt: Fix pkcs7 padding stripping
  + tpm2_duplicate:
  * Support -a option for attributes
  * Add --key-algorithm option
  + tpm2_encodeobject: Use the correct -O option instead of -C
  + tpm2_unseal: Add qualifier static to enhance the privacy of unseal
    function
  + tpm2_sign:
  * Remove -m option which was added mistakenly
  * Revert sm2 sign and verifysignature
  + tpm2_createek:
  * Correct man page example
  * Fix usage of nonce
  * Fix integrating nonce
  + tpm2_clear: add more details about the action
  + tpm2_startauthsession: allow the file attribute for policy
    authorization.
  + tpm2_getekcertificate: Add AMD EK support
  + tpm2_ecdhzgen: Add public-key parameter
  + tpm2_nvreadpublic: Prevent free of unallocated pointers on failure
  + Bug-fixes:
  * The readthedocs build failed with module 'jinja2' has no
    attribute 'contextfilter' a requirement file was added to fix
    this problem
  * An error caused by the flags -flto -_FORTIFY_SOURCE=3 in kdfa
    implementation. This error can be avoided by switching off the
    optimization with pragma
  * Changed wrong function name of "Esys_Load" to "Esys_Load"
  * Function names beginning with Esys_ are wrongly written as Eys_
  * Reading and writing a serialized persistent ESYS_TR handles
  * cirrus-ci update image-family to freebsd-13-2 from 13-1
  + misc:
  * Change the default Python version to Python3 in the helper's
    code
  * Skip test which uses the sign operator for comparison in
    abrmd_policynv.sh
  * tools/tr_encode: Add a tool that can encode serialized ESYS_TR
    for persistent handles from the TPM2B_PUBLIC and the raw
    persistent TPM2_HANDLE
  * Add safe directory in config</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 5.7:
  + Security
  - Fixed CVE-2024-29038 (bsc#1223687)
  - Fixed CVE-2024-29039 (bsc#1223689)
  + Fixed
  - Fix eventlog test
  - Fix issues with reading NV indexes
  - Fix context save error on tpm2_create
  - tpm2_sessionconfig: fix handling of --disable-continue session so that the subsequent command will not fail
  - when attempting to context save a flushed session.
  - detection of functions within libcrypto when CRYPTO_LIBS is set and system has install libcrypto.
  - tpm2_send: fix EOF detection on input stream.
  - tpm2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.
  - tpm2_nvread: fix input handling no nv index.
  - Auth file: Ensure 0-termination when reading auths from a file.
  - configure.ac: fix bashisms. configure scripts need to be runnable with a POSIX-compliant /bin/sh.
  - cirrus.yml fix tss compilation with libtpms for FreeBSD.
  - tpm2_tool.c Fix missing include for basename to enable compilation on netbsd.
  - options: fix TCTI handling to avoid failures for commands that should work with no options.
  - tpm2_getekcertificate.c Fix leak. ek_uri was not freed if get_ek_server_address failed.
  + Added
  - Add the possibility for autoflush (environment variable "TPM2TOOLS_AUTOFLUSH", or -R option)
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).m2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.
  - tpm2_nvread: fix input handling no nv index.
- tpm2-tools.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.</changelog>
</package>
<package pkgid="54f1d7ab1b52f494a46f5e6e268aace476b54fddcde8e33699ba9730a6fd3bb5e81506cb1df8826223f2c3a46866657515f4bff3225c3f605969a8f9b3dd2c01" name="traceroute" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="160000.2.2"/>
  <changelog author="crrodriguez@opensuse.org" date="1362657600">- The previous incarnation of traceroute had a traceroute6
  binary, provide a compatibility symlink for it.
- Build with full RELRO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1409486400">- version 2.0.20
  * Describe all complementary long options in the man page
  * Use correct service name for AS lookups
  * Avoid some rare case null dereference
  * Improve expiration check for simultaneous probes
- traceroute-secure_getenv.patch use secure_getenv
- traceroute-autotools.patch refresh</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048000">- Version 2.0.21
  * fix -F --mtu with current kernel versions
- traceroute-autotools.patch refresh and add -fvisibility=hidden
  to CFLAGS.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048001">- traceroute-autotools.patch: switch to non-recursive automake
  without libtool.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1546948800">- Update to version 2.1.0
  * Implement -w MAX_SECS,HERE,NEAR option
  * Provide tcptraceroute
  * Improve the main loop for better interactivity.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1547553600">- fix undefined reference to "ceil", some compiler versions do
  not optimize-out or inline ceil, but anyways libm is required.</changelog>
  <changelog author="jengelh@inai.de" date="1548158400">- Trim time-sensitive wording from description.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672228800">- update to version 2.1.1:
  * Interpret ipv4-mapped ipv6 addresses (::ffff:A.B.C.D) as true
    ipv4
  * Return back more robust poll(2) loop handling</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676376000">- update to version 2.1.2:
  * Fix unprivileged ICMP tracerouting with Linux kernel &gt;= 6.1</changelog>
  <changelog author="dmueller@suse.com" date="1699617600">- update to 2.1.3:
  * Fix command line parsing in wrappers. (CVE-2023-46316 bsc#1216591)</changelog>
</package>
<package pkgid="c40647b94420646e648bee5502abfcf8417f56d0908e52304fb059a8ecf4bc263759375a9e43d72061b814f4af33b7785ce366a0ca86214a7d8e9afb188b1e06" name="transactional-update" arch="x86_64">
  <version epoch="0" ver="5.0.7" rel="160000.1.2"/>
  <changelog author="iforster@suse.com" date="1736683200">- Version 5.0.0
  - Rework /etc handling; instead of maintaining complex overlay
    mount layers use a btrfs subvolume of the corresponding
    snapshot instead.
    Syncing changes before the reboot will be done by during boot
    (or during apply) by transactional-update-sync-etc-state
    instead. [jsc#SMO-367]
    Also resolves: [boo#1140472],
    [gh#openSUSE/transactional-update#117]
  - Add EXPERIMENTAL support for performing updates using a
    container image [gh#openSUSE/transactional-update#128]. Note
    that this command is only available via
    `transactional-update apply-oci ...` for now and cannot be
    triggered from the API or D-Bus interface. Moreover the syntax
    may and probably will change in future releases.
  - Removed `status` command - it was disabled by default for a
    long time already and unmaintained
  - tukit: Fix snippet directory in man page
  - t-u: Don't apply again if snapshot is current already
  - t-u: Prevent self-updates between major t-u versions because
    these usually require additional files
  - Fix missing files when using `make dist`
  - Unified Copyright headers
  - Make Bash scripts shellcheck compatible
  - Replace tabs with spaces in Shell scripts to avoid the complex
    tab / space changes
  - Various other minor internal optimizations and fixes</changelog>
  <changelog author="fvogt@suse.com" date="1744113600">- Version 5.0.1
  - Fix path to rebootmgrctl [bsc#1236908]</changelog>
  <changelog author="fvogt@suse.com" date="1744891200">- Version 5.0.2
  - Fix continuing from an already booted snapshot
  - Fix check for overlayfs when using tukit open with --discard</changelog>
  <changelog author="fvogt@suse.com" date="1745496000">- Version 5.0.3
  - When continuing a transaction that was based on the running
    system, sync new changes from /etc into the new snapshot.
    This way it behaves as-if the snapshot was booted into
    before continuing the transaction, which matches the
    behaviour of versions &lt; 5.0.
  - Fix syncing of file times and ownership
  - Do not sync /etc/etc.syncpoint/ into the running system
    (or parent snapshot) when using --discard</changelog>
  <changelog author="fvogt@suse.com" date="1749729600">- Version 5.0.4
  - Don't override soft-reboot with hard reboot
  - Fix stdio when returning from selfupdate [boo#1243910],
    [gh#openSUSE/transactional-update#151]</changelog>
  <changelog author="iforster@suse.com" date="1750420800">- Add correct SELinux policy version dependency for SLE 16</changelog>
  <changelog author="iforster@suse.com" date="1751630400">- Version 5.0.5
  - Add support for kdump 2.1.0 [bsc#1243758]
  - Integrate test to support `make check`</changelog>
  <changelog author="iforster@suse.com" date="1752062400">- Version 5.0.6
  - Fix missing x-initrd.mount in fstab on migration [boo#1246139]
    When migrating overlayfs based /etc to btrfs subvolumes, then
    the attribute was not set - this may result in failures from
    services operating on /etc during initrd phase such as SELinux
    relabelling
  - Optimize execution time of tests</changelog>
  <changelog author="iforster@suse.com" date="1753099200">- Version 5.0.7
  - Add sysext compatibility [bsc#1246140]
  - Fix soft-reboot with btrfs subvolume based /etc
  - Sync /etc layers also on soft-reboot
  - Bind mount /run/systemd/journal to allow log calls
    [gh#openSUSE/transactional-update#149]
  - Use rootlesskit instead of fakeroot for tests
  - Small coding style fixes
- Temporarily disabling the testsuite because it doesn't run in
  the build environment so far</changelog>
  <changelog author="iforster@suse.com" date="1753272000">- Add journalmount.patch to bind mount systemd journal only when
  available</changelog>
</package>
<package pkgid="31e76422ec38ada98fbd0d88491b7456973b92a23455b982ed24cee1092889abdc036e2c0dbec5c56d0b4d3f6b607fa2007a4f244b76453d71b40876b4a0736a" name="transactional-update-zypp-config" arch="noarch">
  <version epoch="0" ver="5.0.7" rel="160000.1.2"/>
  <changelog author="iforster@suse.com" date="1736683200">- Version 5.0.0
  - Rework /etc handling; instead of maintaining complex overlay
    mount layers use a btrfs subvolume of the corresponding
    snapshot instead.
    Syncing changes before the reboot will be done by during boot
    (or during apply) by transactional-update-sync-etc-state
    instead. [jsc#SMO-367]
    Also resolves: [boo#1140472],
    [gh#openSUSE/transactional-update#117]
  - Add EXPERIMENTAL support for performing updates using a
    container image [gh#openSUSE/transactional-update#128]. Note
    that this command is only available via
    `transactional-update apply-oci ...` for now and cannot be
    triggered from the API or D-Bus interface. Moreover the syntax
    may and probably will change in future releases.
  - Removed `status` command - it was disabled by default for a
    long time already and unmaintained
  - tukit: Fix snippet directory in man page
  - t-u: Don't apply again if snapshot is current already
  - t-u: Prevent self-updates between major t-u versions because
    these usually require additional files
  - Fix missing files when using `make dist`
  - Unified Copyright headers
  - Make Bash scripts shellcheck compatible
  - Replace tabs with spaces in Shell scripts to avoid the complex
    tab / space changes
  - Various other minor internal optimizations and fixes</changelog>
  <changelog author="fvogt@suse.com" date="1744113600">- Version 5.0.1
  - Fix path to rebootmgrctl [bsc#1236908]</changelog>
  <changelog author="fvogt@suse.com" date="1744891200">- Version 5.0.2
  - Fix continuing from an already booted snapshot
  - Fix check for overlayfs when using tukit open with --discard</changelog>
  <changelog author="fvogt@suse.com" date="1745496000">- Version 5.0.3
  - When continuing a transaction that was based on the running
    system, sync new changes from /etc into the new snapshot.
    This way it behaves as-if the snapshot was booted into
    before continuing the transaction, which matches the
    behaviour of versions &lt; 5.0.
  - Fix syncing of file times and ownership
  - Do not sync /etc/etc.syncpoint/ into the running system
    (or parent snapshot) when using --discard</changelog>
  <changelog author="fvogt@suse.com" date="1749729600">- Version 5.0.4
  - Don't override soft-reboot with hard reboot
  - Fix stdio when returning from selfupdate [boo#1243910],
    [gh#openSUSE/transactional-update#151]</changelog>
  <changelog author="iforster@suse.com" date="1750420800">- Add correct SELinux policy version dependency for SLE 16</changelog>
  <changelog author="iforster@suse.com" date="1751630400">- Version 5.0.5
  - Add support for kdump 2.1.0 [bsc#1243758]
  - Integrate test to support `make check`</changelog>
  <changelog author="iforster@suse.com" date="1752062400">- Version 5.0.6
  - Fix missing x-initrd.mount in fstab on migration [boo#1246139]
    When migrating overlayfs based /etc to btrfs subvolumes, then
    the attribute was not set - this may result in failures from
    services operating on /etc during initrd phase such as SELinux
    relabelling
  - Optimize execution time of tests</changelog>
  <changelog author="iforster@suse.com" date="1753099200">- Version 5.0.7
  - Add sysext compatibility [bsc#1246140]
  - Fix soft-reboot with btrfs subvolume based /etc
  - Sync /etc layers also on soft-reboot
  - Bind mount /run/systemd/journal to allow log calls
    [gh#openSUSE/transactional-update#149]
  - Use rootlesskit instead of fakeroot for tests
  - Small coding style fixes
- Temporarily disabling the testsuite because it doesn't run in
  the build environment so far</changelog>
  <changelog author="iforster@suse.com" date="1753272000">- Add journalmount.patch to bind mount systemd journal only when
  available</changelog>
</package>
<package pkgid="fbcc232de31e162c5bed3c8c47a5745191857b5103fd5df0e5a3a53dd3b9cff00356edd824832a3c31210c3e99fb03c3367f9ebbb7c264c45ed7f40391d991bd" name="trousers" arch="x86_64">
  <version epoch="0" ver="0.3.15" rel="160000.2.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1589976000">- get rid of %pre/%post logic that fixes the old packaging bug. Turns out
  %pretrans and %posttrans had their purpose before, because the logic needed
  to run before old files owned by the package got deleted. But I'm not
  reimplementing this strange logic in Lua ... users that didn't get the fix
  yet will have to live with it.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1591099200">- add gcc-10.patch: fixes the build on gcc 10 by removing unused global
  variables. This patch was posted on the TrouSerS mailing list [1].
  [1]: https://sourceforge.net/p/trousers/mailman/message/36951419/</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1595851200">- In a previous commit the Requires line for the tss user got accidentally
  dropped. This change reintroduces it.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1604577600">- update to new upstream version 0.3.15:
  - Corrected mutliple security issues that existed if the tcsd is started by
    root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331
  - Replaced use of _no_optimize with asm memory barrier
  - Fixed multiple potential instances of use after free memory handling
  - Removed unused global variables which caused build issue on some distros
- drop gcc-10.patch: now contained in upstream tarball
- drop bsc1164472.patch: now contained in upstream tarball
- adjusted %setup macro invocation which seemed to be wrong</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1633435200">- move libraries to /usr/lib (bsc#1191102)</changelog>
  <changelog author="jsegitz@suse.com" date="1637841600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * tcsd.service</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- changed urls to https (except main URL which has no https)</changelog>
  <changelog author="dimstar@opensuse.org" date="1661169600">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1703937600">- add Requires(post): udev, Requires(post): coreutils
  * the post scriptlet uses udevamd and chown</changelog>
  <changelog author="pgajdos@suse.com" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="11d0e2d4b8fcc4fc8c60a1c1bab589ca15281c3dd8a402a7abaaf8c7f76dcd10bfe9f0d9150b5741de9931b37b46a36018e5508499406b5c0e764c06d7b5a87f" name="tukit" arch="x86_64">
  <version epoch="0" ver="5.0.7" rel="160000.1.2"/>
  <changelog author="iforster@suse.com" date="1736683200">- Version 5.0.0
  - Rework /etc handling; instead of maintaining complex overlay
    mount layers use a btrfs subvolume of the corresponding
    snapshot instead.
    Syncing changes before the reboot will be done by during boot
    (or during apply) by transactional-update-sync-etc-state
    instead. [jsc#SMO-367]
    Also resolves: [boo#1140472],
    [gh#openSUSE/transactional-update#117]
  - Add EXPERIMENTAL support for performing updates using a
    container image [gh#openSUSE/transactional-update#128]. Note
    that this command is only available via
    `transactional-update apply-oci ...` for now and cannot be
    triggered from the API or D-Bus interface. Moreover the syntax
    may and probably will change in future releases.
  - Removed `status` command - it was disabled by default for a
    long time already and unmaintained
  - tukit: Fix snippet directory in man page
  - t-u: Don't apply again if snapshot is current already
  - t-u: Prevent self-updates between major t-u versions because
    these usually require additional files
  - Fix missing files when using `make dist`
  - Unified Copyright headers
  - Make Bash scripts shellcheck compatible
  - Replace tabs with spaces in Shell scripts to avoid the complex
    tab / space changes
  - Various other minor internal optimizations and fixes</changelog>
  <changelog author="fvogt@suse.com" date="1744113600">- Version 5.0.1
  - Fix path to rebootmgrctl [bsc#1236908]</changelog>
  <changelog author="fvogt@suse.com" date="1744891200">- Version 5.0.2
  - Fix continuing from an already booted snapshot
  - Fix check for overlayfs when using tukit open with --discard</changelog>
  <changelog author="fvogt@suse.com" date="1745496000">- Version 5.0.3
  - When continuing a transaction that was based on the running
    system, sync new changes from /etc into the new snapshot.
    This way it behaves as-if the snapshot was booted into
    before continuing the transaction, which matches the
    behaviour of versions &lt; 5.0.
  - Fix syncing of file times and ownership
  - Do not sync /etc/etc.syncpoint/ into the running system
    (or parent snapshot) when using --discard</changelog>
  <changelog author="fvogt@suse.com" date="1749729600">- Version 5.0.4
  - Don't override soft-reboot with hard reboot
  - Fix stdio when returning from selfupdate [boo#1243910],
    [gh#openSUSE/transactional-update#151]</changelog>
  <changelog author="iforster@suse.com" date="1750420800">- Add correct SELinux policy version dependency for SLE 16</changelog>
  <changelog author="iforster@suse.com" date="1751630400">- Version 5.0.5
  - Add support for kdump 2.1.0 [bsc#1243758]
  - Integrate test to support `make check`</changelog>
  <changelog author="iforster@suse.com" date="1752062400">- Version 5.0.6
  - Fix missing x-initrd.mount in fstab on migration [boo#1246139]
    When migrating overlayfs based /etc to btrfs subvolumes, then
    the attribute was not set - this may result in failures from
    services operating on /etc during initrd phase such as SELinux
    relabelling
  - Optimize execution time of tests</changelog>
  <changelog author="iforster@suse.com" date="1753099200">- Version 5.0.7
  - Add sysext compatibility [bsc#1246140]
  - Fix soft-reboot with btrfs subvolume based /etc
  - Sync /etc layers also on soft-reboot
  - Bind mount /run/systemd/journal to allow log calls
    [gh#openSUSE/transactional-update#149]
  - Use rootlesskit instead of fakeroot for tests
  - Small coding style fixes
- Temporarily disabling the testsuite because it doesn't run in
  the build environment so far</changelog>
  <changelog author="iforster@suse.com" date="1753272000">- Add journalmount.patch to bind mount systemd journal only when
  available</changelog>
</package>
<package pkgid="5556ff17e0f3ea7f6dee9b7460aa9e7688f8e71214d46eb3bbe0e9769b7174e2daecc4e238b654ba5bef2783b30be5a637bf1edcb9cf278bc7a4e9bf997b53ab" name="tukit-snapper-plugin" arch="noarch">
  <version epoch="0" ver="5.0.7" rel="160000.1.2"/>
  <changelog author="iforster@suse.com" date="1736683200">- Version 5.0.0
  - Rework /etc handling; instead of maintaining complex overlay
    mount layers use a btrfs subvolume of the corresponding
    snapshot instead.
    Syncing changes before the reboot will be done by during boot
    (or during apply) by transactional-update-sync-etc-state
    instead. [jsc#SMO-367]
    Also resolves: [boo#1140472],
    [gh#openSUSE/transactional-update#117]
  - Add EXPERIMENTAL support for performing updates using a
    container image [gh#openSUSE/transactional-update#128]. Note
    that this command is only available via
    `transactional-update apply-oci ...` for now and cannot be
    triggered from the API or D-Bus interface. Moreover the syntax
    may and probably will change in future releases.
  - Removed `status` command - it was disabled by default for a
    long time already and unmaintained
  - tukit: Fix snippet directory in man page
  - t-u: Don't apply again if snapshot is current already
  - t-u: Prevent self-updates between major t-u versions because
    these usually require additional files
  - Fix missing files when using `make dist`
  - Unified Copyright headers
  - Make Bash scripts shellcheck compatible
  - Replace tabs with spaces in Shell scripts to avoid the complex
    tab / space changes
  - Various other minor internal optimizations and fixes</changelog>
  <changelog author="fvogt@suse.com" date="1744113600">- Version 5.0.1
  - Fix path to rebootmgrctl [bsc#1236908]</changelog>
  <changelog author="fvogt@suse.com" date="1744891200">- Version 5.0.2
  - Fix continuing from an already booted snapshot
  - Fix check for overlayfs when using tukit open with --discard</changelog>
  <changelog author="fvogt@suse.com" date="1745496000">- Version 5.0.3
  - When continuing a transaction that was based on the running
    system, sync new changes from /etc into the new snapshot.
    This way it behaves as-if the snapshot was booted into
    before continuing the transaction, which matches the
    behaviour of versions &lt; 5.0.
  - Fix syncing of file times and ownership
  - Do not sync /etc/etc.syncpoint/ into the running system
    (or parent snapshot) when using --discard</changelog>
  <changelog author="fvogt@suse.com" date="1749729600">- Version 5.0.4
  - Don't override soft-reboot with hard reboot
  - Fix stdio when returning from selfupdate [boo#1243910],
    [gh#openSUSE/transactional-update#151]</changelog>
  <changelog author="iforster@suse.com" date="1750420800">- Add correct SELinux policy version dependency for SLE 16</changelog>
  <changelog author="iforster@suse.com" date="1751630400">- Version 5.0.5
  - Add support for kdump 2.1.0 [bsc#1243758]
  - Integrate test to support `make check`</changelog>
  <changelog author="iforster@suse.com" date="1752062400">- Version 5.0.6
  - Fix missing x-initrd.mount in fstab on migration [boo#1246139]
    When migrating overlayfs based /etc to btrfs subvolumes, then
    the attribute was not set - this may result in failures from
    services operating on /etc during initrd phase such as SELinux
    relabelling
  - Optimize execution time of tests</changelog>
  <changelog author="iforster@suse.com" date="1753099200">- Version 5.0.7
  - Add sysext compatibility [bsc#1246140]
  - Fix soft-reboot with btrfs subvolume based /etc
  - Sync /etc layers also on soft-reboot
  - Bind mount /run/systemd/journal to allow log calls
    [gh#openSUSE/transactional-update#149]
  - Use rootlesskit instead of fakeroot for tests
  - Small coding style fixes
- Temporarily disabling the testsuite because it doesn't run in
  the build environment so far</changelog>
  <changelog author="iforster@suse.com" date="1753272000">- Add journalmount.patch to bind mount systemd journal only when
  available</changelog>
</package>
<package pkgid="bf16691e33fd329df94d893838a9912ba4deb32b2a3930a9bb2015a1a153b59fab53c833e2d5a2b6a6869ce0153e21a47c4998b2b1f0a3f6107528647cbf77aa" name="tukitd" arch="x86_64">
  <version epoch="0" ver="5.0.7" rel="160000.1.2"/>
  <changelog author="iforster@suse.com" date="1736683200">- Version 5.0.0
  - Rework /etc handling; instead of maintaining complex overlay
    mount layers use a btrfs subvolume of the corresponding
    snapshot instead.
    Syncing changes before the reboot will be done by during boot
    (or during apply) by transactional-update-sync-etc-state
    instead. [jsc#SMO-367]
    Also resolves: [boo#1140472],
    [gh#openSUSE/transactional-update#117]
  - Add EXPERIMENTAL support for performing updates using a
    container image [gh#openSUSE/transactional-update#128]. Note
    that this command is only available via
    `transactional-update apply-oci ...` for now and cannot be
    triggered from the API or D-Bus interface. Moreover the syntax
    may and probably will change in future releases.
  - Removed `status` command - it was disabled by default for a
    long time already and unmaintained
  - tukit: Fix snippet directory in man page
  - t-u: Don't apply again if snapshot is current already
  - t-u: Prevent self-updates between major t-u versions because
    these usually require additional files
  - Fix missing files when using `make dist`
  - Unified Copyright headers
  - Make Bash scripts shellcheck compatible
  - Replace tabs with spaces in Shell scripts to avoid the complex
    tab / space changes
  - Various other minor internal optimizations and fixes</changelog>
  <changelog author="fvogt@suse.com" date="1744113600">- Version 5.0.1
  - Fix path to rebootmgrctl [bsc#1236908]</changelog>
  <changelog author="fvogt@suse.com" date="1744891200">- Version 5.0.2
  - Fix continuing from an already booted snapshot
  - Fix check for overlayfs when using tukit open with --discard</changelog>
  <changelog author="fvogt@suse.com" date="1745496000">- Version 5.0.3
  - When continuing a transaction that was based on the running
    system, sync new changes from /etc into the new snapshot.
    This way it behaves as-if the snapshot was booted into
    before continuing the transaction, which matches the
    behaviour of versions &lt; 5.0.
  - Fix syncing of file times and ownership
  - Do not sync /etc/etc.syncpoint/ into the running system
    (or parent snapshot) when using --discard</changelog>
  <changelog author="fvogt@suse.com" date="1749729600">- Version 5.0.4
  - Don't override soft-reboot with hard reboot
  - Fix stdio when returning from selfupdate [boo#1243910],
    [gh#openSUSE/transactional-update#151]</changelog>
  <changelog author="iforster@suse.com" date="1750420800">- Add correct SELinux policy version dependency for SLE 16</changelog>
  <changelog author="iforster@suse.com" date="1751630400">- Version 5.0.5
  - Add support for kdump 2.1.0 [bsc#1243758]
  - Integrate test to support `make check`</changelog>
  <changelog author="iforster@suse.com" date="1752062400">- Version 5.0.6
  - Fix missing x-initrd.mount in fstab on migration [boo#1246139]
    When migrating overlayfs based /etc to btrfs subvolumes, then
    the attribute was not set - this may result in failures from
    services operating on /etc during initrd phase such as SELinux
    relabelling
  - Optimize execution time of tests</changelog>
  <changelog author="iforster@suse.com" date="1753099200">- Version 5.0.7
  - Add sysext compatibility [bsc#1246140]
  - Fix soft-reboot with btrfs subvolume based /etc
  - Sync /etc layers also on soft-reboot
  - Bind mount /run/systemd/journal to allow log calls
    [gh#openSUSE/transactional-update#149]
  - Use rootlesskit instead of fakeroot for tests
  - Small coding style fixes
- Temporarily disabling the testsuite because it doesn't run in
  the build environment so far</changelog>
  <changelog author="iforster@suse.com" date="1753272000">- Add journalmount.patch to bind mount systemd journal only when
  available</changelog>
</package>
<package pkgid="054e2fd60dd1d0c2574b56e43875dfa8ee1d81abd4d9fbb99f7f3b8f7ceb261e3748a97808431edc05cd6ee43f33a6be62b14406e65097549e0ea167b96cf36d" name="tuned" arch="noarch">
  <version epoch="0" ver="2.25.1.0+git.889387b" rel="160000.2.2"/>
  <changelog author="mgorman@suse.com" date="1734436800">- Move gobject dependency to gtk package as it is the only utility that
  imports gi.</changelog>
  <changelog author="trenn@suse.de" date="1737028800">- Update to version 2.24.1.44+git.cc168b9:
  * tuned-ppd: Remove the use of StrEnum
  * tuned-ppd: Disallow releasing profile holds of other processes
  * tuned-ppd: Unify polkit policy with power-profiles-daemon
  * Obsolete power-profiles-daemon
  * Document new vm plugin options
  * Adjust profiles to set dirty_(bytes|ratio) via the vm plugin
  * vm: Add support for dirty_(bytes|ratio) sysctl parameters
  * tuned-ppd: Support the new UPower PPD namespace
  * tuned-ppd: Enable changing profile via function keys
  * tuned-ppd: Use inotify to check for performance degradation
  * tuned-ppd: Require the presence of the balanced profile
  * tuned-ppd: Add the version property
  * tuned-ppd: Add docstrings
  * tuned-ppd: Keep track of active and base profile
  * tuned-ppd: Fix UPower signal handler initialization
  * Add variables to BLS entries only if grub is used
  * powertop2tuned: use default user profile path from the consts
  * tuned-ppd: Use effective hold profile when adding profile holds
  * Bump doc/manual revision date and number
  * Clean up plugin docstrings
  * Add a script for generation of plugin docs from docstrings
  * scheduler: Do not assume that perf events have type attribute
  * Fix the error in the raise statement of check_positive()
  * fix: expand variables in Plugin._verify_all_device_commands
  * Allow shared service drop-in directory
  * drop support for cpuspeed
  * Parse no_turbo cpu plugin option using commands.get_bool</changelog>
  <changelog author="trenn@suse.de" date="1737115200">- Update to version 2.24.1.50+git.13dfc68:
  * scheduler: updated sched knobs for kernels 6.6+
  * plugin_cpu: allow raw energy_performance_preference values
  * Do not initialize kvm low latency if kvm not present
- Do not conflict with power-profiles-daemon, this is managed via
  ppd-service in the tuned-ppd subpackage (bsc#1234754)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="gabriel.bertazi@suse.com" date="1737979200">- Fix grub.cfg path (bsc#1236491)
  A 0001-tuned-consts-Fix-grub.cfg-path-in-SLE.patch</changelog>
  <changelog author="trenn@suse.de" date="1738670400">- Add LIBEXECDIR=%{_prefix}/lib to adopt libexecdir and remove
  the sed hack in spec due to mainline git 410344b8dbc64bada45be
- Update to version 2.25.1.0+git.889387b:
  * new release (2.25.1)
  * disk: Add missing remove parameter
  * plugins: Add missing instance parameters
  * Makefile: Add support for installation to custom $LIBEXECDIR
  * new release (2.25.0)
  * plugin_scheduler: add switch to disable processing of kthreads
  * sap-hana: Set transparent_hugepages to madvise
  * bootloader: export Grub variables to make them available in submenus
  * functions: Create a new parser object for each string expansion
  * utils: Rename `PluginLoader` to `ClassLoader`
  * plugin_net: handle cqe-mode-rx ethtool option
  * profiles: Correct CPU governor settings
  * utils.commands: Fix CPU online detection when not present
  * new release (2.25.0-rc.1)
  * docs: fixed docs generation on centos-7
  * plugin_scheduler: fixed API
  * plugin_scheduler: make perf support optional
  * plugin_net: added support for hotplug and rename
  * scheduler: Postpone cgroup blacklist check and double-check after fail
  * makefile: added support for installation to custom $BINDIR/$SBINDIR
  * tuned-ppd: Do not always clear holds with TuneD profile change signal
  * tuned-ppd: Check that TuneD profile change signal is relevant
  * doc: enable documentation generation on RHEL with asciidoc
  * scheduler: Log process info when its affinity cannot be changed</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1741953600">- tuned-ppd: add missing requirement on `asyncore` python library</changelog>
  <changelog author="trenn@suse.de" date="1742990400">- Add BuildRequires:
  * gobject-introspection-devel for test in check section to succeed
  * pyinotify in ppd</changelog>
  <changelog author="gabriel.bertazi@suse.com" date="1747051200">- Add hardened profile (PED-12781)
  A 0001-hardened-Introduce-hardened-profile.patch</changelog>
  <changelog author="trenn@suse.de" date="1748865600">- Fix newlines in changelog</changelog>
</package>
<package pkgid="b36a592f3fceaacc0d3d027974a1ca618ffa9db4a53acde482d5f50f9cb274eea0bc859430d6ad7423643adf176456fd6c45507d4c891da8b4794946b0f8aec7" name="typelib-1_0-Atk-1_0" arch="x86_64">
  <version epoch="0" ver="2.56.3" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1736596800">- Update to version 2.54.1:
  + Fix various memory leaks.
  + Fix the build on FreeBSD.
- Switch to source service for tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736596801">- Update to version 2.55.0 (Unstable):
  + Improve warnings when setting a property.
  + Use the appropriate annotations for callbacks.
  + device: Support adding grabs given a keysym.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736856000">- Update to version 2.55.0.1 (Unstable):
  + Fix regression in 2.55.0 where ungrabbing keys did not work
    reliably.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 2.55.2 (Unstable):
  + Attempt to fix a use after free in the atk bridge.
  + Add a switch role.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.55.90 (Unstable):
  + Support grabbing keyboard shortcuts through the new
    org.freedesktop.a11y.KeyboardMonitor interface. This allows key
    grabs to be supported under Wayland with the latest mutter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 2.56.0:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743249600">- Update to version 2.56.1:
  + device-a11y-manager:
  - Fix crash on dispose
  - Check properly for the DBus backend presence</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1745841600">- Update to version 2.56.2:
  + Fix the build with glib &lt; 2.76.
  + a11y-manager-device: Fix unmap_keysym_modifier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751198400">- Update to version 2.56.3:
  + DeviceEventController: update mouse coordinates before sending
    button events
  + atspi-device-legacy: Don't crash when XkbGetMap fails
  + Return localized role name for ATSPI_ROLE_EDITBAR</changelog>
  <changelog author="mgorse@suse.com" date="1752235200">- Add upstream fixes:
  +  at-spi2-core-grab-memory-leak.patch
  + at-spi2-core-key-grabs.patch (glgo#GNOME/at-spi2-core!193)
  + at-spi2-core-plug-crash.patch (glgo#GNOME/at-spi2-core#198)</changelog>
</package>
<package pkgid="25778517d19ce94dff286ed7422e57922c07cc803a2c29e1f3381dc502851051e0061b476ab2f7bfdb98cd33c58a9d82e43e616e5bd84904bbcf4d6a428b3b4a" name="typelib-1_0-Fwupd-2_0" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1757505600">- Update to version 2.0.15:
  + This release adds the following features:
  - Allow child devices to use the parent name as a prefix
  + This release fixes the following bugs:
  - Add newer commands and options for Fish completion
  - Allow installing archives named as .CAB rather than .cab
  - Erase Firehose modem devices correctly
  - Fix Goodix enumeration issues
  - Fix sending firmware reports without --force
  - Fix the FreeBSD build
  - Fix version number of BnR MTD devices
  - Require additional requirements for the default PS5512 devboard
  - Require a full system shutdown for all Micron NVMe updates
  - Use a better name for Elan touchpad and Intel PCH SPI devices
  + This release adds support for the following hardware:
  - Foxconn SDX61 Modem
  - Jabra Evolve2 child devices
  - NVIDIA ConnectX-6, ConnectX-7 and ConnectX-8 NICs</changelog>
  <changelog author="dimstar@opensuse.org" date="1757678400">- Update to version 2.0.16:
  + This release adds the following features:
  - Add a 'search' feature to fwupdtool and fwupdmgr
  + This release fixes the following bugs:
  - Fix missing release locations when loading from artifact
  - Fix remaining issues to make updates on FreeBSD work</changelog>
  <changelog author="schwab@suse.de" date="1759406400">- Fix file list</changelog>
  <changelog author="dimstar@opensuse.org" date="1762344000">- Update to version 2.0.17:
  + This release adds the following features:
  - Add support for client-side phased update deployment
  - Add support for post-quantum signatures
  - Allow clearing the cache dirirectory
  - Allow fwupdtpmevlog to dump the raw eventlog data
  - Build a NVMe GUID derived from the serial number
  - Make fwupdtool extract work with deeply nested images
  - Parse VSS and FTW variable stores from EFI volumes
  - Reintroduce the FreeBSD CI target
  - Support very old versions of UDisks
  + This release fixes the following bugs:
  - Add 'fwupdmgr hwids' by exposing another daemon property
  - Add offline hashes for the Microsoft 20250902 dbx
  - Add the Framework-specific KEK and db hashes
  - Allow updating IFD BIOS region via parent MTD
  - Avoid showing reinstall prompts for composite devices
  - Clean up the fwupdtool lock file in all cases
  - Correctly match the correct historical composite component
  - Do not allow PK or KEK updates when system has a test key installed
  - Do not allow reinstalling when using ONLY_VERSION_UPGRADE
  - Do not require AC power to run the installed tests
  - Do not scan EFI volumes when constructing MTD BIOS devices
  - Ensure REGION is always set for MTD IFD children
  - Ensure SCSI instance IDs are valid ASCII values
  - Fix a critical warning when parsing invalid Jabra firmware
  - Fix an Ilitek parsing crash found when fuzzing
  - Fix an inotify race when refreshing metadata
  - Fix a pending-activation problem with Dell docking stations
  - Fix a potential hang when creating a chunk array with aligned sizes
  - Fix MTD emulation recording for PCI-backed devices
  - Fix the device order when the parent specifies install-parent-first
  - Fix the FLMSTR layout when reading IFD partitions
  - Fix the thunderbolt controller rushing to finalize before onlining retimers
  - Fix writing Intel GPU OptionROM data and OptionROM code
  - Flush stale events to make the Logitech Rallybar more reliable
  - Ignore all the Intel GPU MTD devices
  - Ignore errors when writing the last page of Dell dock firmware
  - Make an error message more specific
  - Modify the Dell dock needs-activation flag after updates are installed
  - Only add one devlink device for each PCI card
  - Parse the FMAP SBOM area as uSWID when required
  - Relax the USI dock DMC child device checks for new firmware
  - Revert back to the flashrom deprecated API as the new API is unusable
  - Rewrite the fwupdmgr manpage to be more useful
  - Use higher delay when update status for Logitech peripheral devices
  + This release adds support for the following hardware:
  - ASUS CX9406 (touch controller)
  - Framework Copilot keyboard
  - Genesys GL352530 and GL352360
  - Huddly C1
  - Lexar and Maxio NVMe SSDs
  - Primax Ryder mouse 2
- Add pkgconfig(libmnl) BuildRequires: new dependency.</changelog>
  <changelog author="mgorse@suse.com" date="1762862400">- Do not try to load i2c_dev kernel module on s390x. S390x has no
  native i2c devices and does not have the module (bsc#1253138).</changelog>
  <changelog author="dimstar@opensuse.org" date="1764590400">- Update to version 2.0.18:
  + This release adds the following features:
  - Add a MOTD message for devices needing reboot after staged updates
  - Create the reboot-required file when a firmware update requires reboot
  - Record the system state for each composite emulation
  - Update USI docking station firmware without requiring a manual replug
  + This release fixes the following bugs:
  - Add a MTD device problem if the Intel SPI BIOS lock is set
  - Allow changing the child name when using PARENT_NAME_PREFIX
  - Allow UpdateCapsule to work on systems that do not support SecureBoot
  - Correctly parse the EFI_CAPSULE_RESULT_VARIABLE_HEADER
  - Fall back to the SMBIOS version for BIOS MTD devices
  - Fix a crash when trying to record an i2c emulation
  - Fixed Huddly upgrade problems with major version changes
  - Fix man page compatibility with apropos and whatis
  - Fix parsing USB BOS descriptors
  - Fix up the x86_64-specific capsule flags when deploying UEFI firmware
  - Improve firmware stream searching speed by a huge amount
  - Only convert the release uint32_t to device version format for UEFI devices
  - Only handle SIGINT in fwupdtool when required
  - Refactor the hypervisor and container detection to be usable from plugins
  - Set PlatformArchitecture as the CPU architecture for RISC-V machines
  - Use a sensible timeout when doing qc-s5gen2 HID requests
  + This release adds support for the following hardware:
  - HP Portable USB-C 4K HDMI Hub
  - Lenovo Legion Go 2 (as a HID device)
  - Synaptics HapticsPad
- Rebase fwupd-bsc1130056-change-shim-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1766145600">- Update to version 2.0.19:
  + This release adds the following features:
  - Add two commands to fwupdtool to calculate and find CRCs
  - Allow systems to use the udev event source without using systemd
  + This release fixes the following bugs:
  - Always show the correct new firmware version in 'fwupdmgr get-history'
  - Fix an integer underflow when parsing a malicious PE file
  - Fix a regression when enumerating the dell-dock status component
  - Fix the fuzzer timeout when parsing a synaptics-rmi SBL container
  - Fix updating the Intel GPU FWDATA section
  - Respect 'fwupdmgr --force' when installing firmware
  + This release adds support for the following hardware:
  - Lenovo Sapphire Folio Keyboard</changelog>
  <changelog author="holden@opensuse.org" date="1767441600">- Actually build and install manpages:
  * These were originally removed because including them would
    have required pulling a nasty set of ghc/pandocs build
    dependencies directly into Ring 1
  * fwupd upstream quickly reverted this change in 1.8.13, but
    the conditional to block building/installing the manpages by
    default was never removed from the specfile
  * This restores the fwupd manpages, which have been sorely
    missing in openSUSE for a couple years</changelog>
  <changelog author="dimstar@opensuse.org" date="1768305600">- Add 0001-Allow-systemd-service-to-access-block-sr-cdrom-devic.patch:
  allow fwupd.service to interact with cdrom (boo#1256507)</changelog>
  <changelog author="dimstar@opensuse.org" date="1772107200">- Update to version 2.0.20:
  + This release adds the following features:
  - Add support for changing AMD UMA carveout size
  - Warn the user if they are using the blocked-firmware
    functionality
  + This release fixes the following bugs:
  - Disable the UEFI plugins on 32bit x86
  - Do not hang when parsing an invalid USB descriptor
  - Do not return an error if the fastboot property is not
    provided
  - Fix a CCGX DMC regression when installing on the HP G5 dock
  - Fix a harmless heap OOB read in AMD kria SOM EEPROM parser
  - Fix a potential fastboot string over-read
  - Fix a regression causing MBIM QDU updates to fail
  - Honor polkit auth for emulation tag modify device
  - Speed up calculating the cab checksum by ~21%
  - Verify the uncompressed size when decompressing CAB files
  + This release adds support for the following hardware:
  - HP Engage One G2 Advanced Hub
  - PixArt PJP274 (Framework Laptop)
  - Several new Jabra GNP devices</changelog>
</package>
<package pkgid="ffd6dc17c54e0e58961b22e82b1c4ae78fac1bd1ee0463663a949cdf04e10c16a5f8164520286eadef57686d83f7efe02862375634a452ab938f12a2ff919ec5" name="typelib-1_0-GLib-2_0" arch="x86_64">
  <version epoch="0" ver="2.84.4" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1740052800">- Update to version 2.83.4 (Unstable):
  + Fix Python shebang paths so they work on Windows again
  + Fix refcounting semantics of
    `g_dbus_connection_register_object_with_closures()` by adding a
    replacement API
  + Support static vfuncs in GIRepository
  + Add support for QNX8.0
  + Add a soft dependency on C11 — if your toolchain doesn’t
    support C11, you have six months to tell us before this becomes
    a hard dependency
  + Port from `net.hadess.PowerProfiles` to
    `org.freedesktop.UPower.PowerProfiles` for
    `GPowerProfileMonitorDBus`
  + Various bugs fixed.
  + Updated translations.
  + gdatetime: Fix integer overflow when parsing very long ISO8601 inputs.
  (CVE-2025-3360, bsc#1240897)
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.83.5 (Unstable):
  + A few improvements for when GLib is used as a subproject
  + Fix out-of-order parameters in a marshaller generated by
    `gdbus-codegen`
  + Various bugs fixed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.84.0:
  + Bugs fixed:
  - tests: Minor fixes to reference and stream-rw_all tests
  - gdebugcontrollerdbus: Fix a minor typo in a code example in
    the docs
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743681600">- Update to version 2.84.1:
  + Fix test failure when building against gobject-introspection
    ≥1.83.4
  + Bugs fixed:
  - 2.84.0 build failure on Linux:
    ../gio/gnetworkmonitornetlink.c:47:10: fatal error:
    netlink/netlink_route.h: No such file or directory
  - test failure with gobject-introspection 1.83.4: warning:
    element doc:format from state 3 is unknown, ignoring
  - gio/trash does not handle special characters well
  - `g_cancellable_connect()` documentation incorrect
  - g_cancellable_connect(): is it safe to unref cancellable from
    callback?
  - Crash with some registry key values in GWin32AppInfo
  - Memory sanitizer fixes
  - gobject: Be consistent in using atomic logic to handle the
    GParamSpecPool
  - gsettings: Port docs to gi-docgen format, add missing
    annotations and make various improvements
  - tests: Don't install runner scripts without installed_tests
  - docs: Document GSignalFlags members added after 2.0
  - tests: Add a test for g_object_freeze_notify() being called
    too often
  - gfileinfo: Slightly expand docs for
    g_file_info_get_attribute_as_string()
  - gi: Dynamically set doc-format
  - tests: Various fixes to create temporary files in /tmp rather
    than the build directory
  - gdbusnameowning: Convert docs to gi-docgen linking syntax
  - giounix-private: Fix macro for checking for epoll_create1()
  - Fix LGPL in header
  - gutils: make documentation of g_set_prgname() clearer
  - docs: Add some detail
  - gspawn-win32: Fix potential integer overflows in argv
    handling
  - gvarianttype: Improve docs on type validation
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747828800">- Update to version 2.84.2:
  + Bugs fixed:
  - gclosure: fix ATOMIC_CHANGE_FIELD to read vint atomically
  - Windows: fix wrong typelib path
  - gstring: carefully handle gssize parameters
  - Update macOS job for new CI runner
  - gdate: Call tzset before localtime_r
  - Backport -Wsign-conversion fixes for g_get_locale_variants()
  - glocalfile: Disable faccessat()-based query_exists on Android</changelog>
  <changelog author="dimstar@opensuse.org" date="1749816000">- Update to version 2.84.3:
  + Bug fixed: gstring: Fix overflow check when expanding the
    string (CVE-2025-6052, boo#1244596).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1754654400">- Update to version 2.84.4 (bsc#1249055):
  + Bugs fixed:
  - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib
    through glib/gfileutils.c via get_tmp_file()
  - GFile leak in g_local_file_set_display_name during error
    handling
  - Incorrect output parameter handling in closure helper of
    g_settings_bind_with_mapping_closures
  - gfileutils: fix computation of temporary file name
  - Fix GFile leak in  g_local_file_set_display_name()
  - gthreadpool: Catch pool_spawner creation failure
  - gio/filenamecompleter: Fix leaks
  - gfilenamecompleter: Fix g_object_unref() of undefined value</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="085726c88cf2d3d6b956ad03d5d48673fec8876925d7db9d3dccf3dffbc2608700808ed16428be166a64d0fb3b8e25b7f56b22dbe7df82c82b877898d36556fc" name="typelib-1_0-GModule-2_0" arch="x86_64">
  <version epoch="0" ver="2.84.4" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1740052800">- Update to version 2.83.4 (Unstable):
  + Fix Python shebang paths so they work on Windows again
  + Fix refcounting semantics of
    `g_dbus_connection_register_object_with_closures()` by adding a
    replacement API
  + Support static vfuncs in GIRepository
  + Add support for QNX8.0
  + Add a soft dependency on C11 — if your toolchain doesn’t
    support C11, you have six months to tell us before this becomes
    a hard dependency
  + Port from `net.hadess.PowerProfiles` to
    `org.freedesktop.UPower.PowerProfiles` for
    `GPowerProfileMonitorDBus`
  + Various bugs fixed.
  + Updated translations.
  + gdatetime: Fix integer overflow when parsing very long ISO8601 inputs.
  (CVE-2025-3360, bsc#1240897)
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.83.5 (Unstable):
  + A few improvements for when GLib is used as a subproject
  + Fix out-of-order parameters in a marshaller generated by
    `gdbus-codegen`
  + Various bugs fixed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.84.0:
  + Bugs fixed:
  - tests: Minor fixes to reference and stream-rw_all tests
  - gdebugcontrollerdbus: Fix a minor typo in a code example in
    the docs
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743681600">- Update to version 2.84.1:
  + Fix test failure when building against gobject-introspection
    ≥1.83.4
  + Bugs fixed:
  - 2.84.0 build failure on Linux:
    ../gio/gnetworkmonitornetlink.c:47:10: fatal error:
    netlink/netlink_route.h: No such file or directory
  - test failure with gobject-introspection 1.83.4: warning:
    element doc:format from state 3 is unknown, ignoring
  - gio/trash does not handle special characters well
  - `g_cancellable_connect()` documentation incorrect
  - g_cancellable_connect(): is it safe to unref cancellable from
    callback?
  - Crash with some registry key values in GWin32AppInfo
  - Memory sanitizer fixes
  - gobject: Be consistent in using atomic logic to handle the
    GParamSpecPool
  - gsettings: Port docs to gi-docgen format, add missing
    annotations and make various improvements
  - tests: Don't install runner scripts without installed_tests
  - docs: Document GSignalFlags members added after 2.0
  - tests: Add a test for g_object_freeze_notify() being called
    too often
  - gfileinfo: Slightly expand docs for
    g_file_info_get_attribute_as_string()
  - gi: Dynamically set doc-format
  - tests: Various fixes to create temporary files in /tmp rather
    than the build directory
  - gdbusnameowning: Convert docs to gi-docgen linking syntax
  - giounix-private: Fix macro for checking for epoll_create1()
  - Fix LGPL in header
  - gutils: make documentation of g_set_prgname() clearer
  - docs: Add some detail
  - gspawn-win32: Fix potential integer overflows in argv
    handling
  - gvarianttype: Improve docs on type validation
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747828800">- Update to version 2.84.2:
  + Bugs fixed:
  - gclosure: fix ATOMIC_CHANGE_FIELD to read vint atomically
  - Windows: fix wrong typelib path
  - gstring: carefully handle gssize parameters
  - Update macOS job for new CI runner
  - gdate: Call tzset before localtime_r
  - Backport -Wsign-conversion fixes for g_get_locale_variants()
  - glocalfile: Disable faccessat()-based query_exists on Android</changelog>
  <changelog author="dimstar@opensuse.org" date="1749816000">- Update to version 2.84.3:
  + Bug fixed: gstring: Fix overflow check when expanding the
    string (CVE-2025-6052, boo#1244596).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1754654400">- Update to version 2.84.4 (bsc#1249055):
  + Bugs fixed:
  - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib
    through glib/gfileutils.c via get_tmp_file()
  - GFile leak in g_local_file_set_display_name during error
    handling
  - Incorrect output parameter handling in closure helper of
    g_settings_bind_with_mapping_closures
  - gfileutils: fix computation of temporary file name
  - Fix GFile leak in  g_local_file_set_display_name()
  - gthreadpool: Catch pool_spawner creation failure
  - gio/filenamecompleter: Fix leaks
  - gfilenamecompleter: Fix g_object_unref() of undefined value</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="b511c956d070d60100cac7d44f8326b967dcef9300048691ed97856f5f69c2f49cb0d073dbabce927c1625d85cdcb63ccadc9855fc25cac6e3b988572e99537e" name="typelib-1_0-GObject-2_0" arch="x86_64">
  <version epoch="0" ver="2.84.4" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1740052800">- Update to version 2.83.4 (Unstable):
  + Fix Python shebang paths so they work on Windows again
  + Fix refcounting semantics of
    `g_dbus_connection_register_object_with_closures()` by adding a
    replacement API
  + Support static vfuncs in GIRepository
  + Add support for QNX8.0
  + Add a soft dependency on C11 — if your toolchain doesn’t
    support C11, you have six months to tell us before this becomes
    a hard dependency
  + Port from `net.hadess.PowerProfiles` to
    `org.freedesktop.UPower.PowerProfiles` for
    `GPowerProfileMonitorDBus`
  + Various bugs fixed.
  + Updated translations.
  + gdatetime: Fix integer overflow when parsing very long ISO8601 inputs.
  (CVE-2025-3360, bsc#1240897)
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.83.5 (Unstable):
  + A few improvements for when GLib is used as a subproject
  + Fix out-of-order parameters in a marshaller generated by
    `gdbus-codegen`
  + Various bugs fixed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.84.0:
  + Bugs fixed:
  - tests: Minor fixes to reference and stream-rw_all tests
  - gdebugcontrollerdbus: Fix a minor typo in a code example in
    the docs
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743681600">- Update to version 2.84.1:
  + Fix test failure when building against gobject-introspection
    ≥1.83.4
  + Bugs fixed:
  - 2.84.0 build failure on Linux:
    ../gio/gnetworkmonitornetlink.c:47:10: fatal error:
    netlink/netlink_route.h: No such file or directory
  - test failure with gobject-introspection 1.83.4: warning:
    element doc:format from state 3 is unknown, ignoring
  - gio/trash does not handle special characters well
  - `g_cancellable_connect()` documentation incorrect
  - g_cancellable_connect(): is it safe to unref cancellable from
    callback?
  - Crash with some registry key values in GWin32AppInfo
  - Memory sanitizer fixes
  - gobject: Be consistent in using atomic logic to handle the
    GParamSpecPool
  - gsettings: Port docs to gi-docgen format, add missing
    annotations and make various improvements
  - tests: Don't install runner scripts without installed_tests
  - docs: Document GSignalFlags members added after 2.0
  - tests: Add a test for g_object_freeze_notify() being called
    too often
  - gfileinfo: Slightly expand docs for
    g_file_info_get_attribute_as_string()
  - gi: Dynamically set doc-format
  - tests: Various fixes to create temporary files in /tmp rather
    than the build directory
  - gdbusnameowning: Convert docs to gi-docgen linking syntax
  - giounix-private: Fix macro for checking for epoll_create1()
  - Fix LGPL in header
  - gutils: make documentation of g_set_prgname() clearer
  - docs: Add some detail
  - gspawn-win32: Fix potential integer overflows in argv
    handling
  - gvarianttype: Improve docs on type validation
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747828800">- Update to version 2.84.2:
  + Bugs fixed:
  - gclosure: fix ATOMIC_CHANGE_FIELD to read vint atomically
  - Windows: fix wrong typelib path
  - gstring: carefully handle gssize parameters
  - Update macOS job for new CI runner
  - gdate: Call tzset before localtime_r
  - Backport -Wsign-conversion fixes for g_get_locale_variants()
  - glocalfile: Disable faccessat()-based query_exists on Android</changelog>
  <changelog author="dimstar@opensuse.org" date="1749816000">- Update to version 2.84.3:
  + Bug fixed: gstring: Fix overflow check when expanding the
    string (CVE-2025-6052, boo#1244596).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1754654400">- Update to version 2.84.4 (bsc#1249055):
  + Bugs fixed:
  - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib
    through glib/gfileutils.c via get_tmp_file()
  - GFile leak in g_local_file_set_display_name during error
    handling
  - Incorrect output parameter handling in closure helper of
    g_settings_bind_with_mapping_closures
  - gfileutils: fix computation of temporary file name
  - Fix GFile leak in  g_local_file_set_display_name()
  - gthreadpool: Catch pool_spawner creation failure
  - gio/filenamecompleter: Fix leaks
  - gfilenamecompleter: Fix g_object_unref() of undefined value</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="aa0095b2bd38dc1fec60da537d95be2dbfa67a96d17785f3f69dd96e3b43b1eea776c6c004225ebe51d586ad4e6ab2088ff25976efbb39d12796920d8ef963d3" name="typelib-1_0-GdkPixbuf-2_0" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
  <changelog author="mgorse@suse.com" date="1775736000">- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).</changelog>
</package>
<package pkgid="3864d5ac7530545fd11ea4202541b120d90589a2486cab0a1b76efc52114345805e8f9c2e84449dc86bcd94e329d76bb9e42258e5bfdd88bd70179bc56f436d2" name="typelib-1_0-Gio-2_0" arch="x86_64">
  <version epoch="0" ver="2.84.4" rel="160000.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1740052800">- Update to version 2.83.4 (Unstable):
  + Fix Python shebang paths so they work on Windows again
  + Fix refcounting semantics of
    `g_dbus_connection_register_object_with_closures()` by adding a
    replacement API
  + Support static vfuncs in GIRepository
  + Add support for QNX8.0
  + Add a soft dependency on C11 — if your toolchain doesn’t
    support C11, you have six months to tell us before this becomes
    a hard dependency
  + Port from `net.hadess.PowerProfiles` to
    `org.freedesktop.UPower.PowerProfiles` for
    `GPowerProfileMonitorDBus`
  + Various bugs fixed.
  + Updated translations.
  + gdatetime: Fix integer overflow when parsing very long ISO8601 inputs.
  (CVE-2025-3360, bsc#1240897)
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.83.5 (Unstable):
  + A few improvements for when GLib is used as a subproject
  + Fix out-of-order parameters in a marshaller generated by
    `gdbus-codegen`
  + Various bugs fixed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 2.84.0:
  + Bugs fixed:
  - tests: Minor fixes to reference and stream-rw_all tests
  - gdebugcontrollerdbus: Fix a minor typo in a code example in
    the docs
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743681600">- Update to version 2.84.1:
  + Fix test failure when building against gobject-introspection
    ≥1.83.4
  + Bugs fixed:
  - 2.84.0 build failure on Linux:
    ../gio/gnetworkmonitornetlink.c:47:10: fatal error:
    netlink/netlink_route.h: No such file or directory
  - test failure with gobject-introspection 1.83.4: warning:
    element doc:format from state 3 is unknown, ignoring
  - gio/trash does not handle special characters well
  - `g_cancellable_connect()` documentation incorrect
  - g_cancellable_connect(): is it safe to unref cancellable from
    callback?
  - Crash with some registry key values in GWin32AppInfo
  - Memory sanitizer fixes
  - gobject: Be consistent in using atomic logic to handle the
    GParamSpecPool
  - gsettings: Port docs to gi-docgen format, add missing
    annotations and make various improvements
  - tests: Don't install runner scripts without installed_tests
  - docs: Document GSignalFlags members added after 2.0
  - tests: Add a test for g_object_freeze_notify() being called
    too often
  - gfileinfo: Slightly expand docs for
    g_file_info_get_attribute_as_string()
  - gi: Dynamically set doc-format
  - tests: Various fixes to create temporary files in /tmp rather
    than the build directory
  - gdbusnameowning: Convert docs to gi-docgen linking syntax
  - giounix-private: Fix macro for checking for epoll_create1()
  - Fix LGPL in header
  - gutils: make documentation of g_set_prgname() clearer
  - docs: Add some detail
  - gspawn-win32: Fix potential integer overflows in argv
    handling
  - gvarianttype: Improve docs on type validation
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747828800">- Update to version 2.84.2:
  + Bugs fixed:
  - gclosure: fix ATOMIC_CHANGE_FIELD to read vint atomically
  - Windows: fix wrong typelib path
  - gstring: carefully handle gssize parameters
  - Update macOS job for new CI runner
  - gdate: Call tzset before localtime_r
  - Backport -Wsign-conversion fixes for g_get_locale_variants()
  - glocalfile: Disable faccessat()-based query_exists on Android</changelog>
  <changelog author="dimstar@opensuse.org" date="1749816000">- Update to version 2.84.3:
  + Bug fixed: gstring: Fix overflow check when expanding the
    string (CVE-2025-6052, boo#1244596).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1754654400">- Update to version 2.84.4 (bsc#1249055):
  + Bugs fixed:
  - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib
    through glib/gfileutils.c via get_tmp_file()
  - GFile leak in g_local_file_set_display_name during error
    handling
  - Incorrect output parameter handling in closure helper of
    g_settings_bind_with_mapping_closures
  - gfileutils: fix computation of temporary file name
  - Fix GFile leak in  g_local_file_set_display_name()
  - gthreadpool: Catch pool_spawner creation failure
  - gio/filenamecompleter: Fix leaks
  - gfilenamecompleter: Fix g_object_unref() of undefined value</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="b7428cfcd43f7f1c3b0dd425ed0f71fa2d8bc03fc127d55ee63dc696e4308b9e450c8fcbf05d0b0f5b2201206547dafe55e3279b0252fe2aa1fb70ddb00fc85a" name="typelib-1_0-Gtk-3_0" arch="x86_64">
  <version epoch="0" ver="3.24.49+14" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1705579200">- Update to version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Update to version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Update to version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1720699200">- Update to version 3.24.43:
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729166400">- Eliminate usage of update-alternatives: GTK2 no longer provides
  gtk-update-icon-cache, thus eliminating the need for this extra
  complexity.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1737806400">- Update to version 3.24.48:
  + GtkFileChooser: Stop replacing : (colon) with U+2236 (ratio)
  + GtkEmojiChooser: Update to Unicode 16 / CLDR 46
  + GtkSpinButton:
  - Use semantically appropriate icon names
  - Make numeric spin buttons always LTR
  + GtkEntry:
  - Stop guessing text direction from keyboard layout
  - Add a shortcut and context menu item to change text direction
  + GtkEventControllerMotion: Make enter and leave signals work
  + Accessibility: Use message dialog titles as names
  + GDK: Fix portal handling of gvfs files
  + Wayland:
  - Support the xdg_foreign_v2 protocol
  - Try to fix monitor geometry on sway
  - Improve font setting fallback
  - Use a better default cursor size
  - Fix a crash during DND
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738584000">- Fix %filetriggerpostun for icon cache: ensure the icons that have
  just been removed are also cleared from the cache. We can't
  shortcut on upgrades, even though this would be nice. In context
  of RPM 4.20 this started breaking (boo#1236740).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741262400">- Update to version 3.24.49:
  + Fix a crash in GtkIMContext
  + Fix crashes in DND with GtkPlug/GtkSocket
  + Wayland:
  - Fix erroneous crossing events, causing menus to malfunction
  - Support the cursor-shape protocol
  + X11: Enforce size limits on windows, preventing lockups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1743422400">- Update to version 3.24.49+14:
  + widget: Explicitly annotate visible's getter.</changelog>
</package>
<package pkgid="e9e87d092d1bbf79456bbc77171780528523ea959d3d51e087ae287ac566a8fe52bdb31a794005b05ce6b60d4828d1d111e31e96268a16b69ed678e41541e112" name="typelib-1_0-HarfBuzz-0_0" arch="x86_64">
  <version epoch="0" ver="11.4.5" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1744891200">- Update to version 11.1.0:
  + Include bidi mirroring variants of the requested codepoints
    when subsetting. The new HB_SUBSET_FLAGS_NO_BIDI_CLOSURE can be
    used to disable this behaviour.
  + Various bug fixes.
  + Various build fixes and improvements.
  + Various test suite improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1747051200">- Update to version 11.2.1:
  + Various build improvements.
  + Fix build with HB_NO_DRAW and HB_NO_PAINT.
  + Add an optional harfruzz shaper that uses HarfRuzz; an ongoing
    Rust port of HarfBuzz shaping. This shaper is mainly used for
    testing the output of the Rust implementation.
  + Fix regression that caused applying unsafe_to_break() to the
    whole buffer to be ignored.
  + Update USE data files.
  + Fix getting advances of out-of-rage glyph indices in
    DirectWrite font functions.
- Changes from version 11.2.0:
  + Painting of COLRv1 fonts without clip boxes is now about 10
    times faster.
  + Synthetic bold/slant of a sub font is now respected, instead of
    using the parent’s.
  + Glyph extents for fonts synthetic bold/slant are now accurately
    calculated.
  + Various build fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753099200">- Update to version 11.3.2:
  + Fix build with non-compliant C++11 compilers that don't
    recognize the "and" keyword.
- Changes from version 11.3.1:
  + Fix crasher in the glyph_v_origin function introduced in
    11.3.0.
- Changes from version 11.3.0:
  + Speed up handling fonts with very large number of variations.
  + Speed up getting horizontal and vertical glyph advances by up
    to 24%.
  + Significantly speed up vertical text shaping.
  + Various documentation improvements.
  + Various build improvements.
  + Various subsetting improvements.
  + Various improvements to Rust font functions (fontations
    integration) and shaper (HarfRust integration).
  + Rename harfruzz option and shaper to harfrust following
    upstream rename.
  + Implement hb_face_reference_blob() for DirectWrite font
    functions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1753704000">- Update to version 11.3.3:
  + Fix bug in vertical shaping of fonts without the vmtx table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755172800">- Update to version 11.4.1:
  + Fix clang compiler warnings.
- Changes from version 11.4.0:
  + General shaping and subsetting speedups.
  + Fix in Graphite shaping backend when glyph advances became
    negative.
  + Subsetting improvements, pruning empty mark-attachment lookups.
  + Don't use the macro name _S, which is reserved by system
    liberaries.
  + Build fixes and speedup.
  + Add a kbts shaping backend that calls into the kb_text_shape
    single-header shaping library. This is purely for testing and
    performance evaluation and we do NOT recommend using it for any
    other purposes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755777600">- Update to version 11.4.2:
  + Various performance and memory usage improvements.
  + The hb-shape command line tool can now be built with the
    amalgamated harfbuzz.cc source.
  + Fix regression in handling version 2 of avar table.
  + Increase various buffer length limits for better handling of
    fonts that generate huge number of glyphs per codepoint (e.g.
    Noto Sans Duployan).
  + Improvements to the harfrust shaper for more accurate testing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1755950400">- Update to version 11.4.3:
  + Make shaping fail much faster for certain malformed fonts
    (e.g., those that trigger infinite recursion).
  + Fix undefined behaviour introduced in 11.4.2.
  + Fix detection of the “Cambria Math” font when fonts are scaled,
    so the workaround for the bad MATH table constant is applied.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1756123200">- Update to version 11.4.4:
  + Fix a shaping regression affecting mark glyphs in certain
    fonts.
  + Fix pruning of mark filtering sets when subsetting fonts, which
    caused changes in shaping behaviour.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1756555200">- Update to version 11.4.5:
  + Bug fixes for “AAT” shaping, and other shaping micro
    optimizations.</changelog>
  <changelog author="mgorse@suse.com" date="1768564800">- Add harfbuzz-CVE-2026-22693.patch: fix a NULL pointer dereference
  (bsc#1256459 CVE-2026-22693).</changelog>
</package>
<package pkgid="0859f34ca428db873ee333e81c313d37a259305fe98a05cb3a76a71cc4ff396bcedc2ae2e4f28c0267145c342b9eed9c079f1395b15f3d4a423afebe54711d9c" name="typelib-1_0-Json-1_0" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="160000.3.2"/>
  <changelog author="daniel.molkentin@suse.com" date="1590148800">- Require pkgconfig to create pkgconfig() provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 1.5.2:
  + Add getters with default fallback for JsonObject.
  + Clarify some expections of the json_object_get_*_member APIs.
  + Fix getting immutable root nodes from empty input.
  + Add `--output` option to json-glib-format.
  + Support loading files via memory mapping.
  + Add a symbol version to all exported symbols.
- Pass -Dgtk_doc=disabled to meson: keep the gtk-doc disabled for
  now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1599825600">- Update to version 1.6.0:
  + docs: Add missing index for 1.6 symbols.
  + Updated translations.
- Add gtk-doc BuildRequires and build gtk-doc api documentation and
  manpages via passing man=true and gtk_doc=enabled to meson.
- Add check section and run meson_test macro during build.
- Drop obsolete nuking of .la files, no longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1612872000">- Update to version 1.6.2:
  + Fix build reproducibility.
  + Fix parsing of UTF-16 surrogate pairs.
  + Ignore UTF-8 BOM.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629547200">- Update to version 1.6.4:
  + Discover linker flags on all toolchains
  + Fix memory leak
  + Use gi-docgen instead of gtk-doc for generating the API
    reference
  + Build against newer versions of GLib
- Pass gtk_doc=disabled to meson, no longer build API
  documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629892800">- Update to version 1.6.6:
  + New release with the documentation and gi-docgen included in
    the archive.
- Drop gtk-doc BuildRequires, no longer needed, nor used.
- Add docbook-xsl-stylesheets and libxslt-tools BuildRequires,
  needed for building of manpages.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 1.8.0:
  + Build fixes
  + Add current node accessor to JsonReader
  + Make xgettext optional
  + Avoid leaking memory in error paths
  + Update test suite to conform with TAP
  + Ensure valid output for exponential notation of numbers
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725019200">- Update to version 1.10.0:
  + Allow disabling installed tests
  + Support parsing multiple root statements in non-strict mode
  + Allow loading files &gt;4GB with json-glib-validate
- Add docutils BuildRequires: New dependency (rst2man)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1733832000">- Update to version 1.10.6:
  + Allow single quoted strings when running in non-strict mode.
  + Allow escaped characters when running in non-strict mode.
  + Add missing nullable annotation.</changelog>
</package>
<package pkgid="7722e1ce5e017379e6c1d6b609018d6122a459e27bf44c89a02abc15e1e7c041f48d7107068ee153a4d66cb928cfe3ac3ba1991006eff2f89aa9e3240e6960b0" name="typelib-1_0-Libosinfo-1_0" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="160000.3.2"/>
  <changelog author="carnold@suse.com" date="1614686400">- Update to version 1.9.0
  Changes in this release include:
  * Improve on the osinfo-tools' and osinfo-detect's help
  * Several CI improvements
  * Several translations improvements
  * Improve on debuggability of the loader code
  * Fix build when using clang</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to version 1.10.0
  Changes in this release include:
  * Add API for resolving multiple tree matches
  * Add API for resolving multiple media matches
  * Add API to match between two OsinfoTree
  * Add API to match between two OsinfoMedia
  * Add API to get a complete list of firmwares
  * Add missing documentation of osinfo_os_add_firmware()
  * Add release status to osinfo-query
  * Add --all flag to all tools to report all matches
  * Fix hiding database entries
  * Adapt to libsoup3 which is now preferred over libsoup2
  * Several CI improvements
  * Several translations improvements</changelog>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1197769 - FTBFS: libosinfo won't compile on SP4
  libosinfo.spec</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Add 3a0fef72.patch: build: Add option to select libsoup ABI.
  Following this, add conditional pkgconfig(libsoup-3.0)
  BuildRequires.
- Modernize spec, use ldconfig_scriptlets macro for post(un)
  handling, package COPYING with license macro.</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1699876800">- Update to version 1.11.0 (jsc#PED-6305)
  Changes in this release include:
  * Several minor memory leak fixes
  * Several CI improvements
  * Several translations improvements
- Drop 3a0fef72.patch as it is now part of the tarball</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
  <changelog author="carnold@suse.com" date="1709553600">- bsc#1220228 - virt-manager crashes when its viewer is opened on a
  running guest that uses spice graphics
  virt-manager uses both libosinfo and spice-gtk. spice-gtk is now
  built to use libsoup 3.0 but libosinfo was still using
  libsoup 2.4. Prefer libsoup 3.0 over libsoup 2.4 for Tumbleweed
  and newer SLE versions.</changelog>
  <changelog author="christophe@krop.fr" date="1716724800">- Add upstream change:
  * 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
  <changelog author="carnold@suse.com" date="1733140800">- Update to version 1.12.0 (jsc#PED-8910)
  * Some memory leak fixes
  * Adapt to change in libxml2
  * Several CI improvements
  * Several translations improvements
- Drop 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
</package>
<package pkgid="518d72810fb4756ce2e6689017e5471e366923c070427b699e1c98de4ee219caea799aaad5730184e890e86d34913c81eb0f8af8eb3a4c9126beac622cdda806" name="typelib-1_0-NM-1_0" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="da66b69eb32178824a1d39c5bfcf1715f7096996cfc434626b9b12016a9b5c4ffd161d2e660a2796e8e51a3af66915508c30027ca96ae36b9b59e3925aefce30" name="typelib-1_0-Pango-1_0" arch="x86_64">
  <version epoch="0" ver="1.56.4" rel="160000.2.2"/>
  <changelog author="pujos.michael@gmail.com" date="1711886400">- added GraphicsMagick package as Recommends. The invocation of
  pango-view with the ft2 backend requires the gm command found in
  that package</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Update to version 1.52.2:
  + coretext: Implement reload_font.
  + coretext: Use Menlo instead of Courier for monospace.
  + win32: Avoid a double free.
  + Update to Unicode 15.1.
  + Simplify hexbox drawing.
- Changes from version 1.52.1:
  + Fix hexbox drawing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718020800">- Update to version 1.54.0:
  + Build fixes.
  + Memory leak fixes.
  + Drop the install-tests build option.
  + Add build-examples and build-tests build options.
  + Require meson 0.63.
  + Add pango_item_get_char_offset.
  + Update to Unicode 15.1.
  + Fix wrong use of GWeakRef, leading to crashes.
- Drop -Dinstall-tests meson parameter: no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1735387200">- Update to version 1.55.0 (Unstable):
  + Support Unicode 16
  + Add pango_font_map_add_font_file
  + fontconfig: Reject patterns without FC_FILE
  + coretext:
  - Actually use .AppleSystemUIFont
  - Keep track of variations
  + build:
  - Require harfbuzz 8.4.0
  - Require fontconfig 2.15
  - Require meson 1.2.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736424000">- Update to version 1.56.0:
  + Support setting font features in font descriptions
  + serialization:
  - Document the tab array format
  - Accept attributes without range
  + layout: Fix measuring ellipsis runs with shapes
  + build:
  - Require C11
  - Require GLib 2.80
  - Require cairo 1.18
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Drop help2man BuildRequires, upstream ported manpages for tools
  to rst2man/rst2html, and defaults to not build it. Follow
  upstream and do not build the man or html documentation for
  tools.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1737028800">- Update to version 1.56.0+12:
  * Deal with FC_FONT_WRAPPER more graciously
  * itemize: Limp along harder
  * build: Reshuffle docs build
  * build: Move gir to toplevel meson.build
  * build: Generate glib deprecation defines
  * build: Sync naming with gtk</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1737288000">- Update to version 1.56.1:
  + Avoid criticals when there are no fonts
  + fontconfig:
  - Handle lack of FC_FONT_WRAPPER in font cache
  - Prefer application fonts even if they are older</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741780800">- Update to version 1.56.2:
  + Annotation fixes
  + fontconfig:
  - Set optical size for fonts with an opsz axis
  - Make panog_font_map_reload_font scale linearly
  + win32: Improve the pango_font_map_reload_font implementation</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 1.56.3:
  + Improve font description serialization
  + fontconfig: Avoid FcFontSetSort when possible
  + coverage: Extend coverage by Unicode decomposition
  + win32: Speed up coverage creation
  + Deprecate pango_font_descriptions_free</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751025600">- Update to version 1.56.4:
  + fontconfig:
  - Improve the add_font_file implementation
  - Combine font features and style variants
  - Make sure font faces stay alive
  + win32:
  - Drop some caching
  - Make sure font faces stay alive
  - Modernize and simplify the code
  - Stop synthesizing fonts
  - Implement list models
  + coretext: Support synthetic small caps
  + layout: Avoid assertions in line breaking
  + build: Require GLib 2.82</changelog>
</package>
<package pkgid="4ff69bff9bb75609419461f6abd788bab27f76356ec99bc4fa0f4266bbad2caafd98c45ce1e63e1a914bb33654456e92f8d7db1bc6d2ee800e4564be1518b1b2" name="ucode-amd" arch="noarch">
  <version epoch="0" ver="20251203" rel="160000.1.1"/>
  <changelog author="tiwai@suse.com" date="1738929600">- Update to version 20250206 (git commit aaae2fb60f75):
  just a version bump without content changes for making the smooth
  repo transition</changelog>
  <changelog author="tiwai@suse.com" date="1739275200">- Fix license description for kernel-firmware-tools package
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1745582400">- Change conflicts filesystem &lt; 84 to conflicts filesystem without
  may-perform-usrmerge. Version 84 is specific to Tumbleweed; CODE
  16 uses Version 16; yet we need to ensure we get an up-to-date
  version of filesystem. Relying on the recently introduced provides
  instructing zypp about the usrmerge is perfect for this use case.</changelog>
  <changelog author="tiwai@suse.com" date="1752148800">- Update to version 20250708 (git commit 99d64b4f788c):
  * linux-firmware: Update AMD cpu microcode</changelog>
  <changelog author="tiwai@suse.com" date="1753876800">- Update to version 20250730 (git commit 910c19074091):
  * linux-firmware: Update AMD cpu microcode</changelog>
  <changelog author="tiwai@suse.com" date="1761566400">- Update to version 20251024 (git commit 9b899c779b8a):
  * amd-ucode: Fix minimum revisions in README</changelog>
  <changelog author="tiwai@suse.com" date="1761739200">- Update to version 20251028 (git commit 4f72031fc195):
  * linux-firmware: Update AMD cpu microcode</changelog>
  <changelog author="tiwai@suse.com" date="1762084800">- Update to version 20251031 (git commit 04b323bb64f9):
  * linux-firmware: Update AMD cpu microcode</changelog>
  <changelog author="tiwai@suse.com" date="1763121600">- Update to version 20251113 (git commit fb0dbcd30118):
  * linux-firmware: Update AMD cpu microcode</changelog>
  <changelog author="tiwai@suse.com" date="1764849600">- Update to version 20251203 (git commit a0f0e52138e5):
  * linux-firmware: Update amd-ucode copyright information
  * linux-firmware: Update AMD cpu microcode</changelog>
</package>
<package pkgid="0121e0f30089241ada2558b115bc6846007e5659ba0b496d94222cf8f2a2d31b428bc861f49e5211fb1acc7e95e7a50e113696baef229b55004a5e85406d3cf3" name="ucode-intel" arch="x86_64">
  <version epoch="0" ver="20260210" rel="160000.1.1"/>
  <changelog author="meissner@suse.com" date="1723636800">- Intel CPU Microcode was updated to the 20240813 release (bsc#1229129)
  - CVE-2024-24853: Security updates for [INTEL-SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html)
  - CVE-2024-25939: Security updates for [INTEL-SA-01118](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html)
  - CVE-2024-24980: Security updates for [INTEL-SA-01100](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html)
  - CVE-2023-42667: Security updates for [INTEL-SA-01038](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html)
  - CVE-2023-49141: Security updates for [INTEL-SA-01046](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html)
  Other issues fixed:
  - Update for functional issues. Refer to [Intel® Core™ Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [2nd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details
  - Update for functional issues. Refer to [Intel® Xeon® D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th and 9th Generation Intel® Core™ Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [Intel® Atom® x6000E Series, and Intel® Pentium® and Celeron® N and J Series Processors for Internet of Things (IoT) Applications](https://cdrdv2.intel.com/v1/dl/getContent/636674) for details.
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | AML-Y22        | H0       | 06-8e-09/10 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000fc | 00000100 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f6 | 000000f8 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f4 | 000000f6 | Core Gen8
  | CFL-S          | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9 Desktop
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | CLX-SP         | B1       | 06-55-07/bf | 05003605 | 05003707 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000fa | 000000fc | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000fa | 000000fc | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000fa | 000000fc | Core Gen10
  | CML-U42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000fa | 000000fe | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000fa | 000000fc | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002802 | 07002904 | Xeon Scalable Gen3
  | EHL            | B1       | 06-96-01/01 | 00000019 | 0000001a | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | ICL-D          | B0       | 06-6c-01/10 | 01000290 | 010002b0 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c4 | 000000c6 | Core Gen10 Mobile
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003d1 | 0d0003e7 | Xeon Scalable Gen3
  | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile
  | MTL            | C-0      | 06-aa-04/e6 | 0000001c | 0000001e | Core™ Ultra Processor
  | RKL-S          | B0       | 06-a7-01/02 | 0000005e | 00000062 | Core Gen11
  | TGL            | B0/B1    | 06-8c-01/80 | 000000b6 | 000000b8 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000050 | 00000052 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000036 | 00000038 | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000f4 | 000000f6 | Core Gen8 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1726056000">- Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)
  - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access. [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html)
  - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access  [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html)
  - Update for functional issues. Refer to [Intel® Core™ Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  [#]## New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TWL            | N0       | 06-be-00/19 |          | 0000001a | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  [#]## Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000035 | 00000036 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 00000035 | 00000036 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000433 | 00000434 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 00000433 | 00000434 | Core Gen12
  | ADL-N          | N0       | 06-be-00/11 | 00000017 | 0000001a | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | MTL            | C0       | 06-aa-04/e6 | 0000001e | 0000001f | Core™ Ultra Processor
  | RPL-E/HX/S     | B0       | 06-b7-01/32 | 00000123 | 00000129 | Core Gen13/Gen14
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004121 | 00004122 | Core Gen13
  | RPL-HX/S       | C0       | 06-bf-02/07 | 00000035 | 00000036 | Core Gen13/Gen14
  | RPL-S          | H0       | 06-bf-05/07 | 00000035 | 00000036 | Core Gen13/Gen14
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004121 | 00004122 | Core Gen13</changelog>
  <changelog author="meissner@suse.com" date="1730376000">- Intel CPU Microcode was updated to the 20241029 release (bsc#1230400)
  Update for functional issues. Refer to [14th/13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | RPL-E/HX/S     | B0       | 06-b7-01/32 | 00000129 | 0000012b | Core Gen13/Gen14</changelog>
  <changelog author="meissner@suse.com" date="1731499200">- Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)
  - CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access. Security updates for [INTEL-SA-01101](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html)
  - CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.  Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html)
  - CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access. Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html)
  - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access. Updated security updates for [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html)
  - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access Updated security updates for [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html)
  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.
  - Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [5th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/793902) for details.
  - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel Xeon D-1700 and D-1800 Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714069) for details
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000036 | 00000037 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 00000036 | 00000037 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000434 | 00000435 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 00000434 | 00000435 | Core Gen12
  | EMR-SP         | A0       | 06-cf-01/87 | 21000230 | 21000283 | Xeon Scalable Gen5
  | EMR-SP         | A1       | 06-cf-02/87 | 21000230 | 21000283 | Xeon Scalable Gen5
  | MTL            | C0       | 06-aa-04/e6 | 0000001f | 00000020 | Core™ Ultra Processor
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004122 | 00004123 | Core Gen13
  | RPL-HX/S       | C0       | 06-bf-02/07 | 00000036 | 00000037 | Core Gen13/Gen14
  | RPL-S          | H0       | 06-bf-05/07 | 00000036 | 00000037 | Core Gen13/Gen14
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004122 | 00004123 | Core Gen13
  | SPR-SP         | E3       | 06-8f-06/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4
  New Disclosures Updated in Prior Releases:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ICL-D          | B0       | 06-6c-01/10 | 010002b0 | N/A      | Xeon D-17xx/D-18xx, D-27xx/D-28xx
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003e7 | N/A      | Xeon Scalable Gen3</changelog>
  <changelog author="meissner@suse.com" date="1739361600">- Intel CPU Microcode was updated to the 20250211 release (bsc#1237096)
  - Security updates for INTEL-SA-01166 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html
  * CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware
    Logic for some Intel Processors may allow privileged user to
    potentially enable denial of service via local access.
  - Security updates for INTEL-SA-01213 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html
  * CVE-2024-36293: A potential security vulnerability in some Intel
    Software Guard Extensions (Intel SGX) Platforms may allow denial
    of service. Intel is releasing microcode updates to mitigate this
    potential vulnerability.
  - Security updates for INTEL-SA-01139 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html
  * not clear which CVEs are fixed here, and which are in UEFI BIOS updates.
  - Security updates for INTEL-SA-01228 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html
  * CVE-2024-39355: A potential security vulnerability in some
    13th and 14th Generation Intel Core Processors may allow denial
    of service. Intel is releasing microcode and UEFI reference code
    updates to mitigate this potential vulnerability.
  - Security updates for INTEL-SA-01194 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01194.html
  * CVE-2024-37020: A potential security vulnerability in the Intel
    Data Streaming Accelerator (Intel DSA) for some Intel Xeon Processors
    may allow denial of service. Intel is releasing software updates to
    mitigate this potential vulnerability.
  - Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.
  - Update for functional issues. Refer to 13th/14th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.
  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.
  - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.
  - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.
  - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.
  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.
  - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.
  - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.
  - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.
  - Update for functional issues. Refer to Intel Xeon 6700-Series Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/820922 for details.
  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SRF-SP         | C0       | 06-af-03/01 |          | 03000330 | Xeon 6700-Series Processors with E-Cores
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000037 | 00000038 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 00000037 | 00000038 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000435 | 00000436 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 00000435 | 00000436 | Core Gen12
  | ADL-N          | N0       | 06-be-00/19 | 0000001a | 0000001c | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0/R0    | 06-9a-04/40 | 00000007 | 00000009 | Intel(R) Atom(R) C1100
  | CFL-H          | R0       | 06-9e-0d/22 | 00000100 | 00000102 | Core Gen9 Mobile
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f8 | 000000fa | Core Gen8 Desktop, Mobile, Xeon E
  | EMR-SP         | A0       | 06-cf-01/87 | 21000283 | 21000291 | Xeon Scalable Gen5
  | EMR-SP         | A1       | 06-cf-02/87 | 21000283 | 21000291 | Xeon Scalable Gen5
  | ICL-D          | B0       | 06-6c-01/10 | 010002b0 | 010002c0 | Xeon D-17xx, D-27xx
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003e7 | 0d0003f5 | Xeon Scalable Gen3
  | RPL-E/HX/S     | B0       | 06-b7-01/32 | 0000012b | 0000012c | Core Gen13/Gen14
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004123 | 00004124 | Core Gen13
  | RPL-HX/S       | C0       | 06-bf-02/07 | 00000037 | 00000038 | Core Gen13/Gen14
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004123 | 00004124 | Core Gen13
  | RPL-S          | H0       | 06-bf-05/07 | 00000037 | 00000038 | Core Gen13/Gen14
  | RKL-S          | B0       | 06-a7-01/02 | 00000062 | 00000063 | Core Gen11
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c000390 | 2c0003e0 | Xeon Max
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000603 | 2b000620 | Xeon Scalable Gen4
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000603 | 2b000620 | Xeon Scalable Gen4
  | TWL            | N0       | 06-be-00/19 | 0000001a | 0000001c | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  [#]## New Disclosures Updated in Prior Releases
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9</changelog>
  <changelog author="meissner@suse.com" date="1747224000">- Intel CPU Microcode was updated to the 20250512 release (bsc#1243123)
  - Security updates for [INTEL-SA-01153](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html)
  - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel Processors may allow an authenticated user to potentially enable information disclosure via local access.
  - Security updates for [INTEL-SA-01244](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html)
  - CVE-2025-20103: Insufficient resource pool in the core management mechanism for some Intel Processors may allow an authenticated user to potentially enable denial of service via local access.
  - CVE-2025-20054: Uncaught exception in the core management mechanism for some Intel Processors may allow an authenticated user to potentially enable denial of service via local access.
  - Security updates for [INTEL-SA-01247](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html)
  - CVE-2024-43420: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom processors may allow an authenticated user to potentially enable information disclosure via local access.
  - CVE-2025-20623: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Core processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.
  - CVE-2024-45332: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel Processors may allow an authenticated user to potentially enable information disclosure via local access.
  - Security updates for [INTEL-SA-01322](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html)
  - CVE-2025-24495:  Incorrect initialization of resource in the branch prediction unit for some Intel Core Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.
  - CVE-2025-20012: Incorrect behavior order for some Intel Core Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.
  - Update for functional issues. Refer to [Intel Core Ultra 200 V Series Processor (Series2)](https://cdrdv2.intel.com/v1/dl/getContent/834774) for details.
  - Update for functional issues. Refer to [Intel Core Ultra 200 V Series Processor](https://cdrdv2.intel.com/v1/dl/getContent/827538) for details.
  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.
  - Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
  - Update for functional issues. Refer to [6th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/835486) for details.
  - Update for functional issues. Refer to [5th Gen Intel Xeon Processor Scalable Family](https://cdrdv2.intel.com/v1/dl/getContent/793902) for details.
  - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel Xeon 6700-Series Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/820922) for details.
  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [Intel Pentium Silver and Intel Celeron Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/336562) for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ARL-U          | A1       | 06-b5-00/80 |          | 0000000a | Core Ultra Processor (Series2)
  | ARL-S/HX (8P)  | B0       | 06-c6-02/82 |          | 00000118 | Core Ultra Processor (Series2)
  | ARL-H          | A1       | 06-c5-02/82 |          | 00000118 | Core Ultra Processor (Series2)
  | GNR-AP/SP      | B0       | 06-ad-01/95 |          | 010003a2 | Xeon Scalable Gen6
  | GNR-AP/SP      | H0       | 06-ad-01/20 |          | 0a0000d1 | Xeon Scalable Gen6
  | LNL            | B0       | 06-bd-01/80 |          | 0000011f | Core Ultra 200 V Series Processor
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000038 | 0000003a | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 00000038 | 0000003a | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000436 | 00000437 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 00000436 | 00000437 | Core Gen12
  | ADL-N          | N0       | 06-be-00/19 | 0000001c | 0000001d | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile
  | AZB            | A0/R0    | 06-9a-04/40 | 00000009 | 0000000a | Intel(R) Atom(R) C1100
  | CFL-H          | R0       | 06-9e-0d/22 | 00000102 | 00000104 | Core Gen9 Mobile
  | CLX-SP         | B1       | 06-55-07/bf | 05003707 | 05003901 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000fc | 00000100 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000fc | 00000100 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000fc | 00000100 | Core Gen10
  | CML-U42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000fe | 00000102 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000fc | 00000100 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002904 | 07002b01 | Xeon Scalable Gen3
  | EMR-SP         | A1       | 06-cf-02/87 | 21000291 | 210002a9 | Xeon Scalable Gen5
  | GLK-R          | R0       | 06-7a-08/01 | 00000024 | 00000026 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 010002c0 | 010002d0 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c6 | 000000ca | Core Gen10 Mobile
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003f5 | 0d000404 | Xeon Scalable Gen3
  | MTL            | C0       | 06-aa-04/e6 | 00000020 | 00000024 | Core Ultra Processor
  | RKL-S          | B0       | 06-a7-01/02 | 00000063 | 00000064 | Core Gen11
  | RPL-E/HX/S     | B0       | 06-b7-01/32 | 0000012c | 0000012f | Core Gen13/Gen14
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004124 | 00004128 | Core Gen13
  | RPL-HX/S       | C0       | 06-bf-02/07 | 00000038 | 0000003a | Core Gen13/Gen14
  | RPL-S          | H0       | 06-bf-05/07 | 00000038 | 0000003a | Core Gen13/Gen14
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004124 | 00004128 | Core Gen13
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0003e0 | 2c0003f7 | Xeon Max
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000620 | 2b000639 | Xeon Scalable Gen4
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000620 | 2b000639 | Xeon Scalable Gen4
  | SRF-SP         | C0       | 06-af-03/01 | 03000330 | 03000341 | Xeon 6700-Series Processors with E-Cores
  | TGL            | B0/B1    | 06-8c-01/80 | 000000b8 | 000000bc | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000052 | 00000056 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000038 | 0000003c | Core Gen11 Mobile
  | TWL            | N0       | 06-be-00/19 | 0000001c | 0000001d | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | WHL-U          | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen8 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1755777600">- Intel CPU Microcode was updated to the 20250812 release (bsc#1248438)
  - Security updates for INTEL-SA-01249 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01249.html
  - CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
  - Security updates for INTEL-SA-01308 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01308.html
  - CVE-2025-22840: Sequence of processor instructions leads to unexpected behavior for some Intel Xeon 6 Scalable processors may allow an authenticated user to potentially enable escalation of privilege via local access
  - Security updates for INTEL-SA-01310 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01310.html
  - CVE-2025-22839: Insufficient granularity of access control in the OOB-MSM for some Intel Xeon 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.
  - Security updates for INTEL-SA-01311 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01311.html
  - CVE-2025-22889: Improper handling of overlap between protected memory ranges for some Intel Xeon 6 processor with Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.
  - Security updates for INTEL-SA-01313 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01313.html
  - CVE-2025-20053: Improper buffer restrictions for some Intel Xeon Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access.
  - Security updates for INTEL-SA-01367 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01367.html
  - CVE-2025-26403: Out-of-bounds write in the memory subsystem for some Intel Xeon 6 processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.
  - CVE-2025-32086: Improperly implemented security check for standard in the DDRIO configuration for some Intel Xeon 6 Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.
  - Update for functional issues. Refer to 13th/14th Gen Intel Core Processor Specification Update for details.
  - Update for functional issues. Refer to 3rd Gen Intel Xeon Processor Scalable Family Specification Update for details.
  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update for details.
  - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update for details.
  - Update for functional issues. Refer to 6th Gen Intel Xeon Scalable Processors Specification Update for details.
  - Update for functional issues. Refer to Intel Core Ultra 200 V Series Processor for details.
  - Update for functional issues. Refer to Intel Core Ultra Processor for details.
  - Update for functional issues. Refer to Intel Core Ultra Processor (Series 2) for details.
  - Update for functional issues. Refer to Intel Xeon 6700-Series Processor Specification Update for details.
  - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update for details.
  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ARL-H          | A1       | 06-c5-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2)
  | ARL-S/HX (8P)  | B0       | 06-c6-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2)
  | EMR-SP         | A1       | 06-cf-02/87 | 210002a9 | 210002b3 | Xeon Scalable Gen5
  | GNR-AP/SP      | B0       | 06-ad-01/95 | 010003a2 | 010003d0 | Xeon Scalable Gen6
  | GNR-AP/SP      | H0       | 06-ad-01/20 | 0a0000d1 | 0a000100 | Xeon Scalable Gen6
  | ICL-D          | B0       | 06-6c-01/10 | 010002d0 | 010002e0 | Xeon D-17xx, D-27xx
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d000404 | 0d000410 | Xeon Scalable Gen3
  | LNL            | B0       | 06-bd-01/80 | 0000011f | 00000123 | Core Ultra 200 V Series Processor
  | MTL            | C0       | 06-aa-04/e6 | 00000024 | 00000025 | Core™ Ultra Processor
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004128 | 00004129 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004128 | 00004129 | Core Gen13
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0003f7 | 2c000401 | Xeon Max
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4
  | SRF-SP         | C0       | 06-af-03/01 | 03000341 | 03000362 | Xeon 6700-Series Processors with E-Cores
  New Disclosures Updated in Prior Releases:
  All ADL, RPL, SPR, EMR, MTL, ARL Microcode patches previously released in May 2025.</changelog>
  <changelog author="meissner@suse.com" date="1758542400">- switch the supplements to use supplements + kernel to allow
  moving a installation to Intel hardware (bsc#1249138)</changelog>
  <changelog author="meissner@suse.com" date="1762948800">- Intel CPU Microcode was updated to the 20251111 release (bsc#1253319)
  - Update for functional issues.
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GNR-D          | B0/B1    | 06-ae-01/97 |          | 01000273 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 0000003a | 0000003d | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 0000003a | 0000003d | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000437 | 0000043a | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 00000437 | 0000043a | Core Gen12
  | ADL-N          | N0       | 06-be-00/19 | 0000001d | 0000001e | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | ARL-H          | A1       | 06-c5-02/82 | 00000119 | 0000011a | Core Ultra Processor (Series 2)
  | ARL-S/HX (8P)  | B0       | 06-c6-02/82 | 00000119 | 0000011a | Core Ultra Processor (Series 2)
  | AZB            | A0/R0    | 06-9a-04/40 | 0000000a | 0000000b | Atom C1100
  | EMR-SP         | A1       | 06-cf-02/87 | 210002b3 | 210002c0 | Xeon Scalable Gen5
  | GNR-AP/SP      | Bx/Hx/Lx | 06-ad-01/95 | 010003d0 | 010003f0 | Xeon 6900-6700/6500-Series Processors with P-Cores
  | GNR-SP R1S     | Bx/Hx/Lx | 06-ad-01/20 | 0a000100 | 0a000124 | Xeon 6700/6500-Series Processors with P-Cores
  | LNL            | B0       | 06-bd-01/80 | 00000123 | 00000125 | Core Ultra 200 V Series Processor
  | RPL-E/HX/S     | B0       | 06-b7-01/32 | 0000012f | 00000132 | Core Gen13/Gen14
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004129 | 00006133 | Core Gen13
  | RPL-HX/S       | C0       | 06-bf-02/07 | 0000003a | 0000003d | Core Gen13/Gen14
  | RPL-S          | H0       | 06-bf-05/07 | 0000003a | 0000003d | Core Gen13/Gen14
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004129 | 00006133 | Core Gen13
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c000401 | 2c000410 | Xeon Max
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000643 | 2b000650 | Xeon Scalable Gen4
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000643 | 2b000650 | Xeon Scalable Gen4
  | SRF-AP/SP      | C0       | 06-af-03/01 | 03000362 | 03000382 | Xeon 6900/6700-Series Processors with E-Cores
  | TWL            | N0       | 06-be-00/19 | 0000001d | 0000001e | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Intel CPU Microcode was updated to the 20260210 release (bsc#1258046)
  - CVE-2024-24853: Updated fix for incorrect behavior order in transition
    between executive monitor and SMI transfer monitor (STM) in some Intel(R)
    Processor may allow a privileged user to potentially enable escalation
    of privilege via local access. (bsc#1229129)
  - CVE-2025-31648: Improper handling of values in the
    microcode flow for some Intel Processor Family may allow
    an escalation of privilege. (bsc#1258046 INTEL-SA-01396
    https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01396.html)
  - Update for various functional issues.
- Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 0000003d | 0000003e | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 0000003d | 0000003e | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000043a | 0000043b | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 0000043a | 0000043b | Core Gen12
  | ADL-N          | N0       | 06-be-00/19 | 0000001e | 00000021 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | ARL-H          | A1       | 06-c5-02/82 | 0000011a | 0000011b | Core Ultra Processor (Series 2)
  | ARL-S/HX (8P)  | B0       | 06-c6-02/82 | 0000011a | 0000011b | Core Ultra Processor (Series 2)
  | ARL-U          | A0       | 06-b5-00/80 | 0000000a | 0000000d | Core Ultra Processor (Series 2)
  | AZB            | A0/R0    | 06-9a-04/40 | 0000000b | 0000000c | Atom C1100
  | EMR-SP         | A1       | 06-cf-02/87 | 210002c0 | 210002d3 | Xeon Scalable Gen5
  | GNR-AP/SP      | Bx/Hx/Lx | 06-ad-01/95 | 010003f0 | 01000405 | Xeon 6900/6700/6500 Series Processors with P-Cores
  | GNR-D          | B0/B1    | 06-ae-01/97 | 01000273 | 010002f3 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
  | GNR-SP R1S     | Bx/Hx/Lx | 06-ad-01/20 | 0a000124 | 0a000133 | Xeon 6700/6500-Series Processors with P-Cores
  | ICL-D          | B0       | 06-6c-01/10 | 010002e0 | 010002f1 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000ca | 000000cc | Core Gen10 Mobile
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d000410 | 0d000421 | Xeon Scalable Gen3
  | MTL            | C0       | 06-aa-04/e6 | 00000025 | 00000028 | Core Ultra Processor
  | RKL-S          | B0       | 06-a7-01/02 | 00000064 | 00000065 | Core Gen11
  | RPL-E/HX/S     | B0       | 06-b7-01/32 | 00000132 | 00000133 | Core Gen13/Gen14
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00006133 | 00006134 | Core Gen13
  | RPL-HX/S       | C0       | 06-bf-02/07 | 0000003d | 0000003e | Core Gen13/Gen14
  | RPL-S          | H0       | 06-bf-05/07 | 0000003d | 0000003e | Core Gen13/Gen14
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00006133 | 00006134 | Core Gen13
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c000410 | 2c000421 | Xeon Max
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000650 | 2b000661 | Xeon Scalable Gen4
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000650 | 2b000661 | Xeon Scalable Gen4
  | TGL            | B0/B1    | 06-8c-01/80 | 000000bc | 000000be | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000056 | 00000058 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 0000003c | 0000003e | Core Gen11 Mobile
  | TWL            | N0       | 06-be-00/19 | 0000001e | 00000021 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E</changelog>
</package>
<package pkgid="8ca70c62fb6cd94e0945398d6ba92021f230be4bea0d3d1be612f2ac68e331b8ac13e2324b6341919b88779bd9ab713702dc12d63029e71dea51ed4268e9d6df" name="udev" arch="x86_64">
  <version epoch="0" ver="257.13" rel="160000.1.1"/>
  <changelog author="fbui@suse.com" date="1767787200">- Drop %filetriggers build flag. It was introduced to ease backport of
  Base:System to SLE distros where file-triggers were unreliable but that is no
  longer the case on the latest SLE distros.</changelog>
  <changelog author="fbui@suse.com" date="1767960000">- Drop most of the workarounds contained in the fixlets.
  These workarounds were hold to address old issues that no longer exist in
  recent versions of systemd. For systems upgrading to this version, we assume
  these issues have already been fixed by the fixlet scripts still shipped by
  the previous distribution.
  Only the logig warning users about the deprecated usage of the main
  configuration files (favoring drop-in files) is preserved.</changelog>
  <changelog author="fbui@suse.com" date="1767960001">- systemd.spec: don't reexecute PID1 on transactional updates.</changelog>
  <changelog author="fbui@suse.com" date="1767960002">- systemd-update-helper: clean up the flags immediately after they have been
  consumed (no functional changes).</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1770206400">- Import commit fb9d92682b2469aa205d4df3ffea61e4806ed0e9
  fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)
  80ec26cee0 core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1770292800">- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853)
  This was originally intended to ensure these paths had a designated package
  owner. However the existing list was neither exhaustive nor up to date. To
  better support immutable images, we are removing these entries and will now
  keep only /var/lib/systemd as owned by the systemd package. Maintaining the
  broader list provided little value due to its ongoing inconsistency anyways.</changelog>
  <changelog author="fbui@suse.com" date="1772107200">- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)</changelog>
  <changelog author="fbui@suse.com" date="1772452800">- Import commit 3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654 (merge of v257.11)
  This merge includes the following fix:
  54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/358010e6e90269570025c598b1430afa1e2ff6ca...3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654</changelog>
  <changelog author="fbui@suse.com" date="1773662400">- Import commit d349fc5cd4f9ee2b7884c2610647e92806d14b28 (merge of v257.13)
  This merge includes the following fix:
  6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28</changelog>
</package>
<package pkgid="c1f2802d2edf4a452166b7b6995ea19e546c6e81b4695ff4a74688e53249955b14040ea26dd42cd1baa650d50e5fa81fe66bcedcac0b5e54a467ab48e9115813" name="udica" arch="noarch">
  <version epoch="0" ver="0.2.7" rel="160000.2.2"/>
  <changelog author="Gayane.Osipyan@suse.com" date="1659355200">- Initial packaging of version 0.2.6-5</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1683201600">- update to version 0.2.7
  * Make sure each section of the inspect exists before accessing
  * Improve label collection for mounts and devices
  * Add support for containerd via nerdctl inspect
  * Avoid duplicate rules for accessing mounts and devices</changelog>
</package>
<package pkgid="2ae427690fc7c4f3569808f7891e50c99619c8577cf9f012c6ca4bf95b0a55bc28df14dd3e9ea1c13ad7df50ab30744555d1a0a6c85ae701a909a9a40687b3f1" name="udisks2" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="160000.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in
    HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with
    symlinks
  * mount options: Allow 'nosymfollow' mount option for
    unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup
    lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for
    mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent()
    out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- Drop udisks2-Fix-memory-leaks.patch, and
  udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637150400">- Update to version 2.9.4:
  + Many fixes, improvements, and additions to the code.
  + Mount options:
  - Always use errors=remount-ro for ext filesystems;
  - Add ntfs3 kernel driver options.
  + Build: Remove warnings unknown to clang.
  + Tests: Adapt to clang differences when causing a segfault.
- Changes from version 2.9.3:
  + Many fixes, improvements, and additions to the code and test.
- Add "%tmpfiles_create %{_tmpfilesdir}/udisks2.conf" call in %post
  section to make sure /run/media will be created right after the
  instalation of udisks2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging libudisks_vdo standalone module, it is deprecated.
  Do this via passing explicit disable-vdo to configure and
  dropping libblockdev-vdo-devel BuildRequires. Add a
  libudisks2_0_vdo Obsoletes to ease updates.
- No longer remove upstream config files, we want to be able to
  load modules on demand. Note that we move an example file to docs
  to keep sysconfdir clean of non-conf files.
- Add a default_luks_encryption define, and set it to luks2, sed
  this macro into source, future versions of udisks will not need
  this, as upstream moves to luks2 by default.
- Ghost a dir/file created by us.
- Split out API docs into separate docs sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Drop gtk-doc BuildRequires, and pass disable-gtk-doc to
  configure, the included gtk-docs are fine, we do not need to
  build them ourselves.</changelog>
  <changelog author="jsegitz@suse.com" date="1653048000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_udisks2-zram-setup@.service.patch
  * harden_udisks2.service.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1668600000">- fix crash during shutdown (bsc#1205371)
  * add:
    0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669118400">- avoid wakening spun-down disks on unrelated events (bsc#1120608)
  * add:
    0001-udisksata-Move-the-low-level-PM-state-call.patch
    0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch
    0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- Drop rcFOO symlinks for CODE16 (PED-266).
- update to version 2.10.1
  - Update Ukrainian translation
  - tests: Wipe used devices for LVM2 RAID tests
  - tests: Settle down before checking the LVM RAID MissingPhysicalVolumes property
  - tests: Rescan vdevs after lvm raid tests
  - Update German translation
  - tests: Mark UDF fstab filesystem tests as unstable
  - tests: Add offline and online filesystem grow tests
  - doc: Clarify the Filesystem.Size property presence
  - udiskslinuxfilesystem: Force native tools for mounted XFS fs size retrieval
  - udiskslinuxfilesystem: Refactor internal whitelists
  - tests: Fix Python class invocation in nvme tests
  - udisksctl: Add "--no-partition-scan" option for "loop-setup" command
  - tests: Fix regex escaping
  - integration-test: Fix invalid escaping
  - tests: Mark LVM RAID tests as unstable
  - tests: Fix LSM drive objects crawl
  - iscsi: Fix login on firmware-discovered nodes
  - udiskslinuxmanager: Properly handle disabled modules
  - tests: Replace deprecated unittest assert calls
  - udisksctl: Guard object lookup
  - Update ka.po
  - udiskslinuxloop: Avoid warnings on empty loop devices
  - Update Polish translation
  - Limit getting filesystem size only to Ext and XFS
  - build: Check for gobject-introspection m4 macro presence
  - tests: start the polkitd mock with the corresponding user if it exists
- Add Obsoletes tags for libudisks2-0_bcache and libudisks2-0_zram
  modules, dropped on latest version bump, so they get removed from
  end users' systems upon system upgrade.
- Drop unnecessary/discouraged %{?systemd_requires} from spec file.
- Update to version 2.10.0:
  + This release brings large number of internal changes, while
    keeping the promise of API stability. This development cycle
    was mostly driven by libblockdev 3.0 API overhaul.
  + Partitioning was ported to libfdisk.
  + The kbd and vdo libblockdev plugins were removed and so were
    zram, bcache and vdo udisks modules.
  + Definition of supported filesystems was moved to libblockdev
    and filesystem operations were unified.
  + Native NVMe support has been added through libnvme.
  + Syntax of configurable mount options was extended to separate
    filesystem signature and filesystem driver used for mounting.
  + A number of workarounds was placed around the
    org.freedesktop.UDisks2.Filesystem.Size property value
    retrieval to avoid excessive I/O traffic whenever possible.
  + Bash and Zsh completion enhancements.
  + lvm2 module uevent handling improvements.
  + ATA Secure Erase is now allowed only on top-level block
    objects.
  + Extra iSCSI node parameters are now honoured properly.
  + FIPS mode fixes.
  + Added support for resolving devices by PARTLABEL and PARTUUID.
  + Full support for setting filesystem and partition UUIDs.
  + Dynamic mountpoint name sanitization and ACL fixes.
  + Added support for LVM2 RAID.
  + UUID of Bitlocker volumes is now properly exposed.
  + Added an option to force/avoid creation of mdraid write-intent
    bitmap.
  + Updated translations.
- Drop default_luks_encryption macro definition. It's no longer
  needed as upstream defaults to LUKS2 now.
- Drop bcache, vdo and zram sub-packages, following upstream
  changes, and libblockdev-kbd(-devel) BuildRequires/Requires.
- Drop bogus build requirement on libblockdev-lvm-dbus-devel, and
  move libblockdev-lvm-devel BuildRequires to the lvm2 module
  sub-package.
- Move libconfig and libstoragemgmt pkgconfig() BuildRequires to
  the lsm module sub-package, and libblockdev-btrfs-devel
  BuildRequires to the btrfs modules sub-package, which is where
  they belong.
- Add libblockdev-nvme-devel BuildRequires and libblockdev-nvme
  Requires as new required dependencies.
- Drop harden_udisks2-zram-setup@.service.patch: It's unneeded now
  that the zram module has been deprecated.
- Drop merged upstream patches:
  0001-udisksata-Move-the-low-level-PM-state-call.patch,
  0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch,
  0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch,
  0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch.
- Split Bash and Zsh (new to this release) completion scripts to
  sub-packages of their own.
- Amend GPL-2.0-or-later License tags to LGPL-2.0-or-later for the
  btrfs, lvm2 and lsm UDisks modules sub-packages. This correction
  is based on what's explicitly stated on the source code from
  UDisks modules' folders under the modules/ top-level directory.</changelog>
  <changelog author="thomas.blume@suse.com" date="1766404800">- (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds
  read in udisks daemon (bsc#1248502)
  + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch
- Fix dbus daemon requires, it's dbus-service, not dbus-1</changelog>
</package>
<package pkgid="157760ca5ac54846fc14aacfe70d485e87b3d3076f1ad8e9b865d40ad83b0bdd6c0e28fb3de5675f59739c5b9e8ce9c011057f0fa1689282835896671cc82fd8" name="unbound-anchor" arch="x86_64">
  <version epoch="0" ver="1.24.1" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1728302400">- Update to 1.21.1:
  Security Fixes:
  * Fix CVE-2024-8508, unbounded name compression could lead to
    denial of service.
    [CVE-2024-8508, bsc#1231284]
- Update keyring</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729252800">- Update to 1.22.0:
  Features:
  * Add iter-scrub-ns, iter-scrub-cname and max-global-quota
    configuration options.
  * Merge patch to fix for glue that is outside of zone, with
    `harden-unverified-glue`, from Karthik Umashankar (Microsoft).
    Enabling this option protects the Unbound resolver against bad
    glue, that is unverified out of zone glue, by resolving them.
    It uses the records as last resort if there is no other working
    glue.
  * Add redis-command-timeout: 20 and redis-connect-timeout: 200,
    that can set the timeout separately for commands and the
    connection set up to the redis server. If they are not
    specified, the redis-timeout value is used.
  * Log timestamps in ISO8601 format with timezone. This adds the
    option `log-time-iso: yes` that logs in ISO8601 format.
  * DNS over QUIC. This adds `quic-port: 853` and `quic-size: 8m`
    that enable dnsoverquic, and the counters `num.query.quic` and
    `mem.quic` in the statistics output. The feature needs to be
    enabled by compiling with libngtcp2, with
    `--with-libngtcp2=path` and libngtcp2 needs openssl+quic, pass
    that with `--with-ssl=path` to compile unbound as well.
  Bug Fixes:
  * unbound-control-setup hangs while testing for openssl presence
    starting from version 1.21.0.
  * Fix error: "memory exhausted" when defining more than 9994
    local-zones.
  * Fix documentation for cache_fill_missing function.
  * Fix Loads of logs: "validation failure: key for validation
    &lt;domain&gt;. is marked as invalid because of a previous" for
    non-DNSSEC signed zone.
  * Fix that when rpz is applied the message does not get picked up
    by the validator. That stops validation failures for the
    message.
  * Fix that stub-zone and forward-zone clauses do not exhaust
    memory for long content.
  * Fix to print port number in logs for auth zone transfer
    activities.
  * b.root renumbering.
  * Add new IANA trust anchor.
  * Fix config file read for dnstap-sample-rate.
  * Fix alloc-size and calloc-transposed-args compiler warnings.
  * Fix to limit NSEC and NSEC3 TTL when aggressive nsec is enabled
    (RFC9077).
  * Fix dns64 with prefetch that the prefetch is stored in cache.
  * Attempt to further fix doh_downstream_buffer_size.tdir
    flakiness.
  * More clear text for prefetch and minimal-responses in the
    unbound.conf man page.
  * Fix cache update when serve expired is used. Expired records
    are favored over resolution and validation failures when
    serve-expired is used.
  * Fix negative cache NSEC3 parameter compares for zero length
    NSEC3 salt.
  * Fix unbound-control-setup hangs sometimes depending on the
    openssl version.
  * Fix Cannot override tcp-upstream and tls-upstream with
    forward-tcp-upstream and forward-tls-upstream.
  * Fix to limit NSEC TTL for messages from cachedb. Fix to limit
    the prefetch ttl for messages after a CNAME with short TTL.
  * Fix to disable detection of quic configured ports when quic is
    not compiled in.
  * Fix harden-unverified-glue for AAAA cache_fill_missing lookups.
  * Fix contrib/aaaa-filter-iterator.patch for change in call
    signature for cache_fill_missing.
  * Fix to display warning if quic-port is set but dnsoverquic is
    not enabled when compiled.
  * Fix dnsoverquic to extend the number of streams when one is
    closed.
  * Fix for dnstap with dnscrypt and dnstap without dnsoverquic.
  * Fix for dnsoverquic and dnstap to use the correct dnstap
    environment.
- Update keyring</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732708800">- add workaround for bug
  https://github.com/NLnetLabs/unbound/issues/509
  Starting up with 127.0.0.1 in the /etc/resolv.conf leads to long
  delays if the anchor update is being run as ExecStartPre in the
  unbound service</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1745496000">- Update to 1.23.0:
  Features:
  * Increase the default of max-global-quota to 200 from 128 after
    operational feedback. Still keeping the possible amplification
    factor (CAMP related issues) in the hundreds.
  * Fix #1175: serve-expired does not adhere to secure-by-default
    principle. The default value of serve-expired-client-timeout
    is set to 1800 as suggested by RFC8767.
  * For #1175, the default value of serve-expired-ttl is set to 86400
    (1 day) as suggested by RFC8767.
  * For #1207: [FR] Support for RESINFO RRType 261 (RFC9606), add
    LDNS_RR_TYPE_RESINFO similar to LDNS_RR_TYPE_TXT.
  * Add resolver.arpa and service.arpa to the default locally served
    zones.
  * Merge #1042: Fast Reload. The unbound-control fast_reload is added.
    It reads changed config in a thread, then only briefly pauses the
    service threads, that keep running. DNS service is only interrupted
    briefly, less than a second.
  * Merge #1019: Redis read-only replica support.
    Introduces new 'redis-replica-*' options for the Redis cache backend.
  * Merge #902: DNS Error Reporting (RFC 9567). Introduces new
    configuration option 'dns-error-reporting' and new statistics for
    'num.dns_error_reports'.
  Bug Fixes:
  * Fix #1154: Tag Incorrectly Applying for Other Interfaces
    Using the Same IP. This fix is not for 1.22.0.
  * Fix #1163: Typos in unbound.conf documentation.
  * Merge #1159: Stats for discard-timeout and wait-limit.
  * Add test case for #1159.
  * Some clean up for stat_values.test.
  * Merge #1170 from Melroy van den Berg, Fix chroot manpage
    description.
  * Merge #1157 from Liang Zhu, Fix heap corruption when calling
    ub_ctx_delete in Windows.
  * Fix redis that during a reload it does not fail if the redis
    server does not connect or does not respond. It still logs the
    errors and if the server is up checks expiration features.
  * Merge #1167: Makefile.in: fix occasional parallel build failures
    around bison rule.
  * Fix SETEX check during Redis (re)initialization.
  * Fix for the serve expired DNSSEC information fix, it would not allow
    current delegation information be updated in cache. The fix allows
    current delegation and validation recursion information to be
    updated, but as a consequence no longer has certain expired
    information around for later dnssec valid expired responses.
  * Fix to log redis timeout error string on failure.
  * More descriptive text for 'harden-algo-downgrade'.
  * Complete fix for max-global-quota to 200.
  * Fix #1183: the data being used is released in method
    nsec3_hash_test_entry.
  * Fix for #1183: release nsec3 hashes per test file.
  * Merge #1169 from Sergey Kacheev, fix: lock-free counters for
    auth_zone up/down queries.
  * Fix comparison to help static analyzer.
  * For #1175, update serve-expired tests.
  * Merge #1189: Fix the dname_str method to cause conversion errors
    when the domain name length is 255.
  * Merge #1197: dname_str() fixes.
  * Merge #1198: Fix log-servfail with serve expired and no useful cache
    contents.
  * Safeguard alias loop while looking in the cache for expired answers.
  * Merge #1187: Create the SSL_CTX for QUIC before chroot and privilege
    drop.
  * Fix typo in log_servfail.tdir test.
  * Merge #1204: ci: set persist-credentials: false for actions/checkout
    per zizmor suggestion.
  * Merge #1174: Serve expired cache update fixes. Fixes a regression bug
    with serve-expired that appeared in 1.22.0 and would not allow the
    iterator to update the cache with not-yet-validated entries resulting
    in increased outgoing traffic.
  * Merge #1214: Use TCP_NODELAY on TLS sockets to speed up the TLS
    handshake.
  * Fix #1213: Misleading error message on default access control causing
    refuse.
  * Merge #1221: Consider auth zones when checking for forwarders.
  * Merge #1222: Unique DoT and DoH SSL contexts to allow for different
    ALPN.
  * Create the quic SSL listening context only when needed.
  * Fix compile of interface check code when dnscrypt or quic is
    disabled.
  * Fix encoding of RR type ATMA.
  * Fix to check length in ATMA string to wire.
  * Merge #1229: check before use daemon-&gt;shm_info.
  * Use the same interface listening port discovery code for all needed
    protocols.
  * Port to string only when needed before getaddrinfo().
  * Do not open unencrypted channels next to encrypted ones on the same
    port.
  * Merge #1224 from Theo Buehler: Do not use DSA API unless USE_DSA is
    set.
  * Merge #1220 from Petr Menšík, Add unbound members group access to
    control key.
  * Make the default value of module-config "validator iterator"
    regardless of compilation options. --enable-subnet would implicitly
    change the value to enable the subnetcache module by default in the
    past.
  * Fix #986: Resolving sas.com with dnssec-validation fails though
    signed delegations seem to be (mostly) correct.
    Consider reconfigurations when calculating the still_useful_timeout
    for servers in the infrastructure cache.
  * Fix static analysis report about unhandled EOF on error conditions
    when reading anchor key files.
  * Merge #1241: Fix infra-keep-probing for low infra-cache-max-rtt
    values.
  * Fix hash calculation for cachedb to ignore case. Previously, cached
    records there were only relevant for same case queries (if not
    already in Unbound's internal cache).
  * Merge #1243: Do not shadow tm on line 236.
  * Merge #1238: Prefer SOURCE_DATE_EPOCH over actual time.
    Add --help output description for the SOURCE_DATE_EPOCH variable.
  * Fix 'unbound-control flush_negative' when reporting removed data;
    reported by David 'eqvinox' Lamparter.
  * Fix representation of types GPOS and RESINFO, add rdf type for
    unquoted str.
  * Fix #1251: WSAPoll first argument cannot be NULL.
  * Fix for windows compile create ssl contexts.
  * Fix print of RR type NSAP-PTR, it is an unquoted string.
  * Fix #1253: Cache entries fail to be removed from Redis cachedb
    backend with unbound-control flush* +c.
  * Fix for #1253: Fix for redis cachedb backend to expect an integer
    reply for the EXPIRE command.
  * Fix #1254: send failed: Socket is not connected and
    remote address is 0.0.0.0 port 53.
  * Fix #1255: Multiple pinnings to vulnerable copies of libexpat.
  * For #1255, for ios use an older expat version that does not require
    C++11 language features.
  * For #1255, for ios disable building tests that require C++11.
  * For #1255, for ios try the latest expat version again.
  * Fix unit test dname log printout typecast.
  * Fix for ci test, expat is installed on the osx image.
  * iana portlist update.
  * Skip the unit tests for auth_tls.tdir and auth_tls_failcert.tdir.
  * Fix escape more characters when printing an RR type with an unquoted
    string.
  * Enable the auth_tls.tdir and auth_tls_failcert.tdir tests.
  * Fix unbound-control test so it counts the new flush_negative output,
    also answers the _ta probe from testns and prints command output
    and skip a thread specific test when no threads are available.
  * Fix that ub_event has the facility to deal with callbacks for
    fast reload, doq, windows-stop and dnstap.
  * Fix fast reload test to check if pid exists before acting on it.
  * Merge #1262 from markyang92, fix build with
    'gcc-15 -Wbuiltin-declaration-mismatch' error in compat/malloc.c.
  * For #1262, ifdef is no longer needed.
  * Fix #1263: Exempt loopback addresses from wait-limit.
  * Fix wait-limit-netblock and wait-limit-cookie-netblock config parse
    to allow two arguments.
  * Fix ub_event and include dnstap and win_svc headers.
  * Fix test for stat_values for wait limit defaults for localhost.
  * Fix parameter unused warning in net_help.c.
  * Fix mesh_copy_client_info to omit null contents from copy.
  * Fix comment name in the rpz nsdname test.
  * Fix nettle compile for warnings and ticket keys.
  * Fix redis_replica test for unused option defaults and log printout.
  * Fix test to speed up common.sh script kill_pid.
  * Fix to update common.sh for speed of kill_pid.
  * Update to the manpage for the fast_reload part.
  * Fix fast_reload to print chroot with config file name.
  * Fix to detect if atomic_store links in configure.
  * Fix #1264: unbound 1.22.0 leaks memory when doing DoH.
  * Fix for print of connection type in log-replies for dot and doh.
  * Merge #1265: Fix WSAPoll.</changelog>
  <changelog author="mia@0x0.st" date="1753012800">- Remove leftover dependency on sudo (not required)
  See also: boo#1215628</changelog>
  <changelog author="mrueckert@suse.de" date="1754827200">- prepare enabling quic support:
  currently fails on missing quic support in openssl. aws-lc is
  sadly not a drop in replacement for unbound.
- enable TCP Fast Open for the server and client
- remove unused --with-ldns option
- enable cachedb including hiredis support on Tumbleweed
  new BuildRequires pkgconfig(libhiredis)</changelog>
  <changelog author="mrueckert@suse.de" date="1754827201">- Update to 1.23.1: (boo#1246625)
  Bug Fixes:
  * Fix RebirthDay Attack CVE-2025-5994, reported by Xiang Li from
    AOSP Lab Nankai University.
  - our package was not built with EDNS subnet support up to this
    point and therefor was not affected.</changelog>
  <changelog author="mrueckert@suse.de" date="1754913600">- enable EDNS subnet handling</changelog>
  <changelog author="mrueckert@suse.de" date="1754913601">- simplify python handling. python2 support is dropped and python3
  is built by default. Conditionals for the latter are removed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Update to 1.24.1:
  Security Fixes:
  * Fix CVE-2025-11411 (possible domain hijacking attack)
    [bsc#1252525]
  Features:
  * Increase default to num-queries-per-thread: 2048, when unbound
    is compiled with libevent. It makes saturation of the task
    queue more resource intensive and less practical.
  * Auto-configure '-slabs' values.
  * Change default for so-sndbuf to 1m, to mitigate a cross-layer
    issue where the UDP socket send buffers are exhausted waiting
    for ARP/NDP resolution.
  * Adjusted so-sndbuf default to 4m.
  * Add extra statistic to track the number of signature validation
    operations. Adds 'num.valops' to extended statistics.
  * [FR] Disable TLSv1.2.
  * unbound-control cache_lookup prints the cached rrsets and
    messages for those.
  * unbound-control cache_lookup +t allows tld and root names. And
    subnet cache contents are printed.
  * [FR] zone status for Unbound auth-zones.
  Bug Fixes:
  * Fix assertion failure testcode/unitverify.c:202.
  * Use macros for the fr_check_changed* functions.
  * Fix for parallel build of dnstap protoc-c output.
  * Fix dnstap to use protoc.
  * Sync unbound and unbound-checkconf log output for unknown
    modules.
  * Fix forward-zone "name: ." conflicts with auth-zone "name: ."
    in 1.23.0, but worked in 1.22.0.
  * Fix unsafe usage of atoi() while parsing the configuration
    file.
  * Fix auth nsec3 code. Fixes NSEC3 code to not break on broken
    auth zones that include unsigned out of zone (above apex) data.
    Could lead to hang while trying to prove a wildcard answer.
  * Fix NULL pointer deref in az_find_nsec_cover() (latent bug) by
    adding a log_assert() to safeguard future development.
  * Fix log-destaddr fail on long ipv6 addresses.
  * Fix config of slab values when there is no config file.
  * Fix for cname chain length with qtype ANY and qname
    minimisation.
  * RST man pages. It introduces restructuredText man pages to sync
    the online and source code man page documentation. The
    templated man pages (*.in) are still part of the repo but
    generated with docutils from their .rst counterpart.
    Documentation on how to generate those (mainly for core
    developers) is in README.man.
  * Add more checks about respip in unbound-checkconf. Also fixes
    unbound-checkconf not reporting RPZ configuration error.
  * [FR] Improve fuzzing of unbound by adapting the netbound
    program.
  * Small manpage corrections for the 'disable-dnssec-lame-check'
    option.
  * Fix unbound-anchor certificate file read for line ends and end
    of file.
  * Fix comment for the dname_remove_label_limit_len function.
  * iana portlist updated.
  * Fix bitwise operators in conditional expressions with
    parentheses.
  * Fix conditional expressions with parentheses for bitwise and.
  * Fix header return value description for skip_pkt_rrs and
    parse_edns_from_query_pkt.
  * Fix to check control-interface addresses in unbound-checkconf.
  * Fix Windows 32-bit binaries download seems to be missing dll
    dependency.
  * Fix for consistent use of local zone CNAME alias for configured
    auth zones. Now it also applies to downstream configured auth
    zones.
  * Fix DNS over QUIC depends on a very outdated version of ngtcp2.
    Fixed so it works with ngtcp2 1.13.0 and OpenSSL 3.5.0.
  * edns-subnet: fix NULL_AFTER_DEREF on subnetmod.
  * Fix rrset cache create allocation failure case.
  * Fix EDE 6 is attached to insecure cached answers when client
    sends the CD bit.
  * Fix forward-first: ssl handshake failed on root nameservers.
  * Turn off fetch-policy for delegation when looking into parent
    side name servers that may not update the addresses and hit
    NXNS limits.
  * Replay test (added tcp_transport to outnet_serviced_query).
  * Generate ltmain.sh and configure again.
  * Fix is 'sock-queue-timeout' a linux only feature.
  * Implement sock-queue-timeout for FreeBSD as well.
  * Fix layout of comm_point_udp_ancil_callback.
  * Fix to improve dnstap discovery on Fedora.
  * Fix detection of SSL_CTX_set_tmp_ecdh function.
  * Fix configure cant find SSL_is_quic in OpenSSL 3.5.1.
  * Test num.valops in existing stat_values.tdir.
  * Add num.valops in the unbound-control man page.
  * Add unit tests for non-ecs aggregation.
  * Fix to not set rlimits in the unit tests.
  * iana portlist updated.
  * Redis checks for server down and throttles reconnects.
  * Fix redis cachedb module gettimeofday init failure.
  * Fix testbound test program to accurately output packets from
    hex.
  * Fix incorrectly reclaimed tcp handler can cause data corruption
    and segfault.
  * Fix to use assertions for consistency checks in reclaimed tcp
    handlers.
  * Fix edns subnet, so that the subquery without subnet is stored
    in global cache if the querier used 0.0.0.0/0 and the name and
    address do not receive subnet treatment. If the name and
    address are configured for subnet, it is stored in the subnet
    cache.
  * Fix dname_str for printout of long names.
  * Fix that edns-subnet failure to create a subquery errors as
    servfail, and not formerror.
  * Fix to whitespace in dname_str.
  * Fix that unbound-control dump_cache releases the cache locks
    every so often, so that the server stays responsive.
  * Fix to remove debug from cache_lookup.
  * Fix to unlock cache_lookup message for malformed records.
  * Fix to increase responsiveness of dump_cache.
  * Fix to decouple file descriptor activity and cache lookups in
    dump_cache.
  * Fix cache_lookup subnet printout to wipe zero part of the
    prefix.
  * Fix cache_lookup subnet print to not print messages without
    rrsets and perform in-depth check on node in the addrtree.
  * Fix to check for extraneous command arguments for
    unbound-control, when the command takes no arguments but there
    are arguments present.
  * Fix contrib/unbound.service comment path for systemd network
    configuration.
  * Fix compile warnings for DoH compile on windows.
  * Fix sha1 enable environment variable in test code on windows.
  * Fix that the zone acquired timestamp is set after the zonefile
    is read.
  * Fix unbound-control dump_cache for double unlock of lruhash
    table.
  * Fix setup_listen_sslctx warning for nettle compile.
  * Limit the number of consecutive reads on an HTTP/2 session.
  * Fix to free edns options scratch in ratelimit case.
  * Fix outdated Python2 code in unbound/pythonmod/examples/log.py.
  * Fix memory leak in 'msgparse.c' in
    'parse_edns_options_from_query(...)'.
  * Fix indentation in tcp-mss option parsing.
  * Fix make depend.
  * Update documentation for using "SET ... EX" in Redis.
  * Document max buffer sizes for Redis commands.
  * Update man pages.
  * Fix CNAME chains are sometimes not followed when RPZs add a
    local CNAME rewrite.
  * Update contrib/aaaa-filter-iterator.patch so it applies on
    1.24.0.
  * Small debug output improvement when attaching an EDE.
  * Fix to print warning for when so-sndbuf setsockopt is not
    granted.
  * Too many quotes for the EDE message debug printout.</changelog>
</package>
<package pkgid="be7e6c5757f3066a2be1f6ce871e04e5b9f4a7a323cad6ed03c943d267f090684643f04596acc2df2e8397150ec8dde03f2a8314248f3d689413f908df7152fa" name="update-alternatives" arch="x86_64">
  <version epoch="0" ver="1.22.21" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1689854400">- openssl.patch: use openssl library for MD5 calculation instead
  of relying on libmd. libmd is not in Ring0
- require Perl 5.28.1 or later</changelog>
  <changelog author="martin.schreiner@suse.com" date="1695038400">- Update to version 1.22.0.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.0
- Refresh openssl.patch so it works on 1.22.0.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1700654400">- Update to version 1.22.1.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.1
- Refresh update-alternatives-suse.patch so it applies cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704024000">- Update to version 1.22.2.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.2</changelog>
  <changelog author="martin.schreiner@suse.com" date="1709035200">- Prepare for RPM 4.20.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1710158400">- Update to version 1.22.5.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.5
  Version 1.22.5 includes all the changes from 1.22.4 and 1.22.3.
  These may be found here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.4
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.3
- Refresh openssl.patch so it would apply cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712750400">- Update to version 1.22.6.
  The changelog for this version isn't very large, so it's provided in full:
  * dpkg-deb: Fix up compressor parameters for default legacy format.
  * Perl modules:
  - Dpkg::Vendor::Debian: Make it possible to disable qa=-bug-implicit-func.
  - Dpkg::Vendor::Debian: Unconditionally set qa bug-implicit-func.
  * Documentation:
  - man: Document dpkg versions supporting SOURCE_DATE_EPOCH for various
    tools.
  * Code internals:
  - libdpkg: Use array access instead of pointer arithmetic for meminfo
    parser.
  - libdpkg: Use a macro to define the zstd default compression level.
  * Build system:
  - Test with minimal library dependencies in CI.
  - Add gen-release script.
  * Packaging:
  - Fix typo in man page reference in changelog.
  * Test suite:
  - Refactor OpenPGP backend and commands list.
  - Refactor certfile and keyfile filenames for OpenPGP test.
  - Skip OpenPGP tests if the backend does not have a verify command.
  * Localization:
  - Fix typos in Swedish man pages translations.
  - Fix typos in Swedish man pages translations.
  - Update Dutch man pages translations.
  - Update Portuguese man pages translations.
  - Update German man pages translation.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723377600">- Update to version 1.22.11.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.11
- Changes from 1.22.10:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.10
- Changes from 1.22.9:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.9
- Changes from 1.22.8:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.8
- Changes from 1.22.7:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.7
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1744632000">- Update to version 1.22.18.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.18
- Changes from 1.22.17:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.17
- Changes from 1.22.16:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.16
- Changes from 1.22.15:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.15
- Changes from 1.22.14:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.14
- Changes from 1.22.13:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.13
- Changes from 1.22.12:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.12
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1751457600">- Update to version 1.22.21
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.21
- Changes from 1.22.20:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.20
- Changes from 1.22.19:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.19
- Release 1.22.21 includes the fix upstream for CVE-2025-6297 / bsc#1245573.</changelog>
</package>
<package pkgid="d9ca40e7ed1929f8bdd8e231cd55daabe0bb635464de594efd295868df701505888b9f5de4b40c35e2db77fa72889daca8ec8b47cb8dbb5020a456d1663bbd2c" name="update-bootloader" arch="x86_64">
  <version epoch="0" ver="1.27" rel="160000.1.1"/>
  <changelog author="wfeldt@opensuse.org" date="1731067200">- merge gh#openSUSE/perl-bootloader#183
- adjust tests
- update test results
- 1.19</changelog>
  <changelog author="wfeldt@opensuse.org" date="1733140800">- merge gh#openSUSE/perl-bootloader#184
- bash in SLE15 works differently than in TW; adjust for
  differences (bsc#1231018)
- 1.20</changelog>
  <changelog author="wfeldt@opensuse.org" date="1733227200">- merge gh#openSUSE/perl-bootloader#185
- provide default settings in cases where kernel and initrd
  symlinks are missing (bsc#1233956)
- update test results
- 1.21</changelog>
  <changelog author="wfeldt@opensuse.org" date="1737374400">- merge gh#openSUSE/perl-bootloader#188
- really enforce bash everywhere now (bsc#1231018)
- 1.22</changelog>
  <changelog author="wfeldt@opensuse.org" date="1737374401">- merge gh#openSUSE/perl-bootloader#189
- make update-bootloader an alias for pbl and re-add still in-use
  legacy options (bsc#1235320)
- update tests
- 1.23</changelog>
  <changelog author="wfeldt@opensuse.org" date="1737720000">- merge gh#openSUSE/perl-bootloader#190
- re-add --refresh option (bsc#1236393)
- update tests
- 1.24</changelog>
  <changelog author="wfeldt@opensuse.org" date="1752753600">- merge gh#openSUSE/perl-bootloader#191
- avoid spurious warning messages when parsing /etc/default/grub
  (bsc#1246373, bsc#1245323)
- 1.25</changelog>
  <changelog author="wfeldt@opensuse.org" date="1757592000">- merge gh#openSUSE/perl-bootloader#192
- Implement config for BLS (boo#1246013)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1757592001">- merge gh#openSUSE/perl-bootloader#193
- adjust test cases
- 1.26</changelog>
  <changelog author="wfeldt@opensuse.org" date="1769428800">- merge gh#openSUSE/perl-bootloader#194
- adjust spec file for immutable mode: switch to using
  systemd-tmpfiles (jsc#PED-14833)
- 1.27</changelog>
</package>
<package pkgid="6d163aebda155d4e9870f4329962c7343e0c7e17b994507301f9c285fa6f7b061737c1da9444b2714cbc557c1cbb303ae9cd1e7ff000436d6bb8f98a6571ca1e" name="usbutils" arch="x86_64">
  <version epoch="0" ver="015" rel="160000.2.2"/>
  <changelog author="sweet_f_a@gmx.de" date="1375185600">- update to usbutils 007
  * usb-devices: correctly quote driver path
  * lsusb: decode CDC MBIM descriptor
  * lsusb: decode CDC NCM functional descriptor
  * lsusb: decode CDC Command Set descriptor
  * usb-devices: avoid numbers being seen as octal by printf
  * lsusb: parse bmFormats inside UAC2 interface headers as hex
  * remove devtree logic
  * Fix lsusb -t potentially not listing all devices
  * lsusb-t: make sure that interfaces are added to lists only once
  * lsusb: Fix USB 3.0 link state reporting.
  * lsusb: Fix bug in USB 2.0 extended caps descriptor.
  * lsusb: Parse misplaced UAC1 AudioControl Endpoint Descriptor
  * lsusb: Support non-ASCII string descriptors.
- update usb.ids
- remove config-guess-sub-update.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1416657600">- Update to usbutils 008
  * most important change is that lsusb switched to use
  the udev hardware database instead of the usb.ids file
  * lsusb: Reports if USB2.0 port is on L1 state
  * lsusb: Reports devices that support BESL on USB2.0
  * dump_ccid_device: fix a typo
  * lsusb: fix incorrect printf() for CAPS
  * lsusb-t: handle problem if there is no usb bus list
  * Ignore invalid string descriptors
  * usb-devices: hexadecimal bInterfaceNumber handling</changelog>
  <changelog author="olaf@aepfle.de" date="1416830400">- BuildRequire at least libudev &gt;= 196</changelog>
  <changelog author="avindra@opensuse.org" date="1517659200">- Update to usbutils 009
  * usbreset: coding style
  * Don't use C99-ism
  * usbhid-dump: update submodule to latest version
  * add usbreset.c example program
  * update usbhid-dump to latest
  * lsusb.py: Don't dump a trace dump if usb.ids is not present
  * USB: usb-devices: Interface number can be a string
  * autogen.sh: checkout usbhid-dump
  * lsusb: add support for the Encoding Unit Desc for uvc 1.5
    device
  * lsusb: fix alignment for Video Streaming interface desc
  * lsusb: parse additional control fileds in USB video control
    interfaces for UVC1.5
  * lsusb: proper display hexadecimal value for UVC control
    interface
  * usbreset.c: import usability improvements from OpenWrt
  * Update lsusb.c
  * Un-indent bVariableSize for Frame-Based Format descriptors
  * Makefile: install pkgconfig file to arch-dependent location
  * lsusb: Allocate the BOS descriptor buffer dynamically
  * lsusb: Add support for the USB 3.1 SuperSpeedPlus device
    capability desc
  * lsusb: Fix issue with lengthy string descriptors
  * lsusb: Added support for Billboard Capability descriptor
  * Update usbhid-dump repo URL
  * Update usbhid-dump to v1.4
  * configure: remove summary about unused USE_ZLIB
  * drop unused input file for usb.ids update script
  * substitute usb.id location in lsusb Python script
  * lsusb: remove unused variable procbususb
  * lsusb: Report correct MaxPower for USB 3.0 devices
  * lsusb: Request proper descriptor type for USB 3.1
  * lsusb: Store link state descriptions without preceding
    space
  * build: Request at least libusb 1.0.9
  * Added support for Platform Device Capability descriptor
  * lsusb: change endianness of first three fields when printing
    UUID/GUIDs.
  * lsusb: Fix UVC STILL_IMAGE_FRAME descriptor
  * lsusb: Fix UVC VideoStreaming interface header descriptor
  * lsusb: Fix UVC OUTPUT_TERMINAL descriptor
  * lsusb: print WebUSB platform descriptor
  * travis-ci: add control files borrowed from libusb
  * travis-ci: cleanup before second run
  * travis-ci: rework travis-autogen.sh
- add fix-shebang.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1520942400">- Use usb ids from hwdata
- Modernise spec file with spec-cleaner
- Make building more verbose</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to usbutils 010
  * usbreset.c: add missing &lt;stdlib.h&gt; include
  * Do not create and install usbutils.pc
  * fix dump_videocontrol_interface for unitialized variable usage
  * Add correct SPDX license identifiers to all files
  * Add SPDX identifiers on files that did not have a specific license.
  * wTotalLength should be printed as a hex number
  * usbmisc: fix up some strncpy() issues
  * lsusb-t: fix up error with readlink()
  * lsusb.py.in: add proper SPDX license identifier
  * usb-devices: reword the copyright identifier
  * LICENSES: move the GPL 2 license to the LICENSES directory
  * LICENSES/GPL-3.0.txt: add the file
  * lsusb.h: add copyright notice
  * lsusb-t: add copyright info
  * bom.spdx: Add bill of materials file in SPDX format.
  * ChangeLog: remove it.
  * AUTHORS: remove file
  * do_release: drop file
  * NEWS: add SPDX header and comment
  * autogen.sh: add SPDX and copyright header
  * list.h: add copyright information
  * travis-autogen.sh: add SPDX and copyright information.
  * INSTALL: remove the file, it's boiler-plate
  * configure.ac: add SPDX and copyright
  * man pages: add SPDX and copyright information
  * Makefile.am: add SPDX and copyright information
  * .gitmodules: add SPDX and copyright lines
  * lsusb.py.in: fix up Copyright strings
  * usbreset.c: add Alan's copyright
  * .travis.yml: add correct SPDX and copyright notices
  * bom.spdx: update with latest copyright and SPDX identifier additions
  * README.md: move the README file to markdown
  * README.md: fix fomatting
  * bom.spdx: upate with README -&gt; README.md change
  * lsusb.py: convert to python3
  * lsusb: Split subtype mapping out of AudioControl interface handling.
  * lsusb: Add declarative definitions for UAC1 and UAC2 descriptors.
  * lsusb: Add code to dump descriptor data using descriptor definition.
  * lsusb: Switch to descriptor-definition based dump for UAC1 and UAC2.
  * lsusb: Add descriptor definitions for UAC3.
  * lsusb: Add initial support for USB Audio Device Class 3.
  * lsusb: Add descriptor definition for USB3 BOS Configuration Summary.
  * lsusb: Dump USB3 BOS Configuration Summary Descriptor.
  * lsusb: Squash Wpointer-compare warning.
  * lsusb: Remove unused function.
  * lsusb: Fix array entry count for variable sized entries.
  * Makefile.am: Include usbreset.c in the release tarball
  * lsusb: Dump UVC Stream based payload descriptor.</changelog>
  <changelog author="mpluskal@suse.com" date="1589284800">- Update to version 012:
  * Merge usbhid-dump into main usbutils repository
- Changes for version 011:
  * Add usbreset.c as noinst_PROGRAMS target.
  * lsusb: Read unkown names from sysfs device desc.
  * Remove a small hack that no longer has any effect.
  * Cleanup grammar
  * lsusb-t: Emit USB IDs and other handy info when verbosity is increased
  * Require newer version of libusb
  * lsusb.py: fix up Python 3 conversion
  * SPDX bill-of-material is supposed to be project_name.spdx
  * usbutils.spdx: rerun report, it is properly sorted.
  * desc-dump.c: fix compiler warning about unused variable
  * add usbreset to .gitignore
  * usbreset: fix some build warnings
  * usbhid-dump: update to latest version
  * fix up standard int types
  * update usbhid-dump git id
  * usbhid-dump: update to a newer version of usbhid-dump again.
  * usbutils.spdx: update with latest information
  * lsusb.py: Search multiple paths for usb.ids.
  * lsusb.py: Usb enum for parser state machine.
  * lsusb.py: Add driver names for usbhid.
  * lsusb.py: python2 compatibility
  * Makefile.am: add files with licenses to archive
  * lsusb.py: sort devices and interfaces numerically
  * lsusb.py: sort toplevel entries
  * lsusb.py: improve usage text
  * lsusb.py: replace fake deepcopy()
  * lsusb.py: remove -w (warn if usb.ids not sorted) option
  * lsusb.py: ensure all error messages are written to stderr
  * lsusb.py: support long options
  * lsusb.py: use regular print() instead of hand-rolling the same thing
  * lsusb.py: avoid shadowing Python's built-in 'str'
  * lsusb.py: replace usb.ids binary search with dict lookup
  * lsusb.py: remove now-unused bin_search()
  * lsusb.py: avoid manual calls to __foo__()
  * lsusb.py: replace __repr__() for USB IDs with __str__()
  * lsusb.py: insert class FF:FF:FF into usbclasses to avoid special casing
  * lsusb.py: entirely remove Usb* classes
  * lsusb.py: cosmetic - replace tuples-as-"immutable lists" with regular lists
  * lsusb.py: use 'elif' where suitable
  * lsusb.py: remove dead code
  * lsusb.py: move unrelated code out of try..except
  * lsusb.py: allow - as well as _ when matching hci module names
  * lsusb.py: use a constant for the magic class number 9
  * lsusb.py: Usb* classes: call read() automatically from constructor
  * lsusb.py: UsbEndpoint: indent is a class implementation detail
  * lsusb.py: a few cosmetic changes
  * lsusb.py: shorten find_usb_class()
  * lsusb.py: give all Usb* objects a .path attribute
  * lsusb.py: add an actual __repr__() to classes
  * lsusb.py: give all Usb* classes a superclass
  * lsusb.py: convert readattr() and readlink() to methods of the container
  * lsusb.py: use color by default
  * lsusb.py: rework output for more consistent indent of both columns
  * lsusb.py: fix endpoint interval spacing
  * lsusb.py: visually group USB-version-related fields
  * lsusb: Split out routine that fetches value for given field.
  * lsusb: Split out field name rendering.
  * lsusb: Add support for descriptor extensions.
  * lsusb: Add support for audio processing unit type-specific fields.
  * lsusb: Added support for Billboard Alternate Mode Capability descriptor
  * lsusb.py: Fix formatting of 10Gbps speeds
  * usb-devices: use /bin/sh hashbang
  * lsusb:  Add support for decoding IPP printer descriptors
  * Depend on libusb 1.0.14
  * man pages: add information on verbosity levels of -t option
  * fix typo
- Drop no longer needed fix-shebang.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1605873600">- Update to version 013:
  * lsusb.8.in: do not mention usb.ids
  * usb-devices.1: don't mention bash
  * usbhid-dump: move manpage to main directory out of subdir
  * usbhid-dump.8: add SPDX header
  * usbhid-dump.8: autogenerate it with the usbutils version number
  * usbhid-dump: add SPDX identifiers to all files.
  * usbhid-dump: remove libusb.h libusb_strerror() implementation
  * usbhid-dump: remove lib directory
  * usbhid-dump: move .h files into src/ directory
  * Makefile.am: add usbhid-dump.8 to distclean list
  * usbhid-dump: some autoconf cleanup
  * usbhid-dump: remove some dev_list functions that were never used
  * dump_audiostreaming_interface(): remove unused variable
  * usbmisc: initialize string buffer before reading from device.
  * lsusb.py: drop trailing space on non-hub devices
  * lsusb.py: strip whitespace from device strings
  * lsusb(8): fix formatting
  * lsusb(8): document --tree
  * lsusb.py: remove private paths for usb.ids
  * Additional device classes for usb-devices script
  * usbhid-dump: Do not use rindex
  * Move read_sysfs_prop() from names.c to its own file
  * sysfs: Don't return bogus data for devices under a hub
  * lsusb: Use vendor and product name fallback logic in -D mode too
  * lsusb: Get manufacturer, product, and serial from sysfs
  * bootstrap: change /bin/bash to /bin/sh
  * lsusb: fix two typos in UVC Extension Unit descriptor
  * usbhid-dump: Put back autoconf check for libusb_set_option()</changelog>
  <changelog author="mpluskal@suse.com" date="1630497600">- Update to version 014 (jira#SLE-19451):
  * Add Tx+Rx lanes to tree mode
  * lsusb(8): mention the udev's hardware database
  * lsusb: Fix typo in string output for iAdditionalInfoURL
  * lsusb-t: Add lower bound checks in read_sysfs_file_string
  * lsusb: remove unused RETRIES constant
  * lsusb: don't complain on EAGAIN
  * sysfs: add copyright notice taken from name.*
  * LICENSES: add symlink to handle "or-later" issue for GPL-2.0
  * LICENSES: put spdx headers on the license files
  * rename "GPL-2.0+" to "GPL-2.0-or-later"
  * LICENSE: rename GPL-3.0.txt -&gt; GPL-3.0-only.txt
  * usbhid-dump.8.in: add copyright information
  * usbhid-dump: add copyright and SPDX info
  * SPDX header cleanups from GPL-2.0 -&gt; GPL-2.0-only
  * usbutils.spdx: update with output of latest reuse tool
  * lsusb: Fix spelling of bEndpointAddress in UVC
  * lsusb: Decode endpoint addresses in UVC
  * lsusb.c: fix leak in dump_printer_device
  * usb-devices: do not use `local` in a POSIX shell script
  * desc-defs.c: fix possible out-of-bound read
  * Fix typos in lsusb.8.in
  * Fix locating endpoint when it's a directory rather than a symlink
  * Fix formatting of interface descriptors to match /sys/kernel/debug/usb/devices
  * Fix formatting of endpoint direction to match /sys/kernel/debug/usb/devices
  * Fix formatting of endpoint type to match /sys/kernel/debug/usb/devices
  * Fix formatting of max endpoint packet size to match /sys/kernel/debug/usb/devices
  * lsusb: Fix buffer size copy/paste error</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 015:
  * usb-devices: list the root devices in numerical order
  * usb-devices: use 'local' variable type to handle recursion
  * lsusb: remove unused wireless check
  * lsusb: remove wireless descriptor information
  * usb-devices: fix field width on device speed field
  * lsusb: fix up Midi Device specification devices
  * Fix an runtime error reported by undefind sanitizer
  * lsusb: Improve status display for SuperSpeedPlus hubs
  * lsusb-t: Fix recursive sorting on child devices.</changelog>
</package>
<package pkgid="356526e8a572463eca714c93fd7666df7fd65de294686f4dede24d811bd134d6d1d75e1c58736c9e422c834f94b988c4fc4a5baf9e4bb4e2ea60f229cb62db17" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.41.1" rel="160000.3.1"/>
  <changelog author="sbrabec@suse.com" date="1744027200">- Update to version 2.41:
  * agetty: Fixed an issue where issue files were not being printed
    from additional locations, such as /run or /usr/lib. This
    change now allows for the use of local information from /etc,
    in addition to generated files from /run and
    distribution-specific files from /usr/lib.
  * cfdisk and sfdisk: Added support for the --sector-size command
    line option.
  * sfdisk: Added a new option, --discard-free.
  * fdisk: Added a new command, 'T', to discard sectors.
  * chrt: The --sched-runtime now supports SCHED_{OTHER,BATCH}
    policies.
  * column: Can now handle ANSI SGR colors inside OSC 8 hyperlink
    escape codes and sequences.
  * enosys: Can now dump defined filters.
  * libmount:
  * Added experimental support for statmount() and listmount()
    syscalls.
  * This new functionality can be accessed using "findmnt
  - -kernel=listmount".
  * Added a new mount option,
    X-mount.nocanonicalize[=source|target].
  * Added new mount extensions to the "ro" flag (ro[=vfs,fs]).
  * Added a new option, X-mount.noloop, to disable automatic loop
    device creation.
  * Now supports bind symlinks over symlinks.
  * Reads all kernel info/warning/error messages from new API
    syscalls (and mount(8) prints them).
  * libuuid: Now supports RFC9562 UUIDs.
  * findmnt, lsblk, and lsfd: Added a new --hyperlink command line
    option to print paths as terminal hyperlinks.
  * findmnt: Can now address filesystems using --id and --uniq-id
    (requires listmount() kernel support).
  * flock: Added support for the --fcntl command line option.
  * hardlink: Can now prioritize specified trees on the command
    line using --prioritize-trees.
  * Can exclude sub-trees using --exclude-subtree or keep them in
    the current mount using --mount.
  * Duplicates can now be printed using --list-duplicates.
  * hwclock: Added a new --param-index option to address position
    for RTC_PARAM_{GET,SET} ioctls.
  * kill: Can now decode signal masks (e.g. as used in /proc) to
    signal names.
  * libblkid: Made many changes to improve detection, including
    exfat, GPT, LUKS2, bitlocker, etc.
  * login: Added support for LOGIN_ENV_SAFELIST in /etc/login.def.
  * lsfd: Now supports pidfs and AF_VSOCK sockets.
  * lsipc, ipcmk, ipcrm: Now supports POSIX ipc.
  * lslogins: Now supports lastlog2.
  * lsns: Added support for the --filter option.
  * build by meson: Now supports translated man pages and has fixed
    many bugs.
  * mkswap: The option --file should now be usable on btrfs.
  * nsenter: Improved support for pidfd and can now join target
    process's socket net namespace.
  * scriptlive: Added a new option, --echo &lt;never|always|auto&gt;.
  * zramctl: Now supports COMP-RATIO and --algorithm-params.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41-ReleaseNotes
- Update util-linux-login_defs-check.sh:
  * Make instructions up to date.
  * Update checksum reflecting the shadow update.
- Refresh libmount-print-a-blacklist-hint-for-unknown-filesyst.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1744891200">- Enable mountfd support again (jsc#PED-9752).
  BREAKING CHANGE
  Mountfd is nearly completely compatible with the old mount. There
  is a special case that cannot be handled by mountfd, and it needs
  to be handled by applications:
  Mountfd discriminates between physical mount layer and virtual
  mount layer. Once the physical mount layer is read-only,
  read-write mount on the virtual layer is not possible.
  If the first mount is read only, then the physical filesystem is
  mounted read-only, and later mount of the same file system as
  read-write is not possible. To solve this problem, the first
  mount needs to be read-only only on the virtual layer, keeping
  the physical layer read-write.
  The user space fix is simple:
  Instead of
    mount -oro
  use
    mount -oro=vfs
  This will keep the physical layer read-write, but the virtual
  file system layer (and the user space access) will be read-only.</changelog>
  <changelog author="sbrabec@suse.com" date="1747742400">- Fix segfault of findmnt (boo#1242705,
  gh#util-linux/util-linux#3574,
  util-linux-libblkid-econf-parse.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1748520000">- Add ul_ prefix to functions with common names. Fixes btrfsprogs
  build failure (gh#util-linux/util-linux#3603,
  util-linux-rename-common-symbols-1.patch,
  util-linux-rename-common-symbols-2.patch,
  util-linux-rename-common-symbols-3.patch,
  util-linux-rename-common-symbols-4.patch).</changelog>
  <changelog author="nicolas@belouin.fr" date="1749556800">- Fix libmount --no-canonicalize regression (boo#1244251,
  gh#util-linux/util-linux#3479,
  libmount-fix-no-canonicalize-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1750766400">- Update to version 2.41.1:
  * cfdisk: fix memory leak and possible NULL dereference
  * fdisk: fix possible memory leak
  * findmnt: fix -k option parsing regression (boo#1242705,
    drop util-linux-libblkid-econf-parse.patch)
  * hardlink: fix performance regression
  * include/cctype: fix string comparison
  * libblkid:
  * Fix crash while parsing config with libeconf
  * befs fix underflow
  * avoid strcasecmp() for ASCII-only strings
  * libblkid/src/topology/dm: fix fscanf return value check to
    match expected number of parsed items
  * libmount:
  * (subdir) restrict for real mounts only
  * (subdir) remove unused code
  * avoid calling memset() unnecessarily
  * fix --no-canonicalize regression (boo#1244251,
    drop libmount-fix-no-canonicalize-regression.patch)
  * lsblk:
  * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE
  * avoid strcasecmp() for ASCII-only strings
  * lscpu:
  * fix possible buffer overflow in cpuinfo parser
  * Fix loongarch op-mode output with recent kernel
  * lsfd:
  * scan the protocol field of /proc/net/packet as a hex number
  * fix the description for PACKET.PROTOCOL column
  * lsns:
  * enhance compilation without USE_NS_GET_API
  * fix undefined reference to add_namespace_for_nsfd #3483
  * more:
  * fix broken ':!command' command key
  * fix implicit previous shell_line execution #3508
  * tests: (test_mkfds::mapped-packet-socket) add a new parameter,
    protocol
  * treewide:
  * add ul_ to parse_timestamp() function name
    (drop util-linux-rename-common-symbols-4.patch)
  * add ul_ to parse_switch() function name
    (drop util-linux-rename-common-symbols-3.patch)
  * add ul_ to parse_size() function name
    (drop util-linux-rename-common-symbols-2.patch)
  * add ul_ to parse_range() function name
    (drop util-linux-rename-common-symbols-1.patch)
  * fix optional arguments usage
  * avoid strcasecmp() for ASCII-only strings
  * Wipefs: improve --all descriptions for whole-disks
  * Misc: Do not call exit() on code ending in shared libraries
  * Other fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes
- Fix problem with uname26 listed twice.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
</package>
<package pkgid="e65dcd1dd5cc8991d58fb3c4b034ac27b3072e6161c06adf25654118c0cc940a968ac066cd5de0a63f880cf2f04ab1cf62a435f65032f81b32cb67c382c0f1ac" name="util-linux-systemd" arch="x86_64">
  <version epoch="0" ver="2.41.1" rel="160000.3.1"/>
  <changelog author="sbrabec@suse.com" date="1744027200">- Update to version 2.41:
  * agetty: Fixed an issue where issue files were not being printed
    from additional locations, such as /run or /usr/lib. This
    change now allows for the use of local information from /etc,
    in addition to generated files from /run and
    distribution-specific files from /usr/lib.
  * cfdisk and sfdisk: Added support for the --sector-size command
    line option.
  * sfdisk: Added a new option, --discard-free.
  * fdisk: Added a new command, 'T', to discard sectors.
  * chrt: The --sched-runtime now supports SCHED_{OTHER,BATCH}
    policies.
  * column: Can now handle ANSI SGR colors inside OSC 8 hyperlink
    escape codes and sequences.
  * enosys: Can now dump defined filters.
  * libmount:
  * Added experimental support for statmount() and listmount()
    syscalls.
  * This new functionality can be accessed using "findmnt
  - -kernel=listmount".
  * Added a new mount option,
    X-mount.nocanonicalize[=source|target].
  * Added new mount extensions to the "ro" flag (ro[=vfs,fs]).
  * Added a new option, X-mount.noloop, to disable automatic loop
    device creation.
  * Now supports bind symlinks over symlinks.
  * Reads all kernel info/warning/error messages from new API
    syscalls (and mount(8) prints them).
  * libuuid: Now supports RFC9562 UUIDs.
  * findmnt, lsblk, and lsfd: Added a new --hyperlink command line
    option to print paths as terminal hyperlinks.
  * findmnt: Can now address filesystems using --id and --uniq-id
    (requires listmount() kernel support).
  * flock: Added support for the --fcntl command line option.
  * hardlink: Can now prioritize specified trees on the command
    line using --prioritize-trees.
  * Can exclude sub-trees using --exclude-subtree or keep them in
    the current mount using --mount.
  * Duplicates can now be printed using --list-duplicates.
  * hwclock: Added a new --param-index option to address position
    for RTC_PARAM_{GET,SET} ioctls.
  * kill: Can now decode signal masks (e.g. as used in /proc) to
    signal names.
  * libblkid: Made many changes to improve detection, including
    exfat, GPT, LUKS2, bitlocker, etc.
  * login: Added support for LOGIN_ENV_SAFELIST in /etc/login.def.
  * lsfd: Now supports pidfs and AF_VSOCK sockets.
  * lsipc, ipcmk, ipcrm: Now supports POSIX ipc.
  * lslogins: Now supports lastlog2.
  * lsns: Added support for the --filter option.
  * build by meson: Now supports translated man pages and has fixed
    many bugs.
  * mkswap: The option --file should now be usable on btrfs.
  * nsenter: Improved support for pidfd and can now join target
    process's socket net namespace.
  * scriptlive: Added a new option, --echo &lt;never|always|auto&gt;.
  * zramctl: Now supports COMP-RATIO and --algorithm-params.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41-ReleaseNotes
- Update util-linux-login_defs-check.sh:
  * Make instructions up to date.
  * Update checksum reflecting the shadow update.
- Refresh libmount-print-a-blacklist-hint-for-unknown-filesyst.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1744891200">- Enable mountfd support again (jsc#PED-9752).
  BREAKING CHANGE
  Mountfd is nearly completely compatible with the old mount. There
  is a special case that cannot be handled by mountfd, and it needs
  to be handled by applications:
  Mountfd discriminates between physical mount layer and virtual
  mount layer. Once the physical mount layer is read-only,
  read-write mount on the virtual layer is not possible.
  If the first mount is read only, then the physical filesystem is
  mounted read-only, and later mount of the same file system as
  read-write is not possible. To solve this problem, the first
  mount needs to be read-only only on the virtual layer, keeping
  the physical layer read-write.
  The user space fix is simple:
  Instead of
    mount -oro
  use
    mount -oro=vfs
  This will keep the physical layer read-write, but the virtual
  file system layer (and the user space access) will be read-only.</changelog>
  <changelog author="sbrabec@suse.com" date="1747742400">- Fix segfault of findmnt (boo#1242705,
  gh#util-linux/util-linux#3574,
  util-linux-libblkid-econf-parse.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1748520000">- Add ul_ prefix to functions with common names. Fixes btrfsprogs
  build failure (gh#util-linux/util-linux#3603,
  util-linux-rename-common-symbols-1.patch,
  util-linux-rename-common-symbols-2.patch,
  util-linux-rename-common-symbols-3.patch,
  util-linux-rename-common-symbols-4.patch).</changelog>
  <changelog author="nicolas@belouin.fr" date="1749556800">- Fix libmount --no-canonicalize regression (boo#1244251,
  gh#util-linux/util-linux#3479,
  libmount-fix-no-canonicalize-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1750766400">- Update to version 2.41.1:
  * cfdisk: fix memory leak and possible NULL dereference
  * fdisk: fix possible memory leak
  * findmnt: fix -k option parsing regression (boo#1242705,
    drop util-linux-libblkid-econf-parse.patch)
  * hardlink: fix performance regression
  * include/cctype: fix string comparison
  * libblkid:
  * Fix crash while parsing config with libeconf
  * befs fix underflow
  * avoid strcasecmp() for ASCII-only strings
  * libblkid/src/topology/dm: fix fscanf return value check to
    match expected number of parsed items
  * libmount:
  * (subdir) restrict for real mounts only
  * (subdir) remove unused code
  * avoid calling memset() unnecessarily
  * fix --no-canonicalize regression (boo#1244251,
    drop libmount-fix-no-canonicalize-regression.patch)
  * lsblk:
  * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE
  * avoid strcasecmp() for ASCII-only strings
  * lscpu:
  * fix possible buffer overflow in cpuinfo parser
  * Fix loongarch op-mode output with recent kernel
  * lsfd:
  * scan the protocol field of /proc/net/packet as a hex number
  * fix the description for PACKET.PROTOCOL column
  * lsns:
  * enhance compilation without USE_NS_GET_API
  * fix undefined reference to add_namespace_for_nsfd #3483
  * more:
  * fix broken ':!command' command key
  * fix implicit previous shell_line execution #3508
  * tests: (test_mkfds::mapped-packet-socket) add a new parameter,
    protocol
  * treewide:
  * add ul_ to parse_timestamp() function name
    (drop util-linux-rename-common-symbols-4.patch)
  * add ul_ to parse_switch() function name
    (drop util-linux-rename-common-symbols-3.patch)
  * add ul_ to parse_size() function name
    (drop util-linux-rename-common-symbols-2.patch)
  * add ul_ to parse_range() function name
    (drop util-linux-rename-common-symbols-1.patch)
  * fix optional arguments usage
  * avoid strcasecmp() for ASCII-only strings
  * Wipefs: improve --all descriptions for whole-disks
  * Misc: Do not call exit() on code ending in shared libraries
  * Other fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes
- Fix problem with uname26 listed twice.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
</package>
<package pkgid="6f86f811c553ac7936a8b589d7bc15f28466eba8bc02e8156b0af24c3e2324e8ed4df15da2d6a997f158ebd40848be4d6e5113d734f620dc96a7a988c7d97d41" name="velociraptor-client" arch="x86_64">
  <version epoch="0" ver="0.7.0.4.git152.fb24dfd" rel="160000.2.2"/>
  <changelog author="antonio.teixeira@suse.com" date="1720008000">- Update to version 0.7.0.4.git97.675e45f9:
  * kafka-humio-gateway: update go version and dependency list
  * kafka-humio-gateway: specific mTLS cert paths in config.yml
  * docker-compose: set kafka replication factor and min ISRs
  * kafka-humio-gateway: add http post retry mechanism
  * kafka-humio-gateway: add pprof debugging option
  * kafka-humio-gateway: format with gofmt
  * kafka-humio-gateway: fix go-staticcheck issues
  * kafka-humio-gateway: fix sendEvents() never exiting
  * Kafka.Events.Client: Update to use new artifactset type
  * docker-compose: add optional Kafka cluser
  * kafka-humio-gateway: add mTLS support
  * contrib/kafka-humio-gateway: add new debug option for noisy events
  * contrib/kafka-humio-gateway: backoff and retry for metadata
  * kafka-humio-gateway: add sample config file
  * kafka-humio-gateway: update sarama and dependencies
  * Add Kafka-Humio Gateway [Depends on PR#10] (#8)
  * vql/server/kafka: connect sarama logging to velociraptor logging
  * vql/server/kafka: add exponential backoff (limited to 30s) for metadata retries
  * vql/server/kafka: set appropriate ClientID
  * Add a Kafka export plugin
- Use llvm17 when available</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723464000">- Move system-user-velociraptor to the client flavor build in order
  to build it on all architectures.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1724068800">- Update node modules with security fixes.
  * Fixes CVE-2024-39338 (bsc#1229424)
  * Remove CVE-2024-28849-follow-redirects-drop-proxy-authorization.patch
    as the update is included.</changelog>
  <changelog author="doreilly@suse.com" date="1736856000">- Update to version 0.7.0.4.git126.27cfbe1:
  * bpf: fix plugins not stopping when context cancelled
  * tcpsnoop: move parsing to its own function
  * bpf plugins: remove depreciated libbpfgo calls
  * bpf plugins: add context to error logs
  * chattrsnoop: fix files not getting closed
  * chattrsnoop: move hashing from plugin to artifact
  * RPM artifact: start checks immediately on artifact load
  * rpm plugin: fix ndb magic error
  * audit s390x: fix arch filter rules errors
  * github: fix deprecated upload artifact
  * tcpsnoop: fix ipv6 local and remote addresses order
  * tcpsnoop: fix missing ipv6 outbound connections
  * Linux.Events.ProcessExecutions: remove parent cmdline
  * audit: reduce FileBufferLeaseSize to ease GC overhead
  * audit: fix auditBuf allocation and go vet warnings
  * audit: fix plugin shutdown race condition
  * audit: fix audit client data races
  * audit: fix race in subscriber
  * audit: prevent Windows loading audit package
  * sdjournal: fix package causing test failures
  * github: run linux unit tests</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1737115200">- Update to version 0.7.0.4.git142.862ef23:
  * github: fix deprecated upload artifact again
  * Update npm packages
    Includes fixes for the following vulnerabilities:
    CVE-2023-45133
    CVE-2023-46234
    CVE-2024-55565
    CVE-2024-45296
    CVE-2023-44270
    CVE-2024-47068
    CVE-2024-23331
    CVE-2024-31207
    CVE-2024-45812
    CVE-2024-45811
  * Update go dependencies
    Includes fixes for the following vulnerabilities:
    CVE-2024-45338
    CVE-2024-37298
    CVE-2024-24786
    CVE-2023-45683 (bsc#1216310)
    CVE-2023-1732
  * Update jwt to 4.5.1
    Fixes CVE-2024-51744 (bsc#1232944)
  * Update go-retryablehttp to 0.7.7
    Fixes CVE-2024-6104 (bsc#1227061)
  * Update go-oidc and go-jose
    Fixes CVE-2024-28180 (bsc#1235168)
  * Update dompurify to 3.1.3
    Fixes CVE-2024-47875 (bsc#1231574)
  * Update package-lock.json
  * Update micromatch to 4.0.8
    Partial fix for CVE-2024-4067 (bsc#1224367)
    Partial fix for CVE-2024-4068 (bsc#1224296)
  * Update axios to 1.7.9
    Fixes CVE-2024-39338 (bsc#1229424)
  * Update cross-spawn to 7.0.6
    Fixes CVE-2024-21538 (bsc#1233845)
  * Update elliptic to 6.6.1
    Update contains fixes for:
    CVE-2024-48949 (bsc#1231558)
    CVE-2024-48948 (bsc#1231685)
    CVE-2024-42459 (bsc#1232543)
    CVE-2024-42460 (bsc#1232543)
    CVE-2024-42461 (bsc#1232543)
  * Update follow-redirects to 1.15.6
    Fixes CVE-2024-28849 (bsc#1221456)
  * fix: gui/velociraptor/package.json to reduce vulnerabilities
    Fixes CVE-2022-25883 (bsc#1212572)
- Drop CVE-2022-25883-npm-watch-semver-deps.patch
  * Fix was included upstream</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1737115201">- Reorganize llvm dependency version conditionals
- Use llvm17 for Leap 15.5</changelog>
  <changelog author="doreilly@suse.com" date="1737979200">- Don't try to build or use system-user-velociraptor on SLE12</changelog>
  <changelog author="doreilly@suse.com" date="1738065600">- Use llvm17 for SLE15SP6+</changelog>
  <changelog author="doreilly@suse.com" date="1739793600">- Use the latest llvm/clang on tumbleweed</changelog>
  <changelog author="doreilly@suse.com" date="1742558400">- Update to version 0.7.0.4.git152.fb24dfd:
  * audit: fix watch rules in artifacts
  * audit: update go-libaudit dependency for pcc64le arch filter fix
  * Use execsnoop plugin in artifacts when possible
  * Add execsnoop plugin to capture execve system calls
  * github-actions: update ubuntu runners to 22.04
  * Fix failing tls unit test on new go versions</changelog>
</package>
<package pkgid="b6e5d53f3d5f90eb00f72a7e5b5341814a9b4cbe3d946e2dac370d0d5e43b56d7ca5391a41c15b8d44bf1f982b4e14941d9edddd1a56ecdf87e23c7225b89155" name="vim-data-common" arch="noarch">
  <version epoch="0" ver="9.2.0280" rel="160000.1.1"/>
  <changelog author="mimi.vx@gmail.com" date="1742644800">- update to 9.1.1230
- refresh vim-7.3-sh_is_bash.patch
  * patch 9.1.1230: inconsistent CTRL-C behaviour for popup windows
  * patch 9.1.1229: the comment plugin can be improved
  * runtime(sh): consider sh as POSIX shell by default
  * patch 9.1.1228: completion: current position column wrong after got a match
  * runtime(hlyank): add the hlyank package
  * patch 9.1.1227: no tests for the comment package
  * patch 9.1.1226: "shellcmdline" completion doesn't work with input()
  * patch 9.1.1225: extra NULL check in VIM_CLEAR()
  * runtime(sh): remove invalid commented out line in syntax script
  * runtime(sh): update sh indent script
  * patch 9.1.1224: cannot :put while keeping indent
  * runtime(go): use :term for keywordprg for nvim/gvim
  * patch 9.1.1223: wrong translation used for encoding failures
  * patch 9.1.1222: using wrong length for last inserted string
  * patch 9.1.1221: Wrong cursor pos when leaving Insert mode just after 'autoindent'
  * patch 9.1.1220: filetype: uv.lock file not recognized
  * patch 9.1.1219: Strange error with wrong type for matchfuzzy() "camelcase"
  * patch 9.1.1218: missing out-of-memory check in filepath.c
  * patch 9.1.1217: tests: typos in test_matchfuzzy.vim
  * patch 9.1.1216: Pasting the '.' register multiple times may not work
  * runtime(keymap) Add forward slash (/) to russian-jcukenwin keymap
  * runtime(vim): Update base-syntax, match multiline return types
  * patch 9.1.1215: Patch 9.1.1213 has some issues
  * patch 9.1.1214: matchfuzzy() can be improved for camel case matches
  * patch 9.1.1213: cannot :put while keeping indent
  * runtime(syntax-tests): Support "wait-free" test failure
  * patch 9.1.1212: too many strlen() calls in edit.c
  * patch 9.1.1212: filetype: logrotate'd pacmanlogs are not recognized
  * runtime(prql): include prql syntax script
  * patch 9.1.1211: TabClosedPre is triggered just before the tab is being freed
  * patch 9.1.1210: translation(ru): missing Russian translation for the new tutor
  * patch 9.1.1209: colorcolumn not drawn after virtual text lines
  * patch 9.1.1208: MS-Windows: not correctly restoring alternate screen on Win 10
  * patch 9.1.1207: MS-Windows: build warning in filepath.c
  * translation(ru): include Russian translation for chapter two of the tutorial
  * runtime(matchparen): line continuation causes failure in CI
  * patch 9.1.1206: tests: test_filetype fails when a file is a directory
  * runtime(doc): symlinking netrw.txt causes problems during install on Windows
  * patch 9.1.1205: completion: preinserted text not removed when closing pum
  * runtime(tutor): updated Russian translation for tutor chapter 1
  * runtime(cs): Update C# runtime files
  * patch 9.1.1203: matchparen keeps cursor on case label in sh filetype
  * runtime(doc): fix a typo in gitrebase filetype
  * runtime(doc): Tweak documentation style a bit
  * runtime(vim): Sync syntax generator base file with output file.
  * runtime(doc): update a few minor omissions from 5876016 and 4d2c4b9
  * patch 9.1.1202: Missing TabClosedPre autocommand
  * patch 9.1.1201: 'completefuzzycollect' does not handle dictionary correctly
  * runtime(doc): make :h 'completefuzzycollect' a bit clearer
  * runtime(doc): document gitrebase filetype
  * translation(it): update menu_it
  * translation(sr): Add chapter two of the new tutor
  * patch 9.1.1200: cmdline pum not cleared for input() completion
  * patch 9.1.1199: gvim uses hardcoded xpm icon file
  * runtime(indent-tests): GitHub Actions doesn't show why indent tests failed
  * patch 9.1.1198: [security]: potential data loss with zip.vim
  * patch 9.1.1197: process_next_cpt_value() uses wrong condition
  * patch 9.1.1196: filetype: config files for container tools are not recognized
  * runtime(doc): remove unnecessary "an"
  * patch 9.1.1195: inside try-block: fn body executed with default arg undefined
  * runtime(doc): Update doc 52.6
  * runtime(compiler): allow customizing exe and args for tsc
  * runtime(compiler): add comment for Dispatch
  * runtime(tera): remove unwanted code and fix issues in syntax script
  * runtime(doc): clarify that a umask is applied to mkdir()
  * patch 9.1.1194: filetype: false positive help filetype detection
  * runtime(man): improve :Man completion for man-db
  * patch 9.1.1193: Unnecessary use of STRCAT() in au_event_disable()
  * translation(sr): Update Serbian messages translation
  * runtime(doc): document vim syntax switches
  * runtime(vim): Update base-syntax, improve :syntax highlighting
  * patch 9.1.1192: Vim crashes with term response debug logging enabled
  * runtime(vim): Update base-syntax and generator, only match valid predefined variables
  * runtime(plsql): move fold option from syntax to filetype plugin
  * patch 9.1.1191: tests: test for patch 9.1.1186 doesn't fail without the patch
  * patch 9.1.1190: C indentation does not detect multibyte labels
  * runtime(sh): set b:match_skip to ignore matches for matchit
  * patch 9.1.1189: if_python: build error due to incompatible pointer types
  * patch 9.1.1188: runtime(tera): tera support can be improved
  * patch 9.1.1187: matchparen plugin wrong highlights shell case statement
  * runtime(doc): use GNOME instead of Gnome
  * patch 9.1.1186: filetype: help files in git repos are not detected
  * runtime(nohlsearch): fix CursorHold loop
  * runtime(doc): warn users about potentially risky hotkey
  * runtime(syntax-tests): Improve parts of "runtest.vim"
  * patch 9.1.1185: endless loop with completefuzzycollect and no match found
  * runtime(doc): CmdUndefined and FuncUndefined can always be nested
  * patch 9.1.1184: Unnecessary use of vim_tolower() in vim_strnicmp_asc()
  * patch 9.1.1083: "above" virtual text breaks cursorlineopt=number
  * runtime(go): add 'keywordprg' and 'formatprg' to ftplugin
  * runtime(syntax-tests): Re-introduce support for "phoney" languages
  * patch 9.1.1182: No cmdline completion for 'completefuzzycollect'
  * patch 9.1.1181: Unnecessary STRLEN() calls in insexpand.c
  * patch 9.1.1180: short-description
  * runtime(vim): Update base-syntax, bug fixes
  * patch 9.1.1179: too many strlen() calls in misc2.c
  * patch 9.1.1178: not possible to generate completion candidates using fuzzy matching
  * editorconfig: set editing style for comment and hlsearch package
  * patch 9.1.1177: filetype: tera files not detected
  * runtime(doc): revert modeline change in vim9.txt
  * runtime(new-tutor): add chapter two to the interactive tutorial
  * patch 9.1.1176: wrong indent when expanding multiple lines
  * test(runtime/syntax): improve syntax tests
  * editorconfig: set indent config for *.vim files
  * runtime(doc): mention alternative check for vim9script
  * patch 9.1.1175: inconsistent behaviour with exclusive selection and motion commands
  * runtime(man): don't add jumps when loading a manpage
  * runtime(vim): recognize &lt;...&gt; strings (and keys) for 'keywordprg'
  * patch 9.1.1174: tests: Test_complete_cmdline() may fail
  * runtime(doc): mention bzip3 in gzip plugin documentation</changelog>
  <changelog author="badshah400@gmail.com" date="1743076800">- Update to version 9.1.1244:
  * patch 9.1.1244:
  - part of patch v9.1.1242 was wrong
  - runtime(omnimark): update and rewrite syntax script in Vim9
    script
  * patch 9.1.1243: diff mode is lacking for changes within lines
  * patch 9.1.1242: Crash when evaluating variable name
  * patch 9.1.1241: wrong preprocessort indentation in term.c
  * patch 9.1.1240:
  - Regression with ic/ac text objects and comment plugin
  - runtime(hyprlang): save and restore cpo setting in syntax
    script
  - runtime(solidity): update syntax script with error
    definitions
  - runtime(doc): add back help tag "pi_netrw.txt"
  * patch 9.1.1239:
  - if_python: no tuple data type support
  - runtime(doc): Add missing garbagecollect() hypertext link
  - Improve contributing guide by adding a section on signing
    off commits
  * patch 9.1.1238: wrong cursor column with 'set
    splitkeep=screen'
  * patch 9.1.1237: Compile error with C89 compiler in term.c
  * patch 9.1.1236: tests: test_comments leaves swapfiles around
  * patch 9.1.1235: cproto files are outdated
  * patch 9.1.1234: Compile error when SIZE_MAX is not defined
  * patch 9.1.1233:
  - Coverity warns about NULL pointer when triggering WinResized
  - runtime(doc): Fix an omission in the documentation.
  * patch 9.1.1232:
  - Vim script is missing the tuple data type
  - runtime(vim): Update base-syntax, match protected
    constructors
  - runtime(syntax-tests): Do not ignore failed screendumps
  * patch 9.1.1231:
  - filetype: SPA JSON files are not recognized
  - runtime(doc): update and correct str2blob() and blob2str()
    examples
  - runtime(hlyank): update the hlyank package
  - runtime(syntax-tests): Add non-Latin-1 character filters for
    C syntax tests</changelog>
  <changelog author="badshah400@gmail.com" date="1743249600">- Update to version 9.1.1258:
  * patch 9.1.1258: regexp: max \U and \%U value is limited by
    INT_MAX
  * patch 9.1.1257:
  - Mixing vim_strsize() with mb_ptr2cells() in pum_redraw()
  - runtime(lf): add lf r34 keywords to syntax script
  * patch 9.1.1256:
  - if_python: duplicate tuple data entries
  - runtime(vim): Update base-syntax, match tuples
  * patch 9.1.1255: missing test condition for 'pummaxwidth'
    setting
  * patch 9.1.1254: need more tests for the comment plugin
  * patch 9.1.1253:
  - abort when closing window with attached quickfix data
  - runtime(doc): non-portable sed regex in Makefile for
    pi_netrw.txt rule
  * patch 9.1.1252: typos in code and docs related to 'diffopt'
    "inline:"
  * patch 9.1.1251: if_python: build error with tuples and dynamic
    python
  * patch 9.1.1250: cannot set the maximum popup menu width
  * patch 9.1.1249:
  - tests: no test that 'listchars' "eol" doesn't affect "gM"
  - runtime(doc): group python interface related items in
    todo.txt
  * patch 9.1.1248: compile error when building without
    FEAT_QUICKFIX
  * patch 9.1.1247: fragile setup to get (preferred) keys from
    key_name_entry
  * patch 9.1.1246: coverity complains about some changes in
    v9.1.1243
  * patch 9.1.1245: need some more tests for curly braces
    evaluation</changelog>
  <changelog author="hsk17@mail.de" date="1743508800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="suse-beta@cboltz.de" date="1745064000">- Update apparmor.vim to latest version (from AppArmor 4.1.0)
  - add more units for rlimit rules</changelog>
  <changelog author="mimi.vx@gmail.com" date="1745236800">- update to 9.1.1330:
  * patch 9.1.1330: may receive E315 in terminal
  * patch 9.1.1329: cannot get information about command line completion
  * patch 9.1.1328: too many strlen() calls in indent.c
  * patch 9.1.1327: filetype: nroff detection can be improved
  * runtime(doc): cross-link :| meaning :p and explain E749
  * runtime(doc): style: clarify to prefer 2 spaces after a sentence
  * runtime(pov): deprecate `#render` and `#statistics` in syntax script
  * patch 9.1.1326: invalid cursor position after 'tagfunc'
  * runtime(keymaps): update Brazilian keymaps
  * patch 9.1.1325: tests: not checking error numbers properly
  * runtime(doc): clarify 'includeexpr' is not used for &lt;cfile&gt;
  * runtime(filetype): improve *.h filetype detection
  * runtime(indent-tests): Raise timeouts for "search*()"es
  * runtime(indent-tests): Annotate timed "search*()"es for tracing
  * runtime(indent-tests): Instrument timed "search*()" calls
  * patch 9.1.1324: undefined behaviour if X11 connection dies
  * patch 9.1.1323: b:undo_ftplugin not executed when re-using buffer
  * runtime(nix): set iskeyword and b:match_words in ftplugin
  * runtime(doc): clarify "nearest" value for 'completeopt'
  * runtime(doc): Tweak documentation style a bit
  * patch 9.1.1322: small delete register cannot paste multi-line correctly
  * patch 9.1.1321: filetype: MS ixx and mpp files are not recognized
  * patch 9.1.1320: filetype: alsoft config files are not recognized
  * patch 9.1.1319: Various typos in the code, issue with test_inst_complete.vim
  * patch 9.1.1318: tests: test_format fails
  * runtime(jjdescription): Don't require a space to start comments
  * patch 9.1.1317: noisy error when restoring folds from session fails
  * patch 9.1.1316: missing memory allocation failure in os_mswin.c
  * patch 9.1.1315: completion: issue with fuzzy completion and 'completefuzzycollect'
  * patch 9.1.1314: max allowed string width too small
  * patch 9.1.1313: compile warning about uninitialized value
  * patch 9.1.1312: tests: Test_backupskip() fails when HOME is defined
  * patch 9.1.1311: completion: not possible to limit number of matches
  * patch 9.1.1310: completion: redundant check for preinsert effect
  * runtime(gleam): Update ftplugin, use recommended_style config variable
  * patch 9.1.1309: tests: no test for 'pummaxwidth' with non-truncated "kind"
  * runtime: set 'cpoptions' for line-continuation in various runtime files
  * runtime(tar): remove dependency on netrw#WinPath, include mapping doc
  * runtime(netrw): remove deprecated functions
  * patch 9.1.1308: completion: cannot order matches by distance to cursor
  * patch 9.1.1307: make syntax does not reliably detect different flavors
  * patch 9.1.1306: completion menu rendering can be improved
  * patch 9.1.1305: completion menu active after switching windows/tabs
  * patch 9.1.1304: filetype: some man files are not recognized
  * runtime(netrw): upstream snapshot of v180
  * patch 9.1.1303: missing out-of-memory check in linematch.c
  * patch 9.1.1302: Coverity warns about using uninitialized value
  * patch 9.1.1301: completion: cannot configure completion functions with 'complete'
  * patch 9.1.1300: wrong detection of -inf
  * runtime(doc): update enum helptext
  * patch 9.1.1299: filetype: mbsyncrc files are not recognized
  * runtime(doc): update options.txt and clarify 'wildmode' further
  * runtime(gleam): update Maintainer and filetype options
  * patch 9.1.1298: define_function() is too long
  * patch 9.1.1297: Ctrl-D scrolling can get stuck
  * runtime(new-tutor): update tutor and correct comandline completion
  * patch 9.1.1296: completion: incorrect truncation logic
  * patch 9.1.1295: clientserver: does not handle :stopinsert correctly
  * runtime(doc): disable last-position-jump in diff mode
  * runtime(doc): Improve 'wildmode' setting desciption
  * patch 9.1.1294: gui tabline menu does not use confirm when closing tabs
  * runtime(doc): correct backslash escaping comma example
  * patch 9.1.1293: comment plugin does not handle 'exclusive' selection for comment object
  * patch 9.1.1292: statusline not correctly evaluated
  * runtime(sh): Do not look up a "sh" utility in $PATH for "sh_13.sh"
  * runtime(filetype): make shell filetype detection more robust
  * patch 9.1.1291: too many strlen() calls in buffer.c
  * runtime(keymaps): include 2 Brazilian Keymaps
  * runtime(vim): Update-base-syntax, match full :*grep, :make, :sort and :filter commands
  * patch 9.1.1290: tests: missing cleanup in test_filetype.vim
  * patch 9.1.1289: tests: no test for matchparen plugin with WinScrolled event
  * runtime(remind): include remind.vim ftplugin
  * runtime(vim): Update base-syntax, improve :command highlighting
  * runtime(help): add omni completion and 'iskeyword' to filetype plugin
  * runtime(lf): improve syntax script, add filetype plugin
  * patch 9.1.1288: Using wrong window in ll_resize_stack()
  * runtime(doc): rename wrong option to 'pummaxwidth'
  * patch 9.1.1287: quickfix code can be further improved
  * patch 9.1.1286: filetype: help files not detected when 'iskeyword' includes ":"
  * patch 9.1.1285: Vim9: no error message for missing method after "super."
  * patch 9.1.1284: not possible to configure pum truncation char
  * runtime(lua): fix whitespace style issues in lua ftplugin
  * runtime(lua): improve foldexpr, add vim9 script version
  * runtime(doc): Fix minor typo in options.txt
  * runtime(fstab): set formatoptions-=t in filetype plugin
  * runtime(svelte): add matchit support to svelte filetype plugin
  * patch 9.1.1283: quickfix stack is limited to 10 items
  * patch 9.1.1282: Build and test failure without job feature
  * patch 9.1.1281: extra newline output when editing stdin
  * patch 9.1.1280: trailing additional semicolon in get_matches_in_str()
  * patch 9.1.1279: Vim9: null_object and null_class are no reserved names
  * patch 9.1.1278: Vim9: too long functions in vim9type.c
  * runtime(vim): Update base-syntax, match full :redir command
  * patch 9.1.1277: tests: trailing comment char in test_popupwin
  * patch 9.1.1276: inline word diff treats multibyte chars as word char
  * runtime(doc): update WinScrolled documentation
  * runtime(vim): Update base-syntax, improve :set backslash handling
  * patch 9.1.1275: MS-Windows: Not possible to pass additional flags to Make_mvc
  * patch 9.1.1274: Vim9: no support for object&lt;type&gt; as variable type
  * patch 9.1.1273: Coverity warns about using uninitialized value
  * patch 9.1.1272: completion: in keyword completion Ctrl_P cannot go back after Ctrl_N
  * runtime(sh): Update syntax file, command substitution opening paren at EOL
  * patch 9.1.1271: filetype: Power Query files are not recognized
  * translation(ru): fix and updated messages translation
  * runtime(doc): clarify the use of change marks when writing a buffer
  * runtime(zip): add *.whl to the list of zip extensions
  * patch 9.1.1270: missing out-of-memory checks in buffer.c
  * runtime(doc): update pi_zip.txt with current list of zip file extensions
  * patch 9.1.1269: completion: compl_shown_match is updated when starting keyword completion
  * patch 9.1.1268: filetype: dax files are not recognized
  * runtime(openPlugin): fix E480 when opening URLs with wildcards on Windows
  * patch 9.1.1267: Vim9: no support for type list/dict&lt;object&lt;any&gt;&gt;
  * patch 9.1.1266: MS-Windows: type conversion warnings
  * translation(ru): Updated messages translation
  * patch 9.1.1265: tests: no tests for typing normal char during completion
  * runtime(rust): set formatprg to rustfmt
  * patch 9.1.1264: Vim9: error when comparing objects
  * runtime(doc): update last change date for diff.txt
  * runtime(doc): Update the tuple help text
  * patch 9.1.1263: string length wrong in get_last_inserted_save()
  * patch 9.1.1262: heap-buffer-overflow with narrow 'pummaxwidth' value
  * patch 9.1.1261: No test for 'pummaxwidth' non-truncated items
  * runtime(debversions): Add release name for Debian 15 - duke
  * patch 9.1.1260: Hang when filtering buffer with NUL bytes
  * runtime(odin): add new keywords to syntax script
  * patch 9.1.1259: some issues with comment package and tailing spaces
  * runtime(java): Make changes for JDK 24 in syntax script</changelog>
  <changelog author="martin.schreiner@suse.com" date="1750161600">- Fix bsc#1228776 / CVE-2024-41965.
- Fix bsc#1239602 / CVE-2025-29768.
- Refresh patch:
  vim-7.3-sh_is_bash.patch
- Update to 9.1.1406:
  9.1.1406: crash when importing invalid tuple
  9.1.1405: tests: no test for mapping with special keys in session file
  9.1.1404: wrong link to Chapter 2 in new-tutor
  9.1.1403: expansion of 'tabpanelopt' value adds wrong values
  9.1.1402: multi-byte mappings not properly stored in session file
  9.1.1401: list not materialized in prop_list()
  9.1.1400: [security]: use-after-free when evaluating tuple fails
  9.1.1399: tests: test_codestyle fails for auto-generated files
  9.1.1398: completion: trunc does not follow Pmenu highlighting attributes
  9.1.1397: tabpanel not correctly updated on :tabonly
  9.1.1396: 'errorformat' is a global option
  9.1.1395: search_stat not reset when pattern differs in case
  9.1.1394: tabpanel not correctly redrawn on tabonly
  9.1.1393: missing test for switching buffers and reusing curbuf
  9.1.1392: missing patch number
  9.1.1391: Vim does not have a vertical tabpanel
  9.1.1390: style: more wrong indentation
  9.1.1389: completion: still some issue when 'isexpand' contains a space
  9.1.1388: Scrolling one line too far with 'nosmoothscroll' page scrolling
  9.1.1387: memory leak when buflist_new() fails to reuse curbuf
  9.1.1386: MS-Windows: some minor problems building on AARCH64
  9.1.1385: inefficient loop for 'nosmoothscroll' scrolling
  9.1.1384: still some problem with the new tutors filetype plugin
  9.1.1383: completion: 'isexpand' option does not handle space char correct
  9.1.1382: if_ruby: unused compiler warnings from ruby internals
  9.1.1381: completion: cannot return to original text
  9.1.1380: 'eventignorewin' only checked for current buffer
  9.1.1379: MS-Windows: error when running evim when space in path
  9.1.1378: sign without text overwrites number option
  9.1.1377: patch v9.1.1370 causes some GTK warning messages
  9.1.1376: quickfix dummy buffer may remain as dummy buffer
  9.1.1375: [security]: possible heap UAF with quickfix dummy buffer
  9.1.1374: completion: 'smartcase' not respected when filtering matches
  9.1.1373: 'completeopt' checking logic can be simplified
  9.1.1372: style: braces issues in various files
  9.1.1371: style: indentation and brace issues in insexpand.c
  9.1.1370: CI Tests favor GTK2 over GTK3
  9.1.1369: configure still using autoconf 2.71
  9.1.1368: GTK3 and GTK4 will drop numeric cursor support.
  9.1.1367: too many strlen() calls in gui.c
  9.1.1366: v9.1.1364 unintentionally changed sign.c and sound.c
  9.1.1365: MS-Windows: compile warnings and too many strlen() calls
  9.1.1364: style: more indentation issues
  9.1.1363: style: inconsistent indentation in various files
  9.1.1362: Vim9: type ignored when adding tuple to instance list var
  9.1.1361: [security]: possible use-after-free when closing a buffer
  9.1.1360: filetype: GNU Radio companion files are not recognized
  9.1.1359: filetype: GNU Radio config files are not recognized
  9.1.1358: if_lua: compile warnings with gcc15
  9.1.1357: Vim incorrectly escapes tags with "[" in a help buffer
  9.1.1356: Vim9: crash when unletting variable
  9.1.1355: The pum_redraw() function is too complex
  9.1.1354: tests: Test_terminalwinscroll_topline() fails on Windows
  9.1.1353: missing change from v9.1.1350
  9.1.1352: style: inconsistent indent in insexpand.c
  9.1.1351: Return value of getcmdline() inconsistent in CmdlineLeavePre
  9.1.1350: tests: typo in Test_CmdlineLeavePre_cabbr()
  9.1.1349: CmdlineLeavePre may trigger twice
  9.1.1348: still E315 with the terminal feature
  9.1.1347: small problems with gui_w32.c
  9.1.1346: missing out-of-memory check in textformat.c
  9.1.1345: tests: Test_xxd_color2() test failure dump diff is misleading
  9.1.1344: double free in f_complete_match() (after v9.1.1341)
  9.1.1343: filetype: IPython files are not recognized
  9.1.1342: Shebang filetype detection can be improved
  9.1.1341: cannot define completion triggers
  9.1.1340: cannot complete :filetype arguments
  9.1.1339: missing out-of-memory checks for enc_to_utf16()/utf16_to_enc()
  9.1.1338: Calling expand() interferes with cmdcomplete_info()
  9.1.1337: Undo corrupted with 'completeopt' "preinsert" when switching buffer
  9.1.1336: comment plugin does not support case-insensitive 'commentstring'
  9.1.1335: Coverity complains about Null pointer dereferences
  9.1.1334: Coverity complains about unchecked return value
  9.1.1333: Coverity: complains about unutilized variable
  9.1.1332: Vim9: segfault when using super within a lambda
  9.1.1331: Leaking memory with cmdcomplete()</changelog>
  <changelog author="martin.schreiner@suse.com" date="1772625600">* Update Vim to version 9.2.0045 (from 9.1.1406).
  * Fix bsc#1258229 CVE-2026-26269 as 9.2.0045 is not impacted (fixed
  upstream).
  * Fix bsc#1246602 CVE-2025-53906 as 9.2.0045 is not impacted (fixed
  upstream).
  * Add wayland-client to BuildRequires and enable Wayland
  support.
  * Add Wayland include path to CFLAGS to fix clipboard compilation.
  * Package new Swedish (sv) man pages and clean up duplicate
  encodings (sv.ISO8859-1 and sv.UTF-8).
  * Add new patch:
  - reorder-exit-raw-mode.patch
  * Drop obsolete or upstreamed patches:
  - vim-7.3-filetype_spec.patch
  - vim-7.3-mktemp_tutor.patch
  - vim-7.4-filetype_apparmor.patch
  - vim-8.2.2411-globalvimrc.patch
  * Refresh the following patches:
  - vim-7.3-filetype_changes.patch
  - vim-7.3-filetype_ftl.patch
  - vim-7.3-sh_is_bash.patch
  - vim-9.1.1134-revert-putty-terminal-colors.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773230400">* Update Vim to version 9.2.0110 (from 9.2.0045).
  * Specifically, this fixes bsc#1259051 / CVE-2026-28417.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1775131200">- Fix bsc#1261191 / CVE-2026-34714.
- Fix bsc#1261271 / CVE-2026-34982.
- Fix bsc#1259985 / CVE-2026-33412.
- Update to 9.2.0280:
  * patch 9.2.0280: [security]: path traversal issue in zip.vim
  * patch 9.2.0279: terminal: out-of-bounds write with overlong CSI argument list
  * patch 9.2.0278: viminfo: heap buffer overflow when reading viminfo file
  * patch 9.2.0277: tests: test_modeline.vim fails
  * patch 9.2.0276: [security]: modeline security bypass
  * patch 9.2.0275: tests: test_options.vim fails
  * patch 9.2.0274: BSU/ESU are output directly to the terminal
  * patch 9.2.0273: tabpanel: undefined behaviour with large tabpanelop columns
  * patch 9.2.0272: [security]: 'tabpanel' can be set in a modeline
  * patch 9.2.0271: buffer underflow in vim_fgets()
  * patch 9.2.0270: test: trailing spaces used in tests
  * patch 9.2.0269: configure: Link error on Solaris
  * patch 9.2.0268: memory leak in call_oc_method()
  * patch 9.2.0267: 'autowrite' not triggered for :term
  * patch 9.2.0266: typeahead buffer overflow during mouse drag event
  * patch 9.2.0265: unnecessary restrictions for defining dictionary function names
  * patch 9.2.0264: Cannot disable kitty keyboard protocol in vim :terminal
  * patch 9.2.0263: hlset() cannot handle attributes with spaces
  * patch 9.2.0262: invalid lnum when pasting text copied blockwise
  * patch 9.2.0261: terminal: redraws are slow
  * patch 9.2.0260: statusline not redrawn after closing a popup window
  * patch 9.2.0259: tabpanel: corrupted display during scrolling causing flicker
  * patch 9.2.0258: memory leak in add_mark()
  * patch 9.2.0257: unnecessary memory allocation in set_callback()
  * patch 9.2.0256: visual selection size not shown in showcmd during test
  * patch 9.2.0255: tests: Test_popup_opacity_vsplit() fails in a wide terminal
  * patch 9.2.0254: w_locked can be bypassed when setting recursively
  * patch 9.2.0253: various issues with wrong b_nwindows after closing buffers
  * patch 9.2.0252: Crash when ending Visual mode after curbuf was unloaded
  * patch 9.2.0251: Link error when building without channel feature
  * patch 9.2.0250: system() does not support bypassing the shell
  * patch 9.2.0249: clipboard: provider reacts to autoselect feature
  * patch 9.2.0248: json_decode() is not strict enough
  * patch 9.2.0247: popup: popups may not wrap as expected
  * patch 9.2.0246: memory leak in globpath()
  * patch 9.2.0245: xxd: color output detection is broken
  * patch 9.2.0244: memory leak in eval8()
  * patch 9.2.0243: memory leak in change_indent()
  * patch 9.2.0242: memory leak in check_for_cryptkey()
  * patch 9.2.0241: tests: Test_visual_block_hl_with_autosel() is flaky
  * patch 9.2.0240: syn_name2id() is slow due to linear search
  * patch 9.2.0239: signcolumn may cause flicker
  * patch 9.2.0238: showmode message may not be displayed
  * patch 9.2.0237: filetype: ObjectScript routines are not recognized
  * patch 9.2.0236: stack-overflow with deeply nested data in json_encode/decode()
  * patch 9.2.0235: filetype: wks files are not recognized.
  * patch 9.2.0234: test: Test_close_handle() is flaky
  * patch 9.2.0233: Compiler warning in strings.c
  * patch 9.2.0232: fileinfo not shown after :bd of last listed buffer
  * patch 9.2.0231: Amiga: Link error for missing HAVE_LOCALE_H
  * patch 9.2.0230: popup: opacity not working accross vert splits
  * patch 9.2.0229: keypad keys may overwrite keycode for another key
  * patch 9.2.0228: still possible flicker
  * patch 9.2.0227: MS-Windows: CSI sequences may be written to screen
  * patch 9.2.0226: No 'incsearch' highlighting support for :uniq
  * patch 9.2.0225: runtime(compiler): No compiler plugin for just
  * patch 9.2.0224: channel: 2 issues with out/err callbacks
  * patch 9.2.0223: Option handling for key:value suboptions is limited
  * patch 9.2.0222: "zb" scrolls incorrectly with cursor on fold
  * patch 9.2.0221: Visual selection drawn incorrectly with "autoselect"
  * patch 9.2.0220: MS-Windows: some defined cannot be set on Cygwin/Mingw
  * patch 9.2.0219: call stack can be corrupted
  * patch 9.2.0218: visual selection highlighting in X11 GUI is wrong.
  * patch 9.2.0217: filetype: cto files are not recognized
  * patch 9.2.0216: MS-Windows: Rendering artifacts with DirectX
  * patch 9.2.0215: MS-Windows: several tests fail in the Windows CUI.
  * patch 9.2.0214: tests: Test_gui_system_term_scroll() is flaky
  * patch 9.2.0213: Crash when using a partial or lambda as a clipboard provider
  * patch 9.2.0212: MS-Windows: version packing may overflow
  * patch 9.2.0211: possible crash when setting 'winhighlight'
  * patch 9.2.0210: tests: Test_xxd tests are failing
  * patch 9.2.0209: freeze during wildmenu completion
  * patch 9.2.0208: MS-Windows: excessive scroll-behaviour with go+=!
  * patch 9.2.0207: MS-Windows: freeze on second :hardcopy
  * patch 9.2.0206: MS-Window: stripping all CSI sequences
  * patch 9.2.0205: xxd: Cannot NUL terminate the C include file style
  * patch 9.2.0204: filetype: cps files are not recognized
  * patch 9.2.0203: Patch v9.2.0185 was wrong
  * patch 9.2.0202: [security]: command injection via newline in glob()
  * patch 9.2.0201: filetype: Wireguard config files not recognized
  * patch 9.2.0200: term: DECRQM codes are sent too early
  * patch 9.2.0199: tests: test_startup.vim fails
  * patch 9.2.0198: cscope: can escape from restricted mode
  * patch 9.2.0197: tabpanel: frame width not updated for existing tab pages
  * patch 9.2.0196: textprop: negative IDs and can cause a crash
  * patch 9.2.0195: CI: test-suite gets killed for taking too long
  * patch 9.2.0194: tests: test_startup.vim leaves temp.txt around
  * patch 9.2.0193: using copy_option_part() can be improved
  * patch 9.2.0192: not correctly recognizing raw key codes
  * patch 9.2.0191: Not possible to know if Vim was compiled with Android support
  * patch 9.2.0190: Status line height mismatch in vertical splits
  * patch 9.2.0189: MS-Windows: opacity popups flicker during redraw in the console
  * patch 9.2.0188: Can set environment variables in restricted mode
  * patch 9.2.0187: MS-Windows: rendering artifacts with DirectX renderer
  * patch 9.2.0186: heap buffer overflow with long generic function name
  * patch 9.2.0185: buffer overflow when redrawing custom tabline
  * patch 9.2.0184: MS-Windows: screen flicker with termguicolors and visualbell
  * patch 9.2.0183: channel: using deprecated networking APIs
  * patch 9.2.0182: autocmds may leave windows with w_locked set
  * patch 9.2.0181: line('w0') moves cursor in terminal-normal mode
  * patch 9.2.0180: possible crash with winminheight=0
  * patch 9.2.0179: MS-Windows: Compiler warning for converting from size_t to int
  * patch 9.2.0178: DEC mode requests are sent even when not in raw mode
  * patch 9.2.0177: Vim9: Can set environment variables in restricted mode
  * patch 9.2.0176: external diff is allowed in restricted mode
  * patch 9.2.0175: No tests for what v9.2.0141 and v9.2.0156 fixes
  * patch 9.2.0174: diff: inline word-diffs can be fragmented
  * patch 9.2.0173: tests: Test_balloon_eval_term_visual is flaky
  * patch 9.2.0172: Missing semicolon in os_mac_conv.c
  * patch 9.2.0171: MS-Windows: version detection is deprecated
  * patch 9.2.0170: channel: some issues in ch_listen()
  * patch 9.2.0169: assertion failure in syn_id2attr()
  * patch 9.2.0168: invalid pointer casting in string_convert() arguments
  * patch 9.2.0167: terminal: setting buftype=terminal may cause a crash
  * patch 9.2.0166: Coverity warning for potential NULL dereference
  * patch 9.2.0165: tests: perleval fails in the sandbox
  * patch 9.2.0164: build error when XCLIPBOARD is not defined
  * patch 9.2.0163: MS-Windows: Compile warning for unused variable
  * patch 9.2.0162: tests: unnecessary CheckRunVimInTerminal in test_quickfix
  * patch 9.2.0161: intro message disappears on startup in some terminals
  * patch 9.2.0160: terminal DEC mode handling is overly complex
  * patch 9.2.0159: Crash when reading quickfix line
  * patch 9.2.0158: Visual highlighting might be incorrect
  * patch 9.2.0157: Vim9: concatenation can be improved
  * patch 9.2.0156: perleval() and rubyeval() ignore security settings
  * patch 9.2.0155: filetype: ObjectScript are not recognized
  * patch 9.2.0154: if_lua: runtime error with lua 5.5
  * patch 9.2.0153: No support to act as a channel server
  * patch 9.2.0152: concatenating strings is slow
  * patch 9.2.0151: blob_from_string() is slow for long strings
  * patch 9.2.0150: synchronized terminal update may cause display artifacts
  * patch 9.2.0149: Vim9: segfault when unletting an imported variable
  * patch 9.2.0148: Compile error when FEAT_DIFF is not defined
  * patch 9.2.0147: blob: concatenation can be improved
  * patch 9.2.0146: dictionary lookups can be improved
  * patch 9.2.0145: UTF-8 decoding and length calculation can be improved
  * patch 9.2.0144: 'statuslineopt' is a global only option
  * patch 9.2.0143: termdebug: no support for thread and condition in :Break
  * patch 9.2.0142: Coverity: Dead code warning
  * patch 9.2.0141: :perl ex commands allowed in restricted mode
  * patch 9.2.0140: file reading performance can be improved
  * patch 9.2.0139: Cannot configure terminal resize event
  * patch 9.2.0138: winhighlight option handling can be improved
  * patch 9.2.0137: [security]: crash with composing char in collection range
  * patch 9.2.0136: memory leak in add_interface_from_super_class()
  * patch 9.2.0135: memory leak in eval_tuple()
  * patch 9.2.0134: memory leak in socket_server_send_reply()
  * patch 9.2.0133: memory leak in netbeans_file_activated()
  * patch 9.2.0132: tests: Test_recover_corrupted_swap_file1 fails on be systems
  * patch 9.2.0131: potential buffer overflow in regdump()
  * patch 9.2.0130: missing range flags for the :tab command
  * patch 9.2.0129: popup: wrong handling of wide-chars and opacity:0
  * patch 9.2.0128: Wayland: using _Boolean instead of bool type
  * patch 9.2.0127: line('w0') and line('w$') return wrong values in a terminal
  * patch 9.2.0126: String handling can be improved
  * patch 9.2.0125: tests: test_textformat.vim leaves swapfiles behind
  * patch 9.2.0124: auto-format may swallow white space
  * patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()
  * patch 9.2.0122: Vim still supports compiling on NeXTSTEP
  * patch 9.2.0120: tests: test_normal fails
  * patch 9.2.0119: incorrect highlight initialization in win_init()
  * patch 9.2.0118: memory leak in w_hl when reusing a popup window
  * patch 9.2.0117: tests: test_wayland.vim fails
  * patch 9.2.0116: terminal: synchronized output sequences are buffered
  * patch 9.2.0115: popup: screen flickering possible during async callbacks
  * patch 9.2.0114: MS-Windows: terminal output may go to wrong terminal
  * patch 9.2.0113: winhighlight pointer may be used uninitialized
  * patch 9.2.0112: popup: windows flicker when updating text
  * patch 9.2.0111: 'winhighlight' option not always applied</changelog>
</package>
<package pkgid="30bd83aa6752f59ff15bcc453a4f4aade8fd3d9daea9f91fdb54d65dce201c733afc11e2a4fba2712933f43b62fefecca4a3fec06f639b9ca1ad940dd6b7ad91" name="vim-small" arch="x86_64">
  <version epoch="0" ver="9.2.0280" rel="160000.1.1"/>
  <changelog author="mimi.vx@gmail.com" date="1742644800">- update to 9.1.1230
- refresh vim-7.3-sh_is_bash.patch
  * patch 9.1.1230: inconsistent CTRL-C behaviour for popup windows
  * patch 9.1.1229: the comment plugin can be improved
  * runtime(sh): consider sh as POSIX shell by default
  * patch 9.1.1228: completion: current position column wrong after got a match
  * runtime(hlyank): add the hlyank package
  * patch 9.1.1227: no tests for the comment package
  * patch 9.1.1226: "shellcmdline" completion doesn't work with input()
  * patch 9.1.1225: extra NULL check in VIM_CLEAR()
  * runtime(sh): remove invalid commented out line in syntax script
  * runtime(sh): update sh indent script
  * patch 9.1.1224: cannot :put while keeping indent
  * runtime(go): use :term for keywordprg for nvim/gvim
  * patch 9.1.1223: wrong translation used for encoding failures
  * patch 9.1.1222: using wrong length for last inserted string
  * patch 9.1.1221: Wrong cursor pos when leaving Insert mode just after 'autoindent'
  * patch 9.1.1220: filetype: uv.lock file not recognized
  * patch 9.1.1219: Strange error with wrong type for matchfuzzy() "camelcase"
  * patch 9.1.1218: missing out-of-memory check in filepath.c
  * patch 9.1.1217: tests: typos in test_matchfuzzy.vim
  * patch 9.1.1216: Pasting the '.' register multiple times may not work
  * runtime(keymap) Add forward slash (/) to russian-jcukenwin keymap
  * runtime(vim): Update base-syntax, match multiline return types
  * patch 9.1.1215: Patch 9.1.1213 has some issues
  * patch 9.1.1214: matchfuzzy() can be improved for camel case matches
  * patch 9.1.1213: cannot :put while keeping indent
  * runtime(syntax-tests): Support "wait-free" test failure
  * patch 9.1.1212: too many strlen() calls in edit.c
  * patch 9.1.1212: filetype: logrotate'd pacmanlogs are not recognized
  * runtime(prql): include prql syntax script
  * patch 9.1.1211: TabClosedPre is triggered just before the tab is being freed
  * patch 9.1.1210: translation(ru): missing Russian translation for the new tutor
  * patch 9.1.1209: colorcolumn not drawn after virtual text lines
  * patch 9.1.1208: MS-Windows: not correctly restoring alternate screen on Win 10
  * patch 9.1.1207: MS-Windows: build warning in filepath.c
  * translation(ru): include Russian translation for chapter two of the tutorial
  * runtime(matchparen): line continuation causes failure in CI
  * patch 9.1.1206: tests: test_filetype fails when a file is a directory
  * runtime(doc): symlinking netrw.txt causes problems during install on Windows
  * patch 9.1.1205: completion: preinserted text not removed when closing pum
  * runtime(tutor): updated Russian translation for tutor chapter 1
  * runtime(cs): Update C# runtime files
  * patch 9.1.1203: matchparen keeps cursor on case label in sh filetype
  * runtime(doc): fix a typo in gitrebase filetype
  * runtime(doc): Tweak documentation style a bit
  * runtime(vim): Sync syntax generator base file with output file.
  * runtime(doc): update a few minor omissions from 5876016 and 4d2c4b9
  * patch 9.1.1202: Missing TabClosedPre autocommand
  * patch 9.1.1201: 'completefuzzycollect' does not handle dictionary correctly
  * runtime(doc): make :h 'completefuzzycollect' a bit clearer
  * runtime(doc): document gitrebase filetype
  * translation(it): update menu_it
  * translation(sr): Add chapter two of the new tutor
  * patch 9.1.1200: cmdline pum not cleared for input() completion
  * patch 9.1.1199: gvim uses hardcoded xpm icon file
  * runtime(indent-tests): GitHub Actions doesn't show why indent tests failed
  * patch 9.1.1198: [security]: potential data loss with zip.vim
  * patch 9.1.1197: process_next_cpt_value() uses wrong condition
  * patch 9.1.1196: filetype: config files for container tools are not recognized
  * runtime(doc): remove unnecessary "an"
  * patch 9.1.1195: inside try-block: fn body executed with default arg undefined
  * runtime(doc): Update doc 52.6
  * runtime(compiler): allow customizing exe and args for tsc
  * runtime(compiler): add comment for Dispatch
  * runtime(tera): remove unwanted code and fix issues in syntax script
  * runtime(doc): clarify that a umask is applied to mkdir()
  * patch 9.1.1194: filetype: false positive help filetype detection
  * runtime(man): improve :Man completion for man-db
  * patch 9.1.1193: Unnecessary use of STRCAT() in au_event_disable()
  * translation(sr): Update Serbian messages translation
  * runtime(doc): document vim syntax switches
  * runtime(vim): Update base-syntax, improve :syntax highlighting
  * patch 9.1.1192: Vim crashes with term response debug logging enabled
  * runtime(vim): Update base-syntax and generator, only match valid predefined variables
  * runtime(plsql): move fold option from syntax to filetype plugin
  * patch 9.1.1191: tests: test for patch 9.1.1186 doesn't fail without the patch
  * patch 9.1.1190: C indentation does not detect multibyte labels
  * runtime(sh): set b:match_skip to ignore matches for matchit
  * patch 9.1.1189: if_python: build error due to incompatible pointer types
  * patch 9.1.1188: runtime(tera): tera support can be improved
  * patch 9.1.1187: matchparen plugin wrong highlights shell case statement
  * runtime(doc): use GNOME instead of Gnome
  * patch 9.1.1186: filetype: help files in git repos are not detected
  * runtime(nohlsearch): fix CursorHold loop
  * runtime(doc): warn users about potentially risky hotkey
  * runtime(syntax-tests): Improve parts of "runtest.vim"
  * patch 9.1.1185: endless loop with completefuzzycollect and no match found
  * runtime(doc): CmdUndefined and FuncUndefined can always be nested
  * patch 9.1.1184: Unnecessary use of vim_tolower() in vim_strnicmp_asc()
  * patch 9.1.1083: "above" virtual text breaks cursorlineopt=number
  * runtime(go): add 'keywordprg' and 'formatprg' to ftplugin
  * runtime(syntax-tests): Re-introduce support for "phoney" languages
  * patch 9.1.1182: No cmdline completion for 'completefuzzycollect'
  * patch 9.1.1181: Unnecessary STRLEN() calls in insexpand.c
  * patch 9.1.1180: short-description
  * runtime(vim): Update base-syntax, bug fixes
  * patch 9.1.1179: too many strlen() calls in misc2.c
  * patch 9.1.1178: not possible to generate completion candidates using fuzzy matching
  * editorconfig: set editing style for comment and hlsearch package
  * patch 9.1.1177: filetype: tera files not detected
  * runtime(doc): revert modeline change in vim9.txt
  * runtime(new-tutor): add chapter two to the interactive tutorial
  * patch 9.1.1176: wrong indent when expanding multiple lines
  * test(runtime/syntax): improve syntax tests
  * editorconfig: set indent config for *.vim files
  * runtime(doc): mention alternative check for vim9script
  * patch 9.1.1175: inconsistent behaviour with exclusive selection and motion commands
  * runtime(man): don't add jumps when loading a manpage
  * runtime(vim): recognize &lt;...&gt; strings (and keys) for 'keywordprg'
  * patch 9.1.1174: tests: Test_complete_cmdline() may fail
  * runtime(doc): mention bzip3 in gzip plugin documentation</changelog>
  <changelog author="badshah400@gmail.com" date="1743076800">- Update to version 9.1.1244:
  * patch 9.1.1244:
  - part of patch v9.1.1242 was wrong
  - runtime(omnimark): update and rewrite syntax script in Vim9
    script
  * patch 9.1.1243: diff mode is lacking for changes within lines
  * patch 9.1.1242: Crash when evaluating variable name
  * patch 9.1.1241: wrong preprocessort indentation in term.c
  * patch 9.1.1240:
  - Regression with ic/ac text objects and comment plugin
  - runtime(hyprlang): save and restore cpo setting in syntax
    script
  - runtime(solidity): update syntax script with error
    definitions
  - runtime(doc): add back help tag "pi_netrw.txt"
  * patch 9.1.1239:
  - if_python: no tuple data type support
  - runtime(doc): Add missing garbagecollect() hypertext link
  - Improve contributing guide by adding a section on signing
    off commits
  * patch 9.1.1238: wrong cursor column with 'set
    splitkeep=screen'
  * patch 9.1.1237: Compile error with C89 compiler in term.c
  * patch 9.1.1236: tests: test_comments leaves swapfiles around
  * patch 9.1.1235: cproto files are outdated
  * patch 9.1.1234: Compile error when SIZE_MAX is not defined
  * patch 9.1.1233:
  - Coverity warns about NULL pointer when triggering WinResized
  - runtime(doc): Fix an omission in the documentation.
  * patch 9.1.1232:
  - Vim script is missing the tuple data type
  - runtime(vim): Update base-syntax, match protected
    constructors
  - runtime(syntax-tests): Do not ignore failed screendumps
  * patch 9.1.1231:
  - filetype: SPA JSON files are not recognized
  - runtime(doc): update and correct str2blob() and blob2str()
    examples
  - runtime(hlyank): update the hlyank package
  - runtime(syntax-tests): Add non-Latin-1 character filters for
    C syntax tests</changelog>
  <changelog author="badshah400@gmail.com" date="1743249600">- Update to version 9.1.1258:
  * patch 9.1.1258: regexp: max \U and \%U value is limited by
    INT_MAX
  * patch 9.1.1257:
  - Mixing vim_strsize() with mb_ptr2cells() in pum_redraw()
  - runtime(lf): add lf r34 keywords to syntax script
  * patch 9.1.1256:
  - if_python: duplicate tuple data entries
  - runtime(vim): Update base-syntax, match tuples
  * patch 9.1.1255: missing test condition for 'pummaxwidth'
    setting
  * patch 9.1.1254: need more tests for the comment plugin
  * patch 9.1.1253:
  - abort when closing window with attached quickfix data
  - runtime(doc): non-portable sed regex in Makefile for
    pi_netrw.txt rule
  * patch 9.1.1252: typos in code and docs related to 'diffopt'
    "inline:"
  * patch 9.1.1251: if_python: build error with tuples and dynamic
    python
  * patch 9.1.1250: cannot set the maximum popup menu width
  * patch 9.1.1249:
  - tests: no test that 'listchars' "eol" doesn't affect "gM"
  - runtime(doc): group python interface related items in
    todo.txt
  * patch 9.1.1248: compile error when building without
    FEAT_QUICKFIX
  * patch 9.1.1247: fragile setup to get (preferred) keys from
    key_name_entry
  * patch 9.1.1246: coverity complains about some changes in
    v9.1.1243
  * patch 9.1.1245: need some more tests for curly braces
    evaluation</changelog>
  <changelog author="hsk17@mail.de" date="1743508800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="suse-beta@cboltz.de" date="1745064000">- Update apparmor.vim to latest version (from AppArmor 4.1.0)
  - add more units for rlimit rules</changelog>
  <changelog author="mimi.vx@gmail.com" date="1745236800">- update to 9.1.1330:
  * patch 9.1.1330: may receive E315 in terminal
  * patch 9.1.1329: cannot get information about command line completion
  * patch 9.1.1328: too many strlen() calls in indent.c
  * patch 9.1.1327: filetype: nroff detection can be improved
  * runtime(doc): cross-link :| meaning :p and explain E749
  * runtime(doc): style: clarify to prefer 2 spaces after a sentence
  * runtime(pov): deprecate `#render` and `#statistics` in syntax script
  * patch 9.1.1326: invalid cursor position after 'tagfunc'
  * runtime(keymaps): update Brazilian keymaps
  * patch 9.1.1325: tests: not checking error numbers properly
  * runtime(doc): clarify 'includeexpr' is not used for &lt;cfile&gt;
  * runtime(filetype): improve *.h filetype detection
  * runtime(indent-tests): Raise timeouts for "search*()"es
  * runtime(indent-tests): Annotate timed "search*()"es for tracing
  * runtime(indent-tests): Instrument timed "search*()" calls
  * patch 9.1.1324: undefined behaviour if X11 connection dies
  * patch 9.1.1323: b:undo_ftplugin not executed when re-using buffer
  * runtime(nix): set iskeyword and b:match_words in ftplugin
  * runtime(doc): clarify "nearest" value for 'completeopt'
  * runtime(doc): Tweak documentation style a bit
  * patch 9.1.1322: small delete register cannot paste multi-line correctly
  * patch 9.1.1321: filetype: MS ixx and mpp files are not recognized
  * patch 9.1.1320: filetype: alsoft config files are not recognized
  * patch 9.1.1319: Various typos in the code, issue with test_inst_complete.vim
  * patch 9.1.1318: tests: test_format fails
  * runtime(jjdescription): Don't require a space to start comments
  * patch 9.1.1317: noisy error when restoring folds from session fails
  * patch 9.1.1316: missing memory allocation failure in os_mswin.c
  * patch 9.1.1315: completion: issue with fuzzy completion and 'completefuzzycollect'
  * patch 9.1.1314: max allowed string width too small
  * patch 9.1.1313: compile warning about uninitialized value
  * patch 9.1.1312: tests: Test_backupskip() fails when HOME is defined
  * patch 9.1.1311: completion: not possible to limit number of matches
  * patch 9.1.1310: completion: redundant check for preinsert effect
  * runtime(gleam): Update ftplugin, use recommended_style config variable
  * patch 9.1.1309: tests: no test for 'pummaxwidth' with non-truncated "kind"
  * runtime: set 'cpoptions' for line-continuation in various runtime files
  * runtime(tar): remove dependency on netrw#WinPath, include mapping doc
  * runtime(netrw): remove deprecated functions
  * patch 9.1.1308: completion: cannot order matches by distance to cursor
  * patch 9.1.1307: make syntax does not reliably detect different flavors
  * patch 9.1.1306: completion menu rendering can be improved
  * patch 9.1.1305: completion menu active after switching windows/tabs
  * patch 9.1.1304: filetype: some man files are not recognized
  * runtime(netrw): upstream snapshot of v180
  * patch 9.1.1303: missing out-of-memory check in linematch.c
  * patch 9.1.1302: Coverity warns about using uninitialized value
  * patch 9.1.1301: completion: cannot configure completion functions with 'complete'
  * patch 9.1.1300: wrong detection of -inf
  * runtime(doc): update enum helptext
  * patch 9.1.1299: filetype: mbsyncrc files are not recognized
  * runtime(doc): update options.txt and clarify 'wildmode' further
  * runtime(gleam): update Maintainer and filetype options
  * patch 9.1.1298: define_function() is too long
  * patch 9.1.1297: Ctrl-D scrolling can get stuck
  * runtime(new-tutor): update tutor and correct comandline completion
  * patch 9.1.1296: completion: incorrect truncation logic
  * patch 9.1.1295: clientserver: does not handle :stopinsert correctly
  * runtime(doc): disable last-position-jump in diff mode
  * runtime(doc): Improve 'wildmode' setting desciption
  * patch 9.1.1294: gui tabline menu does not use confirm when closing tabs
  * runtime(doc): correct backslash escaping comma example
  * patch 9.1.1293: comment plugin does not handle 'exclusive' selection for comment object
  * patch 9.1.1292: statusline not correctly evaluated
  * runtime(sh): Do not look up a "sh" utility in $PATH for "sh_13.sh"
  * runtime(filetype): make shell filetype detection more robust
  * patch 9.1.1291: too many strlen() calls in buffer.c
  * runtime(keymaps): include 2 Brazilian Keymaps
  * runtime(vim): Update-base-syntax, match full :*grep, :make, :sort and :filter commands
  * patch 9.1.1290: tests: missing cleanup in test_filetype.vim
  * patch 9.1.1289: tests: no test for matchparen plugin with WinScrolled event
  * runtime(remind): include remind.vim ftplugin
  * runtime(vim): Update base-syntax, improve :command highlighting
  * runtime(help): add omni completion and 'iskeyword' to filetype plugin
  * runtime(lf): improve syntax script, add filetype plugin
  * patch 9.1.1288: Using wrong window in ll_resize_stack()
  * runtime(doc): rename wrong option to 'pummaxwidth'
  * patch 9.1.1287: quickfix code can be further improved
  * patch 9.1.1286: filetype: help files not detected when 'iskeyword' includes ":"
  * patch 9.1.1285: Vim9: no error message for missing method after "super."
  * patch 9.1.1284: not possible to configure pum truncation char
  * runtime(lua): fix whitespace style issues in lua ftplugin
  * runtime(lua): improve foldexpr, add vim9 script version
  * runtime(doc): Fix minor typo in options.txt
  * runtime(fstab): set formatoptions-=t in filetype plugin
  * runtime(svelte): add matchit support to svelte filetype plugin
  * patch 9.1.1283: quickfix stack is limited to 10 items
  * patch 9.1.1282: Build and test failure without job feature
  * patch 9.1.1281: extra newline output when editing stdin
  * patch 9.1.1280: trailing additional semicolon in get_matches_in_str()
  * patch 9.1.1279: Vim9: null_object and null_class are no reserved names
  * patch 9.1.1278: Vim9: too long functions in vim9type.c
  * runtime(vim): Update base-syntax, match full :redir command
  * patch 9.1.1277: tests: trailing comment char in test_popupwin
  * patch 9.1.1276: inline word diff treats multibyte chars as word char
  * runtime(doc): update WinScrolled documentation
  * runtime(vim): Update base-syntax, improve :set backslash handling
  * patch 9.1.1275: MS-Windows: Not possible to pass additional flags to Make_mvc
  * patch 9.1.1274: Vim9: no support for object&lt;type&gt; as variable type
  * patch 9.1.1273: Coverity warns about using uninitialized value
  * patch 9.1.1272: completion: in keyword completion Ctrl_P cannot go back after Ctrl_N
  * runtime(sh): Update syntax file, command substitution opening paren at EOL
  * patch 9.1.1271: filetype: Power Query files are not recognized
  * translation(ru): fix and updated messages translation
  * runtime(doc): clarify the use of change marks when writing a buffer
  * runtime(zip): add *.whl to the list of zip extensions
  * patch 9.1.1270: missing out-of-memory checks in buffer.c
  * runtime(doc): update pi_zip.txt with current list of zip file extensions
  * patch 9.1.1269: completion: compl_shown_match is updated when starting keyword completion
  * patch 9.1.1268: filetype: dax files are not recognized
  * runtime(openPlugin): fix E480 when opening URLs with wildcards on Windows
  * patch 9.1.1267: Vim9: no support for type list/dict&lt;object&lt;any&gt;&gt;
  * patch 9.1.1266: MS-Windows: type conversion warnings
  * translation(ru): Updated messages translation
  * patch 9.1.1265: tests: no tests for typing normal char during completion
  * runtime(rust): set formatprg to rustfmt
  * patch 9.1.1264: Vim9: error when comparing objects
  * runtime(doc): update last change date for diff.txt
  * runtime(doc): Update the tuple help text
  * patch 9.1.1263: string length wrong in get_last_inserted_save()
  * patch 9.1.1262: heap-buffer-overflow with narrow 'pummaxwidth' value
  * patch 9.1.1261: No test for 'pummaxwidth' non-truncated items
  * runtime(debversions): Add release name for Debian 15 - duke
  * patch 9.1.1260: Hang when filtering buffer with NUL bytes
  * runtime(odin): add new keywords to syntax script
  * patch 9.1.1259: some issues with comment package and tailing spaces
  * runtime(java): Make changes for JDK 24 in syntax script</changelog>
  <changelog author="martin.schreiner@suse.com" date="1750161600">- Fix bsc#1228776 / CVE-2024-41965.
- Fix bsc#1239602 / CVE-2025-29768.
- Refresh patch:
  vim-7.3-sh_is_bash.patch
- Update to 9.1.1406:
  9.1.1406: crash when importing invalid tuple
  9.1.1405: tests: no test for mapping with special keys in session file
  9.1.1404: wrong link to Chapter 2 in new-tutor
  9.1.1403: expansion of 'tabpanelopt' value adds wrong values
  9.1.1402: multi-byte mappings not properly stored in session file
  9.1.1401: list not materialized in prop_list()
  9.1.1400: [security]: use-after-free when evaluating tuple fails
  9.1.1399: tests: test_codestyle fails for auto-generated files
  9.1.1398: completion: trunc does not follow Pmenu highlighting attributes
  9.1.1397: tabpanel not correctly updated on :tabonly
  9.1.1396: 'errorformat' is a global option
  9.1.1395: search_stat not reset when pattern differs in case
  9.1.1394: tabpanel not correctly redrawn on tabonly
  9.1.1393: missing test for switching buffers and reusing curbuf
  9.1.1392: missing patch number
  9.1.1391: Vim does not have a vertical tabpanel
  9.1.1390: style: more wrong indentation
  9.1.1389: completion: still some issue when 'isexpand' contains a space
  9.1.1388: Scrolling one line too far with 'nosmoothscroll' page scrolling
  9.1.1387: memory leak when buflist_new() fails to reuse curbuf
  9.1.1386: MS-Windows: some minor problems building on AARCH64
  9.1.1385: inefficient loop for 'nosmoothscroll' scrolling
  9.1.1384: still some problem with the new tutors filetype plugin
  9.1.1383: completion: 'isexpand' option does not handle space char correct
  9.1.1382: if_ruby: unused compiler warnings from ruby internals
  9.1.1381: completion: cannot return to original text
  9.1.1380: 'eventignorewin' only checked for current buffer
  9.1.1379: MS-Windows: error when running evim when space in path
  9.1.1378: sign without text overwrites number option
  9.1.1377: patch v9.1.1370 causes some GTK warning messages
  9.1.1376: quickfix dummy buffer may remain as dummy buffer
  9.1.1375: [security]: possible heap UAF with quickfix dummy buffer
  9.1.1374: completion: 'smartcase' not respected when filtering matches
  9.1.1373: 'completeopt' checking logic can be simplified
  9.1.1372: style: braces issues in various files
  9.1.1371: style: indentation and brace issues in insexpand.c
  9.1.1370: CI Tests favor GTK2 over GTK3
  9.1.1369: configure still using autoconf 2.71
  9.1.1368: GTK3 and GTK4 will drop numeric cursor support.
  9.1.1367: too many strlen() calls in gui.c
  9.1.1366: v9.1.1364 unintentionally changed sign.c and sound.c
  9.1.1365: MS-Windows: compile warnings and too many strlen() calls
  9.1.1364: style: more indentation issues
  9.1.1363: style: inconsistent indentation in various files
  9.1.1362: Vim9: type ignored when adding tuple to instance list var
  9.1.1361: [security]: possible use-after-free when closing a buffer
  9.1.1360: filetype: GNU Radio companion files are not recognized
  9.1.1359: filetype: GNU Radio config files are not recognized
  9.1.1358: if_lua: compile warnings with gcc15
  9.1.1357: Vim incorrectly escapes tags with "[" in a help buffer
  9.1.1356: Vim9: crash when unletting variable
  9.1.1355: The pum_redraw() function is too complex
  9.1.1354: tests: Test_terminalwinscroll_topline() fails on Windows
  9.1.1353: missing change from v9.1.1350
  9.1.1352: style: inconsistent indent in insexpand.c
  9.1.1351: Return value of getcmdline() inconsistent in CmdlineLeavePre
  9.1.1350: tests: typo in Test_CmdlineLeavePre_cabbr()
  9.1.1349: CmdlineLeavePre may trigger twice
  9.1.1348: still E315 with the terminal feature
  9.1.1347: small problems with gui_w32.c
  9.1.1346: missing out-of-memory check in textformat.c
  9.1.1345: tests: Test_xxd_color2() test failure dump diff is misleading
  9.1.1344: double free in f_complete_match() (after v9.1.1341)
  9.1.1343: filetype: IPython files are not recognized
  9.1.1342: Shebang filetype detection can be improved
  9.1.1341: cannot define completion triggers
  9.1.1340: cannot complete :filetype arguments
  9.1.1339: missing out-of-memory checks for enc_to_utf16()/utf16_to_enc()
  9.1.1338: Calling expand() interferes with cmdcomplete_info()
  9.1.1337: Undo corrupted with 'completeopt' "preinsert" when switching buffer
  9.1.1336: comment plugin does not support case-insensitive 'commentstring'
  9.1.1335: Coverity complains about Null pointer dereferences
  9.1.1334: Coverity complains about unchecked return value
  9.1.1333: Coverity: complains about unutilized variable
  9.1.1332: Vim9: segfault when using super within a lambda
  9.1.1331: Leaking memory with cmdcomplete()</changelog>
  <changelog author="martin.schreiner@suse.com" date="1772625600">* Update Vim to version 9.2.0045 (from 9.1.1406).
  * Fix bsc#1258229 CVE-2026-26269 as 9.2.0045 is not impacted (fixed
  upstream).
  * Fix bsc#1246602 CVE-2025-53906 as 9.2.0045 is not impacted (fixed
  upstream).
  * Add wayland-client to BuildRequires and enable Wayland
  support.
  * Add Wayland include path to CFLAGS to fix clipboard compilation.
  * Package new Swedish (sv) man pages and clean up duplicate
  encodings (sv.ISO8859-1 and sv.UTF-8).
  * Add new patch:
  - reorder-exit-raw-mode.patch
  * Drop obsolete or upstreamed patches:
  - vim-7.3-filetype_spec.patch
  - vim-7.3-mktemp_tutor.patch
  - vim-7.4-filetype_apparmor.patch
  - vim-8.2.2411-globalvimrc.patch
  * Refresh the following patches:
  - vim-7.3-filetype_changes.patch
  - vim-7.3-filetype_ftl.patch
  - vim-7.3-sh_is_bash.patch
  - vim-9.1.1134-revert-putty-terminal-colors.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773230400">* Update Vim to version 9.2.0110 (from 9.2.0045).
  * Specifically, this fixes bsc#1259051 / CVE-2026-28417.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1775131200">- Fix bsc#1261191 / CVE-2026-34714.
- Fix bsc#1261271 / CVE-2026-34982.
- Fix bsc#1259985 / CVE-2026-33412.
- Update to 9.2.0280:
  * patch 9.2.0280: [security]: path traversal issue in zip.vim
  * patch 9.2.0279: terminal: out-of-bounds write with overlong CSI argument list
  * patch 9.2.0278: viminfo: heap buffer overflow when reading viminfo file
  * patch 9.2.0277: tests: test_modeline.vim fails
  * patch 9.2.0276: [security]: modeline security bypass
  * patch 9.2.0275: tests: test_options.vim fails
  * patch 9.2.0274: BSU/ESU are output directly to the terminal
  * patch 9.2.0273: tabpanel: undefined behaviour with large tabpanelop columns
  * patch 9.2.0272: [security]: 'tabpanel' can be set in a modeline
  * patch 9.2.0271: buffer underflow in vim_fgets()
  * patch 9.2.0270: test: trailing spaces used in tests
  * patch 9.2.0269: configure: Link error on Solaris
  * patch 9.2.0268: memory leak in call_oc_method()
  * patch 9.2.0267: 'autowrite' not triggered for :term
  * patch 9.2.0266: typeahead buffer overflow during mouse drag event
  * patch 9.2.0265: unnecessary restrictions for defining dictionary function names
  * patch 9.2.0264: Cannot disable kitty keyboard protocol in vim :terminal
  * patch 9.2.0263: hlset() cannot handle attributes with spaces
  * patch 9.2.0262: invalid lnum when pasting text copied blockwise
  * patch 9.2.0261: terminal: redraws are slow
  * patch 9.2.0260: statusline not redrawn after closing a popup window
  * patch 9.2.0259: tabpanel: corrupted display during scrolling causing flicker
  * patch 9.2.0258: memory leak in add_mark()
  * patch 9.2.0257: unnecessary memory allocation in set_callback()
  * patch 9.2.0256: visual selection size not shown in showcmd during test
  * patch 9.2.0255: tests: Test_popup_opacity_vsplit() fails in a wide terminal
  * patch 9.2.0254: w_locked can be bypassed when setting recursively
  * patch 9.2.0253: various issues with wrong b_nwindows after closing buffers
  * patch 9.2.0252: Crash when ending Visual mode after curbuf was unloaded
  * patch 9.2.0251: Link error when building without channel feature
  * patch 9.2.0250: system() does not support bypassing the shell
  * patch 9.2.0249: clipboard: provider reacts to autoselect feature
  * patch 9.2.0248: json_decode() is not strict enough
  * patch 9.2.0247: popup: popups may not wrap as expected
  * patch 9.2.0246: memory leak in globpath()
  * patch 9.2.0245: xxd: color output detection is broken
  * patch 9.2.0244: memory leak in eval8()
  * patch 9.2.0243: memory leak in change_indent()
  * patch 9.2.0242: memory leak in check_for_cryptkey()
  * patch 9.2.0241: tests: Test_visual_block_hl_with_autosel() is flaky
  * patch 9.2.0240: syn_name2id() is slow due to linear search
  * patch 9.2.0239: signcolumn may cause flicker
  * patch 9.2.0238: showmode message may not be displayed
  * patch 9.2.0237: filetype: ObjectScript routines are not recognized
  * patch 9.2.0236: stack-overflow with deeply nested data in json_encode/decode()
  * patch 9.2.0235: filetype: wks files are not recognized.
  * patch 9.2.0234: test: Test_close_handle() is flaky
  * patch 9.2.0233: Compiler warning in strings.c
  * patch 9.2.0232: fileinfo not shown after :bd of last listed buffer
  * patch 9.2.0231: Amiga: Link error for missing HAVE_LOCALE_H
  * patch 9.2.0230: popup: opacity not working accross vert splits
  * patch 9.2.0229: keypad keys may overwrite keycode for another key
  * patch 9.2.0228: still possible flicker
  * patch 9.2.0227: MS-Windows: CSI sequences may be written to screen
  * patch 9.2.0226: No 'incsearch' highlighting support for :uniq
  * patch 9.2.0225: runtime(compiler): No compiler plugin for just
  * patch 9.2.0224: channel: 2 issues with out/err callbacks
  * patch 9.2.0223: Option handling for key:value suboptions is limited
  * patch 9.2.0222: "zb" scrolls incorrectly with cursor on fold
  * patch 9.2.0221: Visual selection drawn incorrectly with "autoselect"
  * patch 9.2.0220: MS-Windows: some defined cannot be set on Cygwin/Mingw
  * patch 9.2.0219: call stack can be corrupted
  * patch 9.2.0218: visual selection highlighting in X11 GUI is wrong.
  * patch 9.2.0217: filetype: cto files are not recognized
  * patch 9.2.0216: MS-Windows: Rendering artifacts with DirectX
  * patch 9.2.0215: MS-Windows: several tests fail in the Windows CUI.
  * patch 9.2.0214: tests: Test_gui_system_term_scroll() is flaky
  * patch 9.2.0213: Crash when using a partial or lambda as a clipboard provider
  * patch 9.2.0212: MS-Windows: version packing may overflow
  * patch 9.2.0211: possible crash when setting 'winhighlight'
  * patch 9.2.0210: tests: Test_xxd tests are failing
  * patch 9.2.0209: freeze during wildmenu completion
  * patch 9.2.0208: MS-Windows: excessive scroll-behaviour with go+=!
  * patch 9.2.0207: MS-Windows: freeze on second :hardcopy
  * patch 9.2.0206: MS-Window: stripping all CSI sequences
  * patch 9.2.0205: xxd: Cannot NUL terminate the C include file style
  * patch 9.2.0204: filetype: cps files are not recognized
  * patch 9.2.0203: Patch v9.2.0185 was wrong
  * patch 9.2.0202: [security]: command injection via newline in glob()
  * patch 9.2.0201: filetype: Wireguard config files not recognized
  * patch 9.2.0200: term: DECRQM codes are sent too early
  * patch 9.2.0199: tests: test_startup.vim fails
  * patch 9.2.0198: cscope: can escape from restricted mode
  * patch 9.2.0197: tabpanel: frame width not updated for existing tab pages
  * patch 9.2.0196: textprop: negative IDs and can cause a crash
  * patch 9.2.0195: CI: test-suite gets killed for taking too long
  * patch 9.2.0194: tests: test_startup.vim leaves temp.txt around
  * patch 9.2.0193: using copy_option_part() can be improved
  * patch 9.2.0192: not correctly recognizing raw key codes
  * patch 9.2.0191: Not possible to know if Vim was compiled with Android support
  * patch 9.2.0190: Status line height mismatch in vertical splits
  * patch 9.2.0189: MS-Windows: opacity popups flicker during redraw in the console
  * patch 9.2.0188: Can set environment variables in restricted mode
  * patch 9.2.0187: MS-Windows: rendering artifacts with DirectX renderer
  * patch 9.2.0186: heap buffer overflow with long generic function name
  * patch 9.2.0185: buffer overflow when redrawing custom tabline
  * patch 9.2.0184: MS-Windows: screen flicker with termguicolors and visualbell
  * patch 9.2.0183: channel: using deprecated networking APIs
  * patch 9.2.0182: autocmds may leave windows with w_locked set
  * patch 9.2.0181: line('w0') moves cursor in terminal-normal mode
  * patch 9.2.0180: possible crash with winminheight=0
  * patch 9.2.0179: MS-Windows: Compiler warning for converting from size_t to int
  * patch 9.2.0178: DEC mode requests are sent even when not in raw mode
  * patch 9.2.0177: Vim9: Can set environment variables in restricted mode
  * patch 9.2.0176: external diff is allowed in restricted mode
  * patch 9.2.0175: No tests for what v9.2.0141 and v9.2.0156 fixes
  * patch 9.2.0174: diff: inline word-diffs can be fragmented
  * patch 9.2.0173: tests: Test_balloon_eval_term_visual is flaky
  * patch 9.2.0172: Missing semicolon in os_mac_conv.c
  * patch 9.2.0171: MS-Windows: version detection is deprecated
  * patch 9.2.0170: channel: some issues in ch_listen()
  * patch 9.2.0169: assertion failure in syn_id2attr()
  * patch 9.2.0168: invalid pointer casting in string_convert() arguments
  * patch 9.2.0167: terminal: setting buftype=terminal may cause a crash
  * patch 9.2.0166: Coverity warning for potential NULL dereference
  * patch 9.2.0165: tests: perleval fails in the sandbox
  * patch 9.2.0164: build error when XCLIPBOARD is not defined
  * patch 9.2.0163: MS-Windows: Compile warning for unused variable
  * patch 9.2.0162: tests: unnecessary CheckRunVimInTerminal in test_quickfix
  * patch 9.2.0161: intro message disappears on startup in some terminals
  * patch 9.2.0160: terminal DEC mode handling is overly complex
  * patch 9.2.0159: Crash when reading quickfix line
  * patch 9.2.0158: Visual highlighting might be incorrect
  * patch 9.2.0157: Vim9: concatenation can be improved
  * patch 9.2.0156: perleval() and rubyeval() ignore security settings
  * patch 9.2.0155: filetype: ObjectScript are not recognized
  * patch 9.2.0154: if_lua: runtime error with lua 5.5
  * patch 9.2.0153: No support to act as a channel server
  * patch 9.2.0152: concatenating strings is slow
  * patch 9.2.0151: blob_from_string() is slow for long strings
  * patch 9.2.0150: synchronized terminal update may cause display artifacts
  * patch 9.2.0149: Vim9: segfault when unletting an imported variable
  * patch 9.2.0148: Compile error when FEAT_DIFF is not defined
  * patch 9.2.0147: blob: concatenation can be improved
  * patch 9.2.0146: dictionary lookups can be improved
  * patch 9.2.0145: UTF-8 decoding and length calculation can be improved
  * patch 9.2.0144: 'statuslineopt' is a global only option
  * patch 9.2.0143: termdebug: no support for thread and condition in :Break
  * patch 9.2.0142: Coverity: Dead code warning
  * patch 9.2.0141: :perl ex commands allowed in restricted mode
  * patch 9.2.0140: file reading performance can be improved
  * patch 9.2.0139: Cannot configure terminal resize event
  * patch 9.2.0138: winhighlight option handling can be improved
  * patch 9.2.0137: [security]: crash with composing char in collection range
  * patch 9.2.0136: memory leak in add_interface_from_super_class()
  * patch 9.2.0135: memory leak in eval_tuple()
  * patch 9.2.0134: memory leak in socket_server_send_reply()
  * patch 9.2.0133: memory leak in netbeans_file_activated()
  * patch 9.2.0132: tests: Test_recover_corrupted_swap_file1 fails on be systems
  * patch 9.2.0131: potential buffer overflow in regdump()
  * patch 9.2.0130: missing range flags for the :tab command
  * patch 9.2.0129: popup: wrong handling of wide-chars and opacity:0
  * patch 9.2.0128: Wayland: using _Boolean instead of bool type
  * patch 9.2.0127: line('w0') and line('w$') return wrong values in a terminal
  * patch 9.2.0126: String handling can be improved
  * patch 9.2.0125: tests: test_textformat.vim leaves swapfiles behind
  * patch 9.2.0124: auto-format may swallow white space
  * patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()
  * patch 9.2.0122: Vim still supports compiling on NeXTSTEP
  * patch 9.2.0120: tests: test_normal fails
  * patch 9.2.0119: incorrect highlight initialization in win_init()
  * patch 9.2.0118: memory leak in w_hl when reusing a popup window
  * patch 9.2.0117: tests: test_wayland.vim fails
  * patch 9.2.0116: terminal: synchronized output sequences are buffered
  * patch 9.2.0115: popup: screen flickering possible during async callbacks
  * patch 9.2.0114: MS-Windows: terminal output may go to wrong terminal
  * patch 9.2.0113: winhighlight pointer may be used uninitialized
  * patch 9.2.0112: popup: windows flicker when updating text
  * patch 9.2.0111: 'winhighlight' option not always applied</changelog>
</package>
<package pkgid="8039ecd4645373b83d28b34cf5912b903600dd2e86fd20fd080150fa5139ba40b4bb47cf6386591237a132c0745f8104096ef1aa96e9fb3fef5d6c976ddbdd98" name="virt-install" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="160000.4.1"/>
  <changelog author="carnold@suse.com" date="1744372800">- Upstream features and bug fixes (bsc#1027942) (jsc#PED-8910)
  040-virtinst-add-pstore-backend-support.patch
  041-tests-add-pstore-test.patch
  042-man-virt-install-Document-pstore-device.patch
  043-tests-Increase-virtio-mem-block-size.patch
  044-tests-test_urls-fix-dead-URL.patch
  045-urlfetcher-add-riscv64-architecture-for-Debian.patch
  046-virt-manager-list-virtual-networks-when-creating-new-QEMU-Session-VM.patch
  047-virt-install-add-support-for-vDPA-network-device.patch
  048-virt-manager-add-support-for-vDPA-network-device.patch
  049-virt-install-detect-wayland-in-order-to-start-virt-viewer.patch
- bsc#1241082 - [Build 20250410] virt_install fails to launch:
  missing dependencies.
  Spec file modifications</changelog>
  <changelog author="carnold@suse.com" date="1744632000">- Spec file changes for including the correct dependencies
  depending on the distro. (bsc#1241082 and bsc#1241119)</changelog>
  <changelog author="carnold@suse.com" date="1747656000">- Add detection code for SLES 16 media (bsc#1236252, bsc#1243296)
  virtinst-add-sle16-detection-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1749729600">- Upstream bug fixes (bsc#1027942)
  050-Validation-allow-spaces-disallow-slashes.patch
  051-fix-default-start_folder-to-None.patch
  052-Add-Ctrl+Alt+Shift+Esc-key-command-for-loginds-SecureAttentionKey.patch</changelog>
  <changelog author="carnold@suse.com" date="1750248000">- bsc#1244685 - Could not find an installable distribution with
  virt-install command
  virtinst-add-sle16-detection-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1753704000">- Add support for creating TDX guests in virt-install (jsc#PED-9265)
  053-virtinst-add-support-for-creating-TDX-guests.patch</changelog>
  <changelog author="carnold@suse.com" date="1755000000">- bsc#1247865 - sles 16.0 rc3 KVM virt-manager detects windows 2025
  as 2022
  virtinst-windows-server-detection.patch</changelog>
  <changelog author="carnold@suse.com" date="1755086400">- Adjust how we detect sles16 as the media layout changes.
  (bsc#1244685) (bsc#1249466)
  virtinst-add-sle16-detection-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1757592000">- Fix issues with detection of openSUSE Leap 16.
  virtinst-add-sle16-detection-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1760702400">- bsc#1252105 - Unable to create an SEV-SNP enabled guest with
  virt-manager. This simplifies the code from what used to be
  required for sev while adding initial tdx support.
  virtman-add-launch-security-support.patch
- Dropped patches rolled into above the patch.
  virtman-add-sev-memory-support.patch
  virtinst-dont-require-uefi-for-sev-snp.patch</changelog>
</package>
<package pkgid="7aeadd60a994254b9734efbbd38abbaf7a6e8f413c97fd3ce042173839bbcb6d24c62e78480aad66e238ab0b4e2048084a24bdaf5cd7afe245cd7e3057f5e3ee" name="virt-manager-common" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="160000.4.1"/>
  <changelog author="carnold@suse.com" date="1744372800">- Upstream features and bug fixes (bsc#1027942) (jsc#PED-8910)
  040-virtinst-add-pstore-backend-support.patch
  041-tests-add-pstore-test.patch
  042-man-virt-install-Document-pstore-device.patch
  043-tests-Increase-virtio-mem-block-size.patch
  044-tests-test_urls-fix-dead-URL.patch
  045-urlfetcher-add-riscv64-architecture-for-Debian.patch
  046-virt-manager-list-virtual-networks-when-creating-new-QEMU-Session-VM.patch
  047-virt-install-add-support-for-vDPA-network-device.patch
  048-virt-manager-add-support-for-vDPA-network-device.patch
  049-virt-install-detect-wayland-in-order-to-start-virt-viewer.patch
- bsc#1241082 - [Build 20250410] virt_install fails to launch:
  missing dependencies.
  Spec file modifications</changelog>
  <changelog author="carnold@suse.com" date="1744632000">- Spec file changes for including the correct dependencies
  depending on the distro. (bsc#1241082 and bsc#1241119)</changelog>
  <changelog author="carnold@suse.com" date="1747656000">- Add detection code for SLES 16 media (bsc#1236252, bsc#1243296)
  virtinst-add-sle16-detection-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1749729600">- Upstream bug fixes (bsc#1027942)
  050-Validation-allow-spaces-disallow-slashes.patch
  051-fix-default-start_folder-to-None.patch
  052-Add-Ctrl+Alt+Shift+Esc-key-command-for-loginds-SecureAttentionKey.patch</changelog>
  <changelog author="carnold@suse.com" date="1750248000">- bsc#1244685 - Could not find an installable distribution with
  virt-install command
  virtinst-add-sle16-detection-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1753704000">- Add support for creating TDX guests in virt-install (jsc#PED-9265)
  053-virtinst-add-support-for-creating-TDX-guests.patch</changelog>
  <changelog author="carnold@suse.com" date="1755000000">- bsc#1247865 - sles 16.0 rc3 KVM virt-manager detects windows 2025
  as 2022
  virtinst-windows-server-detection.patch</changelog>
  <changelog author="carnold@suse.com" date="1755086400">- Adjust how we detect sles16 as the media layout changes.
  (bsc#1244685) (bsc#1249466)
  virtinst-add-sle16-detection-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1757592000">- Fix issues with detection of openSUSE Leap 16.
  virtinst-add-sle16-detection-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1760702400">- bsc#1252105 - Unable to create an SEV-SNP enabled guest with
  virt-manager. This simplifies the code from what used to be
  required for sev while adding initial tdx support.
  virtman-add-launch-security-support.patch
- Dropped patches rolled into above the patch.
  virtman-add-sev-memory-support.patch
  virtinst-dont-require-uefi-for-sev-snp.patch</changelog>
</package>
<package pkgid="9d81f7d96de9873cdc4d3fa586ef88d2c29390cf922275477c55f1fc15a83bd12983a2a5435257cf4229408ca2513df947bbd8fb3cd6ec27a099326dfa2817f0" name="virt-top" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="160000.2.2"/>
  <changelog author="mlatimer@suse.com" date="1441281600">- Add ia64 and s390/s390x to ExcludeArch</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Ignore also Warning: 52 to fix build with ocaml 4.03 (fate#320836)</changelog>
  <changelog author="mlatimer@suse.com" date="1471348800">- Updated source code location and format to match upstream</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Remove usage of ExcludeArch (bsc#1031359)</changelog>
  <changelog author="olaf@aepfle.de" date="1494331200">- Install also bytecode with virt-top.bytecode.patch (bsc#1031359)</changelog>
  <changelog author="olaf@aepfle.de" date="1572609600">- Require current dune macros
- Update to version 1.0.9, via _service file
- Remove virt-top-aarch64.patch
- Remove virt-top-no-immutable-warning.patch
- Remove virt-top.bytecode.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1575288000">- calendar, csv and xml-light are not optional</changelog>
  <changelog author="olaf@aepfle.de" date="1649073600">- New upstream version 1.1.1
- Use virt-top.patch to build with dune</changelog>
  <changelog author="ohering@suse.de" date="1677844800">- Require OCaml 4.8 or later for building</changelog>
  <changelog author="ohering@suse.de" date="1705406400">- Remove usage of dune.configurator because ocamlfind names which
  contain a dot are not considered valid anymore with dune 3.13</changelog>
</package>
<package pkgid="40626f50f1bc33b57d9cd2fbaa8be54aca1ebe062866bb244346b2a5e8beadbc9ebb9cc1eab3beedc8c52812047c823b30b220a2c16d8565b55b727090c737d8" name="virt-what" arch="x86_64">
  <version epoch="0" ver="1.25" rel="160000.2.2"/>
  <changelog author="kkaempf@suse.com" date="1387800000">- Initial release 1.13</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1402056000">- Build version 1.14
  * Differentiate between vserver host and guest
  * Detect new Xen VMs (RHBZ#973663)
  * xen: Don't emit warning message if /proc/xen/capabilities file does not exist
  * Fix various typos and mistakes in comments</changelog>
  <changelog author="tampakrap@opensuse.org" date="1417089600">- cosmetics: run spec-cleaner, use 'make install'
- run tests
- install the license</changelog>
  <changelog author="dvaleev@suse.com" date="1440590400">- Require dmidecode only on intel and ARM architectures</changelog>
  <changelog author="tampakrap@opensuse.org" date="1447934400">- Version bump 1.15. No upstream changelog, see
  http://git.annexia.org/?p=virt-what.git;a=shortlog;h=refs/tags/1.15</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Add gpg signature
- Tiny spec file cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1579003200">- Version bump 1.20. No upstream changelog, see
  http://git.annexia.org/?p=virt-what.git;a=shortlog;h=refs/tags/v1.20</changelog>
  <changelog author="mardnh@gmx.de" date="1580126400">- Add "which" to Requires
  * Fixes boo#1161850, bsc#1176132</changelog>
  <changelog author="dmueller@suse.com" date="1620820800">- update to 1.21:
  * Nutanix Acropolis Hypervisor detection
  * podman detection</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 1.25:
  * detect AWS arm virtual instance as kvm
  * google-cloud: Print "kvm" fact on aarch64 instances
  * illumos-lx: Fix test so it works under virtualization
  * Detect Illumos (SmartOS/OmniOS) LX virtualization
  * Add detection of Red Hat's hypervisor
  * Display kvm/qemu fact for Nutanix AHV
  * Add support for Alibaba Cloud Linux
  * Add support for VMware ESXi on ARM
  * aws: Match multi-digit version number in BIOS information</changelog>
</package>
<package pkgid="04b785dfe95304e3d4646a8468511edee268a117eb049fb0652ec3736f54cf7c298e4506e7ad125dfaebacb448aad9cb409cf11aa04243d512e4b9c449885ddd" name="virtiofsd" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="160000.3.1"/>
  <changelog author="caleb.crane@suse.com" date="1706616000">- Fix CVE-2023-50711: vmm-sys-util: out of bounds memory accesses (bsc#1218502, bsc#1218500)
- Update to version 1.10.1:
  * Bump version to v1.10.1
  * Fix mandatory user namespaces
  * Don't drop supplemental groups in unprivileged user namespace
  * Bump version to v1.10.0
  * Update rust-vmm dependencies (bsc#1218500)
  * Bump version to v1.9.0
- Spec: switch to using the upstream virtio-fs config file for qemu
- Spec: switch back to greedy cargo updates of vendored dependencies</changelog>
  <changelog author="caleb.crane@suse.com" date="1708603200">- Spec: Adjust libvirt/virtiofsd interop config file to handle differences in
  the definition of libexecdir macro on SLE and Tumbleweed (bsc#1219772)</changelog>
  <changelog author="caleb.crane@suse.com" date="1708948800">- Spec: We don't want /usr/libexec to be namespaced like it is with /usr/lib (bsc#1220304)</changelog>
  <changelog author="caleb.crane@suse.com" date="1709121600">- Spec: More tweaks to libexecdir path issues on SLE and Tumbleweed</changelog>
  <changelog author="code@bnavigator.de" date="1709812800">- Fix libexecdir move: rpm cannot replace a directory with a single
  file on upgrades -- boo#1220592
  * Add pre scriptlet removing the directory on Tumbleweed during
    upgrades
  * Don't own plain %_libexecdir on Tumbleweed</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1723118400">- Fix build failure after update to Rust 1.80 (bsc#1228972)
- Update to version 1.11.1:
  * Changes since 1.11.0:
  * Add "separate-options" capability
  * Force-call DESTROY on INIT
  * Do not require --shared-dir to print capabilities
  * Enable notification on vring failure
  * Bump version to v1.11.0
  * deps: Update to the latest rust-vmm crates
  * deps: Update to the latest libc
  * Note migration capability
  * README: Document new migration switches
  * Introduce --migration-mode switch
  * Introduce --migration-confirm-paths
  * PassthroughFs::init: Point to NegotiatedOpts
  * Implement device state deserialization
  * Add get_path_by_fd()/printable_fd() functions
  * Implement device state serialization
  * Implement preserialization/premigration
  * Define our serialized device state
  * Introduce serializable file handles
  * Introduce --migration-verify-handles
  * Introduce --migration-on-error switch
  * Allow explicitly invalid inodes and handles
  * Split try_lookup() off of do_lookup()
  * Add ReadDir::new_no_seek()
  * Put open_root_node() into own function
  * Add type for strong inode references
  * Hide InodeStore locking
  * Remove `&amp;Inode` indirection
  * Add device state infrastructure
  * Add ErrorContext, ResultErrorContext traits
  * Add other_io_error() utility function
  * Add support for dirty memory logging
  * opt: Introduce --allow-mmap flag
  * fuse: Enable DIRECT_IO_ALLOW_MMAP with --allow-mmap
  * Add '--shared-dir' as required if '-o' is missing
  * Close the listener in the parent process
  * Check if the socket parent directory exists
  * Check if the shared directory exists
  * deps: Bump syslog version
  * Increase maximum virtqueue size to 32768
  * Allow multiple uid/gid maps
  * Hide clippy warning in readdir
  * Shorten `std::result::Result` where possible
  * Remove redundant Result imports
  * deps: Bump vhost and vhost-user-backend versions
  * Remove virtio-bindings feature
  * Directly write uid/gidmap where possible
  * Fix clippy warning: Complicated `match` condition
  * Fix clippy warning: Skip converting to owned
  * Fix clippy warning: Make use of `.cloned()`
  * Fix new compiler warnings</changelog>
  <changelog author="caleb.crane@suse.com" date="1723118401">- Service: Remove deprecated cargo_config and cargo_audit services, both
  are now handled by the cargo_vendor service
- Add new upstream features for the libvirt/virtiofsd interop config</changelog>
  <changelog author="caleb.crane@suse.com" date="1727956800">- Spec: Add direct dependency on cargo in addition to cargo-packaging.
    This fixes build errors on 15SP7 where the inherited version of Rust
    is too old</changelog>
  <changelog author="caleb.crane@suse.com" date="1729080000">- Update to version 1.12.0:
  * Bump version to v1.12.0
  * Add file-handles migration mode
  * Serialize mount FD map
  * Deserialize file handles
  * Build mount FD map on deserialization
  * Add MigrationMode::FileHandles
  * PassthroughFsV2
  * Allow deserializing serializable file handles
  * Extract serialized::Inode.deserialize_root_node()</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1772452800">- Add CVE-2026-25727.patch: Avoid denial of service when parsing
  Rfc2822(bsc#1257912 CVE-2026-25727).</changelog>
</package>
<package pkgid="77f42c6704f8c8c0c6fe46cc82339bfa5a7702f78e4983086def4bc7bf3eda0ab414162b8a339c9a1b46566719805a8ae28ebe6fc422340d268257cdc62563b1" name="wallpaper-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="16.0.20240405" rel="160000.1.141"/>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563192000">- Bump to 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1580731200">- Sync with Tumbleweed</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1610452800">- Sync with Tumbleweed
- Bump to 15.3</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1647950400">- Bump to 15.4</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1650542400">- Skip *.tr files in /etc/bootsplash/themes/openSUSE/bootloader</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1662984000">- Bump to 15.5
- Supply new Wallpaper Issue#132</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1663156800">- use path-&gt;union for fonts in logo boo#1203394</changelog>
  <changelog author="Yuchen Lin &lt;mlin+factory@suse.de&gt;" date="1668427200">- Remove systemd-icon-branding since it has been replaced by
  distribution-logos-openSUSE-icon, bsc#1204657</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1712318400">- Bump to 16.0 and se png for wallpapers
  * SLES seems to be using png
  * Using a compat symlink wallpapers/openSUSEdefault-&gt; wallpapers/SLEdefault
  allows running certain apps without rebuild. Such as cockpit.
  * Use optipng -o5 to compress files (has to be reflected in spec)
  * Bump date</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1712318401">* Drop hicolor symlinks from Makefile which are no longer present in TW
  exactly these are raising unpackaged errors on Leap 16.0 build.
  * Plasma 6 drops support for metadata.desktop</changelog>
</package>
<package pkgid="60152ea6451faa390a12f7e1e2902bb29cb0f16a4262e43f2c5b71a90229a19c33ae59d2f56ec236aed2161d751785457e7fbd22101a9ca018dbc71d3544acfa" name="wb-cifs-idmap-plugin" arch="x86_64">
  <version epoch="0" ver="7.4" rel="160000.2.2"/>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="lnussel@suse.com" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mmachova@suse.com" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728648000">- Update to version 7.1:
  * cifs: update documentation for sloppy mount option
  * docs: add closetimeo description
  * docs: add compress description
  * checkopts: update it to work with latest kernel version
  * cifs-utils: add documentation for multichannel and max_channels
  * cifs-utils: smbinfo: add gettconinfo command
  * Implement CLDAP Ping to find the closest site
  * mount.cifs.rst: update section about xattr/acl support
  * mount.cifs.rst: add missing reference for sssd
  * getcifsacl, setcifsacl: add missing &lt;endian.h&gt; include for le32toh
  * getcifsacl, setcifsacl: add missing &lt;linux/limits.h&gt; include for XATTR_SIZE_MAX
  * cifs-utils: Make automake treat /sbin as exec, not data
  * pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
  * cifs.upcall: fix UAF in get_cachename_from_process_env()
  * cifs-utils: add documentation for acregmax and acdirmax
  * setcifsacl: Fix uninitialized value.
  * Use explicit "#!/usr/bin/python3"</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts (bsc#1235788);</changelog>
  <changelog author="scabrero@suse.de" date="1738065600">- Require a cifs.idmap plugin, suggest wb-cifs-idmap-plugin as
  default (idmapwb.so)</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1743595200">- Update cifs-utils to 7.3
  * Fix regression in mount.cifs with guest mount option
  * resolve_host.c: Initialize site_name
  * cldap_ping: Fix socket fd leak
  * getcifsacl: fix return code check for getting full ACL
  * cifs-utils: add documentation for upcall_target
  * cifs-utils: avoid using mktemp when updating mtab
  * cldap_ping.c: add missing &lt;sys/types.h&gt; include
  * configure.ac: libtalloc is now mandatory
  * cifscreds: allow user to set the key's timeout
  * cifscreds: use continue instead of break when matching commands
  * Do not pass passwords with sec=none and sec=krb5
  * docs: add esize description
  * docs: add max_cached_dirs description
  * docs: update actimeo description
  * Fix compiler warnings in mount.cifs
  * CIFS.upcall to accomodate new namespace mount opt
  * cifs-utils: Skip TGT check if valid service ticket is already available
  * use enums to check password or password2 in set_password, get_password_from_file and minor documentation additions
  * cifs-utils: support and document password2 mount option
  * smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1750075200">- Update cifs-utils to 7.4
  * mount.cifs: retry mount on -EINPROGRESS
  * cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
  * cifs.upcall: fix memory leaks in check_service_ticket_exits()
  * cifs-utils: bump version to 7.4
  * getcifsacl, setcifsacl: use &lt;libgen.h&gt; for basename
  * cifscreds: use &lt;libgen.h&gt; for basename</changelog>
</package>
<package pkgid="a86a1962bb8ea4c8117c43454adf5355c259cb8dc2d162185263b748f6700b18adadb806c160232fe57244d9a1268461d0192c93eb9119db864ff141fc7db921" name="wget" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="160000.2.2"/>
  <changelog author="josef.moellers@suse.com" date="1620648000">- When running recursively, wget will verify the length of the whole
  URL when saving the files. This will make it overwrite files with
  truncated names, throwing the "The name is too long, ... trying to
  shorten" messages. The patch moves the length check code to a
  separate function and call it from the append_dir_structure() for each
  path element.
  [ bsc#1181173, 0001-src-main.c-Introduce-truncate_filename-option.patch]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- GNU wget 1.21.2:
  * Support for autoconf 2.71
  * Fix a double free in FTP when using an absolute path
  * --page-requisites will now also download links marked as
  "alternate stylesheet" or "icon"
- drop 0001-src-main.c-Introduce-truncate_filename-option.patch
  superseded by upstream changes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- GNU wget 1.21.3:
  * Fix computation of total bytes downloaded during FTP transfers
  * Add option to select TLS 1.3 on the command line
  * Fix HSTS build issues on some 64-bit big-endian systems
  * Hide password during status report in --no-verbose
  * Remove a sprurious print statement that showed up even during
  - -quiet</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1684238400">- GNU wget 1.21.4:
  * Document --retry-on-host-error in help text
  * Increase read buffer size to 64k.
    This should speed up downloads on gigabit and faster connections
  * Update deprecated option '--html-extension' to
    '--adjust-extension' in documentation</changelog>
  <changelog author="dimstar@opensuse.org" date="1686571200">- Update wget-libproxy.patch: ensure to properly use libproxy
  cflags from pkg-config. Fixes build against libproxy 0.5.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710072000">- GNU wget 1.24.5:
  * Fix how subdomain matches are checked for HSTS.
  * Wget will now also parse the srcset attribute in &lt;source&gt; HTML
    tags
  * Support reading fetchmail style "user" and "passwd" fields from
    netrc
  * In some cases, prevent the confusing "Cannot write to...
    (success)" error messages
  * Support extremely fast download speeds (TB/s)
  * Ensure that CSS URLs are corectly quoted
  * libproxy support is now upstream- drop wget-libproxy.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1718712000">- Fix mishandled semicolons in the userinfo subcomponent could lead to an
  insecure behavior in which data that was supposed to be in the userinfo
  subcomponent is misinterpreted to be part of the host subcomponent.
  [bsc#1226419, CVE-2024-38428, properly-re-implement-userinfo-parsing.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1726056000">- Update wget.keyring: use release-team keyring
- Don't reference source URL when the linked sources change over time</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1731412800">- GNU wget 1.25.0:
  * New testcase for pathconf truncation
  * Fix libproxy build with --disable-debug
  * [BREAKING CHANGE] Support continious reading from stdin pipes
  * Properly re-implement userinfo parsing (rfc2396)
  * init: fix -Warray-bounds in setval_internal_tilde
  * Fix build error on MingW with `G_GETFL` and `F_SETFL` flags
  * Fix returning uninitialized variable
  * Fix a static analysis false positive
  * [BREAKING CHANGE] Fix CVE-2024-10524 (drop support for shorthand URLs)
    (bsc#1233256)
- Remove committed patches
  * properly-re-implement-userinfo-parsing.patch
- Renumber patches</changelog>
</package>
<package pkgid="963a92fa6704126e944c9718b5b5e18d942f4732bca0f17c3e6e32e1649d6e44203d09b61e37fa63616ab7a88d4d0082d47a27edfceb0c4966517bece39ff683" name="which" arch="x86_64">
  <version epoch="0" ver="2.23" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1358683200">- Split "which" off util-linux</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- GNU which 2.21:
  * Upgraded code from bash to version 4.3 (now uses eaccess).
  * Fixed a bug related to getgroups / sysconfig that caused Which
    not to see more than 64 groups for a single user
  * Build system maintenance.
- Update project and source URL to GNU project</changelog>
  <changelog author="mpluskal@suse.com" date="1441800000">- Cleanup spec file with spec-cleaner
- Correct usage of info scriplets</changelog>
  <changelog author="tchvatal@suse.com" date="1465300800">- Move installinfo scriptlet to preun so it won't fail</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1650369600">- https urls, added signature (but did not find the public key)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1738411200">- Update to 2.23:
  * The function that decides if a found path is executable
    (file_status) was updated to that of bash version 5.2.
- add upstream signing key
- drop obsolete texinfo packaging macros</changelog>
</package>
<package pkgid="a209eac51067d382d639a065e90b9ddaaadc1a045dbe604887094154a8eb4f46c9b1da50f04e7065e9df0d59fd889d1746d93fbc1a1b4a07a20ed497e2aaa3e8" name="wireless-regdb" arch="noarch">
  <version epoch="0" ver="20250220" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1668427200">- Update to version 20221012:
  * wireless-regdb: update regulatory rules for Switzerland (CH)
  * wireless-regdb: Update regulatory rules for Brazil (BR)</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- Update to version 20221205:
  * wireless-regdb: Update regulatory rules for Japan (JP) on 6GHz
  * wireless-regdb: Update regulatory rules for Japan (JP) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- Update to version 20230213:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory info for Russia (RU) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Update to version 20230503:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory rules for Hong Kong (HK)
  * wireless-regdb: update regulatory rules for India (IN)
  * wireless-regdb: Update regulatory rules for Russia (RU). Remove DFS requirement.
  * Update regulatory info for Russia (RU) on 6GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- Update to version 20230601:
  * wireless-regdb: Update regulatory rules for Philippines (PH)</changelog>
  <changelog author="mpluskal@suse.com" date="1690545600">- Update to version 20230721:
  * wireless-regdb: Update regulatory info for Türkiye (TR)
  * wireless-regdb: Update regulatory rules for Egypt (EG) from March 2022 guidelines</changelog>
  <changelog author="mpluskal@suse.com" date="1694088000">- Update to version 20230901:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory rules for Australia (AU) for June 2023</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1695038400">- Define %{_firmwaredir} if not defined. This fixes RPM build errors.</changelog>
  <changelog author="mpluskal@suse.com" date="1704369600">- Update to version 20231201:
  * wireless-regdb: Update keys and maintainer information</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1743249600">- Update to version 20250220 (boo#1240356):
  * Update regulatory info for Oman (OM)
  * Update regulatory rules for Iran (IR) on both 2.4 and 5Ghz for 2021
  * Update regulatory info for Cayman Islands (KY) for 2024
  * Update regulatory rules for Austria (AT)
  * Permit 320 MHz bandwidth in 6 GHz band in ETSI/CEPT
  * Update regulatory rules for Armenia (AM) on 2.4 and 5 GHz
  * Update regulatory info for Azerbaijan (AZ) on 6GHz for 2024</changelog>
</package>
<package pkgid="c8b5d86e2738a06442e82966275b72f2f2069b2d8bbc6aeda6f324751c1a494da6abb48668a8b7e2bd5d4e74a7863f5901ae23d11200bfec80e3537e78baec06" name="wireless-tools" arch="x86_64">
  <version epoch="0" ver="30.pre9" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385640000">- install udev rules in _udevrulesdir.</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- Remove superfluous iwlagn module config (bnc#831819)
- Fix build with openSUSE 12.2 and SLE11</changelog>
  <changelog author="ledest@gmail.com" date="1413633600">- fix bashisms in install_*_scripts</changelog>
  <changelog author="ledest@gmail.com" date="1413633601">- update URL in install_intersil_firmware script</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1516622400">- improved install scripts (using install instead of mv and using $UID:
  * install_acx100_firmware
  * install_intersil_firmware
- updated URL in install_acx100_firmware script (bnc#1004577)
- improved spec file
  * removed obsolete openSUSE Versions checks
  * replaced bash variables with macros
  * removed obsolete tags and macros
  * cleaned spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1575115200">- Convert wireless-tools.changes to proper UTF-8 format: new
  version of RPM are getting strict in interpreting files.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files in %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mwilck@suse.com" date="1646740800">- Fix URLs (wireless-tools home page has been migrated to github.io)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="788e18229ab950e9b40acf2ee6cab103ea4a77c3efd71bf92540daa165923cba6c2ea90a64b1f84703f1a2ab0814b350f0b4f48234a3f38c6d997d92a5ecd4cb" name="wpa_supplicant" arch="x86_64">
  <version epoch="0" ver="2.11" rel="160000.3.1"/>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1655812801">- Removed %config flag for files in /usr directory.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1657022400">- Add dbus-Fix-property-DebugShowKeys-and-DebugTimestamp.patch
  (bsc#1201219)</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1684238400">- Change ctrl_interface from /var/run to %_rundir (/run)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1707998400">- Add CVE-2023-52160.patch - Bypassing WiFi Authentication (bsc#1219975)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1726056000">- update to v2.11:
  * Wi-Fi Easy Connect
  - add support for DPP release 3
  - allow Configurator parameters to be provided during config exchange
  * HE/IEEE 802.11ax/Wi-Fi 6
  - various fixes
  * EHT/IEEE 802.11be/Wi-Fi 7
  - add preliminary support
  * SAE: add support for fetching the password from a RADIUS server
  * support OpenSSL 3.0 API changes
  * support background radar detection and CAC with some additional
    drivers
  * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3)
  * EAP-SIM/AKA: support IMSI privacy
  * improve 4-way handshake operations
  - use Secure=1 in message 3 during PTK rekeying
  * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases
    to avoid interoperability issues
  * support new SAE AKM suites with variable length keys
  * support new AKM for 802.1X/EAP with SHA384
  * extend PASN support for secure ranging
  * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP)
  - this is based on additional details being added in the IEEE 802.11
    standard
  - the new implementation is not backwards compatible
  * improved ACS to cover additional channel types/bandwidths
  * extended Multiple BSSID support
  * fix beacon protection with FT protocol (incorrect BIGTK was provided)
  * support unsynchronized service discovery (USD)
  * add preliminary support for RADIUS/TLS
  * add support for explicit SSID protection in 4-way handshake
    (a mitigation for CVE-2023-52424; disabled by default for now, can be
    enabled with ssid_protection=1)
  * fix SAE H2E rejected groups validation to avoid downgrade attacks
  * use stricter validation for some RADIUS messages
  * a large number of other fixes, cleanup, and extensions
- refresh patches:
    wpa_supplicant-dump-certificate-as-PEM-in-debug-mode.diff
    wpa_supplicant-sigusr1-changes-debuglevel.patch
- drop patches:
    CVE-2023-52160.patch
    dbus-Fix-property-DebugShowKeys-and-DebugTimestamp.patch</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1744027200">- CVE-2025-24912: hostapd fails to process crafted RADIUS packets
  properly (bsc#1239461)
  [+ CVE-2025-24912.patch]
- Drop rcFOO symlinks for CODE16 (PED-266).
- Revert "Mark authorization completed on driver indication
  during 4-way HS offload" because of WPA2-PSK/WPA-SAE connection
  problems with brcmfmac wifi hardware. (bsc#1230797, bsc#1240791)
  [+ Revert-Mark-authorization-completed-on-driver-indica.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1748606400">- Remove support for WEP authentication (jsc#PED-12955)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1753444800">- Build wpa_gui with qt6 instead of obsolete qt5
  [+ 0001-wpa_gui-Port-to-Qt6.patch]
- Update build config:
  * Enable 802.11ax support</changelog>
</package>
<package pkgid="97a989866e9872d4550410470dd6cc96ea49f2a65be27ff0e56e3ae876559275712d104a18609a0459f12b166205fd198ae227d1fa4246170f2a097838093a99" name="wtmpdb" arch="x86_64">
  <version epoch="0" ver="0.74.0+git20250509.272b109" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1737115200">- Update to version 0.50.0+git20250117.a9b48cf:
  * wtmpdbd.service: secure more
  * wtmpdb: Implement json output for last (#20)</changelog>
  <changelog author="kukuk@suse.com" date="1737374400">- Update to version 0.60.0+git20250120.64d23d8:
  * Release version 0.60.0
  * Merge reader/write socket to one generic one
  * wtmpdbd: add Ping, SetLogLevel and GetEnvironment</changelog>
  <changelog author="kukuk@suse.com" date="1737460800">- Update to version 0.70.0+git20250121.3e409b5:
  * Fix installation of all wtmpdbd man page variants
  * Release version 0.70.0
  * Add wtmpdbd.8 manual page
  * wtmpdbd: fix printing help text
  * wtmpdbd: more fine granular log level filtering
  * wtmpdbd: implement varlink_event_loop_with_idle
  * wtmpdbd.socket: fix socket descriptor name
  * meson: no longer check for v258 sd-varlink function</changelog>
  <changelog author="kukuk@suse.com" date="1738584000">- Update to version 0.71.0+git20250203.86b8442:
  * Release version 0.71.0
  * zero struct tm before calling strptime()
  * Accept classic 'last -N' form for max entries
  * tst-varlink: fix order of error checking
  * CI: use valgrind
  * Run meson test in verbose mode
  * tst-varlink works only if run as root
  * Use meson feature and not combo options
  * Add CI for openSUSE
  * CI: make sure sqlite3 devel is installed</changelog>
  <changelog author="kukuk@suse.com" date="1738843200">- Update to version 0.71.0+git20250206.608632a:
  * Fix expected output of wtmpdb_rotate() test
  * Make header usable from C++</changelog>
  <changelog author="kukuk@suse.com" date="1741176000">- Update to version 0.72.0+git20250305.10803fd:
  * Release version 0.72.0
  * i386: fix integer format length errors
  * Add utmp format importer
  * Fix wtmp database path in documentation
  * test: schedule test logins on correct day
  * rotate: don't throw away microseconds calculating threshold</changelog>
  <changelog author="kukuk@suse.com" date="1744113600">- Update to version 0.73.0+git20250408.edb8638:
  * Release version 0.73.0
  * expand accepted time format options
  * use documented -t short option for last --until
  * hurd: avoid PATH_MAX
  * hurd: compat for lack of CLOCK_BOOTTIME</changelog>
  <changelog author="kukuk@suse.com" date="1745841600">- Update to version 0.74.0+git20250424.2e93e77:
  * Release version 0.74.0
  * Fix varlink interface name (rebootmgr vs wtmpdb)
  * import: match login by tty if non-zero pid does not match</changelog>
  <changelog author="kukuk@suse.com" date="1746619200">- Fix summary of libwtmpdb subpackage</changelog>
  <changelog author="kukuk@suse.com" date="1746792000">- Update to version 0.74.0+git20250509.272b109:
  * libwtmpdb: enhance/unify error messages</changelog>
</package>
<package pkgid="ee888e15e826fe477e13eaf638764780e6aabefd1f9bf4be660ae96f8a9578c5c9b337fc72459b6c5fe0db4aab554b012eff3cc478561e199660f5aba77d31fa" name="xauth" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 1.0.7:
  + Remove alarm handler in get_hostname
  + Add const attributes to fix gcc -Wwrite-strings warnings
  + convert strlen/malloc/strcpy combo to strdup
- Changes from version 1.0.6:
  + auth_finalize: Attempt to rename() if link() fails
  + Error out and avoid a call to malloc(0) if given a bad hex
    string
  + Build system fixes.
- Rebase xauth-tolerant-hostname-changes.diff.</changelog>
  <changelog author="sndirsch@suse.com" date="1382702400">- Update to version 1.0.8
  * Fix a long standing problem that for ssh tunneled connections a
    display variable of the form: localhost:&lt;N&gt;.&lt;M&gt; leads to correct
    authorization when an X client is started but "xauth list $DISPLAY"
    returns nothing.
  * Fix for: If using GDM with XDMCP, then ssh is not able to start X11
    clients on the remote side. You get a "No xauth data; using fake
    authentication data for X11 forwarding." from SSH.
- obsoletes xauth-1.0.2.diff,
  u_xauth_Look-for-FamilyLocal-if-inet-or-inet6-addr.patch
- adjusted xauth-tolerant-hostname-changes.diff
- added new test_xauth tool to %files section</changelog>
  <changelog author="sndirsch@suse.com" date="1399464000">- Update to version 1.0.9
  * Add AC_USE_SYSTEM_EXTENSIONS to expose non-standard extensions
  * Do not install test_xauth during "make install" as it is
  * Fix warning about warn_unused_result triggered by WRITES.
  * Fixed missing EXTRA_DIST in tests. Extended README for releasing.</changelog>
  <changelog author="sndirsch@suse.com" date="1485950400">- Update to version 1.0.10
  * include POSIX-standard limits.h for PATH_MAX instead of sys/syslimits.h
  * autogen.sh: Honor NOCONFIGURE=1
  * Clarified RELEASING in README
  * Fix for xauth failing on ENOSPC (= disk full)
  * autogen.sh: use quoted string variables
  * Update DISPLAY parsing to work with new launchd paths in Yosemite
  * Fix !HAVE_STRLCPY case
  * Build xauth before running tests.
  * autogen: add default patch prefix
  * autogen.sh: stop using maintainer mode
  * autogen.sh: use exec instead of waiting for configure to finish
  * usage(): Print summary for the -n option</changelog>
  <changelog author="sndirsch@suse.com" date="1562932800">- Update to version 1.1
  * This release fixes a race condition where an existing
    authority file would be unlinked (possibly causing other
    clients to fail to connect), and fixes sorting and merging
    of authority file entries.</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- modernize spec file (move license to licensedir)</changelog>
  <changelog author="sndirsch@suse.com" date="1638187200">- update to version 1.1.1
  * This is a minor bugfix release, including fixes for reported
    crashes.</changelog>
  <changelog author="sndirsch@suse.com" date="1650456000">- update to version 1.1.2
  * tests: make tests work in out-of-tree builds
  * tests: Fix failure to make distcheck
  * tests: report failure if stderr has unexpected output
  * configure.ac: fail build if xtrans is not found
  * gitlab CI: add a basic build test
  * Build xz tarballs instead of bzip2
  * Fix off-by-one in quote-stripping routines
  * gitlab CI: stop requiring Signed-off-by in commits
  * Improve portability
  * Removed build requirement "cmdtest".
  * Fix warning -Wstringop-truncation for strncpy by using memcpy instead
  * Expand checks of socket file with S_ISSOCK</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1709553600">- Update to version 1.1.3
  * config: Add missing AC_CONFIG_SRCDIR
  * Variable scope reductions, as suggested by cppcheck
  * Remove unnecessary casts from malloc() calls
  * Handle -Wempty-body warning for WRITES() macro
  * configure: Use AC_SYS_LARGEFILE to enable large file support
  * configure: raise minimum autoconf requirement to 2.70
  * unifdef hpux
  * unifdef Lynx
- adjusted xauth-tolerant-hostname-changes.diff</changelog>
</package>
<package pkgid="988ae5d283aa7648b2172e0421d6859f4360826a6d4fb74f052056480dfdfb33af9f1a67bcae751d852c932da4c074d34cc6d6ea75e4089411484052d940decc" name="xfsprogs" arch="x86_64">
  <version epoch="0" ver="6.15.0" rel="160000.1.2"/>
  <changelog author="ailiop@suse.com" date="1713441600">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
  <changelog author="ailiop@suse.com" date="1715947200">- update to 6.8.0
  - xfs_repair: Dump both inode details in Phase 6 duplicate file check
  - libxfs: print the device name if flush-on-close fails
  - xfs_db: fix leak in flist_find_ftyp()
  - xfs_repair: support more than INT_MAX block maps
  - xfs_repair: constrain attr fork extent count
  - xfs_repair: support more than 2^32 owners per physical block
  - xfs_repair: support more than 2^32 rmapbt records per AG
  - xfs_db: add a bmbt inflation command
  - xfs_scrub: scan whole-fs metadata files in parallel
  - mkfs: allow sizing internal logs for concurrency
  - mkfs: allow sizing allocation groups for concurrency
  - mkfs: use a sensible log sector size default
  - xfs_io: add linux madvise advice codes
  - xfs_scrub: fix threadcount estimates for phase 6
  - xfs_db: improve number extraction in getbitval
  - xfs_repair: adjust btree bulkloading slack computations to match online repair
  - xfs: make rextslog computation consistent with mkfs
  - mkfs: fix log sunit rounding when external logs are in use
  - libxfs: kernel sync</changelog>
  <changelog author="ailiop@suse.com" date="1721649600">- update to 6.9.0
  - xfs_db: Fix uninicialized error variable
  - mkfs.xfs: avoid potential overflowing expression in xfs_mkfs.c
  - xfs_io: fix mread with length 1 mod page size
  - xfs_repair: detect null buf passed to duration
  - xfs_io: fix gcc complaints about potentially uninitialized variables
  - xfs_scrub: upload clean bills of health
  - xfs_spaceman: report health of inode link counts
  - xfs_repair: reduce rmap bag memory usage when creating refcounts
  - xfs_repair: log when buffers fail CRC checks even if we just recompute it
  - xfs_scrub: use multiple threads to run scrubs that scan inodes
  - xfs_scrub: update health status if we get a clean bill of health
  - xfs_repair: verify on-disk rmap btrees with in-memory btree data
  - xfs_scrub: check file link counts
  - xfs_scrub: implement live quotacheck inode scan
  - libxfs: provide a kernel-compatible kasprintf
  - xfs_spaceman: report the health of quota counts
  - libxfs: partition memfd files to avoid using too many fds
  - libxfs: add xfile support
  - libxfs: teach buftargs to maintain their own buffer hashtable
  - libxfs: kernel sync
  - ------------------------------------------------------------------</changelog>
  <changelog author="ailiop@suse.com" date="1724673600">- update to 6.10.0
  - debian: enable xfs_scrub_all systemd timer services by default
  - mkfs: set autofsck filesystem property
  - xfs_scrub: use the autofsck fsproperty to select mode
  - xfs_scrub: allow sysadmin to control background scrubs
  - xfs_property: add a new tool to administer fs properties
  - xfs_db: add a command to list xattrs
  - xfs_db: improve getting and setting extended attributes
  - xfs_io: edit filesystem properties
  - xfs_scrub: defer phase5 file scans if dirloop fails
  - xfs_repair: wipe ondisk parent pointers when there are none
  - xfs_scrub: detect and repair directory tree corruptions
  - xfs_repair: update ondisk parent pointer records
  - xfs_spaceman: report directory tree corruption in the health information
  - xfsprogs: support vectored scrub
  - man: document vectored scrub mode
  - man2: update ioctl_xfs_scrub_metadata.2 for parent pointers
  - mkfs: enable formatting with parent pointers
  - mkfs: Add parent pointers during protofile creation
  - xfs_repair: check parent pointers
  - xfs_db: compute hashes of parent pointers
  - xfs_db: add link and unlink expert commands
  - xfs_repair: build a parent pointer index
  - xfs_db: add a parents command to list the parents of a file
  - xfs_db: obfuscate dirent and parent pointer names consistently
  - xfs_db: report parent pointers embedded in xattrs
  - xfs_db: report parent bit on xattrs
  - xfs_db: report parent pointers in version command
  - xfs_scrub: use parent pointers to report lost file data
  - xfs_scrub: use parent pointers when possible to report file operations
  - xfs_logprint: decode parent pointers in ATTRI items fully
  - xfs_io: Add i, n and f flags to parent command
  - xfs_io: adapt parent command to new parent pointer ioctls
  - libfrog: report parent pointers to userspace
  - libfrog: add parent pointer support code
  - man: document the XFS_IOC_GETPARENTS ioctl
  - xfs_logprint: dump new attr log item fields
  - xfs_scrub_all: failure reporting for the xfs_scrub_all job
  - xfs_repair: check free space requirements before allowing upgrades
  - xfs_scrub_all: convert systemctl calls to dbus
  - xfs_scrub_all: trigger automatic media scans once per month
  - xfs_scrub: add an optimization-only mode
  - xfs_scrub_all: add CLI option for easier debugging
  - xfs_scrub_all: enable periodic file data scrubs automatically
  - xfs_scrub: automatic downgrades to dry-run mode in service mode
  - xfs_scrub_all: support metadata+media scans of all filesystems
  - xfs_scrub_all: fail fast on masked units
  - xfs_scrub_all: remove journalctl background process
  - xfs_scrub_all: only use the xfs_scrub@ systemd services in service mode
  - xfs_scrub: tune fstrim minlen parameter based on free space histograms
  - xfs_scrub: improve responsiveness while trimming the filesystem
  - xfs_scrub: tighten up the security on the background systemd service
  - xfs_scrub: don't call FITRIM after runtime errors
  - xfs_scrub: use dynamic users when running as a systemd service
  - xfs_scrub: report FITRIM errors properly
  - xfs_scrub.service: reduce background CPU usage to less than one core if possible
  - xfs_scrub: don't close stdout when closing the progress bar
  - xfs_scrub: fix the work estimation for phase 8
  - libfrog: print cdf of free space buckets
  - libfrog: print wider columns for free space histogram
  - xfs_scrub: ignore phase 8 if the user disabled fstrim
  - xfs_scrub: move FITRIM to phase 8
  - xfs_scrub: improve thread scheduling repair items during phase 4
  - xfs_scrub: avoid potential UAF after freeing a duplicate name entry
  - xfs_scrub: enable users to bump information messages to warnings
  - xfs_scrub: retry incomplete repairs
  - xfs_scrub: warn about difficult repairs to rt and quota metadata
  - xfs_scrub: any inconsistency in metadata should trigger difficulty warnings
  - mkfs: add a formatting option for exchange-range
  - xfs_repair: add exchange-range to file systems
  - xfs_scrub: fix missing scrub coverage for broken inodes
  - xfs_scrub: log when a repair was unnecessary
  - libfrog: advertise exchange-range support
  - xfs_io: create exchangerange command to test file range exchange ioctl
  - xfs_fsr: skip the xattr/forkoff levering with the newer swapext implementations
  - xfs_fsr: convert to bulkstat v5 ioctls
  - xfs_logprint: support dumping exchmaps log items
  - xfs_db: advertise exchange-range in the version command
  - libfrog: add support for exchange range ioctl family
  - libhandle: add support for bulkstat v5
  - man: document XFS_FSOP_GEOM_FLAGS_EXCHRANGE
  - man: document the exchange-range ioctl
  - xfs_repair: don't crash on -vv
  - xfsprogs: Remove support for split-/usr installs
  - libxfs: kernel sync
  - ------------------------------------------------------------------</changelog>
  <changelog author="ailiop@suse.com" date="1725451200">- update to 6.10.1
  - fix C++ compilation errors in xfs_fs.h
  - ------------------------------------------------------------------</changelog>
  <changelog author="ailiop@suse.com" date="1729339200">- update to 6.11.0
  - mkfs: break up the rest of the rtinit() function
  - mkfs: clean up the rtinit() function
  - xfs_repair: use library functions for orphanage creation
  - xfs_repair: use library functions to reset root/rbm/rsum inodes
  - xfs_repair: don't crash in get_inode_parent
  - xfs_repair: fix exchrange upgrade
  - xfs_db: port the iunlink command to use the libxfs iunlink function
  - xfs_db/mdrestore/repair: don't use the incore struct xfs_sb for offsets into struct xfs_dsb
  - xfs_db/mkfs/xfs_repair: port to use XFS_ICREATE_UNLINKABLE
  - xfs_db: port the unlink command to use libxfs_droplink
  - libxfs: implement get_random_u32
  - libxfs: remove libxfs_dir_ialloc
  - libxfs: backport inode init code from the kernel
  - libxfs: pack icreate initialization parameters into a separate structure
  - xfs_io: add RWF_ATOMIC support to pwrite
  - libfrog: emulate deprecated attrlist functionality in libattr
  - misc: clean up code around attr_list_by_handle calls
  - fsck.xfs: fix fsck.xfs run by different shells when fsck.mode=force is set
  - libxfs: provide a memfd_create() wrapper if not present in libc
  - xfs_io: Fix fscrypt macros ordering
  - man: Update unit for fsx_extsize and fsx_cowextsize
  - xfs_db: release ip resource before returning from get_next_unlinked()
  - libxfs: kernel sync
  - ------------------------------------------------------------------</changelog>
  <changelog author="ailiop@suse.com" date="1739793600">- update to 6.13.0
  - xfs_protofile: fix device number encoding
  - xfs_protofile: fix mode formatting error
  - mkfs: fix file size setting when interpreting a protofile
  - xfs_repair: require zeroed quota/rt inodes in metadir superblocks
  - mkfs: use a default sector size that is also suitable for the rtdev
  - xfs_scrub_all.timer: don't run if /var/lib/xfsprogs is readonly
  - xfs_logprint: Fix super block buffer interpretation issue
  - mkfs: allow sizing realtime allocation groups for concurrency
  - build: initialize stack variables to zero by default
  - m4: fix statx override selection if /usr/include doesn't define it
  - mkfs: fix parsing of value-less -d/-l concurrency cli option
  - xfs_db: improve error message when unknown btree type given to btheight
  - xfs_repair: don't obliterate return codes
  - xfs_db: fix multiple dblock commands
  - xfs: don't return an error from xfs_update_last_rtgroup_size for !XFS_RT
  - xfs_io: add extsize command support
  - xfs_io: allow foreign FSes to show FS_IOC_FSGETXATTR details
  - mkfs: enable rt quota options
  - xfs_quota: report warning limits for realtime space quotas
  - mkfs: add quota flags when setting up filesystem
  - xfs_repair: try not to trash qflags on metadir filesystems
  - xfs_repair: support quota inodes in the metadata directory
  - xfs_db: support metadir quotas
  - libfrog: scrub quota file metapaths
  - mkfs: format realtime groups
  - mkfs: add headers to realtime bitmap blocks
  - xfs_scrub: use histograms to speed up phase 8 on the realtime volume
  - xfs_scrub: trim realtime volumes too
  - xfs_scrub: call GETFSMAP for each rt group in parallel
  - xfs_scrub: cleanup fsmap keys initialization
  - xfs_scrub: check rtgroup metadata directory connections
  - xfs_scrub: scrub realtime allocation group metadata
  - xfs_spaceman: report on realtime group health
  - xfs_mdrestore: restore rt group superblocks to realtime device
  - xfs_io: display rt group in verbose fsmap output
  - xfs_io: display rt group in verbose bmap output
  - xfs_io: add a command to display realtime group information
  - xfs_io: add a command to display allocation group information
  - xfs_io: support scrubbing rtgroup metadata paths
  - xfs_io: support scrubbing rtgroup metadata
  - xfs_db: report rt group and block number in the bmap command
  - xfs_db: dump rt summary blocks
  - xfs_db: dump rt bitmap blocks
  - xfs_db: metadump realtime devices
  - xfs_db: metadump metadir rt bitmap and summary files
  - xfs_db: enable conversion of rt space units
  - xfs_db: support changing the label and uuid of rt superblocks
  - xfs_db: support dumping realtime group data and superblocks
  - xfs_db: listify the definition of enum typnm
  - xfs_db: enable rtconvert to handle segmented rtblocks
  - xfs_db: enable the rtblock and rtextent commands for segmented rt block numbers
  - xfs_repair: repair rtbitmap and rtsummary block headers
  - xfs_repair: support realtime superblocks
  - xfs_repair: find and clobber rtgroup bitmap and summary files
  - xfs_repair: support realtime groups
  - xfs_repair: add a real per-AG bitmap abstraction
  - xfs_repair: simplify rt_lock handling
  - xfs_repair: improve rtbitmap discrepancy reporting
  - xfs_repair: refactor offsetof+sizeof to offsetofend
  - xfs_repair: refactor phase4
  - xfs_repair: adjust rtbitmap/rtsummary word updates to handle big endian values
  - xfs_logprint: report realtime EFIs
  - libfrog: add bitmap_clear
  - libfrog: report rt groups in output
  - libfrog: support scrubbing rtgroup metadata paths
  - man: document rgextents geom field
  - man: document the rt group geometry ioctl
  - mkfs: add a utility to generate protofiles
  - mkfs: support copying in xattrs
  - mkfs: support copying in large or sparse files
  - mkfs.xfs: enable metadata directories
  - xfs_repair: do not count metadata directory files when doing quotacheck
  - xfs_repair: truncate and unmark orphaned metadata inodes
  - xfs_repair: drop all the metadata directory files during pass 4
  - xfs_repair: metadata dirs are never plausible root dirs
  - xfs_repair: mark space used by metadata files
  - xfs_repair: update incore metadata state whenever we create new files
  - xfs_repair: don't let metadata and regular files mix
  - xfs_repair: rebuild the metadata directory
  - xfs_repair: check metadata inode flag
  - xfs_repair: dont check metadata directory dirent inumbers
  - xfs_repair: handle sb_metadirino correctly when zeroing supers
  - xfs_scrub: re-run metafile scrubbers during phase 5
  - xfs_scrub: scan metadata directories during phase 3
  - xfs_scrub: tread zero-length read verify as an IO error
  - xfs_spaceman: report health of metadir inodes too
  - xfs_io: support scrubbing metadata directory paths
  - xfs_io: support flag for limited bulkstat of the metadata directory
  - xfs_db: drop the metadata checking code from blockget
  - xfs_db: display di_metatype
  - xfs_db: show the metadata root directory when dumping superblocks
  - xfs_db: support metadata directories in the path command
  - xfs_db: don't obfuscate metadata directories and attributes
  - xfs_db: report metadir support for version command
  - xfs_db: disable xfs_check when metadir is enabled
  - xfs_io: support scrubbing metadata directory paths
  - libfrog: report metadata directories in the geometry report
  - man: update scrub ioctl documentation for metadir
  - man2: document metadata directory flag in fsgeom ioctl
  - man: document the -n parent mkfs option
  - man: fix ioctl_xfs_commit_range man page install
  - xfs_repair: fix maximum file offset comparison
- update to 6.12.0
  - xfs_io: add support for atomic write statx fields
  - xfs_repair: fix crasher in pf_queuing_worker
  - xfs: Reduce unnecessary searches when searching for the best extents
  - xfs_spaceman: add dependency on libhandle target
  - mkfs: add a config file for 6.12 LTS kernels
  - xfs_scrub_all: wait for services to start activating
  - xfs_repair: checking rt free space metadata must happen during phase 4
  - xfs_db: allow setting current address to log blocks
  - xfs_db: convert rtsummary geometry
  - xfs_db: convert rtbitmap geometry
  - xfs_db: enable conversion of rt space units
  - xfs_db: access arbitrary realtime blocks and extents
  - xfs_db: access realtime file blocks
  - xfs_db: make the daddr command target the realtime device
  - xfs_db: report the realtime device when associated with each io cursor
  - xfs_db: support passing the realtime device to the debugger
  - xfs_io: add atomic file update commands to exercise file commit range
  - xfs_io: add a commitrange option to the exchangerange command
  - xfs_fsr: port to new file exchange library function
  - ------------------------------------------------------------------</changelog>
  <changelog author="ailiop@suse.com" date="1739880000">- mkfs: fix filesize function compilation error on 32-bit archs
  - add mkfs-fix-filesize-function-compilation-error-on-32-b.patch</changelog>
  <changelog author="ailiop@suse.com" date="1749643200">- update to 6.14.0
  - xfs_scrub_all: localize the strings in the program
  - xfs_protofile: add messages to localization catalog
  - Makefile: inject package name/version/bugreport into pot file
  - xfs_scrub_all: rename source code to .py.in
  - xfs_protofile: rename source code to .py.in
  - xfs_repair: handling a block with bad crc, bad uuid, and bad magic number needs fixing
  - xfs_repair: fix stupid argument error in verify_inode_chunk
  - xfs_repair: fix infinite loop in longform_dir2_entry_check*
  - xfs_repair: fix crash in reset_rt_metadir_inodes
  - xfs_repair: don't recreate /quota metadir if there are no quota inodes
  - xfs_repair: fix wording of error message about leftover CoW blocks on the rt device
  - xfs_io: Add cachestat syscall support
  - xfs_io: Add RWF_DONTCACHE support to preadv2
  - xfs_io: Add RWF_DONTCACHE support to pwritev2
  - xfs_io: Add support for preadv2
  - make: remove the .extradep file in libxfs on "make clean"
  - xfs_{admin,repair},man5: tell the user to mount with nouuid for snapshots
  - xfsprogs: Fix mismatched return type of filesize()
  - xfs_io: don't fail FS_IOC_FSGETXATTR on filesystems that lack support
  - configure: additionally get icu-uc from pkg-config
  - xfs_scrub: use the display mountpoint for reporting file corruptions
  - xfs_scrub: don't warn about zero width joiner control characters
  - xfs_scrub: fix buffer overflow in string_escape
  - xfs_db: add command to copy directory trees out of filesystems
  - xfs_db: make listdir more generally useful
  - xfs_db: use an empty transaction to try to prevent livelocks in path_navigate
  - xfs_db: pass const pointers when we're not modifying them
  - mkfs: enable reflink on the realtime device
  - mkfs: validate CoW extent size hint when rtinherit is set
  - xfs_logprint: report realtime CUIs
  - xfs_repair: validate CoW extent size hint on rtinherit directories
  - xfs_repair: allow realtime files to have the reflink flag set
  - xfs_repair: rebuild the realtime refcount btree
  - xfs_repair: reject unwritten shared extents
  - xfs_repair: check existing realtime refcountbt entries against observed refcounts
  - xfs_repair: compute refcount data for the realtime groups
  - xfs_repair: find and mark the rtrefcountbt inode
  - xfs_repair: use realtime refcount btree data to check block types
  - xfs_repair: allow CoW staging extents in the realtime rmap records
  - xfs_spaceman: report health of the realtime refcount btree
  - xfs_db: add rtrefcount reservations to the rgresv command
  - xfs_db: copy the realtime refcount btree
  - xfs_db: support the realtime refcountbt
  - xfs_db: display the realtime refcount btree contents
  - man: document userspace API changes due to rt reflink
  - mkfs: create the realtime rmap inode
  - xfs_logprint: report realtime RUIs
  - xfs_repair: reserve per-AG space while rebuilding rt metadata
  - xfs_repair: rebuild the bmap btree for realtime files
  - xfs_repair: check for global free space concerns with default btree slack levels
  - xfs_repair: rebuild the realtime rmap btree
  - xfs_repair: always check realtime file mappings against incore info
  - xfs_repair: check existing realtime rmapbt entries against observed rmaps
  - xfs_repair: find and mark the rtrmapbt inodes
  - xfs_repair: refactor realtime inode check
  - xfs_repair: create a new set of incore rmap information for rt groups
  - xfs_repair: use realtime rmap btree data to check block types
  - xfs_repair: flag suspect long-format btree blocks
  - xfs_repair: tidy up rmap_diffkeys
  - xfs_spaceman: report health status of the realtime rmap btree
  - xfs_db: add an rgresv command
  - xfs_db: make fsmap query the realtime reverse mapping tree
  - xfs_db: copy the realtime rmap btree
  - xfs_db: support the realtime rmapbt
  - xfs_db: display the realtime rmap btree contents
  - xfs_db: don't abort when bmapping on a non-extents/bmbt fork
  - xfs_db: compute average btree height
  - man: document userspace API changes due to rt rmap
  - xfs_scrub: try harder to fill the bulkstat array with bulkstat()
  - xfs_scrub: ignore freed inodes when single-stepping during phase 3
  - xfs_scrub: hoist the phase3 bulkstat single stepping code
  - xfs_scrub: don't blow away new inodes in bulkstat_single_step
  - xfs_scrub: return early from bulkstat_for_inumbers if no bulkstat data
  - xfs_scrub: don't complain if bulkstat fails
  - xfs_scrub: don't
  - xfs_scrub: don't double-scan inodes during phase 3
  - xfs_scrub: actually iterate all the bulkstat records
  - xfs_scrub: selectively re-run bulkstat after re-running inumbers
  - xfs_scrub: remove flags argument from scrub_scan_all_inodes
  - xfs_scrub: call bulkstat directly if we're only scanning user files
  - xfs_scrub: don't report data loss in unlinked inodes twice
  - man: document new XFS_BULK_IREQ_METADIR flag to bulkstat
  - xfs_db: obfuscate rt superblock label when metadumping
  - mkfs,xfs_repair: don't pass a daddr as the flags argument
- drop mkfs-fix-filesize-function-compilation-error-on-32-b.patch
  - now part of the release (merged in v6.14.0)</changelog>
  <changelog author="ailiop@suse.com" date="1750852800">- update to 6.15.0
  - xfs_mdrestore: don't allow restoring onto zoned block devices
  - man: adjust description of the statx manpage
  - xfs_protofile: fix permission octet when suid/guid is set
  - xfs_repair: fix libxfs abstraction mess
  - xfs_growfs: support internal RT devices
  - xfs_mdrestore: support internal RT devices
  - xfs_scrub: support internal RT device
  - xfs_spaceman: handle internal RT devices
  - xfs_io: handle internal RT devices in fsmap output
  - xfs_io: don't re-query fs_path information in fsmap_f
  - xfs_io: correctly report RGs with internal rt dev in bmap output
  - man: document XFS_FSOP_GEOM_FLAGS_ZONED
  - xfs_mkfs: document the new zoned options in the man page
  - xfs_mkfs: reflink conflicts with zoned file systems for now
  - xfs_mkfs: default to rtinherit=1 for zoned file systems
  - xfs_mkfs: calculate zone overprovisioning when specifying size
  - xfs_mkfs: support creating file system with zoned RT devices
  - xfs_mkfs: factor out a validate_rtgroup_geometry helper
  - xfs_repair: validate rt groups vs reported hardware zones
  - xfs_repair: fix the RT device check in process_dinode_int
  - xfs_repair: support repairing zoned file systems
  - libfrog: report the zoned geometry
  - xfs_repair: phase6: scan longform entries before header check
  - xfs_repair: Bump link count if longform_dir2_rebuild yields shortform dir
  - mkfs: fix the issue of maxpct set to 0 not taking effect
  - mkfs: fix blkid probe API violations causing weird output
  - xfs_io: make statx mask parsing more generally useful
  - xfs_io: redefine what statx -m all does
  - xfs_io: catch statx fields up to 6.15
  - man: fix missing cachestat manpage</changelog>
</package>
<package pkgid="82d4e6cbcd1c9a02595a12713d6fc08bcf84c387743555376ea1c24d1cb5dd6c1152ab5855008d006c153e156824076e0248570523319017f3fcc31199ec665b" name="xkeyboard-config" arch="noarch">
  <version epoch="0" ver="2.44" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1696852800">- Update to version 2.40
  * mostly updated translation
  * a few bugfixes</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- supersedes a patch called 'U_fixed-keycode-comment.patch' from
  sle15-sp5, which wasn't applied there any longer either.
    &lt;I247&gt; = 247;   // #define KEY_UWB                 239
  is defined in keycodes/evdev since a long time ...</changelog>
  <changelog author="sndirsch@suse.com" date="1700568001">- includes fixes for
  * missing mappings for evdev keys KEY_RFKILL and KEY_WWAN
    (boo#1123784)
  * capslock in Old Hungarian layout (boo#1153774)
  * wrong keyboard mapping causing input delays with ABNT2 keyboards
    (bsc#1191242)
- includes backport of French standardized AZERTY layout (AFNOR:
  NF Z71-300) (bsc#1188867)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- the current source supersedes old sle15-sp5 patches (see
  changelog below)
  * U_Map-evdev-keycodes-KEY_RFKILL-and-KEY_WWAN-to-XF86RF.patch
  * U_Updating-Old-Hungarian.patch
  * U_Fix-media-keys-lag-on-ABNT2-keyboard.patch
  * U_Add-the-new-AZERTY-layout-norm-NF-Z71-300.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 2.41:
  * Translations updated</changelog>
  <changelog author="dmueller@suse.com" date="1717848000">- update to 2.42:
  * Translations updated</changelog>
  <changelog author="sndirsch@suse.com" date="1730116800">- n_fi-kotoistus-metainfo.patch
  * add meta information for default variant of "fi" keyboard layout
    "kotoistus" needed for GNOME or other users of xkeyboard meta XML
    files (boo#1227420)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- python-3.11.patch/buildrequire python311-base
  * fixes build on Leap 15.6 and sle15-sp7</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1739534400">- update to 2.44 (boo#1237205)
  * Fixes and updates to multiple layouts, making them match
    current and updated specificatiopns
  * Changes to multiple layouts that change behavior
  * Add Diktor layout ru(diktor), and RuIntl layouts set
    ru(ruintl_ru),   ru(ruintl_en).
  * Expanded options for caps locking behavior for multiple
    layouts
  * Add &lt;I570&gt; keycode (KEY_REFRESH_RATE_TOGGLE)</changelog>
</package>
<package pkgid="80823415ddeb09954c5f2df9122dc354ea9fc4eb2ec8d10d4469d1fe903aba9229598dfa83e126902c5e8137edf949537c70782ff654de832954dfecdc8c39c9" name="xmlstarlet" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="160000.2.2"/>
  <changelog author="pascal.bleser@opensuse.org" date="1311336000">- update to 1.2.1:
  * check for NULL nodeset result (Bugs #3323189, #3323196)
  * "-" was being confused with --elif
  * generated XSLT should also have automatic namespaces
  * allow -N after other option (Bug #3325166)
  * namespace values were being registered as prefixes
  * avoid segfault when asked to move namespace nodes
  * missing newline in ed --help message
  * don't use XML_SAVE_WSNONSIG #if libxml &lt; 2.7.8 (Bug #3310475)
- dropped patch "xmlstarlet-backport_libxml2_2_7_8_XML_SAVE_WSNONSIG.patch",
  was merged upstream</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317556800">- update to 1.3.0:
  * avoid ASCII CRs in UTF-16/32 text
  * --value-of outputs concat values of all nodes (sf#2563866)
  * encode special chars for ed -u -x
  * allow use of exslt functions in ed -u -x
  * add --var to select (allow --var &lt;name&gt;=&lt;value&gt; as well as --var &lt;name&gt;
    &lt;value&gt; --break)
  * work around libxml bug that passes bogus data to error handler (sf#3362217)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1329825600">- update to 1.3.1:
  * handle multiple values for --value-of properly (sf#2563866)
  * substitute external entities (sf#3467320)
  * pyx output needs space between attribute name and value (sf#3440797)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1350561600">- update to 1.4.0:
  * ed subcommand:
  - relative XPaths are now handled correctly (Bug #3527850)
  - the last nodeset inserted by an edit operation can be
    accessed as the XPath variable $prev (or $xstar:prev)
  - add --var option to define XPath variables
  - allow ed -u -x to insert nodesets instead of converting to
    string
  - remove hard limit for number of edit operations (Bug
    [#3488240])
  * pyx now handles namespaces correctly</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1355659200">- update to 1.4.1:
  * avoid segfault when attempting to edit the document node</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1373284800">- update to 1.5.0:
  - Bugs:
  - avoid segfault on pyx non-existant file
  - fix unescaping of entities straddling 4K byte boundary (Bug #102)
  - Enhancements:
  - unescape hex entities (&amp;#xXX;)
  - give a helpful message if doc has default namespace and
    nothing matched
  - add "_" and "DEFAULT" as names for document's top-level
    default namespace
  - Adding a global quiet option
  - ed: Allow omitting value argument to create empty element.
  - use default attribute values in sel subcommand
- changes from 1.4.2:
  - pyx: avoid segfault on documents with multiple attributes (Bug
    [#3595212])</changelog>
  <changelog author="toms@opensuse.org" date="1413201600">- SPEC file changes
  - Added link from /usr/bin/xml to /usr/bin/xmlstarlet as other
    distributions do the same
  - Did the same for the manpage</changelog>
  <changelog author="mpluskal@suse.com" date="1462276800">- Update to 1.6.1:
  * handle unicode arguments under Windows
- Changes for 1.6.0:
  * get rid of "helpful" message about namespaces
  * update user guide
  * Enhancements:
    + add --stop option to val
    + add global option --no-doc-namespace
  * Build:
    + let the make install target succeed even if docs aren't
    built.
- Cleanup spec file with spec-cleaner
- Cleanup dependencies
- Refresh xmlstarlet-xml_depyx.c.diff</changelog>
  <changelog author="ana.guerrero@suse.com" date="1686139200">- Remove unused rpmlintrc filter</changelog>
  <changelog author="mpluskal@suse.com" date="1686139201">- Modernise spec file</changelog>
</package>
<package pkgid="5ac3f569235d8efd546af89897af35af4989057ebd75fdbb5d82819ee351b0163702723cfc35f68b2064be73f2cb6eedb2a009d817df7f93a36b5d1627642257" name="xorriso" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="160000.3.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: -as mkisofs did not unescape "\=" in the source part
    of pathspecs
  * Bug fix: -boot_image "any" "system_area=/dev/zero" did not
    zeroize loaded data
  * Bug fix: -pathspecs "on" did not properly handle "\\="
  * Bug fix: HFS+ production could cause MBR partition of type 0xEE
    without GPT
  * Bug fix: HFS+ directories could announce more children than
    they actually have
  * Bug fix: The HFS+ filesystem was not marked by in GPT of GRUB2
    hybrid layout
  * Bug fix: When reading an ISO filesystem, the presence of
  - -protective-msdos-label was not recognized if a partition is
    appended
  * Bug fix: xorrisofs option --protective-msdos-label did not work
    if no system area data were given by option -G or alike
  * Bug fix: -modesty_on_drive properties timeout_sec, min_usec,
    max_usec read wrong numbers from the parameter text
  * Letting -as mkisofs --norock revoke the special effect of -r
  * Letting -blank on overwritable media invalidate UDF extended
    descriptors
  * New -pathspecs mode "as_mkisofs"
  * New -boot_image setting mbr_force_bootable=, -as mkisofs
  - -mbr-force-bootable
  * New -boot_image bootspecs appended_part_as=apm,
    part_like_isohybrid=on
  * New -as mkisofs options -appended_part_as_apm,
  - part_like_isohybrid
  * New command -scsi_dev_family, new -as cdrecord option
    drive_scsi_dev_family=</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: The default setting of -compliance did not apply
    rec_mtime to Joliet and ISO:1999. mkisofs emulation was not
    affected by this bug.
  * Bug fix: -file_size_limit did not increase ISO level if
    necessary. Thanks Mattias Schlenker.
  * New API calls isoburn_igopt_set_gpt_guid(),
    isoburn_igopt_get_gpt_guid()
  * New command -use_immed_bit, new -as cdrecord option
    use_immed_bit=
  * New -volume_date mode "all_file_dates"
  * New -as mkisofs option --set_all_file_dates
  * New bootspec "gpt_disk_guid=", new -as mkisofs option
  - -gpt_disk_guid
  * New -report_system_area modes "gpt_disk_guid", "make_guid"
  * New environment variable SOURCE_DATE_EPOCH
  * New -find action "set_to_mtime"</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1487419200">- Added new build requirement libjte-devel for Tumbleweed and
  Leap &gt;= 42.3.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488024000">- Use sle_version &gt;= 120300 instead of leap_version &gt;= 420300
  (leap_version does not work).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: -as mkisofs -no-emul-boot without -boot-load-size
    defaulted to size 4, instead of full boot image size
  * Bug fix: -read_fs "norock" did not prevent reading of root Rock
    Ridge info
  * Bug fix: Mix of absolute and relative disk paths could cause
    SIGSEGV with pattern expansion
  * Bug fix: --mbr-force-bootable did not get into effect with
  - append_partition
  * Bug fix: Exit value of failed -mount command was reported as 0
  * Bug fix: -boot_image actions "keep" and "patch" did not work
    any more. Regression by libisofs 1.4.4.
  * New -find tests -maxdepth and -mindepth
  * New commands -update_lxi and -update_li
  * New API calls isoburn_igopt_set_iso_mbr_part_type(),
    isoburn_igopt_get_iso_mbr_part_type()
  * New -boot_image bootspec iso_mbr_part_type=
  * New -as mkisofs option -iso_mbr_part_type
  * New -as mkisofs option -eltorito-platform
  * Properly refusing on Pseudo Overwritable formatted BD-R</changelog>
  <changelog author="dimstar@opensuse.org" date="1522756800">- Split out xorriso-tcltk from xorriso: The frontend is advertised
  as proof-of-concept by upstream. Additionally, we can save a
  dependency on Tcl/Tk on the main xorriso package.
- Cleanup using spec-cleaner:
  + use SPDX3 license string.
  + Package licence files as license, not doc (boo#1082318).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1541073600">- Update to 1.5.0:
  * Bug fix: Multi-session emulation was not recognized with
    non-zero partition offset
  * New bit10 of isoburn_drive_aquire() to accept all xattr
    namespaces
  * New -xattr mode "any" to process all xattr namespaces of local
    filesystem
  * New -as mkisofs option --xattr-any
  * New -as mkisofs options -uid and -gid</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.5.2:
  * Bug fix: -disk_pattern on -add ./ -- mistook "./" for the root directory
  * Bug fix: -disk_pattern on -add "" -- yielded SIGSEGV
  * Bug fix: -osirrox "concat_split_on" worked only together with -split_size
  larger than 0. Thanks William Willems.
  * New API calls isoburn_igopt_set_part_type_guid(),
    isoburn_igopt_get_part_type_guid(), isoburn_igopt_set_iso_type_guid(),
    isoburn_igopt_get_iso_type_guid()
  * Enabled GPT type GUIDs with -append_partition,
  - boot_image any iso_mbr_part_type=, and -as mkisofs -iso_mbr_part_type
  * Made libisoburn and GNU xorriso ready for building out-of-source.
    Thanks Ross Burton.</changelog>
  <changelog author="dmueller@suse.com" date="1614081600">- update to 1.5.4:
  * Bug fix: -report_system_area as_mkisofs misrepresented GPT with appended
    partition and forced boot flag as -part_like_isohybrid
  * Bug fix: Boot catalog could get a wrong name if cat_path= is explicitely
    given but not containing a slash character
  * New helper script xorriso-dd-target
  * New command -truncate_overwritable
  * Switched to usage of libjte-2.0.0
  * New -jigdo parameters "checksum_algorithm", "demand_checksum", "-checksum-list"
  * New -as mkisofs options "-jigdo-checksum-algorithm", "-checksum-list", "-jigdo-force-checksum"
  * New -read_speed prefixes "soft_force:" and "soft_corr:"
  * New -check_media option data_to="-" for standard output
  * New -zisofs parameters version_2=, block_size_v2=, max_bpt=, max_bpt_f=,
    bpt_target=, bpt_free_ratio=, by_magic=v2, susp_z2=
  * New -as mkisofs options --zisofs-version-2, --zisofs2-susp-z2,
  - -zisofs2-susp-zf
  * Enabled recognition of zisofs by magic without zlib support
  * New -osirrox option sparse= controls extraction into sparse files
  * New libisoburn extension options isoburn_ropt_map_joliet_stripped and
    isoburn_ropt_map_joliet_unmapped
  * New command -joliet_map
  * New command -extract_boot_images
  * New API call isoburn_ropt_get_tree_loaded()</changelog>
  <changelog author="adam.majer@suse.de" date="1693396800">- update to 1.5.6: (jsc#PED-5018)
  * Bug fix: False -status failure with -boot_image --interval:appended_partition
  * Bug fix: -no_rc prevented pre-scanning of arguments for stdio output and
    others. Introduced by mistake in a62f6af5, 2011.10.18.162119.
  * Bug fix: -not_leaf and -not_paths were not applied to -extract and alike
  * Bug fix: -report_system_area cmd misperceived -part_like_isohybrid with
  - isohybrid-gpt-basdat
  * Bug fix: -report_system_area cmd misperceived combination of isohybrid and
    appended partition in GPT
  * Bug fix: -as mkisofs option -part_like_isohybrid did not cause a MBR
    partition table if the partitions are data files in the ISO
    rather than appended
  * Bug fix: Split file directories (-split_size) were created with wrong
    permissions
  * Bug fix: libisofs did not mark clones of imported files as imported.
    This could cause that original and clone occupy data storage
    in the newly written session. Thanks to Ivan Shmakov.
  * Bug fix: Partition offset was preserved from -indev rather than from -outdev
  * Bug fix: libisofs could misrepresent Rock Ridge information if many
    symbolic links or AAIP data were recorded in a directory
  * Bug fix: Data files named /boot.catalog or ./boot.cat could be left out of
    the emerging ISO if the boot catalog was set to be hidden
  * Bug fix: -toc reported wrong track LBA with overwritable media with
    unrecognized content (pseudo-closed)
  * Bug fix: -find test -has_xattr matched "isofs." attributes
    in -xattr mode "any"
  * New API call isoburn_assess_written_features()
  * New API calls isoburn_igopt_set_max_ce_entries(),
    isoburn_igopt_get_max_ce_entries()
  * New flag bit12 with isoburn_read_iso_head():
    Read even if start of multi-session emulation is damaged
  * New -boot_image settings gpt_iso_bootable= and gpt_iso_not_ro=
  * New -as mkisofs options --gpt-iso-bootable and --gpt-iso-not-ro
  * New -as cdrecord option --obs_pad. Automatic no_emul_toc with -as cdrecord.
  * New parameters "obs_pad" and "bdr_obs_exempt" for -dvd_obs
  * New -as cdrecord option --bdr_obs_exempt
  * New command -assess_indev_features
  * New -find test -size
  * New -compliance rules max_ce_entries=, max_ce_drop=
  * Allowed lseekable device files with -cut_out.</changelog>
</package>
<package pkgid="20f086e6f5410c9a1f55aa7e1c518d4021690bfb269e9ae593bc1989984c69a18bc600f3fc59f82e57594c2946a21d02f991f08e188436502380e8b6f2fc99c7" name="xtables-plugins" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="3356be1ac287aada6b1f1a07cf75ba623201faf09f9a82990b417c5d9c9c2da1d64163907692fd189c916bc203da6ad68e06101a5e14c890e444b8cd08a12ff9" name="xz" arch="x86_64">
  <version epoch="0" ver="5.8.1" rel="160000.2.2"/>
  <changelog author="andrea.manzini@suse.com" date="1699358400">- Update to version 5.4.5:
  * liblzma:
  - Fixed an assertion failure that could be triggered by a large
    unpadded_size argument. It was verified that there was no
    other bug than the assertion failure.
  - Fixed a bug that prevented building with Windows Vista
    threading when __attribute__((__constructor__)) is not
    supported.
  * xz now properly handles special files such as "con" or "nul" on
    Windows. Before this fix, the following wrote "foo" to the
    console and deleted the input file "con_xz":
    echo foo | xz &gt; con_xz
    xz --suffix=_xz --decompress con_xz
  * Small fixes and improvements to the tests.
  * Updated translations: Chinese (simplified) and Esperanto.</changelog>
  <changelog author="dmueller@suse.com" date="1706443200">- update to 5.4.6:
  * Fixed a bug involving internal function pointers in liblzma
    not being initialized to NULL. The bug can only be
    triggered if lzma_filters_update() is called on a LZMA1
    encoder, so it does not affect xz or any application known
    to us that uses liblzma.
  * Fixed a regression introduced in 5.4.2 that caused
    encoding in the raw format to unnecessarily fail if --suffix
    was not used. For instance, the following command no longer
    reports that --suffix must be used:
    echo foo | xz --format=raw --lzma2 | wc -c
  * Fixed an issue on MinGW-w64 builds that prevented
    reading from or writing to non-terminal character devices
    like NUL.
  * Added a new test.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Build static library on SLE</changelog>
  <changelog author="dmueller@suse.com" date="1711627200">- restore a bigger version number so that update works</changelog>
  <changelog author="dcermak@suse.com" date="1712232000">- Switch to using tar_scm for fetching the sources as the upstream
  tarballs on github are gone
- introduce _multibuild to allow building the translations outside
  of Ring0 and everything else in Ring0
- add rpmlintrc to silence harmless warnings</changelog>
  <changelog author="dmueller@suse.com" date="1712923200">- revert the switch to tar_scm which dropped the signature
  validation
- switch back to tarballs because the upstream tarballs are not
  gone
- reinstanciate keyring from Lasse
- go back to the last release signed by Lasse (5.4.2)
- revert multibuild, drop service and rpmlintrc
- use real_ver for the Source, move everything else back to
  %version like before the hectic XZ downgrade
- remove payload setting, we are using zstd now</changelog>
  <changelog author="info@paolostivanin.com" date="1717070400">- Update to 5.6.2:
  * Remove the backdoor (CVE-2024-3094).
  * Not changed: Memory sanitizer (MSAN) has a false positive
    in the CRC CLMUL code which also makes OSS Fuzz unhappy.
    Valgrind is smarter and doesn't complain.
    A revision to the CLMUL code is coming anyway and this issue
    will be cleaned up as part of it. It won't be backported to
    5.6.x or 5.4.x because the old code isn't wrong. There is
    no reason to risk introducing regressions in old branches
    just to silence a false positive.
  * liblzma:
  - lzma_index_decoder() and lzma_index_buffer_decode(): Fix
    a missing output pointer initialization (*i = NULL) if the
    functions are called with invalid arguments. The API docs
    say that such an initialization is always done. In practice
    this matters very little because the problem can only occur
    if the calling application has a bug and these functions
    return LZMA_PROG_ERROR.
  - lzma_str_to_filters(): Fix a missing output pointer
    initialization (*error_pos = 0). This is very similar
    to the fix above.
  - Fix C standard conformance with function pointer types.
  - Remove GNU indirect function (IFUNC) support. This is *NOT*
    done for security reasons even though the backdoor relied on
    this code. The performance benefits of IFUNC are too tiny in
    this project to make the extra complexity worth it.
  - FreeBSD on ARM64: Add error checking to CRC32 instruction
    support detection.
  - Fix building with NVIDIA HPC SDK.
  * xz:
  - Fix a C standard conformance issue in --block-list parsing
    (arithmetic on a null pointer).
  - Fix a warning from GNU groff when processing the man page:
    "warning: cannot select font 'CW'"
  * xzdec: Add support for Linux Landlock ABI version 4. xz already
    had the v3-to-v4 change but it had been forgotten from xzdec.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1728302400">- Update to 5.6.3:
  * liblzma:
  - Fix x86-64 inline assembly compatibility with GNU Binutils
    older than 2.27.
  - Fix the build with GCC 4.2 on OpenBSD/sparc64.
  * xzdec: Display an error instead of failing silently if the
    unsupported option -M is specified.
  * lzmainfo: Fix integer overflows when rounding the dictionary and
    uncompressed sizes to the nearest mebibyte.
  * Autotools-based build:
  - Fix feature checks with link-time optimization (-flto).
  - Solaris: Fix a compatibility issue in version.sh. It matters
    if one wants to regenerate configure by running autoconf.
  * CMake:
  - Use paths relative to ${prefix} in liblzma.pc when possible.
    This is done only with CMake &gt;= 3.20.
  - Prefer a C11 compiler over a C99 compiler but accept both.
  - Link Threads::Threads against liblzma using PRIVATE so that
  - pthread and such flags won't unnecessarily get included in
    the usage requirements of shared liblzma. That is,
    target_link_libraries(foo PRIVATE liblzma::liblzma) no
    longer adds -pthread if using POSIX threads and linking
    against shared liblzma. The threading flags are still added
    if linking against static liblzma.
  * Updated translations: Catalan, Chinese (simplified), and
    Brazilian Portuguese.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1738497600">- update to 5.6.4:
  * liblzma: Fix LZMA/LZMA2 encoder on big endian ARM64.
  * xz: Fix --filters= and --filters1= ... --filters9= options
    parsing. They require an argument, thus "xz --filters lzma2"
    should work in addition to "xz --filters=lzma2".
  * Updates to documentation, translations, build system files
- package license files in all packages</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1743681600">- Update to 5.8.1:
  * Multithreaded .xz decoder (lzma_stream_decoder_mt()):
  - Fix a bug that could at least result in a crash with
    invalid input. (bsc#1240414, CVE-2025-31115)
  - Fix a performance bug: Only one thread was used if the whole
    input file was provided at once to lzma_code(), the output
    buffer was big enough, timeout was disabled, and LZMA_FINISH
    was used. There are no bug reports about this, thus it's
    possible that no real-world application was affected.
  * Avoid &lt;stdalign.h&gt; even with C11/C17 compilers. This fixes the
    build with Oracle Developer Studio 12.6 on Solaris 10 when the
    compiler is in C11 mode (the header doesn't exist).
  * Autotools: Restore compatibility with GNU make versions older
    than 4.0 by creating the package using GNU gettext 0.23.1
    infrastructure instead of 0.24.
  * Update Croatian translation.
- 5.8.0 changelog:
  * liblzma on 32/64-bit x86: When possible, use SSE2 intrinsics
    instead of memcpy() in the LZMA/LZMA2 decoder. In typical cases,
    this may reduce decompression time by 0-5 %. However, when built
    against musl libc, over 15 % time reduction was observed with
    highly compressed files.
  * CMake: Make the feature test macros match the Autotools-based
    build on NetBSD, Darwin, and mingw-w64.
  * Update the Croatian, Italian, Portuguese, and Romanian
    translations.
  * Update the German, Italian, Korean, Romanian, Serbian, and
    Ukrainian man page translations.
- Summary of changes in the 5.7.x development releases:
  * Mark the following LZMA Utils script aliases as deprecated:
    lzcmp, lzdiff, lzless, lzmore, lzgrep, lzegrep, and lzfgrep.
  * liblzma:
  - Improve LZMA/LZMA2 encoder speed on 64-bit PowerPC (both
    endiannesses) and those 64-bit RISC-V processors that
    support fast unaligned access.
  - Add low-level APIs for RISC-V, ARM64, and x86 BCJ filters
    to lzma/bcj.h. These are primarily for erofs-utils.
  - x86/x86-64/E2K CLMUL CRC code was rewritten.
  - Use the CRC32 instructions on LoongArch.
  * xz:
  - Synchronize the output file and its directory using fsync()
    before deleting the input file. No syncing is done when xz
    isn't going to delete the input file.
  - Add --no-sync to disable the sync-before-delete behavior.
  - Make --single-stream imply --keep.
  * xz, xzdec, lzmainfo: When printing messages, replace
    non-printable characters with question marks.
  * xz and xzdec on Linux: Support Landlock ABI versions 5 and 6.
  * CMake: Revise the configuration variables and some of their
    options, and document them in the file INSTALL. CMake support
    is no longer experimental. (It was already not experimental
    when building for native Windows.)
  * Add build-aux/license-check.sh.</changelog>
</package>
<package pkgid="ac6d562118638dc3f84efcf0ff9ad90d7592888dae7772cadda99a9398e8a39eeb5888f080987cc41d5ade8a84675b0ec741ac50113dc6f017e7cfe19d30999e" name="yast2-logs" arch="x86_64">
  <version epoch="0" ver="5.0.13" rel="160000.2.2"/>
  <changelog author="kanderssen@suse.com" date="1706270400">- Added s390 z/VM check to YaST::Arch (bsc#1210525).
- 5.0.5</changelog>
  <changelog author="shundhammer@suse.com" date="1707998400">- Allow host/domain names starting with an underscore (bsc#1219920)
- 5.0.6</changelog>
  <changelog author="mfilka@suse.com" date="1708516800">- replaced "journalctl --dmesg" with "journalctl -b"
- 5.0.7</changelog>
  <changelog author="mfilka@suse.com" date="1708516801">- removed "journalctl --dmesg" from save_y2los</changelog>
  <changelog author="lslezak@suse.com" date="1714996800">- Properly close nested progress callbacks (bsc#1223281)
- 5.0.8</changelog>
  <changelog author="shundhammer@suse.com" date="1720612800">- Re-added missing error class (bsc#1227580)
- 5.0.9</changelog>
  <changelog author="shundhammer@suse.com" date="1727784000">- Removed obsolete USERADD_CMD, USERDEL_PRECMD, USERDEL_POSTCMD,
  GROUPADD_CMD (bsc#1231006)
- 5.0.10</changelog>
  <changelog author="jreidinger@suse.com" date="1735819200">- Fix failing tests with ruby 3.4 (gh#yast/yast-yast2#1314)
- 5.0.11</changelog>
  <changelog author="jreidinger@suse.com" date="1740052800">- respect kernel parameter filtering from agama if found
  (bsc#1237390,bsc#1234678)
- 5.0.12</changelog>
  <changelog author="schubi@suse.de" date="1741780800">- Checking if a TPM2 device is available (has_tpm2). (jsc#PED-10703)
- 5.0.13</changelog>
</package>
<package pkgid="dfb5fc9c9d95ffdca2e60123da990fa4e7c8b133fac54b2bd56d15ec70a30cc1ecb5674155ca523d886a284125fe390a3e93fa74ce44cba3fd7703be958cf347" name="zisofs-tools" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires</changelog>
  <changelog author="dimstar@opensuse.org" date="1266235200">- Update to version 1.0.8:
  + This release fixes the --sloppy option, which was documented
    but did not work.
- Spec cleanup.</changelog>
  <changelog author="jengelh@medozas.de" date="1288440000">- Use %_smp_mflags</changelog>
  <changelog author="mhrusecky@suse.com" date="1370520000">- require /usr/bin/mkisofs instead of mkisofs package</changelog>
  <changelog author="jengelh@inai.de" date="1412510400">- Use Source URLs and remove redundant %clean section</changelog>
  <changelog author="jkeil@suse.de" date="1446206400">- require mkisofs package instead of /usr/bin/mkisofs
  * Depending on the binary results in a conflict between
    the cdrkit-cdrtools-compat and mkisofs packages.
  * cdrkit-cdrtools-compat is to be replaced by cdrtools,
    which provides the mkisofs package</changelog>
  <changelog author="mpluskal@suse.com" date="1446897600">- Use macro for configure
- Cleanup spec file with spec-cleaner
- Don't ship INSTALL file</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- refresh spec file (update licensedir)</changelog>
  <changelog author="fcrozat@suse.com" date="1683806400">- Fix url and download to up to date location.
- Add autoconf as BuildRequires.</changelog>
</package>
<package pkgid="cea3ad518d2d0767a9afc42c8a3dd4a100a42378d1b94c12f2786d836eb4a1b7ee1b0384ab849370f2c2d09aeb5e55132d9665ebf2d5975f216bdfae2cb058ad" name="zlib-devel" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="160000.3.1"/>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.2.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dmueller@suse.com" date="1677672000">- avoid buildcycle with krb5 (in sle15+ - jsc#PED-3641)
- skip hwcaps subpackage building for -static subpackage</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683288000">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %autopatch to work with rpm-4.20 (bsc#1240154)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1771416000">- Fix CVE-2026-27171, infinite loop via the crc32_combine64 and
  crc32_combine_gen64 functions due to missing checks for negative
  lengths (bsc#1258392)
  * CVE-2026-27171.patch
- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="b6316d457fe0583a1f44213b13f19f76a7e27ad8f7d0d2489346445650a59430c22c939265634dd143e96ebe11b01f2156c3985b3c58db1bbc988df94ef7a8c0" name="zstd" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 1.5.1:
  * perf: rebalanced compression levels, to better match the intended speed/level curve
  * perf: faster huffman decoder, using x64 assembly
  * perf: slightly faster high speed modes (strategies fast &amp; dfast)
  * perf: improved binary size and faster compilation times
  * perf: new row64 mode, used notably in level 12
  * perf: faster mid-level compression speed in presence of highly repetitive patterns
  * perf: minor compression ratio improvements for small data at high levels
  * perf: reduced stack usage (mostly useful for Linux Kernel)
  * perf: faster compression speed on incompressible data
  * perf: on-demand reduced ZSTD_DCtx state size, using build macro ZSTD_DECODER_INTERNAL_BUFFER, at a small cost of performance
  * build: allows hiding static symbols in the dynamic library, using build macro
  * build: support for m68k (Motorola 68000's)
  * build: improved AIX support
  * build: improved meson unofficial build
  * cli : custom memory limit when training dictionary (#2925)
  * cli : report advanced parameters information when compressing in very verbose mode (``-vv`)</changelog>
  <changelog author="dmueller@suse.com" date="1641211200">- fix pkgconfig pc file settings by passing in right prefix during build</changelog>
  <changelog author="dmueller@suse.com" date="1641384000">- add noexecstack.patch (bsc#1194337)</changelog>
  <changelog author="bwiedemann@suse.com" date="1642766400">- update to 1.5.2:
  * correct a performance regression
  * smaller improvements and fixes
  * See https://github.com/facebook/zstd/releases/tag/v1.5.2
- Refresh pzstd.1.patch
- Drop upstream noexecstack.patch</changelog>
  <changelog author="dmueller@suse.com" date="1643544000">- enable zlib/gzip compatible backend, as zlib is significantly
  (50%-100%) faster than gzip
- add zstd-gzip compatibility subpackage which can be used
  as a drop in compatible replacement for gzip
- small spec file cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1672747200">- add zcat in zstd-gzip (needed by for example the kernel scripts)</changelog>
  <changelog author="bwiedemann@suse.com" date="1676030400">- update to 1.5.4:
  * perf: +20% faster huffman decompression for targets that
    can't compile x64 assembly
  * perf: up to +10% faster streaming compression at levels 1-2
  * perf: +4-13% for levels 5-12 by optimizing function
    generation
  * pref: +3-11% compression speed for `arm` target
  * perf: +5-30% faster dictionary compression at levels 1-4
  * perf: +10-20% cold dict compression speed by prefetching
    CDict tables
  * perf: +1% faster compression by removing a branch in
    ZSTD_fast_noDict
  * perf: Small compression ratio improvements in high
    compression mode
  * perf: small speed improvement by better detecting
    `STATIC_BMI2` for `clang`
  * perf: Improved streaming performance when
    `ZSTD_c_stableInBuffer` is set
  * cli: Asynchronous I/O for improved cli speed
  * cli: Change `zstdless` behavior to align with `zless`
  * cli: Keep original file if `-c` or `--stdout` is given
  * cli: Keep original files when result is concatenated into a
    single output with `-o`
  * cli: Preserve Permissions and Ownership of regular files
  * cli: Print zlib/lz4/lzma library versions with `-vv`
  * cli: Print checksum value for single frame files with `-lv`
  * cli: Print `dictID` when present with `-lv`
  * cli: when `stderr` is *not* the console, disable status
    updates, but preserve final summary
  * cli: support `--best` and `--no-name` in `gzip` compatibility
    mode
  * cli: support for `posix` high resolution timer
    `clock_gettime()`, for improved benchmark accuracy
  * cli: improved help/usage (`-h`,  `-H`) formatting
  * cli: Fix better handling of bogus numeric values
  * cli: Fix input consists of multiple files _and_ `stdin`
  * cli: Fix tiny files passthrough
  * cli: Fix for `-r` on empty directory
  * cli: Fix empty string as argument for `--output-dir-*`
  * cli: Fix decompression memory usage reported by `-vv --long`
  * cli: Fix infinite loop when empty input is passed to trainer
  * cli: Fix `--adapt` doesn't work when `--no-progress` is also
    set
  * api: Support for Block-Level Sequence Producer
  * api: Support for in-place decompression
  * api: New  `ZSTD_CCtx_setCParams()`  function, set all
    parameters defined in a  `ZSTD_compressionParameters`
    structure
  * api: Streaming decompression detects incorrect header ID
    sooner
  * api: Window size resizing optimization for edge case
  * api: More accurate error codes for busy-loop scenarios
  * api: Fix limit overflow in `compressBound` and
    `decompressBound` (#3362, #3373, Cyan4973) reported by
    @nigeltao
  * api: Deprecate several advanced experimental functions:
    streaming (#3408, @embg), copy
  * bug: Fix corruption that rarely occurs in 32-bit mode with
    wlog=25
  * bug: Fix for block-splitter
  * bug: Fixes for Sequence Compression API
  * bug: Fix leaking thread handles on Windows
  * bug: Fix timing issues with cmake/meson builds
  * build: Allow user to select legacy level for cmake
  * build: Enable legacy support by default in cmake
  * build: Meson build script improvements
  * build: Add aarch64 to supported architectures for zstd_trace
  * build: support AIX architecture
  * build: Fix `ZSTD_LIB_MINIFY` build macro, which now reduces
    static library size by half
  * build: Fix Windows issues with Multithreading translation
    layer (#3364, #3380, @yoniko) and ARM64 target
  * build: Fix `cmake` script
  * doc: Updated man page, providing more details for `--train`
    mode
  * doc: Add decompressor errata document
  * misc: Enable Intel CET
  * misc: Fix `contrib/` seekable format
  * misc: Improve speed of the one-file library generator
- rebase pzstd.1.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dmueller@suse.com" date="1681387200">- update to 1.5.5:
  * fix: fix rare corruption bug affecting the high compression
    mode, reported by @danlark1
  * perf: improve mid-level compression speed
  * lib: deprecated bufferless block-level API (#3534) by
    @terrelln
  * cli: mmap large dictionaries to save memory, by
    @daniellerozenblit
  * cli: improve speed of --patch-from mode (~+50%) (#3545) by
    @daniellerozenblit
  * cli: improve i/o speed (~+10%) when processing lots of small
    files (#3479) by @felixhandte
  * cli: zstd no longer crashes when requested to write into
    write-protected directory (#3541) by @felixhandte
  * cli: fix decompression into block device using -o, reported
    by @georgmu
  * misc: improve seekable format ingestion speed (~+100%) for
    very small chunk sizes (#3544) by @Cyan4973
  * misc: tests/fullbench can benchmark multiple files (#3516) by
    @dloidolt</changelog>
  <changelog author="ali.abdallah@suse.com" date="1740657600">- update to 1.5.7:
  * zstd now employs multiple threads by default
  * Fix a rare bug in 32-bit mode
  * Enhanced Compression Speed for Small Data Blocks
  * Substantial --patch-from performance improvements
- Drop pzstd.1.patch - not upstream, but also not needed
- Changes between 1.5.5 and 1.5.6:
  * Introduce a new stable parameter ZSTD_c_targetCBlockSize,
    enabling the division of blocks into smaller segments to
    enhance initial byte delivery speed for congested networks
  * library allows allow ganular binary size selection</changelog>
</package>
<package pkgid="5d855842d836d70b53019aa6b1a31d7552243d9960f18addd338032cd517fb02d10b2274d19623ed2575f1bc9aa9a739866e2bb193c60648cc85ba084be152c9" name="zypper" arch="x86_64">
  <version epoch="0" ver="1.14.95" rel="160000.1.1"/>
  <changelog author="ma@suse.de" date="1740657600">- refresh: add --include-all-archs (fixes #598)
  Future multi-arch repos may allow to download only those metadata
  which refer to packages actually compatible with the systems
  architecture. Some tools however want zypp to provide the full
  metadata of a repository without filtering incompatible
  architectures.
- info,search: add option to search and list Enhances
  (bsc#1237949)
- version 1.14.86</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Package preloader that concurrently downloads files. It's not yet
  enabled per default. To enable the preview set ZYPP_CURL2=1 and
  ZYPP_PCK_PRELOAD=1 in the environment. (#104)
- BuildRequires:  libzypp-devel &gt;= 17.36.4.
- version 1.14.87</changelog>
  <changelog author="ma@suse.de" date="1741867200">- Do not double encode URL strings passed on the commandline
  (bsc#1237587)
  URLs passed on the commandline must have their special chars
  encoded already. We just want to check and encode forgotten
  unsafe chars like a blank. A '%' however must not be encoded
  again.
- version 1.14.88</changelog>
  <changelog author="ma@suse.de" date="1746014400">- Updated translations (bsc#1230267)
- version 1.14.89</changelog>
  <changelog author="ma@suse.de" date="1747915200">- BuildRequires:  libzypp-devel &gt;= 17.37.0.
- Use libzypp improvements for preload and mirror handling.
- xmlout.rnc: Update repo-element (bsc#1241463)
  Add the "metalink" attribute and reflect that the "url" elements
  list may in fact be empty, if no baseurls are defined in the
  .repo files.
- man: update --allow-unsigned-rpm description.
  Explain how to achieve the same for packages provided by
  repositories.
- version 1.14.90</changelog>
  <changelog author="ma@suse.de" date="1750248000">- BuildRequires:  libzypp-devel &gt;= 17.37.6.
  Enhancements regarding mirror handling during repo refresh. Adapt
  to libzypp API changes. (bsc#1230267)
- version 1.14.91</changelog>
  <changelog author="ma@suse.de" date="1751630400">- sh: Reset solver options after command (bsc#1245496)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
- version 1.14.92</changelog>
  <changelog author="ma@suse.de" date="1752840000">- Fix addrepo to handle explicit --check and --no-check requests
  (bsc#1246466)
- Accept "show" as alias for "info" (bsc#1245985)
- version 1.14.93</changelog>
  <changelog author="ma@suse.de" date="1758628800">- Fixed `bash-completion`: `zypper refresh` now ignores
  repository priority lines.
- Changes to support building against restructured libzypp in
  stack build (bsc#1230267)
- version 1.14.94</changelog>
  <changelog author="ma@suse.de" date="1772798400">- Report download progress for command line rpms (fixes #613)
- Hint to '-vv ref' to see the mirrors used to download the
  metadata (bsc#1257882)
- Service: Allow "zypper ls SERVICE ..." to test whether a
  service with this alias is defined (bsc#1252744)
  The command prints an abstract of all services passed on the
  command line. It returns 3-ZYPPER_EXIT_ERR_INVALID_ARGS if some
  argument does not name an existing service.
- Keep repo data when updating the service settings (bsc#1252744)
- info: Enhance pattern content table (bsc#1158038)
  Alternatives (multiple packages providing the same requirement)
  are now listed as a single entry in the content table. The entry
  shows either the installed package which satisfies the
  requirement or the requirement itself as type 'Provides'.
  Listing all potential alternatives was miss leading, especially
  if the alternatives were mutual exclusive. It looked like an
  installed pattern had not-installed requirements and it was not
  possible to install all requirements at the same time.
- version 1.14.95</changelog>
</package>
<package pkgid="3daff7f3ebcaac43be4ff46944cd72b1b939ed9b8c9bbc0c74ad287a8a363d0f1f7c6e63779363dc8b85fd1ec25f9cddba3d0d8de28ad20f3a9dc1093c757f8b" name="zypper-needs-restarting" arch="noarch">
  <version epoch="0" ver="1.14.95" rel="160000.1.1"/>
  <changelog author="ma@suse.de" date="1740657600">- refresh: add --include-all-archs (fixes #598)
  Future multi-arch repos may allow to download only those metadata
  which refer to packages actually compatible with the systems
  architecture. Some tools however want zypp to provide the full
  metadata of a repository without filtering incompatible
  architectures.
- info,search: add option to search and list Enhances
  (bsc#1237949)
- version 1.14.86</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Package preloader that concurrently downloads files. It's not yet
  enabled per default. To enable the preview set ZYPP_CURL2=1 and
  ZYPP_PCK_PRELOAD=1 in the environment. (#104)
- BuildRequires:  libzypp-devel &gt;= 17.36.4.
- version 1.14.87</changelog>
  <changelog author="ma@suse.de" date="1741867200">- Do not double encode URL strings passed on the commandline
  (bsc#1237587)
  URLs passed on the commandline must have their special chars
  encoded already. We just want to check and encode forgotten
  unsafe chars like a blank. A '%' however must not be encoded
  again.
- version 1.14.88</changelog>
  <changelog author="ma@suse.de" date="1746014400">- Updated translations (bsc#1230267)
- version 1.14.89</changelog>
  <changelog author="ma@suse.de" date="1747915200">- BuildRequires:  libzypp-devel &gt;= 17.37.0.
- Use libzypp improvements for preload and mirror handling.
- xmlout.rnc: Update repo-element (bsc#1241463)
  Add the "metalink" attribute and reflect that the "url" elements
  list may in fact be empty, if no baseurls are defined in the
  .repo files.
- man: update --allow-unsigned-rpm description.
  Explain how to achieve the same for packages provided by
  repositories.
- version 1.14.90</changelog>
  <changelog author="ma@suse.de" date="1750248000">- BuildRequires:  libzypp-devel &gt;= 17.37.6.
  Enhancements regarding mirror handling during repo refresh. Adapt
  to libzypp API changes. (bsc#1230267)
- version 1.14.91</changelog>
  <changelog author="ma@suse.de" date="1751630400">- sh: Reset solver options after command (bsc#1245496)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
- version 1.14.92</changelog>
  <changelog author="ma@suse.de" date="1752840000">- Fix addrepo to handle explicit --check and --no-check requests
  (bsc#1246466)
- Accept "show" as alias for "info" (bsc#1245985)
- version 1.14.93</changelog>
  <changelog author="ma@suse.de" date="1758628800">- Fixed `bash-completion`: `zypper refresh` now ignores
  repository priority lines.
- Changes to support building against restructured libzypp in
  stack build (bsc#1230267)
- version 1.14.94</changelog>
  <changelog author="ma@suse.de" date="1772798400">- Report download progress for command line rpms (fixes #613)
- Hint to '-vv ref' to see the mirrors used to download the
  metadata (bsc#1257882)
- Service: Allow "zypper ls SERVICE ..." to test whether a
  service with this alias is defined (bsc#1252744)
  The command prints an abstract of all services passed on the
  command line. It returns 3-ZYPPER_EXIT_ERR_INVALID_ARGS if some
  argument does not name an existing service.
- Keep repo data when updating the service settings (bsc#1252744)
- info: Enhance pattern content table (bsc#1158038)
  Alternatives (multiple packages providing the same requirement)
  are now listed as a single entry in the content table. The entry
  shows either the installed package which satisfies the
  requirement or the requirement itself as type 'Provides'.
  Listing all potential alternatives was miss leading, especially
  if the alternatives were mutual exclusive. It looked like an
  installed pattern had not-installed requirements and it was not
  possible to install all requirements at the same time.
- version 1.14.95</changelog>
</package>
</otherdata>